JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 118.31.189.46

118.31.189.46 was found in our database!

This IP was reported 204 times. Confidence of Abuse is 72%: ?

72%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Hangzhou, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 118.31.189.46

Whois 118.31.189.46

IP Abuse Reports for 118.31.189.46:

This IP address has been reported a total of 204 times from 60 distinct sources. 118.31.189.46 was first reported on April 4th 2025, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Fasetech	2026-06-19 12:47:36 (4 days ago)	SecLedge detected suspicious activity. Score: 138.48. Sensor: T-Pot.	Brute-Force
🇩🇪 mattk	2026-06-15 23:30:54 (1 week ago)	port scan	Port Scan
🇬🇧 PeravixGroup	2026-06-14 02:25:26 (1 week ago)	Honeypot detection: MongoDB unauthorized access / exploitation attempt on port 27017. Severity: MEDI ... show more Honeypot detection: MongoDB unauthorized access / exploitation attempt on port 27017. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇺🇸 baltic-lab.com	2026-06-14 02:05:08 (1 week ago)	2026-06-14T04:03:02.324514+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b: ... show more 2026-06-14T04:03:02.324514+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=118.31.189.46 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=50468 PROTO=TCP SPT=42559 DPT=27237 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-14T04:03:22.277223+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=118.31.189.46 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=24378 PROTO=TCP SPT=42559 DPT=34610 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-14T04:03:42.165311+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=118.31.189.46 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=64141 PROTO=TCP SPT=42559 DPT=9841 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-14T04:04:02.289734+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=118.31.189.46 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=39524 PROTO=TCP SPT=42559 DPT=4463 WINDOW= ... show less	Brute-Force Hacking
🇰🇷 winter	2026-06-12 01:31:27 (1 week ago)	Connection attemp from 118.31.189.46 to port 22	Brute-Force SSH
🇫🇷 ISPLtd	2026-06-11 04:42:37 (1 week ago)	Jun 11 01:42:36 118.31.189.46 TCP SPT=52956 DPT=18557 SYN Jun 11 01:42:37 118.31.189.46 TCP SPT=5295 ... show more Jun 11 01:42:36 118.31.189.46 TCP SPT=52956 DPT=18557 SYN Jun 11 01:42:37 118.31.189.46 TCP SPT=52956 DPT=42803 SYN Jun 11 01:42:37 118.31.189.46 TCP SPT=52956 DPT=27591 ... show less	Port Scan
Anonymous	2026-06-07 01:20:12 (2 weeks ago)	Blocked by UFW (TCP on 16203) Source port: 55194 TTL: 246 Packet length: 40 TOS: 0x14 This report ( ... show more Blocked by UFW (TCP on 16203) Source port: 55194 TTL: 246 Packet length: 40 TOS: 0x14 This report (for 118.31.189.46) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 PeravixGroup	2026-06-06 14:04:12 (2 weeks ago)	Honeypot detection: Docker daemon unauthorized access / container escape attempt on port 2376. Sever ... show more Honeypot detection: Docker daemon unauthorized access / container escape attempt on port 2376. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
Anonymous	2026-06-06 00:44:32 (2 weeks ago)	fail2ban:piguard2:14,18	Port Scan Brute-Force
🇩🇪 kingjan1999	2026-06-05 10:10:42 (2 weeks ago)	Blocked by UFW [34579/tcp] \| SPT: 54232 \| TTL: 238 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/s ... show more Blocked by UFW [34579/tcp] \| SPT: 54232 \| TTL: 238 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 arteagasoft	2026-06-05 04:03:54 (2 weeks ago)	2026-06-04T22:03:20.278967-06:00 23bf009e6fbf dovecot: pop3-login: Login aborted: Connection closed: ... show more 2026-06-04T22:03:20.278967-06:00 23bf009e6fbf dovecot: pop3-login: Login aborted: Connection closed: SSL_accept() failed: error:0A00018C:SSL routines::version too low (disconnected during TLS handshake) (tls_handshake_not_finished): user=<>, rip=118.31.189.46, lip=192.168.30.250, TLS handshaking: SSL_accept() failed: error:0A00018C:SSL routines::version too low, session=<hMJqvXlT6Jt2H70u> 2026-06-04T22:03:28.453128-06:00 23bf009e6fbf dovecot: pop3-login: Login aborted: Connection closed (no auth attempts in 7 secs) (no_auth_attempts): user=<>, rip=118.31.189.46, lip=192.168.30.250, TLS, session=<RWjavXlTcJ12H70u> 2026-06-04T22:03:53.688813-06:00 23bf009e6fbf dovecot: pop3-login: Login aborted: Connection closed (no auth attempts in 0 secs) (no_auth_attempts): user=<>, rip=118.31.189.46, lip=192.168.30.250, TLS, session=<+jm6v3lTFqJ2H70u> ... show less	Brute-Force
🇳🇱 donarev419	2026-06-03 01:28:24 (2 weeks ago)	Connection to port 6754 with data transfer. Data preview:	Port Scan Hacking
🇬🇧 PeravixGroup	2026-06-02 19:15:23 (3 weeks ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇩🇪 acadeova	2026-06-01 18:21:06 (3 weeks ago)	Blocked by UFW on vps2 [20121/tcp] Source port: 57818 TTL: 241 Packet length: 40 TOS: 0x00 This rep ... show more Blocked by UFW on vps2 [20121/tcp] Source port: 57818 TTL: 241 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 PeravixGroup	2026-05-29 17:39:33 (3 weeks ago)	Honeypot detection: SIP / VoIP scanning or unauthorized registration attempt on port 5060. Severity: ... show more Honeypot detection: SIP / VoIP scanning or unauthorized registration attempt on port 5060. Severity: LOW. Aaran.cloud show less	Port Scan

Showing 1 to 15 of 204 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2001:470:2be:1:20c:29ff:fead:c1b7

🇳🇱 193.29.139.227

🇳🇱 192.42.116.45

🇳🇱 176.65.139.232

🇺🇸 174.62.16.88

🇺🇸 170.187.165.134

🇺🇸 162.216.150.83

🇮🇹 158.173.77.102

🇷🇺 91.146.28.230

🇺🇸 64.94.95.114

🇸🇨 45.194.67.147

🇺🇸 44.196.13.35

🇺🇸 44.29.73.107

🇨🇳 222.139.40.145

🇹🇼 198.235.24.60

🇳🇱 192.42.116.17

🇮🇳 172.253.220.26

🇺🇸 162.216.149.26

🇫🇷 91.161.238.179

🇳🇱 91.92.241.196