Log in to view charts and search reports for this IP.
Log In
No reports in the last 60 days
58.48.25.150 has been reported 103
times. The most recent report is from
.
The full history is preserved below and remains searchable. A
0% score reflects the absence of recent activity, but
this is not a guarantee that earlier reports were invalid. Abuse confidence score decays,
naturally, over time, when the abusive activity stops.
58.48.25.150 is one of many (potentially hijacked) hosts in a botnet. This attack is a large scale i ...
show more58.48.25.150 is one of many (potentially hijacked) hosts in a botnet. This attack is a large scale industrial operation attempting unrelenting brute-force login attempts for months on end - between all CIDR ranges in the botnet, our servers receive over 800 authentication attempts per minute on smtp, imap and relative mail ports, as well as ssh, and other protocols.
IP INFO:
- IP 58.48.25.150
- Anycast false
- City N/A
- Region N/A
- Region Code N/A
- Country N/A (N/A)
- Continent N/A (N/A)
- Range N/A
- Provider N/A
- Organisation N/A
- Proxy N/A
- Type N/A
show less
This IP address carried out 36 port scanning attempts on 01-06-2026. For more information or to repo ...
show moreThis IP address carried out 36 port scanning attempts on 01-06-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
This IP address carried out 1 SSH credential attack (attempts) on 01-06-2026. For more information o ...
show moreThis IP address carried out 1 SSH credential attack (attempts) on 01-06-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-06-01T10:09:43Z and 2026-06-0 ...
show moreCowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-06-01T10:09:43Z and 2026-06-01T11:34:01Z
show less
Jun 1 05:24:50 gigabyte-h410m sshd[1738359]: User root from 58.48.25.150 not allowed because not li ...
show moreJun 1 05:24:50 gigabyte-h410m sshd[1738359]: User root from 58.48.25.150 not allowed because not listed in AllowUsers
Jun 1 05:24:51 gigabyte-h410m sshd[1738359]: Failed password for invalid user root from 58.48.25.150 port 1927 ssh2
Jun 1 05:24:52 gigabyte-h410m sshd[1738359]: Disconnected from invalid user root 58.48.25.150 port 1927 [preauth]
...
show less
SSH brute-force on cowrie honeypot port 22. 3 login attempt(s). Usernames: tester, eth, ubuntu. Pass ...
show moreSSH brute-force on cowrie honeypot port 22. 3 login attempt(s). Usernames: tester, eth, ubuntu. Passwords tried: qwer1234, eth, 12345.
show less
Brute-Force
SSH
Anonymous
2026-06-01T03:19:57.657538199Z Invalid user tester from 58.48.25.150 port 34592
2026-06-01T03:19:57. ...
show more2026-06-01T03:19:57.657538199Z Invalid user tester from 58.48.25.150 port 34592
2026-06-01T03:19:57.732627017Z Disconnected from invalid user tester 58.48.25.150 port 34592 [preauth]
2026-06-01T03:28:01.023933509Z Invalid user ali from 58.48.25.150 port 1403
...
show less
2026-06-01T04:52:25.978999+02:00 router01.kfz-heimchen.de sshd-session[2211372]: Disconnected from a ...
show more2026-06-01T04:52:25.978999+02:00 router01.kfz-heimchen.de sshd-session[2211372]: Disconnected from authenticating user root 58.48.25.150 port 45644 [preauth]
2026-06-01T04:54:53.544534+02:00 router01.kfz-heimchen.de sshd-session[2211867]: Connection closed by 58.48.25.150 port 54298 [preauth]
2026-06-01T04:57:56.589891+02:00 router01.kfz-heimchen.de sshd-session[2212251]: Connection closed by 58.48.25.150 port 1459 [preauth]
2026-06-01T04:59:02.469721+02:00 router01.kfz-heimchen.de sshd-session[2212614]: Invalid user casaos from 58.48.25.150 port 1469
2026-06-01T04:59:02.723039+02:00 router01.kfz-heimchen.de sshd-session[2212614]: Disconnected from invalid user casaos 58.48.25.150 port 1469 [preauth]
show less