This IP address has been reported a total of
155
times from
132 distinct
sources.
13.140.25.189 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
SSH brute force on port 22 -- 3 attempts, 1 successful. Credentials: admin:P, orangepi:admin. Active ...
show moreSSH brute force on port 22 -- 3 attempts, 1 successful. Credentials: admin:P, orangepi:admin. Active: 2026-06-11T19:42 to 2026-06-11T19:44. Post-login: /usr/sbin/sshd -D -R; ausearch -i -k command --checkpoint /var/lib/honeypot/audit_; ausearch -i -m USER_LOGIN,USER_START --checkpoint /var/lib/h. Malware: trojan (critical); miner (critical); botnet (high). Source: AS203380 DA International Group Ltd. (Nuremberg, DE). Data from SSH honeypot — not a production system.
show less
2026-06-12T02:27:02.967602+00:00 zamarapp.com sshd[3173623]: pam_unix(sshd:auth): authentication fai ...
show more2026-06-12T02:27:02.967602+00:00 zamarapp.com sshd[3173623]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.140.25.189
2026-06-12T02:27:05.294678+00:00 zamarapp.com sshd[3173623]: Failed password for invalid user admin from 13.140.25.189 port 34248 ssh2
...
show less
2026-06-12T02:03:17.955809+01:00 rahona.network sshd-session[60595]: Failed password for root from 1 ...
show more2026-06-12T02:03:17.955809+01:00 rahona.network sshd-session[60595]: Failed password for root from 13.140.25.189 port 48386 ssh2
2026-06-12T02:03:19.891116+01:00 rahona.network sshd-session[60630]: Connection from 13.140.25.189 port 50090 on 178.63.185.182 port 22 rdomain ""
2026-06-12T02:03:20.213004+01:00 rahona.network sshd-session[60630]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.140.25.189 user=root
2026-06-12T02:03:22.117360+01:00 rahona.network sshd-session[60630]: Failed password for root from 13.140.25.189 port 50090 ssh2
show less
2026-06-12T02:35:11.486039+02:00 db3.updn.io sshd[336725]: pam_unix(sshd:auth): authentication failu ...
show more2026-06-12T02:35:11.486039+02:00 db3.updn.io sshd[336725]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.140.25.189 user=root
2026-06-12T02:35:14.179497+02:00 db3.updn.io sshd[336725]: Failed password for root from 13.140.25.189 port 51724 ssh2
2026-06-12T02:35:14.418976+02:00 db3.updn.io sshd[336731]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.140.25.189 user=root
2026-06-12T02:35:16.189521+02:00 db3.updn.io sshd[336731]: Failed password for root from 13.140.25.189 port 51730 ssh2
2026-06-12T02:35:17.344824+02:00 db3.updn.io sshd[336740]: Invalid user hadoop from 13.140.25.189 port 51742
...
show less
Brute-Force
SSH
Anonymous
2026-06-12T02:33:52.049823+02:00 PRACSNew sshd-session[507155]: Failed password for invalid user dev ...
show more2026-06-12T02:33:52.049823+02:00 PRACSNew sshd-session[507155]: Failed password for invalid user dev from 13.140.25.189 port 40294 ssh2
2026-06-12T02:33:52.364000+02:00 PRACSNew sshd-session[507160]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.140.25.189 user=root
2026-06-12T02:33:53.975461+02:00 PRACSNew sshd-session[507160]: Failed password for root from 13.140.25.189 port 40296 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 155 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩