This IP address has been reported a total of
251
times from
173 distinct
sources.
118.145.243.156 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
05/08/2026-11:19:07.643297 src=118.145.243.156 dst=89.144.63.226:22 proto=6 msg=ET SCAN Potential SS ...
show more05/08/2026-11:19:07.643297 src=118.145.243.156 dst=89.144.63.226:22 proto=6 msg=ET SCAN Potential SSH Scan
show less
Brute-Force
SSH
Anonymous
118.145.243.156 (CN/China/-), 7 distributed sshd attacks on account [REDACTED] in the last 3600 secs ...
show more118.145.243.156 (CN/China/-), 7 distributed sshd attacks on account [REDACTED] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: May 8 06:55:20 sshd[2270311]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.145.243.156 user=[USERNAME
show less
Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT | PORTS ...
show moreVerified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT | PORTS=22 | HITS=2 | IPSET=ADD | FIRST=2026-05-08 08:25:14 | LAST=2026-05-08 08:25:15. Last seen 2026-05-08 08:25:15.
show less
2026-05-08T02:33:57.390192+00:00 helium sshd-session[118835]: Connection closed by authenticating us ...
show more2026-05-08T02:33:57.390192+00:00 helium sshd-session[118835]: Connection closed by authenticating user root 118.145.243.156 port 44136 [preauth]
2026-05-08T02:33:59.530014+00:00 helium sshd-session[118839]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.145.243.156 user=root
2026-05-08T02:34:00.979479+00:00 helium sshd-session[118839]: Failed password for root from 118.145.243.156 port 55286 ssh2
...
show less
May 8 00:34:48 vps-07b0f6cf sshd[3110685]: User root from 118.145.243.156 not allowed because not l ...
show moreMay 8 00:34:48 vps-07b0f6cf sshd[3110685]: User root from 118.145.243.156 not allowed because not listed in AllowUsers
May 8 00:34:50 vps-07b0f6cf sshd[3110687]: User root from 118.145.243.156 not allowed because not listed in AllowUsers
...
show less