This IP address has been reported a total of
44
times from
34 distinct
sources.
8.148.195.10 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
France
with 13
reports;
Finland
with 12
reports;
Poland
with 6
reports.
The most common categories in these recent reports were:
SSH
43
times;
Brute-Force
40
times;
Port Scan
4
times;
Hacking
3
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Honeypot Finding: SSH intrusion activity on TCP/22; successful login, command, or download activity ...
show moreHoneypot Finding: SSH intrusion activity on TCP/22; successful login, command, or download activity observed.
show less
This IP was detected by CrowdSec triggering crowdsecurity/ssh-bf. Ip: 8.148.195.10 - ASN: 37963 (Han ...
show moreThis IP was detected by CrowdSec triggering crowdsecurity/ssh-bf. Ip: 8.148.195.10 - ASN: 37963 (Hangzhou Alibaba Advertising Co.,Ltd.) - Maliciousness Score is 0 %
show less
Malicious activity from 8.148.195.10 detected by FDC honeypots. Categories: 14,18,22. 258 events in ...
show moreMalicious activity from 8.148.195.10 detected by FDC honeypots. Categories: 14,18,22. 258 events in last 24h.
show less
Multiple SSH login attempts from 8.148.195.10 targeting user(s): admin2,adminuser | Server Managed b ...
show moreMultiple SSH login attempts from 8.148.195.10 targeting user(s): admin2,adminuser | Server Managed by Focusnic
show less
Oct 22 09:06:39 vmi1389428 sshd[1286869]: Invalid user from 8.148.195.10 port 33064
Oct 22 09:16:09 ...
show moreOct 22 09:06:39 vmi1389428 sshd[1286869]: Invalid user from 8.148.195.10 port 33064
Oct 22 09:16:09 vmi1389428 sshd[1306406]: Invalid user admin2 from 8.148.195.10 port 51788
Oct 22 09:16:10 vmi1389428 sshd[1306455]: Invalid user adminuser from 8.148.195.10 port 51792
...
show less
Multiple SSH login attempts from 8.148.195.10 targeting user(s): admin2,adminuser | Server Managed b ...
show moreMultiple SSH login attempts from 8.148.195.10 targeting user(s): admin2,adminuser | Server Managed by Focusnic
show less
Automated SSH brute-force attack detected. The IP repeatedly attempted to authenticate to port 22 us ...
show moreAutomated SSH brute-force attack detected. The IP repeatedly attempted to authenticate to port 22 using multiple usernames and password guesses within a short timeframe.
show less
SSH honeypot: 7 failed login attempt(s) in 15 minute(s) from 8.148.195.10.
Usernames tried: deploy, ...
show moreSSH honeypot: 7 failed login attempt(s) in 15 minute(s) from 8.148.195.10.
Usernames tried: deploy, oracle, postgres, steam, test, user, vagrant.
Credentials were eventually guessed and a session was opened.
7 distinct password(s) tried, redacted.
Client: SSH-2.0-Go
2026-10-22 04:37:18 Failed password for 'deploy' from 8.148.195.10 (password '<redacted>')
2026-10-22 04:37:57 Failed password for 'oracle' from 8.148.195.10 (password '<redacted>')
2026-10-22 04:38:11 Failed password for 'postgres' from 8.148.195.10 (password '<redacted>')
2026-10-22 04:38:37 Failed password for 'steam' from 8.148.195.10 (password '<redacted>')
2026-10-22 04:39:44 Failed password for 'test' from 8.148.195.10 (password '<redacted>')
2026-10-22 04:39:56 Failed password for 'user' from 8.148.195.10 (password '<redacted>')
2026-10-22 04:40:23 Accepted password for 'ubuntu' from 8.148.195.10 -- credentials guessed successfully
2026-10-22 04:40:32 Accepted password for 'ubuntu' from 8.148.195.10 -- credentials guessed successfully
...
show less
SSH honeypot: 62 failed login attempt(s) in 15 minute(s) from 8.148.195.10.
Usernames tried: amir, a ...
show moreSSH honeypot: 62 failed login attempt(s) in 15 minute(s) from 8.148.195.10.
Usernames tried: amir, angel, app, appuser, bot, centos, customer, david, demo, deploy, dev, developer.
Credentials were eventually guessed and a session was opened.
53 distinct password(s) tried, redacted.
Client: SSH-2.0-Go
2026-10-22 04:05:09 Failed password for 'customer' from 8.148.195.10 (password '<redacted>')
2026-10-22 04:05:22 Failed password for 'frappe' from 8.148.195.10 (password '<redacted>')
2026-10-22 04:05:36 Failed password for 'ubuntu' from 8.148.195.10 (password '<redacted>')
2026-10-22 04:05:48 Failed password for 'kipt' from 8.148.195.10 (password '<redacted>')
2026-10-22 04:06:15 Failed password for 'david' from 8.148.195.10 (password '<redacted>')
2026-10-22 04:06:28 Failed password for 'localhost' from 8.148.195.10 (password '<redacted>')
2026-10-22 04:07:08 Failed password for 'testuser' from 8.148.195.10 (password '<redacted>')
...
show less
