This IP address has been reported a total of
733
times from
143 distinct
sources.
148.113.160.5 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-05-31T20:45:24.222772+00:00 mail sshd[115295]: User root from 148.113.160.5 not allowed because ...
show more2026-05-31T20:45:24.222772+00:00 mail sshd[115295]: User root from 148.113.160.5 not allowed because not listed in AllowUsers
...
show less
2026-05-31T22:57:57.282585+03:00 vatnik sshd[12097]: User root from 148.113.160.5 not allowed becaus ...
show more2026-05-31T22:57:57.282585+03:00 vatnik sshd[12097]: User root from 148.113.160.5 not allowed because listed in DenyUsers
...
show less
May 31 19:43:44 instance1 sshd[3256207]: Disconnected from authenticating user root 148.113.160.5 po ...
show moreMay 31 19:43:44 instance1 sshd[3256207]: Disconnected from authenticating user root 148.113.160.5 port 51880 [preauth]
...
show less
Honeypot hit: Brute-force attack detected on 22/SSH
• Credential used: root:undefined
• Number of lo ...
show moreHoneypot hit: Brute-force attack detected on 22/SSH
• Credential used: root:undefined
• Number of login attempts: 1
• Client: SSH-2.0-libssh2_1.11.0
• SSH key fingerprints: 85:64:a7:7f:be:0c:7a:ea:8e:b2:82:cc:6a:5e:1e:44
show less
May 31 18:51:50 hecnet-us-east-gw sshd[714947]: User root from 148.113.160.5 not allowed because not ...
show moreMay 31 18:51:50 hecnet-us-east-gw sshd[714947]: User root from 148.113.160.5 not allowed because not listed in AllowUsers
May 31 18:51:52 hecnet-us-east-gw sshd[714947]: Failed none for invalid user root from 148.113.160.5 port 45814 ssh2
May 31 18:51:52 hecnet-us-east-gw sshd[714947]: error: maximum authentication attempts exceeded for invalid user root from 148.113.160.5 port 45814 ssh2 [preauth]
...
show less
Cowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2026-05-31T18:34:18Z and 2026-05-3 ...
show moreCowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2026-05-31T18:34:18Z and 2026-05-31T18:34:18Z
show less
May 31 18:30:54 sanyalnet-oracle-vps2 sshd[877635]: pam_unix(sshd:auth): authentication failure; log ...
show moreMay 31 18:30:54 sanyalnet-oracle-vps2 sshd[877635]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.113.160.5 user=root
May 31 18:30:56 sanyalnet-oracle-vps2 sshd[877635]: Failed none for invalid user root from 148.113.160.5 port 39038 ssh2
May 31 18:30:58 sanyalnet-oracle-vps2 sshd[877635]: error: maximum authentication attempts exceeded for invalid user root from 148.113.160.5 port 39038 ssh2 [preauth]
...
show less
May 27 10:41:01 v8 sshd[289370]: User root from 148.113.160.5 not allowed because not listed in Allo ...
show moreMay 27 10:41:01 v8 sshd[289370]: User root from 148.113.160.5 not allowed because not listed in AllowUsers
May 27 10:41:01 v8 sshd[289370]: error: maximum authentication attempts exceeded for invalid user root from 148.113.160.5 port 42702 ssh2 [preauth]
May 30 19:37:26 v8 sshd[597583]: User root from 148.113.160.5 not allowed because not listed in AllowUsers
May 30 19:37:26 v8 sshd[597583]: error: maximum authentication attempts exceeded for invalid user root from 148.113.160.5 port 47972 ssh2 [preauth]
May 31 08:13:52 v8 sshd[645673]: User root from 148.113.160.5 not allowed because not listed in AllowUsers
...
show less
Brute-Force
SSH
Showing 61 to
75
of 733 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩