This IP address has been reported a total of
34
times from
29 distinct
sources.
148.63.148.21 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-07-30T16:58:29.853936+02:00 ka02 sshd-session[353677]: Connection from 148.63.148.21 port 47426 ...
show more2026-07-30T16:58:29.853936+02:00 ka02 sshd-session[353677]: Connection from 148.63.148.21 port 47426 on 46.38.234.197 port 22 rdomain ""
2026-07-30T16:58:31.567798+02:00 ka02 sshd-session[353677]: User root from 148.63.148.21 not allowed because not listed in AllowUsers
2026-07-30T16:58:31.978603+02:00 ka02 sshd-session[353677]: Connection closed by invalid user root 148.63.148.21 port 47426 [preauth]
2026-07-30T16:58:32.432175+02:00 ka02 sshd-session[353682]: Connection from 148.63.148.21 port 47721 on 46.38.234.197 port 22 rdomain ""
2026-07-30T16:58:33.373730+02:00 ka02 sshd-session[353682]: Invalid user user from 148.63.148.21 port 47721
...
show less
2026-07-30T01:43:59.573209+02:00 ns3006402 sshd[1455058]: Failed password for invalid user deploy fr ...
show more2026-07-30T01:43:59.573209+02:00 ns3006402 sshd[1455058]: Failed password for invalid user deploy from 148.63.148.21 port 36661 ssh2
2026-07-30T01:44:00.893161+02:00 ns3006402 sshd[1455065]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.63.148.21 user=root
2026-07-30T01:44:02.653128+02:00 ns3006402 sshd[1455065]: Failed password for root from 148.63.148.21 port 37401 ssh2
...
show less
Jul 29 22:39:41 smtp sshd[389766]: Failed password for invalid user kafka from 148.63.148.21 port 56 ...
show moreJul 29 22:39:41 smtp sshd[389766]: Failed password for invalid user kafka from 148.63.148.21 port 56709 ssh2
...
show less
2026-07-30T00:25:48.858610 mustar-kr-miso sshd[956669]: Invalid user dev from 148.63.148.21 port 426 ...
show more2026-07-30T00:25:48.858610 mustar-kr-miso sshd[956669]: Invalid user dev from 148.63.148.21 port 42620
2026-07-30T00:25:49.155173 mustar-kr-miso sshd[956669]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.63.148.21
2026-07-30T00:25:51.405502 mustar-kr-miso sshd[956669]: Failed password for invalid user dev from 148.63.148.21 port 42620 ssh2
2026-07-30T00:25:54.082816 mustar-kr-miso sshd[956671]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.63.148.21 user=root
2026-07-30T00:25:56.346061 mustar-kr-miso sshd[956671]: Failed password for root from 148.63.148.21 port 42861 ssh2
...
show less
Automated SSH brute-force attack detected. The IP repeatedly attempted to authenticate to port 22 us ...
show moreAutomated SSH brute-force attack detected. The IP repeatedly attempted to authenticate to port 22 using multiple usernames and password guesses within a short timeframe.
show less
2026-07-29T09:23:44.682207+02:00 web3 sshd-session[2190529]: Failed password for invalid user user1 ...
show more2026-07-29T09:23:44.682207+02:00 web3 sshd-session[2190529]: Failed password for invalid user user1 from 148.63.148.21 port 60132 ssh2
2026-07-29T09:23:46.349096+02:00 web3 sshd-session[2190534]: Invalid user www from 148.63.148.21 port 60753
2026-07-29T09:23:46.424790+02:00 web3 sshd-session[2190534]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.63.148.21
2026-07-29T09:23:48.438520+02:00 web3 sshd-session[2190534]: Failed password for invalid user www from 148.63.148.21 port 60753 ssh2
show less
Jul 28 17:07:26 mc sshd[1989161]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ...
show moreJul 28 17:07:26 mc sshd[1989161]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.63.148.21
Jul 28 17:07:28 mc sshd[1989161]: Failed password for invalid user linuxadmin from 148.63.148.21 port 53930 ssh2
Jul 28 17:07:29 mc sshd[1989213]: Invalid user tomcat from 148.63.148.21 port 53961
...
show less
Jul 28 03:52:24 gzdatacloud01 sshd[2692094]: Invalid user ubuntu from 148.63.148.21 port 46176
Jul 2 ...
show moreJul 28 03:52:24 gzdatacloud01 sshd[2692094]: Invalid user ubuntu from 148.63.148.21 port 46176
Jul 28 03:52:24 gzdatacloud01 sshd[2692094]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.63.148.21
Jul 28 03:52:24 gzdatacloud01 sshd[2692094]: Invalid user ubuntu from 148.63.148.21 port 46176
Jul 28 03:52:27 gzdatacloud01 sshd[2692094]: Failed password for invalid user ubuntu from 148.63.148.21 port 46176 ssh2
Jul 28 03:52:28 gzdatacloud01 sshd[2692122]: Invalid user deploy from 148.63.148.21 port 46423
...
show less
FTP Brute-Force
Port Scan
Hacking
Bad Web Bot
Brute-Force
Web App Attack
SSH
2026-07-28T00:44:30.692Z, an unauthorized access attempt was detected on port 22 (SSH) from source I ...
show more2026-07-28T00:44:30.692Z, an unauthorized access attempt was detected on port 22 (SSH) from source IP address 148.63.148.21.
show less
Port Scan
Brute-Force
SSH
Anonymous
[server.techsupportltd.gr] ssh-invalid-user: logs=/var/log/secure; samples=Jul 28 02:28:31 server ss ...
show more[server.techsupportltd.gr] ssh-invalid-user: logs=/var/log/secure; samples=Jul 28 02:28:31 server sshd-session[259146]: Failed password for root from 148.63.148.21 port 38620 ssh2 | Jul 28 02:28:34 server sshd-session[259151]: Invalid user guest from 148.63.148.21 port 38806 | Jul 28 02:28:36 server sshd-session[259151]: Failed password for invalid user guest from 148.63.148.21 port 38806 ssh2
show less
2026-07-28T00:33:26.060385+03:00 gc1 sshd[1835063]: pam_unix(sshd:auth): authentication failure; log ...
show more2026-07-28T00:33:26.060385+03:00 gc1 sshd[1835063]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.63.148.21
2026-07-28T00:33:28.584905+03:00 gc1 sshd[1835063]: Failed password for invalid user sonar from 148.63.148.21 port 55130 ssh2
2026-07-28T00:33:29.230220+03:00 gc1 sshd[1835068]: Invalid user pi from 148.63.148.21 port 55182
...
show less
Brute-Force
SSH
Showing 1 to
15
of 34 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩