AbuseIPDB » 118.193.58.20

118.193.58.20 was found in our database!

This IP was reported 3,166 times. Confidence of Abuse is 100%: ?

100%

ISP	UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
Usage Type	Data Center/Web Hosting/Transit
ASN	AS135377
Domain Name	ucloud.cn
Country	Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 118.193.58.20

Whois 118.193.58.20

IP Abuse Reports for 118.193.58.20:

This IP address has been reported a total of 3,166 times from 413 distinct sources. 118.193.58.20 was first reported on August 31st 2023, and the most recent report was 17 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Thomas Barth	2023-12-05 08:55:52 (1 year ago)	2023-12-05T09:55:51.639688server sshd[12333]: Connection closed by 118.193.58.20 port 37848 [preauth ... show more2023-12-05T09:55:51.639688server sshd[12333]: Connection closed by 118.193.58.20 port 37848 [preauth] ... show less	Brute-Force SSH
IP Analyzer	2023-12-04 02:45:52 (1 year ago)	Unauthorized connection attempt from IP address 118.193.58.20 on Port 7547	Port Scan
Anonymous	2023-12-03 15:10:50 (1 year ago)	$f2bV_matches	Brute-Force SSH
. .	2023-12-03 08:19:14 (1 year ago)	Dec 3 17:19:12 [REDACTED] kernel: [10128790.793402] [UFW BLOCK] IN=[REDACTED] OUT= MAC=[REDACTED] S ... show moreDec 3 17:19:12 [REDACTED] kernel: [10128790.793402] [UFW BLOCK] IN=[REDACTED] OUT= MAC=[REDACTED] SRC=118.193.58.20 DST=[REDACTED] LEN=44 TOS=0x00 PREC=0x00 TTL=49 ID=0 DF PROTO=TCP SPT=34187 DPT=30005 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
Sawasdee	2023-12-03 04:12:08 (1 year ago)	Port Scan ...	Port Scan
ut-addicted.com	2023-12-02 14:35:21 (1 year ago)	Dec 2 15:35:20 www postfix/smtpd\[28578\]: lost connection after UNKNOWN from unknown\[118.193.58.2 ... show moreDec 2 15:35:20 www postfix/smtpd\[28578\]: lost connection after UNKNOWN from unknown\[118.193.58.20\] show less	Hacking Brute-Force
Pornomens	2023-12-01 21:34:11 (1 year ago)	118.193.58.20 - - [01/Dec/2023:22:34:02 +0100] "GET / HTTP/1.1" 403 417 "-" "-" 118.193.58.20 ... show more118.193.58.20 - - [01/Dec/2023:22:34:02 +0100] "GET / HTTP/1.1" 403 417 "-" "-" 118.193.58.20 - - [01/Dec/2023:22:34:09 +0100] "GET /favicon.ico HTTP/1.1" 403 417 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11" 118.193.58.20 - - [01/Dec/2023:22:34:11 +0100] "GET /robots.txt HTTP/1.1" 403 417 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11" ... show less	Web App Attack
mattk	2023-12-01 15:52:30 (1 year ago)	Dec 1 15:52:29 postfix/smtpd[74923]: disconnect from unknown[118.193.58.20] ehlo=1 auth=0/1 unknown= ... show moreDec 1 15:52:29 postfix/smtpd[74923]: disconnect from unknown[118.193.58.20] ehlo=1 auth=0/1 unknown=0/1 commands=1/3 show less	Brute-Force
yvoictra	2023-12-01 15:33:24 (1 year ago)	Dec 1 16:32:43 lavrea postfix/smtpd[1897620]: lost connection after CONNECT from unknown[118.193.58 ... show moreDec 1 16:32:43 lavrea postfix/smtpd[1897620]: lost connection after CONNECT from unknown[118.193.58.20] Dec 1 16:33:11 lavrea postfix/smtpd[1897620]: lost connection after CONNECT from unknown[118.193.58.20] Dec 1 16:33:24 lavrea postfix/smtpd[1897620]: lost connection after UNKNOWN from unknown[118.193.58.20] ... show less	Email Spam Brute-Force
NotACaptcha	2023-12-01 14:00:45 (1 year ago)	Unauthorised access (Dec 1 16:00) SRC=118.193.58.20 LEN=44 PREC=0x20 TTL=55 ID=0 DF TCP DPT=3389 WI ... show moreUnauthorised access (Dec 1 16:00) SRC=118.193.58.20 LEN=44 PREC=0x20 TTL=55 ID=0 DF TCP DPT=3389 WINDOW=1024 SYN show less	Port Scan
Ba-Yu	2023-12-01 06:35:20 (1 year ago)	Port scanning	Port Scan Hacking Exploited Host
security.rdmc.fr	2023-11-30 22:06:39 (1 year ago)	Port Scan Attack proto:TCP src:37334 dst:990	Port Scan
. .	2023-11-30 19:04:14 (1 year ago)	Dec 1 04:04:13 [REDACTED] kernel: [9908297.440296] [UFW BLOCK] IN=[REDACTED] OUT= MAC=[REDACTED] SR ... show moreDec 1 04:04:13 [REDACTED] kernel: [9908297.440296] [UFW BLOCK] IN=[REDACTED] OUT= MAC=[REDACTED] SRC=118.193.58.20 DST=[REDACTED] LEN=44 TOS=0x00 PREC=0x00 TTL=50 ID=0 DF PROTO=TCP SPT=56459 DPT=5061 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
IP Analyzer	2023-11-30 18:15:04 (1 year ago)	Unauthorized connection attempt from IP address 118.193.58.20 on Port 25(SMTP)	Brute-Force
4server	2023-11-30 17:49:47 (1 year ago)	Nov3018:48:06server2pure-ftpd:$\[email protected]$[WARNING]Authenticationfailedforuser[anonymous]Nov ... show moreNov3018:48:06server2pure-ftpd:$\[email protected]$[WARNING]Authenticationfailedforuser[anonymous]Nov3018:48:07server2pure-ftpd:$\[email protected]$[WARNING]Authenticationfailedforuser[anonymous]Nov3018:48:10server2pure-ftpd:$\[email protected]$[WARNING]Authenticationfailedforuser[anonymous]Nov3018:48:58server2pure-ftpd:$\[email protected]$[WARNING]Authenticationfailedforuser[anonymous]Nov3018:49:44server2pure-ftpd:$\[email protected]$[WARNING]Authenticationfailedforuser[anonymous] show less	Port Scan Brute-Force Web App Attack