This IP address has been reported a total of
29
times from
24 distinct
sources.
8.137.206.104 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 4
reports;
United States of America
with 4
reports;
France
with 2
reports.
The most common categories in these recent reports were:
SSH
18
times;
Brute-Force
17
times;
Web App Attack
3
times;
Hacking
3
times;
Exploited Host
2
times;
Other
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
This IP address carried out 111 port scanning attempts on 03-10-2026. For more information or to rep ...
show moreThis IP address carried out 111 port scanning attempts on 03-10-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
This IP address carried out 13 SSH credential attack (attempts) on 03-10-2026. For more information ...
show moreThis IP address carried out 13 SSH credential attack (attempts) on 03-10-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
2026-10-02T23:55:12.511581 pCNHOST sshd-session[3053836]: Failed password for invalid user user from ...
show more2026-10-02T23:55:12.511581 pCNHOST sshd-session[3053836]: Failed password for invalid user user from 8.137.206.104 port 39262 ssh2
2026-10-02T23:55:45.310820 pCNHOST sshd-session[3053871]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.137.206.104 user=root
2026-10-02T23:55:47.219464 pCNHOST sshd-session[3053871]: Failed password for root from 8.137.206.104 port 41732 ssh2
2026-10-02T23:56:18.880993 pCNHOST sshd-session[3053908]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.137.206.104 user=root
2026-10-02T23:56:21.321474 pCNHOST sshd-session[3053908]: Failed password for root from 8.137.206.104 port 44150 ssh2
...
show less
2026-10-01T14:49:57.420580li744-187.members.linode.com sshd[3401888]: Invalid user test from 8.137.2 ...
show more2026-10-01T14:49:57.420580li744-187.members.linode.com sshd[3401888]: Invalid user test from 8.137.206.104 port 34478
2026-10-01T14:50:51.410494li744-187.members.linode.com sshd[3401899]: Connection from 8.137.206.104 port 37902 on 23.239.23.187 port 3337 rdomain ""
2026-10-01T14:50:52.469998li744-187.members.linode.com sshd[3401899]: Invalid user ftpuser from 8.137.206.104 port 37902
2026-10-01T14:51:44.783412li744-187.members.linode.com sshd[3401903]: Connection from 8.137.206.104 port 41336 on 23.239.23.187 port 3337 rdomain ""
2026-10-01T14:51:45.991422li744-187.members.linode.com sshd[3401903]: Invalid user mostafa from 8.137.206.104 port 41336
...
show less
CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall
Hacking
Web App Attack
Anonymous
Automated block on a production VoIP/web server: SSH authentication attempts on port 22/tcp after 5 ...
show moreAutomated block on a production VoIP/web server: SSH authentication attempts on port 22/tcp after 5 detected failures. Blocked automatically at the host.
show less
2026-09-22T20:01:16.741189-06:00 KLAS-A sshd[914813]: Invalid user aura from 8.137.206.104 port 5818 ...
show more2026-09-22T20:01:16.741189-06:00 KLAS-A sshd[914813]: Invalid user aura from 8.137.206.104 port 58188
...
show less
Sep 17 21:32:18 do1 sshd[4094376]: Invalid user liz from 8.137.206.104 port 37290
Sep 17 21:32:18 do ...
show moreSep 17 21:32:18 do1 sshd[4094376]: Invalid user liz from 8.137.206.104 port 37290
Sep 17 21:32:18 do1 sshd[4094376]: Disconnected from invalid user liz 8.137.206.104 port 37290 [preauth]
Sep 17 21:32:50 do1 sshd[4094452]: Connection closed by 8.137.206.104 port 40114 [preauth]
Sep 17 21:33:09 do1 sshd[4094653]: Connection closed by 8.137.206.104 port 41872 [preauth]
Sep 17 21:33:27 do1 sshd[4094924]: Connection closed by 8.137.206.104 port 43642 [preauth]
...
show less
