This IP address has been reported a total of
140
times from
88 distinct
sources.
118.196.44.152 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
ThreatBook Intelligence: Scanner,Gateway more details on https://threatbook.io/ip/118.196.44.152
SSH
Anonymous
2026-03-30 02:11:33,227 fail2ban.actions [3196941]: NOTICE [sshd] Ban 118.196.44.152
2026-03 ...
show more2026-03-30 02:11:33,227 fail2ban.actions [3196941]: NOTICE [sshd] Ban 118.196.44.152
2026-03-30 02:26:28,991 fail2ban.actions [3196941]: NOTICE [sshd] Ban 118.196.44.152
...
show less
SSH Brute force: 2 attempts were recorded from 118.196.44.152
2026-03-30T01:59:39+02:00 Disconnected ...
show moreSSH Brute force: 2 attempts were recorded from 118.196.44.152
2026-03-30T01:59:39+02:00 Disconnected from authenticating user root 118.196.44.152 port 35704 [preauth]
2026-03-30T02:09:44+02:00 Disconnected from authenticating user root 118.196.44.152 port 52410 [preauth]
show less
2026-03-30T00:09:31.945529+00:00 sector-1 sshd-session[317431]: User root from 118.196.44.152 not al ...
show more2026-03-30T00:09:31.945529+00:00 sector-1 sshd-session[317431]: User root from 118.196.44.152 not allowed because not listed in AllowUsers
2026-03-30T00:13:46.144633+00:00 sector-1 sshd-session[317933]: User root from 118.196.44.152 not allowed because not listed in AllowUsers
2026-03-30T00:17:33.186032+00:00 sector-1 sshd-session[318390]: User root from 118.196.44.152 not allowed because not listed in AllowUsers
...
show less
2026-03-30T00:13:19.354886+00:00 edge-con-sao01.int.pdx.net.uk sshd[3460362]: Failed password for ro ...
show more2026-03-30T00:13:19.354886+00:00 edge-con-sao01.int.pdx.net.uk sshd[3460362]: Failed password for root from 118.196.44.152 port 38146 ssh2
2026-03-30T00:17:07.082921+00:00 edge-con-sao01.int.pdx.net.uk sshd[3460611]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.196.44.152 user=root
2026-03-30T00:17:09.232211+00:00 edge-con-sao01.int.pdx.net.uk sshd[3460611]: Failed password for root from 118.196.44.152 port 37480 ssh2
...
show less
118.196.44.152 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Por ...
show more118.196.44.152 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Mar 29 19:08:39 15624 sshd[20087]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.32.240.183 user=root
Mar 29 19:02:26 15624 sshd[19131]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.32.240.183 user=root
Mar 29 19:02:28 15624 sshd[19131]: Failed password for root from 152.32.240.183 port 43550 ssh2
Mar 29 18:59:24 15624 sshd[18817]: Failed password for root from 118.196.44.152 port 42900 ssh2
Mar 29 18:59:22 15624 sshd[18817]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.196.44.152 user=root
IP Addresses Blocked:
152.32.240.183 (HK/Hong Kong/-)
show less
2026-03-29T19:38:24.722904+00:00 s239416.love-is.nexus sshd-session[549952]: Failed password for roo ...
show more2026-03-29T19:38:24.722904+00:00 s239416.love-is.nexus sshd-session[549952]: Failed password for root from 118.196.44.152 port 51596 ssh2
2026-03-29T19:41:32.137251+00:00 s239416.love-is.nexus sshd-session[552499]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.196.44.152 user=root
2026-03-29T19:41:34.035236+00:00 s239416.love-is.nexus sshd-session[552499]: Failed password for root from 118.196.44.152 port 56888 ssh2
...
show less