Log in to view charts and search reports for this IP.
Log In
No reports in the last 60 days
109.120.136.104 has been reported 14
times. The most recent report is from
.
The full history is preserved below and remains searchable. A
0% score reflects the absence of recent activity, but
this is not a guarantee that earlier reports were invalid. Abuse confidence score decays,
naturally, over time, when the abusive activity stops.
IP Abuse Reports for 109.120.136.104
This IP address has been reported a total of
14
times from
9 distinct
sources.
109.120.136.104 was first reported on
, and the most recent report was
.
Attempted brute force login to web vpn 208 time(s); last attempt for 2025.05.10 is noted in report t ...
show moreAttempted brute force login to web vpn 208 time(s); last attempt for 2025.05.10 is noted in report timestamp
show less
Hacking
Brute-Force
Anonymous
Attempted brute force login to web vpn 384 time(s); last attempt for 2025.05.09 is noted in report t ...
show moreAttempted brute force login to web vpn 384 time(s); last attempt for 2025.05.09 is noted in report timestamp
show less
Hacking
Brute-Force
Anonymous
Attempted brute force login to web vpn 763 time(s); last attempt for 2025.04.29 is noted in report t ...
show moreAttempted brute force login to web vpn 763 time(s); last attempt for 2025.04.29 is noted in report timestamp
show less
Hacking
Brute-Force
Anonymous
Attempted brute force login to web vpn 816 time(s); last attempt for 2025.04.28 is noted in report t ...
show moreAttempted brute force login to web vpn 816 time(s); last attempt for 2025.04.28 is noted in report timestamp
show less
Hacking
Brute-Force
Anonymous
Attempted brute force login to web vpn 152 time(s); last attempt for 2025.04.27 is noted in report t ...
show moreAttempted brute force login to web vpn 152 time(s); last attempt for 2025.04.27 is noted in report timestamp
show less
2025-04-23T11:35:47.109048-06:00 yms sshd[2488457]: banner exchange: Connection from 109.120.136.104 ...
show more2025-04-23T11:35:47.109048-06:00 yms sshd[2488457]: banner exchange: Connection from 109.120.136.104 port 5762: invalid format
2025-04-23T11:35:47.521350-06:00 yms sshd[2488482]: banner exchange: Connection from 109.120.136.104 port 5898: invalid format
...
show less
2025-04-23T07:34:09.570450-06:00 yms sshd[831313]: banner exchange: Connection from 109.120.136.104 ...
show more2025-04-23T07:34:09.570450-06:00 yms sshd[831313]: banner exchange: Connection from 109.120.136.104 port 42232: invalid format
2025-04-23T07:34:11.015862-06:00 yms sshd[831650]: banner exchange: Connection from 109.120.136.104 port 6605: invalid format
2025-04-23T07:34:13.442039-06:00 yms sshd[831896]: banner exchange: Connection from 109.120.136.104 port 7092: invalid format
...
show less
109.120.136.104 - - [22/Apr/2025:19:57:44 -0600] "GET /+CSCOE+/logon.html HTTP/1.1" 403 3087 "-" "Mo ...
show more109.120.136.104 - - [22/Apr/2025:19:57:44 -0600] "GET /+CSCOE+/logon.html HTTP/1.1" 403 3087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203"
Unauthorised access direct to IP address bypassing DNS. Probing for known web app vulnerabilities.
show less