This IP address has been reported a total of
1,403
times from
634 distinct
sources.
85.5.148.125 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
SSH Brute force: 3 attempts were recorded from 85.5.148.125
2026-05-24T23:50:00+02:00 Invalid user d ...
show moreSSH Brute force: 3 attempts were recorded from 85.5.148.125
2026-05-24T23:50:00+02:00 Invalid user deploy from 85.5.148.125 port 41438
2026-05-24T23:54:21+02:00 Invalid user csserver from 85.5.148.125 port 58112
2026-05-24T23:57:34+02:00 Disconnected from authenticating user root 85.5.148.125 port 51184 [preauth]
show less
May 25 01:07:37 localhost sshd[429173]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ...
show moreMay 25 01:07:37 localhost sshd[429173]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.5.148.125
May 25 01:07:37 localhost sshd[429173]: Invalid user rich from 85.5.148.125 port 39326
May 25 01:07:39 localhost sshd[429173]: Failed password for invalid user rich from 85.5.148.125 port 39326 ssh2
May 25 01:11:24 localhost sshd[429528]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.5.148.125 user=root
May 25 01:11:25 localhost sshd[429528]: Failed password for root from 85.5.148.125 port 34872 ssh2
...
show less
2026-05-25T00:47:47.980224+03:00 [HOSTNAME] sshd-session[2675664]: Invalid user deploy from 85.5.148 ...
show more2026-05-25T00:47:47.980224+03:00 [HOSTNAME] sshd-session[2675664]: Invalid user deploy from 85.5.148.125 port 56392
2026-05-25T00:53:33.871936+03:00 [HOSTNAME] sshd-session[2676143]: Invalid user csserver from 85.5.148.125 port 58130
2026-05-25T01:00:00.925317+03:00 [HOSTNAME] sshd-session[2676703]: Invalid user roott from 85.5.148.125 port 44896
...
show less
2026-05-24T21:41:24.319102+00:00 panel sshd[45357]: Invalid user user from 85.5.148.125 port 55738
2 ...
show more2026-05-24T21:41:24.319102+00:00 panel sshd[45357]: Invalid user user from 85.5.148.125 port 55738
2026-05-24T21:51:45.868730+00:00 panel sshd[46544]: Invalid user tom from 85.5.148.125 port 44784
2026-05-24T21:57:02.378644+00:00 panel sshd[47105]: Invalid user hb from 85.5.148.125 port 49380
...
show less
2026-05-24T23:53:32.665377+02:00 zgrav sshd-session[1194435]: Invalid user csserver from 85.5.148.12 ...
show more2026-05-24T23:53:32.665377+02:00 zgrav sshd-session[1194435]: Invalid user csserver from 85.5.148.125 port 56004
2026-05-24T23:53:32.671126+02:00 zgrav sshd-session[1194435]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.5.148.125
2026-05-24T23:53:34.094914+02:00 zgrav sshd-session[1194435]: Failed password for invalid user csserver from 85.5.148.125 port 56004 ssh2
2026-05-24T23:56:45.041161+02:00 zgrav sshd-session[1194492]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.5.148.125 user=root
2026-05-24T23:56:47.260422+02:00 zgrav sshd-session[1194492]: Failed password for root from 85.5.148.125 port 59892 ssh2
...
show less
Blocked by CrowdSec Server Protection.
Attack type: crowdsecurity/ssh-slow-bf
Source Country: CH
Tim ...
show moreBlocked by CrowdSec Server Protection.
Attack type: crowdsecurity/ssh-slow-bf
Source Country: CH
Time (UTC): 2026-05-24T21:47:43.987214826Z
show less
May 25 00:48:02 community sshd[3806326]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ...
show moreMay 25 00:48:02 community sshd[3806326]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.5.148.125
May 25 00:48:04 community sshd[3806326]: Failed password for invalid user deploy from 85.5.148.125 port 57524 ssh2
...
show less
(sshd) Failed SSH login from 85.5.148.125 (CH/Switzerland/125.148.5.85.dynamic.cust.swisscom.net): 5 ...
show more(sshd) Failed SSH login from 85.5.148.125 (CH/Switzerland/125.148.5.85.dynamic.cust.swisscom.net): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: May 24 16:33:10 13617 sshd[6122]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.5.148.125 user=root
May 24 16:33:12 13617 sshd[6122]: Failed password for root from 85.5.148.125 port 58690 ssh2
May 24 16:41:43 13617 sshd[7012]: Invalid user user from 85.5.148.125 port 37654
May 24 16:41:45 13617 sshd[7012]: Failed password for invalid user user from 85.5.148.125 port 37654 ssh2
May 24 16:46:51 13617 sshd[7571]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.5.148.125 user=root
show less
Brute-Force
SSH
Showing 1381 to
1395
of 1403 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩