182.138.158.218

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
78% Critical
634 reports
153 reporters · latest 44 minutes ago
ISP
CHINANET Sichuan province network
Usage Type
Fixed Line ISP
ASN
AS4134
Domain Name
sctel.com.cn
Country
🇨🇳 China
City
Chengdu, Sichuan
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
634 from 153 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 9 🇩🇪 Germany 4 🇲🇳 Mongolia 3
Most common categories Port Scan 24 Hacking 6 Brute-Force 4 Bad Web Bot 3 SSH 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 xmission.com
Blocked by UFW (TCP on 5000) Source port: 19207 TTL: 239 Packet length: 44 TOS: 0x00 This report (for 182.138.158.218) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇲🇳 Public CSIRT/CC of Mongolia
Honeypot hit: Unauthorized traffic (4 bytes of payload); 4000 [1] TCP
Port Scan
🇳🇱 tr1n
Triggered Cloudflare WAF (firewallCustom) from CN. Action: MANAGED_CHALLENGE | ASN: 4134 (CHINANET BACKBONE) | Protocol: HTTP/1.1 (GET) | Endpoint: / | Timestamp: 2026-11-11T02:04:50Z | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0
Bad Web Bot
🇳🇱 ByeByte API
Port Scan
🇳🇱 ByeByte API
Port scan from this IP. Firewall dropped every packet. Targeted TCP ports: 7474. Single burst at 2026-11-08 23:53 UTC.
Port Scan
🇹🇷 Domainhizmetleri.com
Source: DH Hunter (Honeypot) | Reason: HTTP Probe (10554/tcp) [non-standard port]
Web App Attack
🇷🇸 Scan
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan Hacking
🇲🇳 Public CSIRT/CC of Mongolia
Honeypot hit: Large payload (1457 bytes); 20233 [1] TCP
Hacking
Anonymous
MikroTik Enterprise Honeypot
Port Scan
🇺🇸 sumnone
Port probing on unauthorized port 12349
Port Scan Hacking Exploited Host
Anonymous
2026-11-01 13:15:13 warning[6821506]: host unknown[182.138.158.218]: unauthorized access attempted: tcp/10257
Port Scan Brute-Force
🇲🇳 Public CSIRT/CC of Mongolia
Honeypot hit: Large payload (1457 bytes); 7114 [1] TCP
Hacking
🇩🇪 pltcldvlpr
Bogus Useragent: 182.138.158.218 - - [17/Oct/2026:04:12:40 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.081397758 Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" asn=4134 org="Chinanet" country=CN ...
Bad Web Bot
🇦🇹 Pingger Shikkoken
Hacking Bad Web Bot
🇫🇷 uthul
T-Pot honeypot: 9 hits on ports [11027] (automated)
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 216.25.90.43
🇬🇧 194.50.235.132
🇺🇸 184.105.247.212
🇺🇸 172.236.228.197
🇭🇰 152.32.128.169
🇨🇳 112.123.228.180
🇲🇲 103.57.204.4
🇳🇱 86.38.187.177
🇩🇪 45.135.194.24
🇨🇦 24.122.26.10
🇺🇸 195.184.76.105
🇳🇱 185.242.226.103
🇳🇱 185.223.235.46
🇸🇦 176.44.9.250
🇧🇩 122.99.100.177
🇮🇳 110.44.1.177
🇺🇸 99.123.253.16
🇷🇴 92.118.39.92
🇨🇳 27.19.119.126
🇺🇸 216.25.90.4
feedback