JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 218.237.115.132

218.237.115.132 was found in our database!

This IP was reported 35 times. Confidence of Abuse is 4%: ?

ISP	SK Broadband Co Ltd
Usage Type	Fixed Line ISP
ASN	AS9318
Domain Name	skbroadband.com
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 218.237.115.132

Whois 218.237.115.132

IP Abuse Reports for 218.237.115.132:

This IP address has been reported a total of 35 times from 25 distinct sources. 218.237.115.132 was first reported on June 15th 2023, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Alboweb B.V.	2026-09-19 11:11:05 (8 hours ago)	SSH abuse or brute-force attack detected by Fail2Ban in ssh jail	Brute-Force SSH
🇫🇷 Eldeberen	2026-07-13 08:48:50 (2 months ago)	Vulnerability scan attempt through HTTP protocol	Web App Attack
🇮🇩 hermawan	2026-05-08 02:34:07 (4 months ago)	1778206881.788216 218.237.115.132 103.166.156.58 65535_2-4-8-1-3_1357_6 2026-05-08 09:21:21 WIB ...	Email Spam Hacking
🇺🇸 bigscoots.com	2026-05-06 16:16:23 (4 months ago)	(PERMBLOCK) 218.237.115.132 (KR/South Korea/-) has had more than 4 temp blocks in the last 86400 sec ... show more (PERMBLOCK) 218.237.115.132 (KR/South Korea/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: 1; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Brute-Force SSH
🇳🇵 radheykrishna.com.np	2026-04-24 11:53:39 (4 months ago)	Apr 24 17:38:38 kernel: [521327.009864] [UFW BLOCK] IN=ens160 OUT= SRC=218.237.115.132 LEN=60 TOS=0x ... show more Apr 24 17:38:38 kernel: [521327.009864] [UFW BLOCK] IN=ens160 OUT= SRC=218.237.115.132 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=26850 PROTO=TCP SPT=59252 DPT=8443 WINDOW=29200 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇸🇪 KIDOS	2026-02-19 20:55:03 (6 months ago)	malicious activity	Web App Attack
🇵🇱 sefinek.net	2026-02-13 05:22:37 (7 months ago)	Triggered Cloudflare WAF (firewallCustom) from KR. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from KR. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/89.0.4447.51 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇿 Countryman	2026-02-11 08:05:31 (7 months ago)	repeated unauthorized connection attempts, host sweep, port scan	Port Scan
🇺🇸 Rip	2026-01-18 16:04:33 (8 months ago)	Automated recon attempt targeting restricted and sensitive paths.	Web App Attack
🇺🇸 bigscoots.com	2025-12-30 01:53:41 (8 months ago)	(PERMBLOCK) 218.237.115.132 (KR/South Korea/-) has had more than 4 temp blocks in the last 86400 sec ... show more (PERMBLOCK) 218.237.115.132 (KR/South Korea/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: 1; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Brute-Force SSH
🇺🇸 TPI-Abuse	2025-12-09 22:08:41 (9 months ago)	(mod_security) mod_security (id:210730) triggered by 218.237.115.132 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 218.237.115.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 09 17:08:36.790028 2025] [security2:error] [pid 12529:tid 12529] [client 218.237.115.132:41732] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|192.64.150.54:443\|F\|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "192.64.150.54"] [uri "/vpns/cfg/smb.conf"] [unique_id "aTid5GBF6XgJ_yB9G_FKaAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 sefinek.net	2025-12-03 07:01:23 (9 months ago)	Triggered Cloudflare WAF (firewallCustom) from KR. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from KR. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/89.0.4447.51 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇮🇩 Burayot	2025-11-04 18:48:26 (10 months ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 218.237.115.132 (KR/South Korea/-): ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 218.237.115.132 (KR/South Korea/-): 1 in the last 3600 secs show less	Web App Attack
🇩🇪 grassau.com	2025-08-06 14:37:47 (1 year ago)	(sshd) Failed SSH login from 218.237.115.132 (KR/South Korea/-)	Brute-Force SSH
🇵🇱 DataDream Sentinel	2025-06-12 07:41:17 (1 year ago)	2025-06-12T09:41:14.291817Node1-AMD sshd[3586756]: pam_unix(sshd:auth): authentication failure; logn ... show more 2025-06-12T09:41:14.291817Node1-AMD sshd[3586756]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.237.115.132 user=root 2025-06-12T09:41:17.124254Node1-AMD sshd[3586756]: Failed password for root from 218.237.115.132 port 44298 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 211.251.245.88

🇺🇸 147.185.132.241

🇧🇬 109.160.32.201

🇧🇬 109.160.32.36

🇰🇿 95.57.207.100

🇷🇴 80.94.92.55

🇳🇱 45.148.10.157

🇨🇳 36.20.126.21

🇨🇴 2800:484:bf8b:3100:3945:74d3:af52:c02f

🇨🇳 202.103.157.115

🇺🇸 172.236.96.75

🇭🇰 150.5.145.203

🇺🇸 129.121.123.80

🇻🇳 119.15.169.38

🇧🇬 79.124.49.90

🇮🇳 45.251.49.206

🇧🇪 34.62.116.145

🇬🇷 2.86.221.198

🇳🇱 193.47.62.69

🇷🇴 172.120.166.194