Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-10-28T18:46:29.260649+00:00 debian-4gb-hel1-2 sshd[1639010]: Failed password for invalid user gmodserver from 118.99.115.16 port 58764 ssh2
2026-10-28T18:52:27.713231+00:00 debian-4gb-hel1-2 sshd[1648779]: Invalid user user91 from 118.99.115.16 ...
show more2026-10-28T18:46:29.260649+00:00 debian-4gb-hel1-2 sshd[1639010]: Failed password for invalid user gmodserver from 118.99.115.16 port 58764 ssh2
2026-10-28T18:52:27.713231+00:00 debian-4gb-hel1-2 sshd[1648779]: Invalid user user91 from 118.99.115.16 port 56078
2026-10-28T18:52:27.716307+00:00 debian-4gb-hel1-2 sshd[1648779]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.99.115.16
2026-10-28T18:52:29.573547+00:00 debian-4gb-hel1-2 sshd[1648779]: Failed password for invalid user user91 from 118.99.115.16 port 56078 ssh2
2026-10-28T18:54:13.134896+00:00 debian-4gb-hel1-2 sshd[1651747]: Invalid user aleja from 118.99.115.16 port 23393
...
show less
2026-10-28T20:49:17.799107+02:00 kira.futunk.net sshd-session[200638]: Failed password for invalid user gmodserver from 118.99.115.16 port 46294 ssh2
2026-10-28T20:49:18.363872+02:00 kira.futunk.net sshd-session[200638]: Disconnected from invalid use ...
show more2026-10-28T20:49:17.799107+02:00 kira.futunk.net sshd-session[200638]: Failed password for invalid user gmodserver from 118.99.115.16 port 46294 ssh2
2026-10-28T20:49:18.363872+02:00 kira.futunk.net sshd-session[200638]: Disconnected from invalid user gmodserver 118.99.115.16 port 46294 [preauth]
2026-10-28T20:52:54.117722+02:00 kira.futunk.net sshd-session[200717]: Invalid user user91 from 118.99.115.16 port 59116
2026-10-28T20:52:54.119415+02:00 kira.futunk.net sshd-session[200717]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.99.115.16
2026-10-28T20:52:56.174945+02:00 kira.futunk.net sshd-session[200717]: Failed password for invalid user user91 from 118.99.115.16 port 59116 ssh2
...
show less
SSH brute force attack detected: 5 failed attempts
Brute-Force
Anonymous
Oct 28 18:55:29 fi7 sshd[1914071]: Failed password for root from 118.99.115.16 port 41764 ssh2
Oct 28 18:57:14 fi7 sshd[1914121]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.99.115.16 user=root
Oct 28 ...
show moreOct 28 18:55:29 fi7 sshd[1914071]: Failed password for root from 118.99.115.16 port 41764 ssh2
Oct 28 18:57:14 fi7 sshd[1914121]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.99.115.16 user=root
Oct 28 18:57:16 fi7 sshd[1914121]: Failed password for root from 118.99.115.16 port 44986 ssh2
...
show less
2026-10-28T19:32:16.862383+02:00 magic sshd-session[590688]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.99.115.16
2026-10-28T19:32:19.358944+02:00 magic sshd-session[590688]: Failed password for invali ...
show more2026-10-28T19:32:16.862383+02:00 magic sshd-session[590688]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.99.115.16
2026-10-28T19:32:19.358944+02:00 magic sshd-session[590688]: Failed password for invalid user router from 118.99.115.16 port 48076 ssh2
2026-10-28T19:36:42.412123+02:00 magic sshd-session[591125]: Invalid user production from 118.99.115.16 port 36662
show less
Brute-Force
SSH
Anonymous
2026-10-28T18:19:17.200233+01:00 server2.gitlab.splendid-hosting.de sshd[2323135]: Failed password for root from 118.99.115.16 port 38450 ssh2
2026-10-28T18:21:02.212139+01:00 server2.gitlab.splendid-hosting.de sshd[2323298]: pam_unix(sshd:auth): aut ...
show more2026-10-28T18:19:17.200233+01:00 server2.gitlab.splendid-hosting.de sshd[2323135]: Failed password for root from 118.99.115.16 port 38450 ssh2
2026-10-28T18:21:02.212139+01:00 server2.gitlab.splendid-hosting.de sshd[2323298]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.99.115.16 user=root
2026-10-28T18:21:04.074987+01:00 server2.gitlab.splendid-hosting.de sshd[2323298]: Failed password for root from 118.99.115.16 port 41594 ssh2
2026-10-28T18:22:50.184495+01:00 server2.gitlab.splendid-hosting.de sshd[2323456]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.99.115.16 user=root
2026-10-28T18:22:51.540438+01:00 server2.gitlab.splendid-hosting.de sshd[2323456]: Failed password for root from 118.99.115.16 port 44746 ssh2
...
show less
2026-10-28T17:13:24.551129+00:00 ubuntu sshd[61753]: User root from 118.99.115.16 not allowed because not listed in AllowUsers
2026-10-28T17:17:37.767192+00:00 ubuntu sshd[61795]: User root from 118.99.115.16 not allowed because not listed in AllowUs ...
show more2026-10-28T17:13:24.551129+00:00 ubuntu sshd[61753]: User root from 118.99.115.16 not allowed because not listed in AllowUsers
2026-10-28T17:17:37.767192+00:00 ubuntu sshd[61795]: User root from 118.99.115.16 not allowed because not listed in AllowUsers
2026-10-28T17:19:21.952230+00:00 ubuntu sshd[61856]: User root from 118.99.115.16 not allowed because not listed in AllowUsers
...
show less
Automated SSH brute-force attack detected. The IP repeatedly attempted to authenticate to port 22 using multiple usernames and password guesses within a short timeframe.
2026-10-28T18:56:23.281814+02:00 server sshd[2984588]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.99.115.16
2026-10-28T18:56:25.771712+02:00 server sshd[2984588]: Failed password for invalid user test ...
show more2026-10-28T18:56:23.281814+02:00 server sshd[2984588]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.99.115.16
2026-10-28T18:56:25.771712+02:00 server sshd[2984588]: Failed password for invalid user test from 118.99.115.16 port 41766 ssh2
2026-10-28T18:58:17.193488+02:00 server sshd[2987977]: Invalid user proxyuser from 118.99.115.16 port 44718
show less
Brute-Force
SSH
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown
