JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 118.26.136.203

118.26.136.203 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 100%: ?

100%

ISP	Beijing Guantao High Tech Co. Ltd.
Usage Type	Fixed Line ISP
ASN	AS4847
Domain Name	cnispgroup.com
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 118.26.136.203

Whois 118.26.136.203

IP Abuse Reports for 118.26.136.203:

This IP address has been reported a total of 20 times from 15 distinct sources. 118.26.136.203 was first reported on July 12th 2026, and the most recent report was 33 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 Dario B.	2026-07-13 08:17:42 (33 minutes ago)	DATE:2026-07-13 10:17:42, IP:118.26.136.203, PORT:ssh SSH brute force auth (docker-dc)	Brute-Force SSH
🇩🇪 NetWatch	2026-07-13 06:20:03 (2 hours ago)	The IP 118.26.136.203 tried multiple SSH_BRUTE_FORCE logins	Brute-Force
🇮🇹 Dario B.	2026-07-13 06:08:53 (2 hours ago)	DATE:2026-07-13 08:08:53, IP:118.26.136.203, PORT:ssh SSH brute force auth (docker-dc)	Brute-Force SSH
🇸🇬 itachi1706	2026-07-13 01:37:55 (7 hours ago)	2026-07-13T01:37:55.098235+00:00 sg-jumphost-server sshd[2257295]: Invalid user tttt from 118.26.136 ... show more 2026-07-13T01:37:55.098235+00:00 sg-jumphost-server sshd[2257295]: Invalid user tttt from 118.26.136.203 port 50576 2026-07-13T01:37:55.427526+00:00 sg-jumphost-server sshd[2257295]: Disconnected from invalid user tttt 118.26.136.203 port 50576 [preauth] ... show less	Brute-Force SSH
🇭🇺 sRichy	2026-07-13 00:49:25 (8 hours ago)	Jul 13 02:14:58 teamcity sshd[2719212]: Invalid user wang from 118.26.136.203 port 48771 Jul 13 02:4 ... show more Jul 13 02:14:58 teamcity sshd[2719212]: Invalid user wang from 118.26.136.203 port 48771 Jul 13 02:41:49 teamcity sshd[2730687]: Invalid user boot from 118.26.136.203 port 2460 Jul 13 02:49:24 teamcity sshd[2734188]: Invalid user openerp from 118.26.136.203 port 16611 ... show less	Brute-Force SSH
🇸🇬 itachi1706	2026-07-13 00:45:02 (8 hours ago)	2026-07-13T00:37:44.591470+00:00 sg-jumphost-server sshd[2255801]: Invalid user admin from 118.26.13 ... show more 2026-07-13T00:37:44.591470+00:00 sg-jumphost-server sshd[2255801]: Invalid user admin from 118.26.136.203 port 20501 2026-07-13T00:37:44.927011+00:00 sg-jumphost-server sshd[2255801]: Disconnected from invalid user admin 118.26.136.203 port 20501 [preauth] 2026-07-13T00:45:01.875490+00:00 sg-jumphost-server sshd[2255988]: Disconnected from authenticating user root 118.26.136.203 port 34614 [preauth] ... show less	Brute-Force SSH
🇵🇹 WebTejo	2026-07-13 00:40:19 (8 hours ago)	Detected multiple authentication failures and invalid user attempts from IP address 118.26.136.203 o ... show more Detected multiple authentication failures and invalid user attempts from IP address 118.26.136.203 on [PT] SP01 Node show less	Brute-Force SSH
🇦🇺 marshy.com.au	2026-07-12 22:53:35 (9 hours ago)	(sshd) Failed SSH login from 118.26.136.203 (CN/China/-): 5 in the last 3600 secs; Ports: ; Directi ... show more (sshd) Failed SSH login from 118.26.136.203 (CN/China/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SSHD; Logs: Jul 13 08:17:21 ded01 sshd[253119]: Invalid user scan from 118.26.136.203 port 39939 Jul 13 08:17:22 ded01 sshd[253119]: Failed password for invalid user scan from 118.26.136.203 port 39939 ssh2 Jul 13 08:42:19 ded01 sshd[272012]: Invalid user mahdi from 118.26.136.203 port 58990 Jul 13 08:42:21 ded01 sshd[272012]: Failed password for invalid user mahdi from 118.26.136.203 port 58990 ssh2 Jul 13 08:53:28 ded01 sshd[279997]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.26.136.203 user=root show less	Port Scan
🇲🇳 Public CSIRT/CC of Mongolia	2026-07-12 18:04:13 (14 hours ago)	Honeypot hit: Brute-force attack detected on 22/SSH • Credential used: root:Aaaaaaa1 • Number of log ... show more Honeypot hit: Brute-force attack detected on 22/SSH • Credential used: root:Aaaaaaa1 • Number of login attempts: 1 • Client: SSH-2.0-libssh_0.9.6 show less	Hacking SSH
🇩🇪 ipcop.net	2026-07-12 16:47:46 (16 hours ago)	2026-07-12T18:39:34.312755+02:00 rt-cs-432176.rt.pbx-host.com sshd-session[2090689]: Disconnected fr ... show more 2026-07-12T18:39:34.312755+02:00 rt-cs-432176.rt.pbx-host.com sshd-session[2090689]: Disconnected from authenticating user root 118.26.136.203 port 1107 [preauth] 2026-07-12T18:46:19.826980+02:00 rt-cs-432176.rt.pbx-host.com sshd-session[2092363]: Invalid user grass from 118.26.136.203 port 53535 2026-07-12T18:46:20.069051+02:00 rt-cs-432176.rt.pbx-host.com sshd-session[2092363]: Disconnected from invalid user grass 118.26.136.203 port 53535 [preauth] 2026-07-12T18:47:45.401337+02:00 rt-cs-432176.rt.pbx-host.com sshd-session[2092689]: Invalid user info from 118.26.136.203 port 6962 2026-07-12T18:47:45.573590+02:00 rt-cs-432176.rt.pbx-host.com sshd-session[2092689]: Disconnected from invalid user info 118.26.136.203 port 6962 [preauth] show less	Brute-Force
🇨🇿 lp	2026-07-12 15:18:44 (17 hours ago)	SSH Brute force: 1 attempts were recorded from 118.26.136.203 2026-07-12T16:49:52+02:00 Invalid user ... show more SSH Brute force: 1 attempts were recorded from 118.26.136.203 2026-07-12T16:49:52+02:00 Invalid user zs from 118.26.136.203 port 45452 show less	Brute-Force SSH
🇩🇪 gcl046	2026-07-12 14:08:07 (18 hours ago)	2026-07-12T15:55:34.634468+02:00 zg0iiuob sshd-session[3117598]: Disconnected from authenticating us ... show more 2026-07-12T15:55:34.634468+02:00 zg0iiuob sshd-session[3117598]: Disconnected from authenticating user root 118.26.136.203 port 19498 [preauth] 2026-07-12T15:59:50.856136+02:00 zg0iiuob sshd-session[3117857]: Invalid user roy from 118.26.136.203 port 59482 2026-07-12T15:59:51.056149+02:00 zg0iiuob sshd-session[3117857]: Disconnected from invalid user roy 118.26.136.203 port 59482 [preauth] 2026-07-12T16:05:37.631666+02:00 zg0iiuob sshd-session[3118203]: Disconnected from authenticating user root 118.26.136.203 port 55453 [preauth] 2026-07-12T16:08:06.253408+02:00 zg0iiuob sshd-session[3118331]: Invalid user rain from 118.26.136.203 port 11484 ... show less	Brute-Force SSH
🇩🇪 gcl046	2026-07-12 13:51:46 (18 hours ago)	2026-07-12T15:43:28.782196+02:00 zg0iiuob sshd-session[3116893]: Disconnected from authenticating us ... show more 2026-07-12T15:43:28.782196+02:00 zg0iiuob sshd-session[3116893]: Disconnected from authenticating user root 118.26.136.203 port 27590 [preauth] 2026-07-12T15:45:59.651768+02:00 zg0iiuob sshd-session[3117042]: Invalid user dmdba from 118.26.136.203 port 47626 2026-07-12T15:45:59.829338+02:00 zg0iiuob sshd-session[3117042]: Disconnected from invalid user dmdba 118.26.136.203 port 47626 [preauth] 2026-07-12T15:51:45.652033+02:00 zg0iiuob sshd-session[3117389]: Invalid user admin from 118.26.136.203 port 43535 2026-07-12T15:51:45.801737+02:00 zg0iiuob sshd-session[3117389]: Disconnected from invalid user admin 118.26.136.203 port 43535 [preauth] ... show less	Brute-Force SSH
🇩🇪 gcl046	2026-07-12 13:20:57 (19 hours ago)	2026-07-12T15:08:13.720402+02:00 zg0iiuob sshd-session[3114799]: Invalid user testuser from 118.26.1 ... show more 2026-07-12T15:08:13.720402+02:00 zg0iiuob sshd-session[3114799]: Invalid user testuser from 118.26.136.203 port 7653 2026-07-12T15:08:13.877934+02:00 zg0iiuob sshd-session[3114799]: Disconnected from invalid user testuser 118.26.136.203 port 7653 [preauth] 2026-07-12T15:14:07.669508+02:00 zg0iiuob sshd-session[3115145]: Invalid user mailuser from 118.26.136.203 port 3608 2026-07-12T15:14:07.827837+02:00 zg0iiuob sshd-session[3115145]: Disconnected from invalid user mailuser 118.26.136.203 port 3608 [preauth] 2026-07-12T15:20:57.194693+02:00 zg0iiuob sshd-session[3115528]: Invalid user rana from 118.26.136.203 port 63660 ... show less	Brute-Force SSH
🇮🇹 mediarama.com	2026-07-12 13:12:58 (19 hours ago)	Banned by Fail2Ban	Brute-Force SSH

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2001:470:1:fb5::1a8

🇨🇳 125.122.36.17

🇷🇴 80.94.92.132

🇪🇸 79.155.227.229

🇺🇸 66.132.186.213

🇧🇷 45.205.1.241

🇬🇪 31.192.58.176

🇺🇸 20.49.0.17

🇨🇴 152.200.205.180

🇺🇸 91.230.168.184

🇨🇦 85.217.149.66

🇵🇱 77.236.15.128

🇰🇷 222.105.132.122

🇵🇭 210.5.117.238

🇧🇷 187.40.215.162

🇨🇳 175.30.48.117

🇰🇷 115.89.243.42

🇺🇸 107.167.34.125

🇫🇷 88.164.134.153

🇫🇷 85.217.140.45