JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 118.31.19.34

118.31.19.34 was found in our database!

This IP was reported 83 times. Confidence of Abuse is 100%: ?

100%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Hangzhou, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 118.31.19.34

Whois 118.31.19.34

IP Abuse Reports for 118.31.19.34:

This IP address has been reported a total of 83 times from 54 distinct sources. 118.31.19.34 was first reported on March 26th 2025, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇭 Sawasdee	2026-07-20 10:45:08 (3 hours ago)	Unwanted checking 80 or 443 port ...	Bad Web Bot
🇨🇦 polycoda	2026-07-20 10:44:57 (3 hours ago)	📡 Port scan	Hacking Web App Attack
🇺🇸 xmission.com	2026-07-20 10:12:17 (3 hours ago)	Blocked by UFW (TCP on 2375) Source port: 64434 TTL: 49 Packet length: 40 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 2375) Source port: 64434 TTL: 49 Packet length: 40 TOS: 0x00 This report (for 118.31.19.34) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 thetomtaylor.co.uk	2026-07-20 10:06:02 (3 hours ago)	Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [ice01]	Hacking Brute-Force Bad Web Bot Web App Attack
🇧🇪 sid3windr	2026-07-20 09:36:29 (4 hours ago)	SSH port scan (Tarpitted for 17m11s, wasted 1.81kB)	Port Scan SSH
Anonymous	2026-07-20 09:31:07 (4 hours ago)	Apache HTTP Server Directory Traversal.	Web App Attack
🇺🇸 RAP	2026-07-20 08:45:21 (5 hours ago)	2026-07-20 08:45:21 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇺🇸 MPL	2026-07-20 08:43:31 (5 hours ago)	tcp/2222 (4 or more attempts)	Port Scan
🇺🇸 TPI-Abuse	2026-07-20 08:23:02 (5 hours ago)	(mod_security) mod_security (id:218420) triggered by 118.31.19.34 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:218420) triggered by 118.31.19.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 04:22:57.517813 2026] [security2:error] [pid 31493:tid 31493] [client 118.31.19.34:54082] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in\|out\|err)\|(in\|out)put\|fd\|memory\|temp\|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found\|\|192.64.150.30:443\|F\|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "192.64.150.30"] [uri "/hello.world"] [unique_id "al3a4QgL3aSdUKIffMi1hAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 David Ferneding	2026-07-20 08:09:25 (5 hours ago)	Blocked by UFW (TCP on 23) Source port: 43058 TTL: 49 Packet length: 40 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 23) Source port: 43058 TTL: 49 Packet length: 40 TOS: 0x00 This report (for 118.31.19.34) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
🇺🇸 xmission.com	2026-07-20 07:39:40 (6 hours ago)	Blocked by UFW (TCP on 23) Source port: 40622 TTL: 47 Packet length: 40 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 23) Source port: 40622 TTL: 47 Packet length: 40 TOS: 0x08 This report (for 118.31.19.34) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
🇺🇸 LotPhantom	2026-07-20 07:20:33 (6 hours ago)	2026-07-20T07:19:51.950854+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1 ... show more 2026-07-20T07:19:51.950854+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=118.31.19.34 DST=157.230.217.55 LEN=40 TOS=0x00 PREC=0x00 TTL=44 ID=31902 PROTO=TCP SPT=60122 DPT=2222 WINDOW=65535 RES=0x00 SYN URGP=0 2026-07-20T07:19:51.950874+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=118.31.19.34 DST=157.230.217.55 LEN=40 TOS=0x00 PREC=0x00 TTL=44 ID=31902 PROTO=TCP SPT=60122 DPT=2222 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan Hacking
Anonymous	2026-07-20 07:19:38 (6 hours ago)	...	Bad Web Bot
🇫🇮 iamxorum	2026-07-20 07:14:08 (6 hours ago)	2026-07-20T07:14:07.819884+00:00 XRM-01 kernel: [TELNET-TRAP] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2: ... show more 2026-07-20T07:14:07.819884+00:00 XRM-01 kernel: [TELNET-TRAP] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2:74:7f:6e:37:e3:08:00 SRC=118.31.19.34 DST=46.62.222.43 LEN=40 TOS=0x00 PREC=0x00 TTL=44 ID=5377 PROTO=TCP SPT=43864 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan IoT Targeted
🇩🇪 dispaisyenterprises	2026-07-20 06:16:47 (7 hours ago)	Honeypot [fra-de-honeypot]: SSH handshake/banner (24 bytes of payload); 2222 [1] TCP Reported by Dis ... show more Honeypot [fra-de-honeypot]: SSH handshake/banner (24 bytes of payload); 2222 [1] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	SSH

Showing 1 to 15 of 83 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 203.193.150.246

🇧🇷 189.7.145.94

🇺🇸 184.105.247.218

🇺🇸 74.125.227.1

🇺🇸 35.252.163.207

🇹🇭 1.2.165.56

🇬🇧 2a06:4880::10

🇬🇧 185.247.137.248

🇺🇸 184.105.247.254

🇻🇳 160.191.87.31

🇭🇰 152.32.175.45

🇮🇳 103.97.215.11

🇮🇩 103.13.165.110

🇺🇸 34.94.195.107

🇺🇸 192.241.60.99

🇧🇩 165.101.100.22

🇻🇳 118.69.226.76

🇿🇦 102.64.40.125

🇫🇷 86.216.38.249

🇫🇷 85.217.140.39