JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 164.164.197.148

164.164.197.148 was found in our database!

This IP was reported 1,605 times. Confidence of Abuse is 100%: ?

100%

ISP	Network Block is for the use of STPI-Bangalore, SOFTNET-IN
Usage Type	Data Center/Web Hosting/Transit
ASN	AS7633
Domain Name	stpi.in
Country	🇮🇳 India
City	Chennai, Tamil Nadu

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 164.164.197.148

Whois 164.164.197.148

IP Abuse Reports for 164.164.197.148:

This IP address has been reported a total of 1,605 times from 523 distinct sources. 164.164.197.148 was first reported on May 1st 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇺 victoryur	2026-06-25 00:06:24 (1 day ago)	Reported by Fail2Ban on 24.finkont.ru (sshd)	Brute-Force
🇫🇷 Fasetech	2026-06-20 01:55:50 (6 days ago)	SecLedge detected suspicious activity. Score: 231.12. Sensor: T-Pot.	Brute-Force Web App Attack
Anonymous	2026-06-07 11:38:58 (2 weeks ago)	May 24 08:04:13 mail fail2ban.actions [11964]: NOTICE [sshd] Ban 164.164.197.148 May 25 03:4 ... show more May 24 08:04:13 mail fail2ban.actions [11964]: NOTICE [sshd] Ban 164.164.197.148 May 25 03:48:04 mail fail2ban.actions [11964]: NOTICE [sshd] Ban 164.164.197.148 May 25 18:45:50 mail fail2ban.actions [11964]: NOTICE [sshd] Ban 164.164.197.148 show less	Brute-Force SSH
🇺🇸 sh97	2026-06-05 13:37:56 (2 weeks ago)	dedirock-8034437: SSH Brute Force from 164.164.197.148 at 2026-06-05 17:37:55 +04	Brute-Force SSH
🇺🇸 NetGuard	2026-05-30 15:24:01 (3 weeks ago)	#honeypot #netguard247 #cowrie #ssh_telnet_probe #persistence #evasion Captured by NetGuard 24/7 T-P ... show more #honeypot #netguard247 #cowrie #ssh_telnet_probe #persistence #evasion Captured by NetGuard 24/7 T-Pot honeypot (netguard24-7.com). Timestamp: 2026-05-23T15:17:59.206+00:00 Attacker IP: 164.164.197.148 \| Port: N/A \| Country: India Honeypot: cowrie \| Attack: ssh_bruteforce Commands: cat /proc/cpuinfo \| grep name \| wc -l; cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAr...; cd ~; chattr -ia .ssh; lockr -ia .ssh Files dropped: 3f1f9a5db692d999..., cc1eb03e9b5926d8... Classification: SSH persistence Source: NetGuard 24/7 (netguard24-7.com) \| PhantomGrid Defense show less	Brute-Force SSH
🇺🇸 NetGuard	2026-05-30 14:44:22 (3 weeks ago)	#honeypot #netguard247 #cowrie #ssh_telnet_probe #persistence #evasion Captured by NetGuard 24/7 T-P ... show more #honeypot #netguard247 #cowrie #ssh_telnet_probe #persistence #evasion Captured by NetGuard 24/7 T-Pot honeypot (netguard24-7.com). Timestamp: 2026-05-23T14:46:00.999+00:00 Attacker IP: 164.164.197.148 \| Port: N/A \| Country: India Honeypot: cowrie \| Attack: ssh_telnet_probe Commands: cat /proc/cpuinfo \| grep name \| wc -l; cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAr...; cd ~; chattr -ia .ssh; lockr -ia .ssh Files dropped: 3f1f9a5db692d999..., cc1eb03e9b5926d8... Classification: SSH persistence Source: NetGuard 24/7 (netguard24-7.com) \| PhantomGrid Defense show less	Brute-Force SSH
🇱🇺 SiteXL	2026-05-27 18:06:02 (4 weeks ago)	{"event":{"DateTime":"2026-05-25T18:06:16Z","RemoteAddr":"164.164.197.148:31031","Protocol":"SSH","C ... show more {"event":{"DateTime":"2026-05-25T18:06:16Z","RemoteAddr":"164.164.197.148:31031","Protocol":"SSH","Command":"","CommandOutput":"","Status":"Stateless","Msg":"New SSH Login Attempt","ID":"ea137f33-0acf-424f-9122-fb1f09040ed0","Environ":"","User":"root","Password":"Qaz123456@","Client":"SSH-2.0-libssh_0.12.0","Headers":"","HeadersMap":null,"Cookies":"","UserAgent":"","HostHTTPRequest":"","Body":"","HTTPMethod":"","RequestURI":"","Description":"SSH interactive","SourceIp":"164.164.197.148","SourcePort":"31031","TLSServerName":"","Handler":""},"level":"info","msg":"New Event","status":"Stateless"} {"event":{"DateTime":"2026-05-25T18:07:53Z","RemoteAddr":"164.164.197.148:8427","Protocol":"SSH","Command":"","CommandOutput":"","Status":"Stateless","Msg":"New SSH Login Attempt","ID":"b22820ab-76ad-4de6-a28a-0cd5012cd12f","Environ":"","User":"cloud","Password":"Wangsu@2017","Client":"SSH-2.0-libssh_0.12.0","Headers":"","HeadersMap":null,"Cookies":"","UserAgent":"","HostHTTPRequest":"","Body":"","HTTPMethod":"","Reques show less	Hacking Port Scan Brute-Force SSH
🇨🇦 ImMarvolo	2026-05-27 11:26:59 (4 weeks ago)	Unauthorized connection attempt detected ca-bhs-01, SSH Brute-Force	Brute-Force SSH
🇬🇧 Deveroonie	2026-05-27 11:07:17 (4 weeks ago)	2026-05-27T11:07:16.571764+00:00 instance-20241019-1127 sshd[2701380]: Connection closed by 164.164. ... show more 2026-05-27T11:07:16.571764+00:00 instance-20241019-1127 sshd[2701380]: Connection closed by 164.164.197.148 port 15071 [preauth] ... show less	Hacking Brute-Force SSH
🇨🇿 gszasz	2026-05-27 10:52:13 (4 weeks ago)	2026-05-27T12:52:10.389288+02:00 thor sshd-session[359831]: Invalid user user from 164.164.197.148 p ... show more 2026-05-27T12:52:10.389288+02:00 thor sshd-session[359831]: Invalid user user from 164.164.197.148 port 12555 2026-05-27T12:52:10.393642+02:00 thor sshd-session[359831]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.164.197.148 2026-05-27T12:52:12.737296+02:00 thor sshd-session[359831]: Failed password for invalid user user from 164.164.197.148 port 12555 ssh2 ... show less	Brute-Force SSH
🇵🇱 Wepted	2026-05-27 10:36:41 (4 weeks ago)	2026-05-27T12:35:50.406038+02:00 axisverse sshd-session[808017]: Invalid user camera from 164.164.19 ... show more 2026-05-27T12:35:50.406038+02:00 axisverse sshd-session[808017]: Invalid user camera from 164.164.197.148 port 54936 2026-05-27T12:35:56.880788+02:00 axisverse sshd-session[808188]: Invalid user camera from 164.164.197.148 port 47864 2026-05-27T12:36:40.312029+02:00 axisverse sshd-session[809601]: Invalid user reza from 164.164.197.148 port 35102 ... show less	Brute-Force SSH
🇰🇷 fanbinit	2026-05-27 10:10:42 (4 weeks ago)	3 unauthorised SSH/Telnet login attempts between 2026-05-27T10:06:07Z and 2026-05-27T10:10:42Z	Brute-Force SSH
🇫🇮 oh.mg	2026-05-27 09:46:37 (4 weeks ago)	2026-05-27T11:45:44.382151+02:00 francesco sshd[1388717]: pam_unix(sshd:auth): authentication failur ... show more 2026-05-27T11:45:44.382151+02:00 francesco sshd[1388717]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.164.197.148 2026-05-27T11:45:46.153380+02:00 francesco sshd[1388717]: Failed password for invalid user systemd from 164.164.197.148 port 39081 ssh2 2026-05-27T11:46:32.958526+02:00 francesco sshd[1393258]: Connection from 164.164.197.148 port 26502 on 95.216.24.245 port 22 rdomain "" 2026-05-27T11:46:34.443418+02:00 francesco sshd[1393258]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.164.197.148 user=root 2026-05-27T11:46:36.410064+02:00 francesco sshd[1393258]: Failed password for root from 164.164.197.148 port 26502 ssh2 ... show less	Brute-Force SSH
🇸🇬 digitalsekuriti.id	2026-05-27 09:02:15 (4 weeks ago)	2026-05-27T15:56:44.999283 scm.getih.net sshd[1700478]: Invalid user deployer from 164.164.197.148 p ... show more 2026-05-27T15:56:44.999283 scm.getih.net sshd[1700478]: Invalid user deployer from 164.164.197.148 port 62158 2026-05-27T16:01:28.189556 scm.getih.net sshd[1706216]: Invalid user ansible from 164.164.197.148 port 32783 2026-05-27T16:02:13.772480 scm.getih.net sshd[1706746]: Invalid user ci from 164.164.197.148 port 7308 ... show less	Brute-Force SSH
🇫🇷 billy549	2026-05-27 09:01:33 (4 weeks ago)	2026-05-27T09:00:42.899010+00:00 vps.billy.wales sshd-session[366340]: pam_unix(sshd:auth): authenti ... show more 2026-05-27T09:00:42.899010+00:00 vps.billy.wales sshd-session[366340]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.164.197.148 user=root 2026-05-27T09:00:44.796539+00:00 vps.billy.wales sshd-session[366340]: Failed password for root from 164.164.197.148 port 16366 ssh2 2026-05-27T09:01:29.713932+00:00 vps.billy.wales sshd-session[366346]: Invalid user ansible from 164.164.197.148 port 11651 2026-05-27T09:01:29.722874+00:00 vps.billy.wales sshd-session[366346]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.164.197.148 2026-05-27T09:01:32.594909+00:00 vps.billy.wales sshd-session[366346]: Failed password for invalid user ansible from 164.164.197.148 port 11651 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 1605 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 104.234.53.38

🇸🇬 101.47.159.125

🇨🇳 14.103.118.136

🇻🇳 160.191.244.158

🇧🇭 109.63.118.190

🇷🇴 92.118.39.71

🇫🇷 91.231.89.76

🇷🇴 80.94.92.234

🇳🇱 45.148.10.151

🇺🇸 158.94.187.166

🇳🇬 152.32.142.188

🇸🇬 114.119.163.52

🇳🇱 91.92.40.233

🇵🇱 87.251.64.158

🇮🇹 72.146.8.190

🇨🇳 60.177.142.252

🇮🇳 49.37.170.141

🇭🇰 47.239.110.32

🇸🇬 45.78.198.199

🇬🇧 35.203.211.156