This IP address has been reported a total of
809
times from
422 distinct
sources.
161.132.206.148 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-07-02T14:16:25.084850+02:00 kotiacat sshd-session[1000375]: Invalid user ubuntu from 161.132.20 ...
show more2026-07-02T14:16:25.084850+02:00 kotiacat sshd-session[1000375]: Invalid user ubuntu from 161.132.206.148 port 51422
...
show less
(sshd) Failed SSH login from 161.132.206.148 (PE/Peru/mail.acosaperu.com): 5 in the last 3600 secs; ...
show more(sshd) Failed SSH login from 161.132.206.148 (PE/Peru/mail.acosaperu.com): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jul 2 07:05:44 15053 sshd[3774]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.132.206.148 user=root
Jul 2 07:05:45 15053 sshd[3774]: Failed password for root from 161.132.206.148 port 54828 ssh2
Jul 2 07:13:18 15053 sshd[7632]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.132.206.148 user=root
Jul 2 07:13:21 15053 sshd[7632]: Failed password for root from 161.132.206.148 port 33914 ssh2
Jul 2 07:15:14 15053 sshd[8639]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.132.206.148 user=root
show less
Brute-Force
SSH
Anonymous
2026-07-02T14:13:18.506690+02:00 hosting15 sshd[428426]: Failed password for root from 161.132.206.1 ...
show more2026-07-02T14:13:18.506690+02:00 hosting15 sshd[428426]: Failed password for root from 161.132.206.148 port 47198 ssh2
2026-07-02T14:15:12.460501+02:00 hosting15 sshd[429654]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.132.206.148 user=root
2026-07-02T14:15:14.461567+02:00 hosting15 sshd[429654]: Failed password for root from 161.132.206.148 port 53416 ssh2
...
show less
2026-07-02T10:36:41.768643+00:00 de-fra2-matrix1 sshd[3929575]: Invalid user erp from 161.132.206.14 ...
show more2026-07-02T10:36:41.768643+00:00 de-fra2-matrix1 sshd[3929575]: Invalid user erp from 161.132.206.148 port 50956
2026-07-02T10:49:03.000595+00:00 de-fra2-matrix1 sshd[3929950]: Invalid user rooter from 161.132.206.148 port 53734
2026-07-02T10:53:35.120025+00:00 de-fra2-matrix1 sshd[3930003]: Invalid user git from 161.132.206.148 port 46070
...
show less
Jul 2 09:02:41 gigabyte-h410m sshd[2167480]: User root from 161.132.206.148 not allowed because not ...
show moreJul 2 09:02:41 gigabyte-h410m sshd[2167480]: User root from 161.132.206.148 not allowed because not listed in AllowUsers
Jul 2 09:02:42 gigabyte-h410m sshd[2167480]: Failed password for invalid user root from 161.132.206.148 port 37192 ssh2
Jul 2 09:02:43 gigabyte-h410m sshd[2167480]: Disconnected from invalid user root 161.132.206.148 port 37192 [preauth]
...
show less
2026-07-02T16:50:58.706446+08:00 vmi996132.contaboserver.net sshd[633117]: Invalid user admin from 1 ...
show more2026-07-02T16:50:58.706446+08:00 vmi996132.contaboserver.net sshd[633117]: Invalid user admin from 161.132.206.148 port 38326
2026-07-02T16:50:58.719195+08:00 vmi996132.contaboserver.net sshd[633117]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.132.206.148
2026-07-02T16:51:00.460870+08:00 vmi996132.contaboserver.net sshd[633117]: Failed password for invalid user admin from 161.132.206.148 port 38326 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 809 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩