This IP address has been reported a total of
655
times from
348 distinct
sources.
118.196.118.73 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-06-14T14:08:32.516506-04:00 lw-dedi-hdz-48t-mtl sshd-session[3429819]: Invalid user don from 11 ...
show more2026-06-14T14:08:32.516506-04:00 lw-dedi-hdz-48t-mtl sshd-session[3429819]: Invalid user don from 118.196.118.73 port 37326
2026-06-14T14:15:04.791087-04:00 lw-dedi-hdz-48t-mtl sshd-session[3432522]: Invalid user mega from 118.196.118.73 port 56254
2026-06-14T14:17:00.630868-04:00 lw-dedi-hdz-48t-mtl sshd-session[3433293]: Invalid user sagar from 118.196.118.73 port 60886
...
show less
Jun 14 19:20:01 remote.srvfarm.net sshd[1709770]: Invalid user kh from 118.196.118.73 port 42238
Jun ...
show moreJun 14 19:20:01 remote.srvfarm.net sshd[1709770]: Invalid user kh from 118.196.118.73 port 42238
Jun 14 19:20:01 remote.srvfarm.net sshd[1709770]: Disconnected from invalid user kh 118.196.118.73 port 42238 [preauth]
Jun 14 19:24:33 remote.srvfarm.net sshd[1711003]: Invalid user antoine from 118.196.118.73 port 60724
Jun 14 19:24:33 remote.srvfarm.net sshd[1711003]: Disconnected from invalid user antoine 118.196.118.73 port 60724 [preauth]
Jun 14 19:26:44 remote.srvfarm.net sshd[1711581]: Invalid user ftpuser from 118.196.118.73 port 51898
show less
Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-06-14T15:42:13Z and 2026-06-1 ...
show moreCowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-06-14T15:42:13Z and 2026-06-14T15:44:19Z
show less
Jun 14 15:01:22 jump sshd[2904099]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid ...
show moreJun 14 15:01:22 jump sshd[2904099]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.196.118.73 user=root
Jun 14 15:01:24 jump sshd[2904099]: Failed password for root from 118.196.118.73 port 38818 ssh2
Jun 14 15:14:35 jump sshd[2904659]: Invalid user dell from 118.196.118.73 port 32814
...
show less
2026-06-14T03:39:06.902006+00:00 aws sshd[354820]: Failed password for invalid user root from 118.19 ...
show more2026-06-14T03:39:06.902006+00:00 aws sshd[354820]: Failed password for invalid user root from 118.196.118.73 port 33594 ssh2
2026-06-14T03:44:31.809410+00:00 aws sshd[354838]: User root from 118.196.118.73 not allowed because not listed in AllowUsers
2026-06-14T03:44:31.822488+00:00 aws sshd[354838]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.196.118.73 user=root
2026-06-14T03:44:33.475252+00:00 aws sshd[354838]: Failed password for invalid user root from 118.196.118.73 port 50436 ssh2
...
show less
2026-06-14T04:25:13.728871+02:00 sshd-session[1018392]: Invalid user ubuntu from 118.196.118.73 por ...
show more2026-06-14T04:25:13.728871+02:00 sshd-session[1018392]: Invalid user ubuntu from 118.196.118.73 port 40942
2026-06-14T04:25:13.957120+02:00 sshd-session[1018392]: Disconnected from invalid user ubuntu 118.196.118.73 port 40942 [preauth]
2026-06-14T04:32:51.884996+02:00 sshd-session[1077652]: Disconnected from authenticating user root 118.196.118.73 port 43918 [preauth]
...
show less
Jun 13 23:38:47 cti1.cti.srvfarm.net sshd[1653928]: Connection closed by 118.196.118.73 port 49906 [ ...
show moreJun 13 23:38:47 cti1.cti.srvfarm.net sshd[1653928]: Connection closed by 118.196.118.73 port 49906 [preauth]
Jun 13 23:40:41 cti1.cti.srvfarm.net sshd[1654432]: Connection closed by 118.196.118.73 port 55230 [preauth]
Jun 13 23:42:23 cti1.cti.srvfarm.net sshd[1654889]: Disconnected from authenticating user root 118.196.118.73 port 58014 [preauth]
Jun 13 23:46:56 cti1.cti.srvfarm.net sshd[1656006]: Invalid user esuser from 118.196.118.73 port 43480
Jun 13 23:46:57 cti1.cti.srvfarm.net sshd[1656006]: Disconnected from invalid user esuser 118.196.118.73 port 43480 [preauth]
show less
(sshd) Failed SSH login from 118.196.118.73 (CN/China/-): 5 in the last 3600 secs; Ports: *; Directi ...
show more(sshd) Failed SSH login from 118.196.118.73 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jun 13 13:17:32 18113 sshd[28308]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.196.118.73 user=root
Jun 13 13:17:34 18113 sshd[28308]: Failed password for root from 118.196.118.73 port 54128 ssh2
Jun 13 13:39:30 18113 sshd[7916]: Invalid user user from 118.196.118.73 port 54848
Jun 13 13:39:33 18113 sshd[7916]: Failed password for invalid user user from 118.196.118.73 port 54848 ssh2
Jun 13 13:42:12 18113 sshd[9557]: Invalid user lzy from 118.196.118.73 port 58396
show less
2026-06-13T20:12:18.875322+02:00 matrix.ursinn.dev sshd-session[1356722]: User root from 118.196.118 ...
show more2026-06-13T20:12:18.875322+02:00 matrix.ursinn.dev sshd-session[1356722]: User root from 118.196.118.73 not allowed because not listed in AllowUsers
2026-06-13T20:20:09.846284+02:00 matrix.ursinn.dev sshd-session[1365904]: Invalid user ookla from 118.196.118.73 port 37758
2026-06-13T20:21:30.942071+02:00 matrix.ursinn.dev sshd-session[1367530]: User root from 118.196.118.73 not allowed because not listed in AllowUsers
...
show less
Brute-Force
SSH
Showing 1 to
15
of 655 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩