This IP address has been reported a total of
615
times from
139 distinct
sources.
148.113.201.25 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Jun 15 09:24:33 hecnet-us-east-gw sshd[945217]: User root from 148.113.201.25 not allowed because no ...
show moreJun 15 09:24:33 hecnet-us-east-gw sshd[945217]: User root from 148.113.201.25 not allowed because not listed in AllowUsers
Jun 15 09:24:35 hecnet-us-east-gw sshd[945217]: Failed none for invalid user root from 148.113.201.25 port 55214 ssh2
Jun 15 09:24:37 hecnet-us-east-gw sshd[945217]: error: maximum authentication attempts exceeded for invalid user root from 148.113.201.25 port 55214 ssh2 [preauth]
...
show less
2026-06-15T11:25:07.365435+03:00 vatnik sshd[238119]: User root from 148.113.201.25 not allowed beca ...
show more2026-06-15T11:25:07.365435+03:00 vatnik sshd[238119]: User root from 148.113.201.25 not allowed because listed in DenyUsers
...
show less
Jun 15 08:30:22 smtp sshd[2274066]: error: maximum authentication attempts exceeded for invalid user ...
show moreJun 15 08:30:22 smtp sshd[2274066]: error: maximum authentication attempts exceeded for invalid user root from 148.113.201.25 port 52866 ssh2 [preauth]
...
show less
2026-06-15T15:12:58.520366+09:00 no3 sshd[3048524]: Disconnected from authenticating user root 148.1 ...
show more2026-06-15T15:12:58.520366+09:00 no3 sshd[3048524]: Disconnected from authenticating user root 148.113.201.25 port 51214 [preauth]
...
show less
2026-06-15T11:08:22.885177+09:00 no6 sshd[768834]: Disconnected from authenticating user root 148.11 ...
show more2026-06-15T11:08:22.885177+09:00 no6 sshd[768834]: Disconnected from authenticating user root 148.113.201.25 port 53030 [preauth]
...
show less
Honeypot hit: Brute-force attack detected on 22/SSH
• Credential used: root:undefined
• Number of lo ...
show moreHoneypot hit: Brute-force attack detected on 22/SSH
• Credential used: root:undefined
• Number of login attempts: 1
• Client: SSH-2.0-libssh2_1.11.0
• SSH key fingerprints: ae:35:0e:e1:2a:53:13:b6:93:d4:11:d2:f9:b3:16:bd
show less
Honeypot [uk-production01]: Unauthorized connection attempt detected on 22/SSH
• Client: SSH-2.0-lib ...
show moreHoneypot [uk-production01]: Unauthorized connection attempt detected on 22/SSH
• Client: SSH-2.0-libssh2_1.11.0
show less
SSH
Port Scan
Anonymous
2026-06-12T15:46:06.381164+00:00 HongKong1 sshd-session[729631]: error: maximum authentication attem ...
show more2026-06-12T15:46:06.381164+00:00 HongKong1 sshd-session[729631]: error: maximum authentication attempts exceeded for root from 148.113.201.25 port 44458 ssh2 [preauth]
2026-06-15T00:25:47.846391+00:00 HongKong1 sshd-session[937672]: error: maximum authentication attempts exceeded for root from 148.113.201.25 port 37632 ssh2 [preauth]
...
show less
Jun 14 23:24:12 sanyalnet-oracle-vps2 sshd[1395549]: pam_unix(sshd:auth): authentication failure; lo ...
show moreJun 14 23:24:12 sanyalnet-oracle-vps2 sshd[1395549]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.113.201.25 user=root
Jun 14 23:24:14 sanyalnet-oracle-vps2 sshd[1395549]: Failed none for invalid user root from 148.113.201.25 port 43728 ssh2
Jun 14 23:24:16 sanyalnet-oracle-vps2 sshd[1395549]: error: maximum authentication attempts exceeded for invalid user root from 148.113.201.25 port 43728 ssh2 [preauth]
...
show less