JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 118.193.62.172

118.193.62.172 was found in our database!

This IP was reported 132 times. Confidence of Abuse is 100%: ?

100%

ISP	UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
Usage Type	Data Center/Web Hosting/Transit
ASN	AS135377
Domain Name	ucloud.cn
Country	🇹🇼 Taiwan
City	Taipei, Taiwan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 118.193.62.172

Whois 118.193.62.172

IP Abuse Reports for 118.193.62.172:

This IP address has been reported a total of 132 times from 67 distinct sources. 118.193.62.172 was first reported on June 25th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Markus Ackerl	2026-06-29 23:41:58 (2 hours ago)	Jun 29 23:41:42 mx sshd[713403]: Failed password for root from 118.193.62.172 port 12028 ssh2 Jun 29 ... show more Jun 29 23:41:42 mx sshd[713403]: Failed password for root from 118.193.62.172 port 12028 ssh2 Jun 29 23:41:55 mx sshd[713403]: Disconnecting authenticating user root 118.193.62.172 port 12028: Change of username or service not allowed: (root,ssh-connection) -> (test,ssh-connection) [preauth] Jun 29 23:41:57 mx sshd[713409]: Invalid user test from 118.193.62.172 port 36130 ... show less	Brute-Force
🇺🇸 MU-star.net	2026-06-29 21:15:44 (5 hours ago)	2026-06-30T06:15:30.459795 mustar-kr-miso sshd[843720]: Failed password for root from 118.193.62.172 ... show more 2026-06-30T06:15:30.459795 mustar-kr-miso sshd[843720]: Failed password for root from 118.193.62.172 port 41212 ssh2 2026-06-30T06:15:32.753378 mustar-kr-miso sshd[843720]: Failed password for root from 118.193.62.172 port 41212 ssh2 2026-06-30T06:15:36.454052 mustar-kr-miso sshd[843720]: Failed password for root from 118.193.62.172 port 41212 ssh2 2026-06-30T06:15:40.022841 mustar-kr-miso sshd[843720]: Failed password for root from 118.193.62.172 port 41212 ssh2 2026-06-30T06:15:43.829916 mustar-kr-miso sshd[843720]: Failed password for root from 118.193.62.172 port 41212 ssh2 ... show less	Hacking Brute-Force SSH
🇮🇩 hermawan	2026-06-29 03:19:23 (23 hours ago)	1782703154.733584 118.193.62.172 103.166.156.58 64952_2-4-8-1-3_1412_9 2026-06-29 10:19:14 WIB ...	Email Spam Hacking
🇳🇱 ByeByte API	2026-06-29 02:50:06 (23 hours ago)	byebyte.space auth: TCP packet to port 6379 (Redis) at 2026-06-29T02:50:06Z. Source port 43712. TCP ... show more byebyte.space auth: TCP packet to port 6379 (Redis) at 2026-06-29T02:50:06Z. Source port 43712. TCP flags: SYN. Packet: 60B, TTL 39, window 64952, IP id 38060. Single packet, dropped at firewall. p0f: OS Linux 2.2.x-3.x (generic match), 25 hops, link DSL. show less	Port Scan
🇦🇹 Pingger Shikkoken	2026-06-29 02:33:34 (1 day ago)	2026-06-29T02:33:34+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6 ... show more 2026-06-29T02:33:34+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=118.193.62.172 DST=152.53.50.28 LEN=60 TOS=0x00 PREC=0x00 TTL=28 ID=15198 DF PROTO=TCP SPT=36952 DPT=6379 WINDOW=64952 RES=0x00 SYN URGP=0 show less	Hacking
🇦🇹 centurion	2026-06-29 02:33:33 (1 day ago)	Unauthorized attempt on coresecret [6379/tcp] Source port: 40516 TTL: 26 Packet length: 60 TOS: 0x00 ... show more Unauthorized attempt on coresecret [6379/tcp] Source port: 40516 TTL: 26 Packet length: 60 TOS: 0x00 https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 SMi-Web	2026-06-29 02:29:05 (1 day ago)	Blocked by firewall on hugin [6379/tcp] \| Rule: AbuseIPDB \| SPT: 64512 \| TTL: 34 \| LEN: 60 \| TOS: 0x ... show more Blocked by firewall on hugin [6379/tcp] \| Rule: AbuseIPDB \| SPT: 64512 \| TTL: 34 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇳🇱 ByeByte API	2026-06-29 01:40:06 (1 day ago)	byebyte.space auth: TCP packet to port 6379 (Redis) at 2026-06-29T01:40:05Z. Source port 22142. TCP ... show more byebyte.space auth: TCP packet to port 6379 (Redis) at 2026-06-29T01:40:05Z. Source port 22142. TCP flags: SYN. Packet: 60B, TTL 39, window 64952, IP id 51956. Single packet, dropped at firewall. p0f: OS Linux 2.2.x-3.x (generic match), 25 hops, link DSL. show less	Port Scan
🇺🇸 SSP	2026-06-29 01:30:06 (1 day ago)	Automatically generated from firewall_v2 logs on SID:VTMI3 Category: Port Scan Occurrences: 20 Un ... show more Automatically generated from firewall_v2 logs on SID:VTMI3 Category: Port Scan Occurrences: 20 Unique Ports: 1 Destination Ports: 6379 First Seen: 2026-06-25 21:00 UTC Last Seen: 2026-06-29 01:30 UTC show less	Port Scan
🇧🇷 diego	2026-06-29 00:50:58 (1 day ago)	[rede-164-29] 06/28/2026-21:50:58.483459, 118.193.62.172, Protocol: 6, ET CINS Active Threat Intelli ... show more [rede-164-29] 06/28/2026-21:50:58.483459, 118.193.62.172, Protocol: 6, ET CINS Active Threat Intelligence Poor Reputation IP group 167 show less	Hacking
🇺🇸 donarev419	2026-06-29 00:18:04 (1 day ago)	Connection to port 6379 with data transfer. Data preview: *1 $4 info	Port Scan Hacking
🇨🇭 pingusurmars	2026-06-28 23:32:27 (1 day ago)	Blocked by UFW on ampereone [6379/tcp] Source port: 41090 TTL: 38 Packet length: 60 TOS: 0x00 This ... show more Blocked by UFW on ampereone [6379/tcp] Source port: 41090 TTL: 38 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇭 TOCE	2026-06-28 22:43:50 (1 day ago)	15 hits seen on 2026-06-28, ports 6379 (REDIS) on a honeypot from www.toce.ch	Port Scan
🇺🇸 SSP	2026-06-28 20:35:04 (1 day ago)	Automatically generated from firewall_v2 logs on SID:VTMI1 Category: Port Scan Occurrences: 20 Un ... show more Automatically generated from firewall_v2 logs on SID:VTMI1 Category: Port Scan Occurrences: 20 Unique Ports: 1 Destination Ports: 6379 First Seen: 2026-06-25 21:00 UTC Last Seen: 2026-06-28 20:35 UTC show less	Port Scan
🇺🇸 LotPhantom	2026-06-28 19:19:05 (1 day ago)	2026-06-28T19:19:04.890951+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1 ... show more 2026-06-28T19:19:04.890951+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=118.193.62.172 DST=157.230.217.55 LEN=60 TOS=0x00 PREC=0x00 TTL=37 ID=47572 DF PROTO=TCP SPT=41534 DPT=6379 WINDOW=64952 RES=0x00 SYN URGP=0 ... show less	Port Scan Hacking

Showing 1 to 15 of 132 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 194.190.153.226

🇩🇪 178.128.205.138

🇺🇸 147.182.203.202

🇺🇸 147.182.186.255

🇹🇭 118.194.251.37

🇫🇷 91.196.152.104

🇺🇸 65.49.20.99

🇨🇳 60.209.147.160

🇮🇪 34.253.194.233

🇻🇳 27.79.0.15

🇨🇳 14.103.117.73

🇨🇴 8.243.68.26

🇧🇷 177.12.139.42

🇳🇱 176.65.139.242

🇺🇸 147.182.141.131

🇺🇸 147.182.132.9

🇺🇸 146.190.77.252

🇻🇳 103.172.236.241

🇮🇩 103.18.34.215

🇵🇱 83.168.89.49