This IP address has been reported a total of
204
times from
155 distinct
sources.
118.104.139.204 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 49
reports;
United States of America
with 38
reports;
France
with 18
reports.
The most common categories in these recent reports were:
Brute-Force
188
times;
SSH
187
times;
Port Scan
6
times;
Hacking
5
times;
Web App Attack
4
times;
Other
4
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-10-21T07:43:05.183050+00:00 de-fra2-mpio1 sshd[116030]: Invalid user proxyuser from 118.104.139 ...
show more2026-10-21T07:43:05.183050+00:00 de-fra2-mpio1 sshd[116030]: Invalid user proxyuser from 118.104.139.204 port 54978
2026-10-21T07:45:48.038970+00:00 de-fra2-mpio1 sshd[116088]: Invalid user zxl from 118.104.139.204 port 51384
2026-10-21T07:47:04.292398+00:00 de-fra2-mpio1 sshd[116159]: Invalid user smbuser from 118.104.139.204 port 54886
...
show less
Oct 21 13:09:45 NL04-VM-AMS sshd[27035]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ...
show moreOct 21 13:09:45 NL04-VM-AMS sshd[27035]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.104.139.204
Oct 21 13:09:47 NL04-VM-AMS sshd[27035]: Failed password for invalid user proxyuser from 118.104.139.204 port 47694 ssh2
Oct 21 13:15:18 NL04-VM-AMS sshd[27215]: Invalid user zxl from 118.104.139.204 port 40492
...
show less
SSH brute-force detected: 18 failed login attempts in the last 1 hour.
Brute-Force
SSH
Anonymous
2026-10-21T08:39:52.131844+02:00 mail.chill.at sshd[428226]: Invalid user kenji from 118.104.139.204 ...
show more2026-10-21T08:39:52.131844+02:00 mail.chill.at sshd[428226]: Invalid user kenji from 118.104.139.204 port 55172
2026-10-21T08:39:52.137851+02:00 mail.chill.at sshd[428226]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.104.139.204
2026-10-21T08:39:54.235117+02:00 mail.chill.at sshd[428226]: Failed password for invalid user kenji from 118.104.139.204 port 55172 ssh2
2026-10-21T08:41:12.862232+02:00 mail.chill.at sshd[428340]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.104.139.204 user=root
2026-10-21T08:41:14.610973+02:00 mail.chill.at sshd[428340]: Failed password for root from 118.104.139.204 port 35078 ssh2
show less
2026-10-21T10:03:02.583322+05:00 agroindustriylv.hlab.kz sshd[37171]: Invalid user michael from 118. ...
show more2026-10-21T10:03:02.583322+05:00 agroindustriylv.hlab.kz sshd[37171]: Invalid user michael from 118.104.139.204 port 57348
2026-10-21T10:04:26.851052+05:00 agroindustriylv.hlab.kz sshd[37192]: Invalid user peter from 118.104.139.204 port 45456
...
show less
2026-10-21T04:21:25.743828+00:00 edge-eqx-syd03.int.pdx.net.uk sshd-session[1816101]: Invalid user t ...
show more2026-10-21T04:21:25.743828+00:00 edge-eqx-syd03.int.pdx.net.uk sshd-session[1816101]: Invalid user tigergraph from 118.104.139.204 port 44258
2026-10-21T04:24:43.888157+00:00 edge-eqx-syd03.int.pdx.net.uk sshd-session[1823242]: Invalid user add from 118.104.139.204 port 41596
2026-10-21T04:30:00.223012+00:00 edge-eqx-syd03.int.pdx.net.uk sshd-session[1834415]: Invalid user alice from 118.104.139.204 port 57760
...
show less
NL05-RN-AMS.vps.992969.xyz: SSH Brute Force from 118.104.139.204 at 2026-10-21 09:56:24 IST
Brute-Force
SSH
Anonymous
2026-10-21T06:22:25.271451+02:00 hvs sshd-session[42615]: Invalid user tigergraph from 118.104.139.2 ...
show more2026-10-21T06:22:25.271451+02:00 hvs sshd-session[42615]: Invalid user tigergraph from 118.104.139.204 port 40010
2026-10-21T06:22:25.532060+02:00 hvs sshd-session[42615]: Disconnected from invalid user tigergraph 118.104.139.204 port 40010 [preauth]
2026-10-21T06:24:53.883685+02:00 hvs sshd-session[42634]: Invalid user add from 118.104.139.204 port 58792
2026-10-21T06:24:54.144740+02:00 hvs sshd-session[42634]: Disconnected from invalid user add 118.104.139.204 port 58792 [preauth]
2026-10-21T06:26:17.632027+02:00 hvs sshd-session[42695]: Disconnected from authenticating user root 118.104.139.204 port 51958 [preauth]
...
show less
SSH scanning: repeated logins with invalid usernames against a key-only server. Reported by fail2ban ...
show moreSSH scanning: repeated logins with invalid usernames against a key-only server. Reported by fail2ban.
show less
2026-10-21T05:46:10.017952 asociados1 sshd[3692000]: Invalid user traccar from 118.104.139.204 port ...
show more2026-10-21T05:46:10.017952 asociados1 sshd[3692000]: Invalid user traccar from 118.104.139.204 port 35650
2026-10-21T05:51:09.220102 asociados1 sshd[3693126]: Invalid user oneadmin from 118.104.139.204 port 44182
2026-10-21T05:53:50.515603 asociados1 sshd[3693543]: Invalid user user from 118.104.139.204 port 54340
...
show less
