This IP address has been reported a total of
40
times from
32 distinct
sources.
118.145.99.252 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-07-24T14:01:19.837801+08:00 VM-8-9-debian sshd[1677919]: Invalid user adminuser from 118.145.99 ...
show more2026-07-24T14:01:19.837801+08:00 VM-8-9-debian sshd[1677919]: Invalid user adminuser from 118.145.99.252 port 39490
2026-07-24T14:01:19.881811+08:00 VM-8-9-debian sshd[1677919]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.145.99.252
2026-07-24T14:01:21.957923+08:00 VM-8-9-debian sshd[1677919]: Failed password for invalid user adminuser from 118.145.99.252 port 39490 ssh2
...
show less
Jul 24 03:12:03 lnxmail62 sshd[2011468]: Invalid user from 118.145.99.252 port 49254
Jul 24 03:20:0 ...
show moreJul 24 03:12:03 lnxmail62 sshd[2011468]: Invalid user from 118.145.99.252 port 49254
Jul 24 03:20:08 lnxmail62 sshd[2014763]: Invalid user azureuser from 118.145.99.252 port 41106
Jul 24 03:20:09 lnxmail62 sshd[2014763]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.145.99.252
Jul 24 03:20:11 lnxmail62 sshd[2014763]: Failed password for invalid user azureuser from 118.145.99.252 port 41106 ssh2
Jul 24 03:21:16 lnxmail62 sshd[2014585]: Invalid user admin2 from 118.145.99.252 port 40182
...
show less
The dark side is strong with this IP, but our firewall is stronger. You are going down, young one.
. ...
show moreThe dark side is strong with this IP, but our firewall is stronger. You are going down, young one.
...
show less
Brute-Force
SSH
Anonymous
Jul 23 16:25:52 sftp-cognizant-san-jose-1 sshd[2364914]: Invalid user elasticsearch from 118.145.99. ...
show moreJul 23 16:25:52 sftp-cognizant-san-jose-1 sshd[2364914]: Invalid user elasticsearch from 118.145.99.252 port 57788
Jul 23 16:26:28 sftp-cognizant-san-jose-1 sshd[2364914]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.145.99.252
Jul 23 16:26:31 sftp-cognizant-san-jose-1 sshd[2364914]: Failed password for invalid user elasticsearch from 118.145.99.252 port 57788 ssh2
...
show less
2026-07-23T17:42:13.511487+02:00 root260 sshd-session[3370104]: Invalid user developer from 118.145. ...
show more2026-07-23T17:42:13.511487+02:00 root260 sshd-session[3370104]: Invalid user developer from 118.145.99.252 port 35344
2026-07-23T17:42:13.760002+02:00 root260 sshd-session[3370104]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.145.99.252
2026-07-23T17:42:15.840275+02:00 root260 sshd-session[3370104]: Failed password for invalid user developer from 118.145.99.252 port 35344 ssh2
2026-07-23T17:42:39.933181+02:00 root260 sshd-session[3353400]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.145.99.252
2026-07-23T17:42:41.550265+02:00 root260 sshd-session[3353400]: Failed password for invalid user ubuntu from 118.145.99.252 port 34064 ssh2
...
show less
2026-07-23T17:18:31.638922+02:00 root260 sshd-session[2943772]: pam_unix(sshd:auth): authentication ...
show more2026-07-23T17:18:31.638922+02:00 root260 sshd-session[2943772]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.145.99.252
2026-07-23T17:18:33.771256+02:00 root260 sshd-session[2943772]: Failed password for invalid user elasticsearch from 118.145.99.252 port 45332 ssh2
2026-07-23T17:18:55.332149+02:00 root260 sshd-session[2945827]: Invalid user dev from 118.145.99.252 port 52228
2026-07-23T17:19:35.549173+02:00 root260 sshd-session[2945827]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.145.99.252
2026-07-23T17:19:37.814263+02:00 root260 sshd-session[2945827]: Failed password for invalid user dev from 118.145.99.252 port 52228 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 40 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩