Notable Threat
IP 118.194.249.186 rated 8/10 from 46 verified reports.
Multiple security incidents attributed to this IP. Confidence: 99%.
More threatening than 90% of monitored IPs
IP Address
118.194.249.186
IPv4
Public
KR
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
KR
Location
UCLOUD INFORMATION TECHNO...
ASN 135377
46
Reports
Honeypot
Data Source
Threat Categories
Brute-Force
30
SSH
30
Technical Details
Brute-force attacks systematically attempt password combinations against authentication systems.
Recommended Mitigations
Implement rate limiting, account lockout policies, multi-factor authentication, and fail2ban.
Behavioral Analysis
Activity Pattern:
Declining
Activity has decreased recently, suggesting remediation or threat actor migration.
First Observed
10. September 2026
Last Activity
25. September 2026
Recent (7 days)
1 incidents
Reputable Network
This IP is hosted on a network (ASN 135377) with generally good reputation. The ISP UCLOUD INFORMATION TECHNOLOGY HK LIMITED maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement appropriate security controls.
Continue monitoring the positive trend.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
3/10
Low
Confidence Score
99%
Verified
Confidence History
10. Sep 2026 - 25. Sep 2026
99%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot x3 | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 118.194.249.186
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
KR
- ASN
- AS135377
- ISP
- UCLOUD INFORMATION TECHNOLOGY HK LIMITED
DNS Information
- Reverse DNS
- spqwt.site
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 46
- First Reported
- 20 Mar 2026
- Last Reported
- 25 Sep 2026, 11:51
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS135377
UCLOUD INFORMATION TECHNOLOGY HK LIMITED
NG
Network Threat Assessment
1/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
863
Total IPs Monitored
42,993
Total Reports
49.8
Reports per IP
Network Context
This IP address belongs to UCLOUD INFORMATION TECHNOLOGY HK LIMITED (AS135377), which manages 863 IP addresses in our monitoring system. Out of these, 42,993 have been reported for suspicious activities, resulting in a network-wide threat level of 1/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
90
%
Global Threat Ranking
This IP is more threatening than 90% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 804,183 reported IPs worldwide
Threat Level
8/10
avg: 6.3
+
Total Reports
46
avg: 9
++
Network Comparison
Compared against 1,992 IPs in ASN 135377
Threat Level
8/10
network avg: 8.9
=
Total Reports
46
network avg: 44
=
Network UCLOUD INFORMATION TECHNOLOGY HK LIMITED has overall threat level 1/10
Geographic Comparison
Compared against 4,609 IPs in KR
Threat Level
8/10
country avg: 7.3
=
Total Reports
46
country avg: 12
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
10 Sep 2026
44 reports
Daily Average
1.5
reports/day
Most Active
Thursday
44 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Brute-Force
45
SSH
45
Hacking
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 07:00 with 7 reports
Weekly Activity
Geographic Threat Distribution
731,300 threat incidents tracked globally • Last 24h: 29,600 Logs
FEED
Top Threat Sources
-
01
United States142,896 19.5% -
02
Brazil110,628 15.1%
-
03
India81,691 11.2%
-
04
China44,644 6.1%
-
05
SC29,231 4%
-
06
Netherlands17,408 2.4%
-
07
Germany17,355 2.4%
-
08
Pakistan16,502 2.3%
-
09
Argentina16,179 2.2%
-
10
Colombia15,127 2.1%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.4/10
Avg Threat
95%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
152.32.199.115
10/10
Confidence
100%
Reports
16
Location
BR
BR
101.36.119.203
10/10
Confidence
100%
Reports
14
Location
HK
HK
152.32.171.73
8/10
Confidence
98%
Reports
14
Location
HK
HK
107.155.15.218
8/10
Confidence
97%
Reports
15
Location
JP
JP
123.58.219.26
8/10
Confidence
96%
Reports
21
Location
HK
HK
152.32.254.222
10/10
Confidence
96%
Reports
14
Location
HK
HK
128.14.237.120
10/10
Confidence
96%
Reports
12
Location
TW
TW
152.32.211.187
10/10
Confidence
96%
Reports
11
Location
HK
HK
152.32.233.237
10/10
Confidence
94%
Reports
27
Location
US
US
152.32.233.183
10/10
Confidence
94%
Reports
24
Location
US
US
165.154.162.128
10/10
Confidence
94%
Reports
23
Location
US
US
107.150.103.9
10/10
Confidence
94%
Reports
22
Location
US
US
165.154.163.20
10/10
Confidence
94%
Reports
22
Location
US
US
152.32.172.234
10/10
Confidence
94%
Reports
20
Location
HK
HK
107.150.105.214
10/10
Confidence
94%
Reports
19
Location
US
US
165.154.163.115
10/10
Confidence
94%
Reports
19
Location
US
US
45.249.247.109
7/10
Confidence
94%
Reports
18
Location
HK
HK
152.32.172.191
10/10
Confidence
94%
Reports
18
Location
HK
HK
101.36.127.131
7/10
Confidence
94%
Reports
17
Location
HK
HK
107.150.102.190
10/10
Confidence
94%
Reports
17
Location
US
US
IPs from the same subnet range, likely same network segment.
2
Related IPs
10/10
Avg Threat
59%
Avg Confidence
2
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
9.5/10
Avg Threat
98%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
49.247.138.161
10/10
Confidence
100%
Reports
19
ISP
SMILESERV
52.141.4.134
8/10
Confidence
100%
Reports
18
ISP
Microsoft Corpo...
20.196.195.74
8/10
Confidence
100%
Reports
18
ISP
Microsoft Corpo...
20.214.105.208
8/10
Confidence
100%
Reports
15
ISP
Microsoft Corpo...
118.39.219.45
10/10
Confidence
99%
Reports
20
ISP
Korea Telecom
219.250.188.143
10/10
Confidence
99%
Reports
15
ISP
SK Broadband Co...
121.148.71.200
10/10
Confidence
98%
Reports
37
ISP
Korea Telecom
211.220.197.170
10/10
Confidence
98%
Reports
24
ISP
Korea Telecom
149.174.58.60
8/10
Confidence
98%
Reports
13
ISP
PACKETHUB S.A.
14.53.119.248
10/10
Confidence
98%
Reports
12
ISP
Korea Telecom
185.227.152.135
10/10
Confidence
97%
Reports
17
ISP
Cloudie Limited
175.119.225.92
10/10
Confidence
96%
Reports
32
ISP
SK Broadband Co...
61.43.121.132
10/10
Confidence
96%
Reports
20
ISP
LG DACOM Corpor...
106.245.151.118
10/10
Confidence
96%
Reports
17
ISP
LG DACOM Corpor...
175.203.57.19
10/10
Confidence
95%
Reports
16
ISP
Korea Telecom
IPs with similar threat level and confidence scores.
15
Related IPs
9.2/10
Avg Threat
99%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
2.57.122.168
10/10
Confidence
99%
Reports
295
Location
RO
RO
2001:41d0:304:300::3de9
8/10
Confidence
99%
Reports
82
Location
FR
FR
188.166.95.31
10/10
Confidence
99%
Reports
81
Location
NL
NL
213.147.113.186
10/10
Confidence
99%
Reports
73
Location
HR
HR
51.222.85.30
8/10
Confidence
99%
Reports
73
Location
CA
CA
103.153.65.59
8/10
Confidence
99%
Reports
68
Location
VN
VN
103.162.1.80
8/10
Confidence
99%
Reports
45
Location
ID
ID
103.79.90.26
10/10
Confidence
99%
Reports
44
Location
ID
ID
103.20.219.5
10/10
Confidence
99%
Reports
43
Location
ID
ID
103.176.64.36
10/10
Confidence
99%
Reports
36
Location
IN
IN
103.121.25.101
10/10
Confidence
99%
Reports
35
Location
PK
PK
190.129.74.148
10/10
Confidence
99%
Reports
30
Location
BO
BO
102.130.193.150
8/10
Confidence
99%
Reports
30
Location
AO
AO
2a01:239:265:2100::1
8/10
Confidence
99%
Reports
29
Location
DE
DE
101.33.55.172
10/10
Confidence
99%
Reports
28
Location
SG
SG