This IP address has been reported a total of
38
times from
32 distinct
sources.
59.148.185.131 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-09-01T14:13:41.398394 telos sshd[3866658]: Invalid user antivirus from 59.148.185.131 port 4069 ...
show more2026-09-01T14:13:41.398394 telos sshd[3866658]: Invalid user antivirus from 59.148.185.131 port 40696
2026-09-01T21:18:14.289781 telos sshd[3880011]: Invalid user cloudstack from 59.148.185.131 port 59828
2026-09-02T00:38:28.907627 telos sshd[3882862]: Invalid user traefik from 59.148.185.131 port 54702
show less
2026-09-01T07:02:16.578389-04:00 site sshd-session[164297]: Invalid user payroll from 59.148.185.131 ...
show more2026-09-01T07:02:16.578389-04:00 site sshd-session[164297]: Invalid user payroll from 59.148.185.131 port 54818
2026-09-01T10:23:02.930932-04:00 site sshd-session[176131]: Invalid user antivirus from 59.148.185.131 port 56010
2026-09-01T19:44:37.048298-04:00 site sshd-session[181240]: Invalid user traefik from 59.148.185.131 port 41554
...
show less
2026-09-01T10:58:05.858834+00:00 sgp01 sshd[1379034]: Invalid user payroll from 59.148.185.131 port ...
show more2026-09-01T10:58:05.858834+00:00 sgp01 sshd[1379034]: Invalid user payroll from 59.148.185.131 port 62370
2026-09-01T11:15:28.290693+00:00 sgp01 sshd[1380855]: Invalid user payroll from 59.148.185.131 port 48048
2026-09-01T14:36:00.836095+00:00 sgp01 sshd[1401721]: Invalid user antivirus from 59.148.185.131 port 62972
2026-09-01T15:10:26.946083+00:00 sgp01 sshd[1404599]: Invalid user nicolas from 59.148.185.131 port 53888
2026-09-01T17:31:07.953266+00:00 sgp01 sshd[1412635]: Invalid user nicolas from 59.148.185.131 port 35312
...
show less
Automated sensor: 3 SSH brute-force attempts over the last 24h (latest 2026-09-01T14:16Z). Usernames ...
show moreAutomated sensor: 3 SSH brute-force attempts over the last 24h (latest 2026-09-01T14:16Z). Usernames tried: antivirus.
show less
59.148.185.131 (HK/Hong Kong/059148185131.ctinets.com), 5 distributed sshd attacks on account [redac ...
show more59.148.185.131 (HK/Hong Kong/059148185131.ctinets.com), 5 distributed sshd attacks on account [redacted]
show less
Invalid user ubuntu from 59.148.185.131 pam_unix(sshd:auth): authentication failure; logname= uid=0 ...
show moreInvalid user ubuntu from 59.148.185.131 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.148.185.131 | Failed password for invalid user ubuntu from 59.148.185.131
show less
2026-08-29T13:43:51.724742+00:00 thelemmy.club sshd-session[1664319]: Invalid user ubuntu from 59.14 ...
show more2026-08-29T13:43:51.724742+00:00 thelemmy.club sshd-session[1664319]: Invalid user ubuntu from 59.148.185.131 port 65504
2026-08-29T13:43:51.965844+00:00 thelemmy.club sshd-session[1664319]: Connection closed by invalid user ubuntu 59.148.185.131 port 65504 [preauth]
...
show less
Aug 29 12:56:57 mx sshd[1178990]: Invalid user wallet from 59.148.185.131 port 38386
Aug 29 12:56:57 ...
show moreAug 29 12:56:57 mx sshd[1178990]: Invalid user wallet from 59.148.185.131 port 38386
Aug 29 12:56:57 mx sshd[1178990]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.148.185.131
Aug 29 12:56:59 mx sshd[1178990]: Failed password for invalid user wallet from 59.148.185.131 port 38386 ssh2
...
show less