118.26.36.242
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS135377
- Domain Name
- ucloud.cn
- Country
- 🇭🇰 Hong Kong
- City
- Hong Kong
No reports in the last 60 days
118.26.36.242 has been reported 315 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
315 from
25 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇨🇦 Luhte |
Unsolicited TCP connection from 118.26.36.242 to port 0 at 2026-06-11T19:23:15Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring.
|
Port Scan Hacking | |
| 🇧🇷 opastorello |
Unsolicited RDP (3389/tcp) connection attempts / brute-force scanning detected by perimeter firewall (UniFi). Automated report.
|
Port Scan Brute-Force Hacking | |
| 🇺🇸 Neosmith20 |
Knock-Knock honeypot brute-force: RDP (323 total hits)
|
Brute-Force | |
| 🇦🇺 dyln |
Dyls honeypot brute-force: RDP (412 total hits)
|
Brute-Force | |
| 🇨🇭 TOCE |
7 hits seen on 2026-06-10, ports 3389 (RDP) on a honeypot from www.toce.ch
|
Brute-Force | |
| 🇺🇸 ShadowWhisperer |
intrusion - remote [vnc, remote]
|
Brute-Force Hacking | |
| 🇦🇺 dyln |
Dyls honeypot brute-force: RDP (402 total hits)
|
Brute-Force | |
| 🇩🇪 Luhte |
Unsolicited TCP connection from 118.26.36.242 to port 0 at 2026-06-10T01:24:59Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring.
|
Port Scan Hacking | |
| 🇺🇸 wristhulk |
Honeypot: RDP brute-force on OpenCanary honeypot (port 3389). Username: '173'.
|
Brute-Force | |
| 🇺🇸 Neosmith20 |
Knock-Knock honeypot brute-force: RDP (320 total hits)
|
Brute-Force | |
| 🇺🇸 sargetun |
Honeypot: RDP probe on port 3389 at 2026-06-10 00:28:02.674383. Automated report from VPS honeypot.
|
Port Scan | |
| 🇨🇦 alexbfr |
Fail2Ban Report, custom-honeypot jail: Automated honeypot detection.
|
Hacking | |
| 🇨🇭 TOCE |
19 hits seen on 2026-06-09, ports 3389 (RDP) on a honeypot from www.toce.ch
|
Brute-Force | |
| 🇺🇸 3rdKey |
OpenCanary honeypot hit on port 3389 (no legitimate service runs there); logtype 14001. Automated report.
|
Port Scan Brute-Force Exploited Host | |
| 🇺🇸 sargetun |
Honeypot: RDP probe on port 3389 at 2026-06-09 04:44:26.620721. Automated report from VPS honeypot.
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown