This IP address has been reported a total of
33
times from
25 distinct
sources.
117.148.114.161 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
F2B sshd ban. Logs: 2026-06-13T03:09:48.065543+02:00 isp sshd[4145305]: Connection closed by 117.148 ...
show moreF2B sshd ban. Logs: 2026-06-13T03:09:48.065543+02:00 isp sshd[4145305]: Connection closed by 117.148.114.161 port 36738 [preauth]
show less
2026-06-13T00:46:14.789687+02:00 h03 sshd[3858822]: Invalid user tes from 117.148.114.161 port 36725 ...
show more2026-06-13T00:46:14.789687+02:00 h03 sshd[3858822]: Invalid user tes from 117.148.114.161 port 36725
2026-06-13T00:46:58.782661+02:00 h03 sshd[3883161]: Invalid user lcb from 117.148.114.161 port 36149
2026-06-13T00:47:33.954515+02:00 h03 sshd[3904307]: Invalid user sysadmin from 117.148.114.161 port 36656
2026-06-13T00:48:38.125326+02:00 h03 sshd[3940861]: Invalid user ftpuser from 117.148.114.161 port 36670
2026-06-13T00:49:10.767946+02:00 h03 sshd[3960445]: Invalid user arkserver from 117.148.114.161 port 36271
...
show less
Brute-Force
SSH
Anonymous
2026-06-12T20:14:00.607813+00:00 ubuntu1 sshd[2816764]: Connection closed by 117.148.114.161 port 36 ...
show more2026-06-12T20:14:00.607813+00:00 ubuntu1 sshd[2816764]: Connection closed by 117.148.114.161 port 36852 [preauth]
2026-06-12T20:16:34.777597+00:00 ubuntu1 sshd[2818247]: Connection closed by authenticating user root 117.148.114.161 port 13952 [preauth]
2026-06-12T20:17:25.461553+00:00 ubuntu1 sshd[2818781]: Connection closed by authenticating user root 117.148.114.161 port 36010 [preauth]
...
show less
Jun 11 19:09:28 v220250758066366549 sshd[32832]: Invalid user db2 from 117.148.114.161 port 35957
Ju ...
show moreJun 11 19:09:28 v220250758066366549 sshd[32832]: Invalid user db2 from 117.148.114.161 port 35957
Jun 11 19:09:28 v220250758066366549 sshd[32832]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.148.114.161
Jun 11 19:09:30 v220250758066366549 sshd[32832]: Failed password for invalid user db2 from 117.148.114.161 port 35957 ssh2
... RK-Cloud
show less
2026-06-11T08:29:33.079843+01:00 mx.magpie.ma sshd-session[3110329]: Invalid user omnimini from 117. ...
show more2026-06-11T08:29:33.079843+01:00 mx.magpie.ma sshd-session[3110329]: Invalid user omnimini from 117.148.114.161 port 13944
2026-06-11T08:30:16.781658+01:00 mx.magpie.ma sshd-session[3110341]: Invalid user nagios from 117.148.114.161 port 35940
2026-06-11T08:30:59.395399+01:00 mx.magpie.ma sshd-session[3110356]: Invalid user lp from 117.148.114.161 port 36761
2026-06-11T08:32:01.542894+01:00 mx.magpie.ma sshd-session[3110372]: Invalid user backuper from 117.148.114.161 port 35980
2026-06-11T08:32:18.329690+01:00 mx.magpie.ma sshd-session[3110378]: Invalid user postgres from 117.148.114.161 port 13842
...
show less
Jun 10 14:18:51 servercloud sshd[1233369]: Connection reset by 117.148.114.161 port 36693 [preauth]
...
show moreJun 10 14:18:51 servercloud sshd[1233369]: Connection reset by 117.148.114.161 port 36693 [preauth]
Jun 10 14:21:09 servercloud sshd[1233685]: Connection closed by authenticating user root 117.148.114.161 port 36076 [preauth]
Jun 10 14:21:59 servercloud sshd[1233726]: Connection closed by authenticating user root 117.148.114.161 port 13925 [preauth]
...
show less
Jun 10 10:12:03 srv05 sshd[2662691]: Invalid user jeffrey from 117.148.114.161 port 36135
Jun 10 10: ...
show moreJun 10 10:12:03 srv05 sshd[2662691]: Invalid user jeffrey from 117.148.114.161 port 36135
Jun 10 10:12:27 srv05 sshd[2662693]: Invalid user llm from 117.148.114.161 port 36666
Jun 10 10:13:15 srv05 sshd[2662730]: Invalid user user from 117.148.114.161 port 36222
Jun 10 10:13:32 srv05 sshd[2662733]: Invalid user localtest from 117.148.114.161 port 35908
Jun 10 10:13:51 srv05 sshd[2662739]: Invalid user aaa from 117.148.114.161 port 14021
...
show less
2026-06-10T04:34:23.988195+00:00 loadbal sshd[2147016]: User root from 117.148.114.161 not allowed b ...
show more2026-06-10T04:34:23.988195+00:00 loadbal sshd[2147016]: User root from 117.148.114.161 not allowed because not listed in AllowUsers
2026-06-10T04:34:49.462933+00:00 loadbal sshd[2147018]: Invalid user elasticsearch from 117.148.114.161 port 36162
2026-06-10T04:35:15.066665+00:00 loadbal sshd[2147023]: User root from 117.148.114.161 not allowed because not listed in AllowUsers
...
show less
Brute-Force
SSH
Showing 1 to
15
of 33 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩