Looking up IP
Check an IP Address, Domain Name, Subnet, or ASN
118.194.249.186 has a threat confidence score of 72%. This IP address from South Korea (AS135377, UCLOUD INFORMATION TECHNOLOGY HK LIMITED) has been observed in 26 honeypot sessions targeting SSH, TELNET protocols. First observed on February 15, 2026, most recently active March 28, 2026.
Identifies SSH session activity where the attacker executes uname -s -m to retrieve the operating system name and machine architecture for host fingerprinting and payload targeting.