152.32.128.245
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS135377
- Domain Name
- ucloud.cn
- Country
- 🇭🇰 Hong Kong
- City
- Hong Kong
No reports in the last 60 days
152.32.128.245 has been reported 73 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
73 from
47 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇦🇹 begou.dev |
[Threat Intelligence] Port Scanning and/or Unauthorized access -> TCP/3389
|
Port Scan | |
| 🇦🇺 dyln |
Dyls honeypot brute-force: RDP (146 total hits)
|
Brute-Force | |
| 🇦🇹 CTK |
RDP Brute-Force (Grieskirchen RZ2)
|
Brute-Force | |
| 🇩🇪 Lazentis |
Unauthorized access attempt to port 3389 (tcp)
|
Brute-Force SSH | |
| 🇬🇧 knock |
Knock-Knock honeypot brute-force: RDP (1 total hits)
|
Brute-Force | |
| 🇩🇪 kexol |
3389 port scanned
|
Port Scan | |
| 🇸🇬 drewf.ink |
[03:31] Port scanning. Port(s) scanned: TCP/3389
|
Port Scan | |
| 🇦🇹 CTK |
Customer Site (WELS SM)
|
Brute-Force | |
| 🇺🇸 donarev419 |
Connection to port 3389 with data transfer.
Data preview:
|
Port Scan Hacking | |
| 🇺🇸 3rdKey |
OpenCanary honeypot hit on port 3389 (no legitimate service runs there); logtype 14001. Automated report.
|
Port Scan Brute-Force Exploited Host | |
| 🇩🇪 Mailguard-FRD |
1780704080 - 06/06/2026 02:01:20 Host: 152.32.128.245/152.32.128.245 Port: 3389 TCP Blocked
...
|
Port Scan | |
| 🇺🇸 wristhulk |
Honeypot: RDP brute-force on OpenCanary honeypot (port 3389). Username: '173'.
|
Brute-Force | |
| 🇩🇪 kexol |
3389 port scanned
|
Port Scan | |
| 🇦🇺 dyln |
Dyls honeypot brute-force: RDP (144 total hits)
|
Brute-Force | |
| 🇫🇷 ✨ |
Rule : RDP
Rule: RDP
Event: RDP
UserAccount : Administrator
S-1-0-0 - - 0x0 S-1-0-0 Administrator 0xc000006d %#13 0xc000006a 3 NtLmSsp NTLM workstation - - 0 0x0 - 152.32.128.245 0
|
SSH Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown