JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

118.194.238.132

Recent Activity

Abuse Confidence Score

100% Critical

124 reports

84 reporters · latest 9 minutes ago

ISP: UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
Usage Type: Data Center/Web Hosting/Transit
ASN: AS135377
Domain Name: ucloud.cn
Country: 🇵🇭 Philippines
City: Manila, National Capital Region

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

124 from 84 distinct reporters

First reported

November 4th 2026

Most recent report

9 minutes ago

Last 60 days

Top reporter locations 🇩🇪 Germany 31 🇺🇸 United States of America 23 🇯🇵 Japan 10

Most common categories SSH 117 Brute-Force 113 Port Scan 6 Bad Web Bot 2 Web App Attack 2

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇪 ljo	2026-11-07 08:39:45 UTC · (9 minutes ago)	2026-11-07T09:32:13.270568+01:00 serengeti sshd-session[854694]: Invalid user cs2server from 118.194.238.132 port 48674 2026-11-07T09:32:13.272017+01:00 serengeti sshd-session[854694]: Failed password for invalid user cs2server from 118.194.238.132 p ... show more 2026-11-07T09:32:13.270568+01:00 serengeti sshd-session[854694]: Invalid user cs2server from 118.194.238.132 port 48674 2026-11-07T09:32:13.272017+01:00 serengeti sshd-session[854694]: Failed password for invalid user cs2server from 118.194.238.132 port 48674 ssh2 2026-11-07T09:36:02.788630+01:00 serengeti sshd-session[855213]: Invalid user paola from 118.194.238.132 port 40124 2026-11-07T09:36:02.790027+01:00 serengeti sshd-session[855213]: Failed password for invalid user paola from 118.194.238.132 port 40124 ssh2 2026-11-07T09:39:39.871092+01:00 serengeti sshd-session[855575]: Invalid user cuckoo from 118.194.238.132 port 36526 ... show less	Brute-Force SSH
🇩🇪 DEV-DNS	2026-11-07 08:32:35 UTC · (16 minutes ago)	(sshd) Failed SSH login from 118.194.238.132 (PH/Philippines/Metro Manila/Manila/-/[redacted])	Brute-Force SSH
🇧🇾 lns.bz	2026-11-07 08:19:44 UTC · (29 minutes ago)	SSH bruteforce [BY]	SSH
🇳🇱 YaRi78	2026-11-07 08:01:21 UTC · (47 minutes ago)	Cowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2026-11-07T08:01:17Z and 2026-11-07T08:01:20Z	Brute-Force SSH
🇫🇷 webanyone	2026-11-07 07:57:20 UTC · (51 minutes ago)	SSH brute force	Brute-Force SSH
🇸🇪 ljo	2026-11-07 06:20:30 UTC · (2 hours ago)	2026-11-07T07:13:06.386744+01:00 serengeti sshd-session[836312]: Invalid user dev1 from 118.194.238.132 port 57084 2026-11-07T07:13:06.388136+01:00 serengeti sshd-session[836312]: Failed password for invalid user dev1 from 118.194.238.132 port 57084 ... show more 2026-11-07T07:13:06.386744+01:00 serengeti sshd-session[836312]: Invalid user dev1 from 118.194.238.132 port 57084 2026-11-07T07:13:06.388136+01:00 serengeti sshd-session[836312]: Failed password for invalid user dev1 from 118.194.238.132 port 57084 ssh2 2026-11-07T07:16:46.978317+01:00 serengeti sshd-session[836808]: Failed password for root from 118.194.238.132 port 53638 ssh2 2026-11-07T07:20:24.760191+01:00 serengeti sshd-session[837340]: Invalid user root1 from 118.194.238.132 port 56578 2026-11-07T07:20:24.761604+01:00 serengeti sshd-session[837340]: Failed password for invalid user root1 from 118.194.238.132 port 56578 ssh2 ... show less	Brute-Force SSH
🇸🇪 ljo	2026-11-07 06:02:36 UTC · (2 hours ago)	2026-11-07T06:55:08.660512+01:00 serengeti sshd-session[833939]: Failed password for root from 118.194.238.132 port 35992 ssh2 2026-11-07T06:58:47.304941+01:00 serengeti sshd-session[834381]: Invalid user usuario1 from 118.194.238.132 port 35470 2026 ... show more 2026-11-07T06:55:08.660512+01:00 serengeti sshd-session[833939]: Failed password for root from 118.194.238.132 port 35992 ssh2 2026-11-07T06:58:47.304941+01:00 serengeti sshd-session[834381]: Invalid user usuario1 from 118.194.238.132 port 35470 2026-11-07T06:58:47.306366+01:00 serengeti sshd-session[834381]: Failed password for invalid user usuario1 from 118.194.238.132 port 35470 ssh2 2026-11-07T07:02:30.222225+01:00 serengeti sshd-session[834928]: Invalid user frappe from 118.194.238.132 port 59122 2026-11-07T07:02:30.223751+01:00 serengeti sshd-session[834928]: Failed password for invalid user frappe from 118.194.238.132 port 59122 ssh2 ... show less	Brute-Force SSH
🇸🇪 ljo	2026-11-07 05:44:44 UTC · (3 hours ago)	2026-11-07T06:33:13.533516+01:00 serengeti sshd-session[830656]: Failed password for root from 118.194.238.132 port 52818 ssh2 2026-11-07T06:37:00.857078+01:00 serengeti sshd-session[831260]: Failed password for root from 118.194.238.132 port 36574 s ... show more 2026-11-07T06:33:13.533516+01:00 serengeti sshd-session[830656]: Failed password for root from 118.194.238.132 port 52818 ssh2 2026-11-07T06:37:00.857078+01:00 serengeti sshd-session[831260]: Failed password for root from 118.194.238.132 port 36574 ssh2 2026-11-07T06:40:48.121372+01:00 serengeti sshd-session[831916]: Failed password for root from 118.194.238.132 port 49666 ssh2 2026-11-07T06:44:38.432456+01:00 serengeti sshd-session[832170]: Invalid user proxyuser from 118.194.238.132 port 48398 2026-11-07T06:44:38.433925+01:00 serengeti sshd-session[832170]: Failed password for invalid user proxyuser from 118.194.238.132 port 48398 ssh2 ... show less	Brute-Force SSH
Anonymous	2026-11-07 05:39:34 UTC · (3 hours ago)	2026-11-07T00:28:55.205713 VOSTOK sshd[14265]: Failed password for root from 118.194.238.132 port 46346 ssh2 2026-11-07T00:32:37.648722 VOSTOK sshd[14872]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.19 ... show more 2026-11-07T00:28:55.205713 VOSTOK sshd[14265]: Failed password for root from 118.194.238.132 port 46346 ssh2 2026-11-07T00:32:37.648722 VOSTOK sshd[14872]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.194.238.132 user=root 2026-11-07T00:32:39.466337 VOSTOK sshd[14872]: Failed password for root from 118.194.238.132 port 44644 ssh2 2026-11-07T00:36:28.074646 VOSTOK sshd[15475]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.194.238.132 user=root 2026-11-07T00:36:29.937454 VOSTOK sshd[15475]: Failed password for root from 118.194.238.132 port 38298 ssh2 ... show less	Brute-Force SSH
🇺🇸 ShadowWhisperer	2026-11-07 05:29:13 UTC · (3 hours ago)	botnet node - cryptominer (outlaw/mdrfckr) [worm, crypto, infected, backdoor]	Brute-Force SSH Hacking Exploited Host
Anonymous	2026-11-07 05:03:42 UTC · (3 hours ago)	2026-11-07_05:03:40.72722 Invalid user [redacted] from 118.194.238.132 port 48888 ...	Brute-Force SSH
🇫🇷 cereal57	2026-11-07 01:03:39 UTC · (7 hours ago)	Unsolicited connection to a honeypot (beelzebub). Automated scan/probe.	Port Scan
🇵🇱 Peter Black	2026-11-06 23:22:59 UTC · (9 hours ago)	Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2026-11-06T23:04:25Z and 2026-11-06T23:22:59Z	Brute-Force SSH
🇪🇸 guille-rodriguez	2026-11-06 21:56:51 UTC · (10 hours ago)	SSH BruteForce detected by Fail2Ban (failures=8, source=VPSPSCZP)	Brute-Force SSH
🇯🇵 rafale2k	2026-11-06 21:48:00 UTC · (11 hours ago)	SSH Brute Force	Brute-Force SSH

Showing 1 to 15 of 124 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 195.184.76.117

🇧🇷 191.243.212.92

🇸🇮 102.220.160.147

🇧🇷 45.170.228.66

🇬🇧 35.203.211.14

🇧🇪 34.38.27.175

🇬🇧 2.57.17.155

🇬🇧 2.57.17.56

🇳🇱 200.138.46.213

🇧🇷 177.21.80.91

🇩🇪 151.243.11.205

🇫🇷 89.93.142.105

🇹🇼 58.115.53.172

🇳🇬 41.184.4.240

🇬🇧 5.252.83.69

🇺🇸 199.165.159.97

🇧🇷 190.89.0.130

🇧🇷 189.113.38.177

🇺🇸 144.202.100.158

🇺🇸 69.23.118.10