This IP address has been reported a total of
432
times from
255 distinct
sources.
161.132.47.68 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET CINS Active Thr ...
show moreThis IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET CINS Active Threat Intelligence Poor Reputation IP group 208).
show less
Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: honeypot_ssh. So ...
show moreDetected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: honeypot_ssh. Sources: honeypot. First seen: 2026-07-17. Risk score: 100/100.
show less
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 161.132.47.68 (PE/Peru/-): 1 in the ...
show moreLF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 161.132.47.68 (PE/Peru/-): 1 in the last 3600 secs
show less
Jul 17 13:37:58 b146-19 sshd[13927]: Invalid user orangepi from 161.132.47.68 port 35832
Jul 17 13:3 ...
show moreJul 17 13:37:58 b146-19 sshd[13927]: Invalid user orangepi from 161.132.47.68 port 35832
Jul 17 13:37:58 b146-19 sshd[13927]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.132.47.68
Jul 17 13:37:59 b146-19 sshd[13927]: Failed password for invalid user orangepi from 161.132.47.68 port 35832 ssh2
...
show less
"Attack ID: 1002017316 Module: "Generic Attacks" Check Type: "PHP Injection" Desc: "This signature p ...
show more"Attack ID: 1002017316 Module: "Generic Attacks" Check Type: "PHP Injection" Desc: "This signature prevents attackers from executing arbitrary code in the context of the affected application(CVE-2019-9082).""
show less
Honeypot detection: POST request on /cgi-bin/../../../../../../../../../../bin/sh | User-Agent: libr ...
show moreHoneypot detection: POST request on /cgi-bin/../../../../../../../../../../bin/sh | User-Agent: libredtail-http
show less
2026-07-17T22:31:10.170269+11:00 mail1 sshd[2755930]: pam_unix(sshd:auth): authentication failure; l ...
show more2026-07-17T22:31:10.170269+11:00 mail1 sshd[2755930]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.132.47.68
2026-07-17T22:31:12.032484+11:00 mail1 sshd[2755930]: Failed password for invalid user admin from 161.132.47.68 port 60414 ssh2
2026-07-17T22:33:10.764254+11:00 mail1 sshd[2756035]: Invalid user orangepi from 161.132.47.68 port 60128
...
show less
Brute-Force
SSH
Showing 1 to
15
of 432 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩