This IP address has been reported a total of
135
times from
121 distinct
sources.
104.199.18.55 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 27
reports;
Germany
with 25
reports;
France
with 10
reports.
The most common categories in these recent reports were:
SSH
121
times;
Brute-Force
111
times;
Port Scan
17
times;
Hacking
11
times;
Exploited Host
5
times;
Other
5
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-10-26T09:11:58.114103+02:00 canterlot.jotoma.de sshd[1572823]: Invalid user admin from 104.199. ...
show more2026-10-26T09:11:58.114103+02:00 canterlot.jotoma.de sshd[1572823]: Invalid user admin from 104.199.18.55 port 25798
2026-10-26T09:11:58.132879+02:00 canterlot.jotoma.de sshd[1572823]: Connection closed by invalid user admin 104.199.18.55 port 25798 [preauth]
2026-10-26T09:12:03.302714+02:00 canterlot.jotoma.de sshd[1572821]: Connection closed by 104.199.18.55 port 25788 [preauth]
...
show less
104.199.18.55 fell into Endlessh tarpit; 0/32 total connections are currently still open. Total time ...
show more104.199.18.55 fell into Endlessh tarpit; 0/32 total connections are currently still open. Total time wasted: 2m 24s. Total bytes sent by tarpit: 13.00KiB. Report generated by Endlessh Report Generator v1.2.3
show less
2026-10-26T07:56:55.033993+01:00 node2 sshd[4183186]: pam_unix(sshd:auth): authentication failure; l ...
show more2026-10-26T07:56:55.033993+01:00 node2 sshd[4183186]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.199.18.55
2026-10-26T07:56:57.314590+01:00 node2 sshd[4183186]: Failed password for invalid user admin from 104.199.18.55 port 12124 ssh2
2026-10-26T07:56:59.514892+01:00 node2 sshd[4183186]: error: PAM: Authentication failure for illegal user admin from 104.199.18.55
...
show less
2026-10-26T06:56:21.840371+00:00 ktj-nc sshd[1015415]: Invalid user admin from 104.199.18.55 port 21 ...
show more2026-10-26T06:56:21.840371+00:00 ktj-nc sshd[1015415]: Invalid user admin from 104.199.18.55 port 21918
2026-10-26T06:56:21.979608+00:00 ktj-nc sshd[1015415]: Connection closed by invalid user admin 104.199.18.55 port 21918 [preauth]
...
show less
2026-10-26T07:51:51.328345+01:00 [redacted] sshd[161429]: Invalid user admin from 104.199.18.55 port ...
show more2026-10-26T07:51:51.328345+01:00 [redacted] sshd[161429]: Invalid user admin from 104.199.18.55 port 11396
2026-10-26T07:51:51.349825+01:00 [redacted] sshd[161429]: Failed password for invalid user admin from 1
...
show less
1 SSH/Telnet login attempts in the last 24h. Usernames tried: admin. (automated report from an SSH/D ...
show more1 SSH/Telnet login attempts in the last 24h. Usernames tried: admin. (automated report from an SSH/Docker honeypot)
show less
2026-10-26T06:42:30.277828+00:00 sg-jumphost-server sshd[4027497]: Invalid user admin from 104.199.1 ...
show more2026-10-26T06:42:30.277828+00:00 sg-jumphost-server sshd[4027497]: Invalid user admin from 104.199.18.55 port 55658
2026-10-26T06:42:30.444609+00:00 sg-jumphost-server sshd[4027497]: Connection closed by invalid user admin 104.199.18.55 port 55658 [preauth]
...
show less
Automated SSH brute-force attack detected. The IP repeatedly attempted to authenticate to port 22 us ...
show moreAutomated SSH brute-force attack detected. The IP repeatedly attempted to authenticate to port 22 using multiple usernames and password guesses within a short timeframe.
show less
