Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
This IP address carried out 112 port scanning attempts on 04-11-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
This IP address carried out 18 SSH credential attack (attempts) on 04-11-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
2026-11-05T07:51:20.898288+03:00 sculkbot sshd[1460683]: Invalid user test123 from 148.113.27.165 port 35980
2026-11-05T07:52:57.831116+03:00 sculkbot sshd[1460689]: Invalid user yf from 148.113.27.165 port 36090
2026-11-05T07:54:33.043206+03:00 scul ...
show more2026-11-05T07:51:20.898288+03:00 sculkbot sshd[1460683]: Invalid user test123 from 148.113.27.165 port 35980
2026-11-05T07:52:57.831116+03:00 sculkbot sshd[1460689]: Invalid user yf from 148.113.27.165 port 36090
2026-11-05T07:54:33.043206+03:00 sculkbot sshd[1460696]: Invalid user steam from 148.113.27.165 port 36198
2026-11-05T07:56:05.018445+03:00 sculkbot sshd[1460708]: Invalid user sm from 148.113.27.165 port 36310
2026-11-05T07:57:36.318395+03:00 sculkbot sshd[1460721]: Invalid user omid from 148.113.27.165 port 36420
...
show less
2026-11-05T00:18:49.454355-04:00 fiveohm sshd-session[2880]: User root from 148.113.27.165 not allowed because not listed in AllowUsers
2026-11-05T00:20:29.395545-04:00 fiveohm sshd-session[2882]: Connection from 148.113.27.165 port 60124 on 10.0.0.1 ...
show more2026-11-05T00:18:49.454355-04:00 fiveohm sshd-session[2880]: User root from 148.113.27.165 not allowed because not listed in AllowUsers
2026-11-05T00:20:29.395545-04:00 fiveohm sshd-session[2882]: Connection from 148.113.27.165 port 60124 on 10.0.0.172 port 22 rdomain ""
2026-11-05T00:20:30.804344-04:00 fiveohm sshd-session[2882]: Invalid user ubuntu from 148.113.27.165 port 60124
...
show less
2026-11-05T03:47:53.432814+00:00 1gb sshd-session[80022]: Invalid user admin from 148.113.27.165 port 42614
2026-11-05T03:51:08.211496+00:00 1gb sshd-session[80045]: Invalid user sambauser from 148.113.27.165 port 42838
2026-11-05T03:52:49.370569+00: ...
show more2026-11-05T03:47:53.432814+00:00 1gb sshd-session[80022]: Invalid user admin from 148.113.27.165 port 42614
2026-11-05T03:51:08.211496+00:00 1gb sshd-session[80045]: Invalid user sambauser from 148.113.27.165 port 42838
2026-11-05T03:52:49.370569+00:00 1gb sshd-session[80051]: Invalid user carlos from 148.113.27.165 port 42954
2026-11-05T03:54:21.068961+00:00 1gb sshd-session[80065]: Invalid user dan from 148.113.27.165 port 43072
2026-11-05T03:58:55.031023+00:00 1gb sshd-session[80087]: Invalid user devuser from 148.113.27.165 port 43432
...
show less
2026-11-05T03:21:40.242421+00:00 edge-noc-mci01.int.pdx.net.uk sshd[1976538]: Invalid user ho from 148.113.27.165 port 43300
2026-11-05T03:26:18.495558+00:00 edge-noc-mci01.int.pdx.net.uk sshd[1977254]: Invalid user antivir from 148.113.27.165 port 4 ...
show more2026-11-05T03:21:40.242421+00:00 edge-noc-mci01.int.pdx.net.uk sshd[1976538]: Invalid user ho from 148.113.27.165 port 43300
2026-11-05T03:26:18.495558+00:00 edge-noc-mci01.int.pdx.net.uk sshd[1977254]: Invalid user antivir from 148.113.27.165 port 43480
2026-11-05T03:27:58.996532+00:00 edge-noc-mci01.int.pdx.net.uk sshd[1977496]: Invalid user jijian from 148.113.27.165 port 43576
...
show less
Brute-Force
SSH
Anonymous
2026-11-05T03:22:20.511456+00:00 nbg01-02-secure sshd[449397]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.113.27.165
2026-11-05T03:22:22.762503+00:00 nbg01-02-secure sshd[449397]: Failed password for ...
show more2026-11-05T03:22:20.511456+00:00 nbg01-02-secure sshd[449397]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.113.27.165
2026-11-05T03:22:22.762503+00:00 nbg01-02-secure sshd[449397]: Failed password for invalid user ho from 148.113.27.165 port 37924 ssh2
2026-11-05T03:26:26.393141+00:00 nbg01-02-secure sshd[449406]: Invalid user antivir from 148.113.27.165 port 38086
...
show less
Brute-Force
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown