abuseip.org

IP 118.193.33.8 is currently blocked by the redirs.com anycast edge.

Reason: scanning 35 domains
Hits (last hour): 4,772
Unique targets hit: 35
Unique paths probed: 377
Detection count: 8
First seen: 2026-11-06 02:06:03 UTC
Last seen: 2026-11-06 02:17:42 UTC
Block expires: 2026-11-07 03:04:58 UTC

Sample paths probed

/site/info
/platform
/Web/link
/css/skin/ymPrompt.css
/bt.html
/op999.js
/js/xz.js
/getLocale
/mobile/
/
/api/init
/lang.js
/app_cn/
/union/1
/style.css
/config.js
/api/c/a
/snake/
/api/site
/laopan/

Sample User-Agents

Mozilla/5.0 (Android 14; Mobile; rv:137.0.1) Gecko/137.0.1 Firefox/137.0.1
Mozilla/5.0 (iPhone; CPU iPhone OS 14_8 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) CriOS/103.0.5060.168 Mobile/15E148 Safari/537.36
Mozilla/5.0 (iPhone; CPU iPhone OS 18_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0 Mobile/15E148 Safari/605.1.15
Mozilla/5.0 (iPhone; CPU iPhone OS 15_4 like Mac OS X) AppleWebKit/602.4.8 (KHTML, like Gecko) Version/10.0 Mobile/15E148 Safari/602.4.8
Mozilla/5.0 (Android 8; Mobile; rv:115.2.0) Gecko/115.2.0 Firefox/115.2.0
curl/7.4.0
Mozilla/5.0 (iPhone; CPU iPhone OS 17_4 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) CriOS/116.0.5845.116 Mobile/15E148 Safari/537.36
Mozilla/5.0 (iPhone; CPU iPhone OS 18 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/137.0 Mobile/15E148 Safari/605.1.15
Mozilla/5.0 (Linux; Android 8; Pixel 5a (5G); Build/OPM6.180207.243) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.6998.164 Mobile Safari/537.36
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36
Mozilla/5.0 (iPhone; CPU iPhone OS 15_0_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/119.0 Mobile/15E148 Safari/605.1.15
Mozilla/5.0 (iPhone; CPU iPhone OS 15_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/124.0 Mobile/15E148 Safari/605.1.15
Mozilla/5.0 (iPhone; CPU iPhone OS 18_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/115.4 Mobile/15E148 Safari/605.1.15
Mozilla/5.0 (Linux; Android 10; SM-G530BT; Build/QD1A.240812.139) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.141 Mobile Safari/537.36
Mozilla/5.0 (iPhone; CPU iPhone OS 15_4 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) CriOS/135.0.7049.183 Mobile/15E148 Safari/537.36
Mozilla/5.0 (iPhone; CPU iPhone OS 15_3 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Version/15.0 EdgiOS/108.0.1462.28 Mobile/15E148 Safari/537.36
okhttp/3.14.9
Mozilla/5.0 (Linux; Android 14; SM-G900V; Build/UD2A.210419.52) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.230 Mobile Safari/537.36
Mozilla/5.0 (iPhone; CPU iPhone OS 17_3 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) CriOS/125.0.6422.18 Mobile/15E148 Safari/537.36
Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) CriOS/119.0.6045.52 Mobile/15E148 Safari/537.36

What does this mean?

This address sent traffic that the redirs.com edge classified as automated abuse — typically WordPress/PHP exploit scanning, credential file probing (.env, .git, .aws/), or mass-domain enumeration. The block is automatic and time-limited (24 hours from last detection).

If you believe this is a false positive, contact [email protected] with the IP and the timestamps above.