This IP address has been reported a total of
10,935
times from
1,473 distinct
sources.
161.248.189.72 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Report 2431416 with IP 3091755 for SSH brute-force attack by source 3448912 via ssh-honeypot/0.2.0+h ...
show moreReport 2431416 with IP 3091755 for SSH brute-force attack by source 3448912 via ssh-honeypot/0.2.0+http
show less
2026-06-04T16:07:37.665986+00:00 ginemed-prod sshd[3770380]: Invalid user mk from 161.248.189.72 por ...
show more2026-06-04T16:07:37.665986+00:00 ginemed-prod sshd[3770380]: Invalid user mk from 161.248.189.72 port 39948
2026-06-04T16:16:35.158459+00:00 ginemed-prod sshd[3770756]: Invalid user jackson from 161.248.189.72 port 40234
2026-06-04T16:18:57.688391+00:00 ginemed-prod sshd[3770827]: Invalid user idf from 161.248.189.72 port 40380
...
show less
Jun 4 08:50:28 b146-64 sshd[433214]: Invalid user ubuntu from 161.248.189.72 port 46580
Jun 4 08:5 ...
show moreJun 4 08:50:28 b146-64 sshd[433214]: Invalid user ubuntu from 161.248.189.72 port 46580
Jun 4 08:50:28 b146-64 sshd[433214]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.248.189.72
Jun 4 08:50:31 b146-64 sshd[433214]: Failed password for invalid user ubuntu from 161.248.189.72 port 46580 ssh2
...
show less
Jun 4 13:58:38 n8n sshd[1044295]: Invalid user vinicius from 161.248.189.72 port 41108
Jun 4 14:00 ...
show moreJun 4 13:58:38 n8n sshd[1044295]: Invalid user vinicius from 161.248.189.72 port 41108
Jun 4 14:00:50 n8n sshd[1044306]: Invalid user eqemu from 161.248.189.72 port 41300
Jun 4 14:02:59 n8n sshd[1044323]: Invalid user tao from 161.248.189.72 port 41496
show less
2026-06-04T15:45:31.129866+03:00 fastdl sshd[532974]: pam_unix(sshd:auth): authentication failure; l ...
show more2026-06-04T15:45:31.129866+03:00 fastdl sshd[532974]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.248.189.72
2026-06-04T15:45:33.154592+03:00 fastdl sshd[532974]: Failed password for invalid user rock from 161.248.189.72 port 37298 ssh2
2026-06-04T15:47:38.797414+03:00 fastdl sshd[533183]: Invalid user heni from 161.248.189.72 port 37458
2026-06-04T15:47:38.806037+03:00 fastdl sshd[533183]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.248.189.72
2026-06-04T15:47:40.933744+03:00 fastdl sshd[533183]: Failed password for invalid user heni from 161.248.189.72 port 37458 ssh2
...
show less
Jun 4 12:39:00 instance1 sshd[666609]: Disconnected from authenticating user root 161.248.189.72 po ...
show moreJun 4 12:39:00 instance1 sshd[666609]: Disconnected from authenticating user root 161.248.189.72 port 48890 [preauth]
...
show less
Jun 4 13:56:02 cif02 sshd[316280]: Failed password for invalid user gakusei from 161.248.189.72 por ...
show moreJun 4 13:56:02 cif02 sshd[316280]: Failed password for invalid user gakusei from 161.248.189.72 port 37408 ssh2
Jun 4 14:00:30 cif02 sshd[316382]: Invalid user car from 161.248.189.72 port 37586
Jun 4 14:00:30 cif02 sshd[316382]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.248.189.72
Jun 4 14:00:31 cif02 sshd[316382]: Failed password for invalid user car from 161.248.189.72 port 37586 ssh2
...
show less
Jun 4 11:53:32 v4bgp sshd[270620]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid ...
show moreJun 4 11:53:32 v4bgp sshd[270620]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.248.189.72
Jun 4 11:53:34 v4bgp sshd[270620]: Failed password for invalid user gakusei from 161.248.189.72 port 46194 ssh2
Jun 4 11:59:43 v4bgp sshd[270811]: Invalid user car from 161.248.189.72 port 46476
...
show less
Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-06-04T09:33:40Z and 2026-06-0 ...
show moreCowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-06-04T09:33:40Z and 2026-06-04T10:24:02Z
show less
Brute-Force
SSH
Showing 1 to
15
of 10935 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩