JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 118.196.2.158

118.196.2.158 was found in our database!

This IP was reported 8 times. Confidence of Abuse is 1%: ?

ISP	Beijing Volcano Engine Technology Co., Ltd.
Usage Type	Fixed Line ISP
ASN	AS137718
Domain Name	bytedance.com
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 118.196.2.158

Whois 118.196.2.158

IP Abuse Reports for 118.196.2.158:

This IP address has been reported a total of 8 times from 8 distinct sources. 118.196.2.158 was first reported on April 12th 2026, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 ICS Labs	2026-05-21 15:00:54 (3 weeks ago)	ICS Labs identified 118.196.2.158 as a malicious indicator from threat intelligence.	Hacking
🇪🇸 jiossal	2026-04-17 04:43:25 (2 months ago)	IP_Trapped_MikroTik_Firewall_HoneyPot	Brute-Force
🇫🇷 Little Iguana	2026-04-16 12:10:24 (2 months ago)	trying to access non-authorized port	Port Scan
🇺🇸 Grambo	2026-04-15 12:42:00 (2 months ago)	Apr 15 08:34:44 kinnakeet sshd-session[752438]: pam_unix(sshd:auth): authentication failure; logname ... show more Apr 15 08:34:44 kinnakeet sshd-session[752438]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.196.2.158 user=root Apr 15 08:34:47 kinnakeet sshd-session[752438]: Failed password for root from 118.196.2.158 port 47866 ssh2 Apr 15 08:34:50 kinnakeet sshd-session[752438]: Received disconnect from 118.196.2.158 port 47866:11: normal shutdown [preauth] Apr 15 08:34:50 kinnakeet sshd-session[752438]: Disconnected from authenticating user root 118.196.2.158 port 47866 [preauth] show less	SSH
🇺🇸 xmission.com	2026-04-14 22:24:45 (2 months ago)	Blocked by UFW (TCP on 5901) Source port: 52624 TTL: 47 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 5901) Source port: 52624 TTL: 47 Packet length: 60 TOS: 0x08 This report (for 118.196.2.158) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇦🇺 smfhelper.org	2026-04-14 21:29:35 (2 months ago)	(sshd) Failed SSH login from 118.196.2.158 (CN/China/-): 5 in the last 3600 secs; Ports: ; Directio ... show more (sshd) Failed SSH login from 118.196.2.158 (CN/China/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SSHD; Logs: 2026-04-15T07:26:51.122422+10:00 arcade-james sshd-session[745620]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.196.2.158 user=root 2026-04-15T07:26:52.733410+10:00 arcade-james sshd-session[745620]: Failed password for invalid user root from 118.196.2.158 port 45548 ssh2 2026-04-15T07:28:10.528880+10:00 arcade-james sshd-session[745630]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.196.2.158 user=root 2026-04-15T07:28:12.548184+10:00 arcade-james sshd-session[745630]: Failed password for invalid user root from 118.196.2.158 port 51982 ssh2 2026-04-15T07:29:29.554782+10:00 arcade-james sshd-session[745644]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.196.2.158 user=root show less	Port Scan
🇺🇸 Silly Development	2026-04-14 20:05:55 (2 months ago)	2026-04-14T21:05:17.678235+01:00 ozo-b456b.net sshd[1295641]: Failed password for root from 118.196. ... show more 2026-04-14T21:05:17.678235+01:00 ozo-b456b.net sshd[1295641]: Failed password for root from 118.196.2.158 port 49564 ssh2 2026-04-14T21:05:52.748038+01:00 ozo-b456b.net sshd[1295708]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.196.2.158 user=root 2026-04-14T21:05:54.608056+01:00 ozo-b456b.net sshd[1295708]: Failed password for root from 118.196.2.158 port 59328 ssh2 ... show less	Brute-Force SSH
🇳🇱 SchorelWeb	2026-04-12 15:23:31 (2 months ago)	Cluster member (Omitted) (US/United States/-) said, DENY 118.196.2.158, Reason:[(sshd) Failed SSH lo ... show more Cluster member (Omitted) (US/United States/-) said, DENY 118.196.2.158, Reason:[(sshd) Failed SSH login from 118.196.2.158 (CN/China/-): 3 in the last 3600 secs] show less	Brute-Force SSH

Showing 1 to 8 of 8 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.185

🇹🇼 198.235.24.73

🇩🇪 151.243.11.35

🇺🇸 148.72.152.145

🇺🇸 67.207.93.64

🇸🇬 47.236.194.29

🇷🇺 46.8.245.94

🇺🇸 20.65.154.109

🇨🇳 14.103.123.6

🇺🇸 172.252.125.144

🇻🇳 125.212.244.35

🇰🇷 112.184.60.138

🇺🇸 66.132.224.16

🇺🇸 45.66.209.59

🇸🇬 43.160.251.13

🇸🇬 43.134.42.6

🇻🇳 14.225.23.94

🇯🇵 160.251.185.39

🇰🇷 146.56.47.69

🇰🇷 121.167.147.112