Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Seoul

Region: Seoul Special City

Country: South Korea

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '118.194.248.0 - 118.194.249.255'

% Abuse contact for '118.194.248.0 - 118.194.249.255' is 'hegui@ucloud.cn'

inetnum:        118.194.248.0 - 118.194.249.255
netname:        UCLOUD-KR
descr:          UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
country:        KR
admin-c:        UITH2-AP
tech-c:         UITH2-AP
abuse-c:        AU164-AP
status:         ALLOCATED NON-PORTABLE
mnt-by:         MAINT-UCLOUD-HK
mnt-irt:        IRT-UCLOUD-HK
last-modified:  2023-03-09T08:26:08Z
source:         APNIC

irt:            IRT-UCLOUD-HK
address:        FLAT/RM 603 6/F, LAWS COMMERCIAL PLAZA, 788 CHEUNG SHA WAN ROAD, KL,, Hong Kong
e-mail:         pn-wan@ucloud.cn
abuse-mailbox:  hegui@ucloud.cn
admin-c:        UITH2-AP
tech-c:         UITH2-AP
auth:           # Filtered
remarks:        pn-wan@ucloud.cn was validated on 2026-02-27
remarks:        hegui@ucloud.cn was validated on 2026-02-27
mnt-by:         MAINT-UCLOUD-HK
last-modified:  2026-02-27T02:07:48Z
source:         APNIC

role:           ABUSE UCLOUDHK
country:        ZZ
address:        FLAT/RM 603 6/F, LAWS COMMERCIAL PLAZA, 788 CHEUNG SHA WAN ROAD, KL,, Hong Kong
phone:          +000000000
e-mail:         pn-wan@ucloud.cn
admin-c:        UITH2-AP
tech-c:         UITH2-AP
nic-hdl:        AU164-AP
remarks:        Generated from irt object IRT-UCLOUD-HK
remarks:        pn-wan@ucloud.cn was validated on 2026-02-27
remarks:        hegui@ucloud.cn was validated on 2026-02-27
abuse-mailbox:  hegui@ucloud.cn
mnt-by:         APNIC-ABUSE
last-modified:  2026-02-27T02:08:22Z
source:         APNIC

role:           UCLOUD INFORMATION TECHNOLOGY HK LIMITED
address:        FLAT/RM 603 6/F, LAWS COMMERCIAL PLAZA, 788 CHEUNG SHA WAN ROAD, KL,, Hong Kong
country:        HK
phone:          +000000000
e-mail:         u-ipnic@ucloud.cn
admin-c:        UITH2-AP
tech-c:         UITH2-AP
nic-hdl:        UITH2-AP
notify:         hegui@ucloud.cn
mnt-by:         MAINT-UCLOUD-HK
last-modified:  2022-05-16T03:54:14Z
source:         APNIC

% Information related to '118.194.249.0/24AS135377'

route:          118.194.249.0/24
origin:         AS135377
descr:          UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
                FLAT/RM 603 6/F
                LAWS COMMERCIAL PLAZA
                788 CHEUNG SHA WAN ROAD, KL,
mnt-by:         MAINT-UCLOUD-HK
last-modified:  2023-03-10T09:41:44Z
country:        KR
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU4)
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 118.194.249.72
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48798
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;118.194.249.72.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026042201 1800 900 604800 86400

;; Query time: 30 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Apr 23 04:00:02 CST 2026
;; MSG SIZE  rcvd: 107
Host info
Host 72.249.194.118.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 72.249.194.118.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
219.135.194.77 attack
Nov 21 07:24:20 mail postfix/postscreen[6365]: DNSBL rank 7 for [219.135.194.77]:37193
...
2019-11-21 19:19:24
111.204.164.82 attack
Invalid user infra3 from 111.204.164.82 port 41948
2019-11-21 19:14:32
172.104.51.17 attack
172.104.51.17 was recorded 9 times by 9 hosts attempting to connect to the following ports: 19. Incident counter (4h, 24h, all-time): 9, 21, 21
2019-11-21 19:27:33
222.186.175.220 attackbots
Nov 21 11:51:20 SilenceServices sshd[24337]: Failed password for root from 222.186.175.220 port 45150 ssh2
Nov 21 11:51:23 SilenceServices sshd[24337]: Failed password for root from 222.186.175.220 port 45150 ssh2
Nov 21 11:51:26 SilenceServices sshd[24337]: Failed password for root from 222.186.175.220 port 45150 ssh2
Nov 21 11:51:29 SilenceServices sshd[24337]: Failed password for root from 222.186.175.220 port 45150 ssh2
2019-11-21 19:00:25
157.33.191.134 attack
Port scan on 2 port(s): 445 65529
2019-11-21 19:10:23
125.209.85.202 attackspambots
Port scan: Attack repeated for 24 hours
2019-11-21 19:28:27
201.211.212.240 attackspambots
Port 1433 Scan
2019-11-21 19:25:25
63.80.184.112 attack
Nov 21 07:23:30  exim[25103]: 2019-11-21 07:23:30 1iXfsF-0006Wt-0x H=muscle.sapuxfiori.com (muscle.projectxpresso.com) [63.80.184.112] F= rejected after DATA: This message scored 103.0 spam points.
2019-11-21 19:30:46
80.211.152.136 attackbotsspam
Nov 21 10:50:04 server sshd\[509\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.152.136  user=mysql
Nov 21 10:50:06 server sshd\[509\]: Failed password for mysql from 80.211.152.136 port 60154 ssh2
Nov 21 10:54:01 server sshd\[15783\]: User root from 80.211.152.136 not allowed because listed in DenyUsers
Nov 21 10:54:01 server sshd\[15783\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.152.136  user=root
Nov 21 10:54:03 server sshd\[15783\]: Failed password for invalid user root from 80.211.152.136 port 41156 ssh2
2019-11-21 19:22:58
130.180.66.98 attack
Nov 21 08:23:57 sauna sshd[133002]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=130.180.66.98
Nov 21 08:24:00 sauna sshd[133002]: Failed password for invalid user franciska from 130.180.66.98 port 50152 ssh2
...
2019-11-21 19:33:14
82.125.149.167 attackbotsspam
$f2bV_matches
2019-11-21 19:15:19
49.206.31.144 attack
Nov 20 21:29:52 web1 sshd\[25073\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.206.31.144  user=root
Nov 20 21:29:54 web1 sshd\[25073\]: Failed password for root from 49.206.31.144 port 39210 ssh2
Nov 20 21:34:06 web1 sshd\[25472\]: Invalid user plusone from 49.206.31.144
Nov 20 21:34:06 web1 sshd\[25472\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.206.31.144
Nov 20 21:34:08 web1 sshd\[25472\]: Failed password for invalid user plusone from 49.206.31.144 port 48214 ssh2
2019-11-21 19:23:18
59.11.233.160 attack
2019-11-21T09:17:21.500630abusebot-2.cloudsearch.cf sshd\[1932\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.11.233.160  user=root
2019-11-21 19:17:03
184.105.139.94 attackspam
Honeypot hit.
2019-11-21 19:20:41
49.88.112.112 attackbots
Nov 21 11:04:59 work-partkepr sshd\[32549\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.112  user=root
Nov 21 11:05:01 work-partkepr sshd\[32549\]: Failed password for root from 49.88.112.112 port 26530 ssh2
...
2019-11-21 19:14:19

Recently Reported IPs

119.178.105.178 109.162.251.220 110.78.158.120 2606:4700:10::6814:7058
2606:4700:10::6816:1188 183.145.68.54 8.219.191.219 43.98.203.243
14.213.49.108 138.68.246.32 81.71.34.249 160.119.76.24
67.210.97.34 54.147.211.146 110.77.187.94 2606:4700:10::6814:9880
2606:4700:10::6816:357 2606:4700:10::ac43:599 2606:4700:10::6814:6021 120.55.64.150