This IP address has been reported a total of
1,436
times from
586 distinct
sources.
118.145.104.105 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Jun 1 22:08:10 dabeau sshd[25497]: Invalid user admin from 118.145.104.105 port 60368
Jun 1 22:08: ...
show moreJun 1 22:08:10 dabeau sshd[25497]: Invalid user admin from 118.145.104.105 port 60368
Jun 1 22:08:10 dabeau sshd[25497]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.145.104.105
Jun 1 22:08:11 dabeau sshd[25497]: Failed password for invalid user admin from 118.145.104.105 port 60368 ssh2
...
show less
2026-06-01T23:51:04.551116+02:00 server sshd[2705190]: Invalid user admin from 118.145.104.105 port ...
show more2026-06-01T23:51:04.551116+02:00 server sshd[2705190]: Invalid user admin from 118.145.104.105 port 50872
2026-06-01T23:51:38.851911+02:00 server sshd[2705339]: Invalid user orangepi from 118.145.104.105 port 42892
2026-06-01T23:52:14.260177+02:00 server sshd[2705414]: User root from 118.145.104.105 not allowed because listed in DenyUsers
2026-06-01T23:53:04.757272+02:00 server sshd[2705532]: User root from 118.145.104.105 not allowed because listed in DenyUsers
2026-06-01T23:53:45.843402+02:00 server sshd[2705646]: User root from 118.145.104.105 not allowed because listed in DenyUsers
...
show less
Client sent invalid (non-HTTP) message to honeypot web server:
118.145.104.105 - - [01/Jun/2026:14:3 ...
show moreClient sent invalid (non-HTTP) message to honeypot web server:
118.145.104.105 - - [01/Jun/2026:14:30:52 -0500] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 166 "-" "-" "-" ""
show less
Port Scan on Honeypot | Ports: 2222/SSH-alt(2x) | Proto: TCP(2) | Flags: all SYN | TTL: 43 | Len: 40 ...
show morePort Scan on Honeypot | Ports: 2222/SSH-alt(2x) | Proto: TCP(2) | Flags: all SYN | TTL: 43 | Len: 40B(2x) | Win: 65535(2) | F2B/ufw-honeypot@2026-06-01T15:16:55Z
show less
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET WEB_SERVER /bin ...
show moreThis IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET WEB_SERVER /bin/sh In URI Possible Shell Command Execution Attempt). Ip 118.145.104.105 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2026-06-01 15:15:13.632860783 +0000 UTC
show less
Unauthorized network connection attempt(s) via TCP/UDP port(s) from TI-mapped IP entity detected [Fo ...
show moreUnauthorized network connection attempt(s) via TCP/UDP port(s) from TI-mapped IP entity detected [Fortinet/Sentinel].
show less
2026-06-01T13:33:27.557778+00:00 polka sshd-session[151494]: Invalid user admin from 118.145.104.105 ...
show more2026-06-01T13:33:27.557778+00:00 polka sshd-session[151494]: Invalid user admin from 118.145.104.105 port 39156
2026-06-01T13:33:27.647550+00:00 polka sshd-session[151494]: Connection closed by invalid user admin 118.145.104.105 port 39156 [preauth]
2026-06-01T13:34:02.237861+00:00 polka sshd-session[151499]: Invalid user orangepi from 118.145.104.105 port 58254
2026-06-01T13:34:02.610714+00:00 polka sshd-session[151499]: Connection closed by invalid user orangepi 118.145.104.105 port 58254 [preauth]
2026-06-01T13:34:35.121784+00:00 polka sshd-session[151504]: Connection closed by authenticating user root 118.145.104.105 port 46920 [preauth]
...
show less
2026-06-01T14:06:57.166649+02:00 fusco sshd-session[2312564]: pam_unix(sshd:auth): authentication fa ...
show more2026-06-01T14:06:57.166649+02:00 fusco sshd-session[2312564]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.145.104.105
2026-06-01T14:06:59.917848+02:00 fusco sshd-session[2312564]: Failed password for invalid user admin from 118.145.104.105 port 43482 ssh2
2026-06-01T14:07:44.266112+02:00 fusco sshd-session[2313590]: Invalid user orangepi from 118.145.104.105 port 35652
...
show less
2026-06-01T11:25:10.848871+00:00 ktj-nc sshd[196755]: Invalid user admin from 118.145.104.105 port 5 ...
show more2026-06-01T11:25:10.848871+00:00 ktj-nc sshd[196755]: Invalid user admin from 118.145.104.105 port 51242
2026-06-01T11:25:11.204521+00:00 ktj-nc sshd[196755]: Connection closed by invalid user admin 118.145.104.105 port 51242 [preauth]
...
show less
Security attack detected. Multiple failed attempts from 118.145.104.105. IP banned for 1440 minutes ...
show moreSecurity attack detected. Multiple failed attempts from 118.145.104.105. IP banned for 1440 minutes at 01.06.2026 13:28:06. Failed attempts: 1
show less