JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 117.149.196.213

117.149.196.213 was found in our database!

This IP was reported 1,078 times. Confidence of Abuse is 100%: ?

100%

ISP	China Mobile Communications Corporation
Usage Type	Fixed Line ISP
ASN	AS56041
Domain Name	chinamobile.com
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 117.149.196.213

Whois 117.149.196.213

IP Abuse Reports for 117.149.196.213:

This IP address has been reported a total of 1,078 times from 478 distinct sources. 117.149.196.213 was first reported on March 18th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 ScanThe.Net	2026-05-29 13:31:29 (5 days ago)	ID: 3660273289 \| PORT: 40826 \| https://117-149-196-213.scanthe.net	Port Scan
🇪🇸 masterguru	2026-05-29 10:13:49 (5 days ago)	(sshd) Failed SSH login from 117.149.196.213 (CN/China/-): 5 in the last 3600 secs (0-167)	Hacking
🇨🇭 ScanThe.Net	2026-05-29 08:22:17 (5 days ago)	ID: 3654392025 \| PORT: 42386 \| https://117-149-196-213.scanthe.net	Port Scan
🇨🇭 ScanThe.Net	2026-05-29 06:42:08 (5 days ago)	ID: 3652462337 \| PORT: 62639 \| https://117-149-196-213.scanthe.net	Port Scan
🇩🇪 iamimmanuelraj	2026-05-29 02:11:14 (6 days ago)	Fail2ban SSH Bruteforce - Port = 22 - Failures = 7 - Time = 1775650930	Brute-Force SSH
🇫🇷 ImMarvolo	2026-05-29 02:09:20 (6 days ago)	Unauthorized connection attempt detected neo-backup, SSH Brute-Force	Brute-Force SSH
🇺🇸 anon333	2026-05-28 22:33:10 (6 days ago)	Hacker syslog review 1780007589	Hacking
🇩🇪 fynndows.de	2026-05-28 21:29:01 (6 days ago)	2026-05-28T23:28:59.953851+02:00 debian-epyc sshd[1700022]: pam_unix(sshd:auth): authentication fail ... show more 2026-05-28T23:28:59.953851+02:00 debian-epyc sshd[1700022]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.149.196.213 2026-05-28T23:29:01.578632+02:00 debian-epyc sshd[1700022]: Failed password for invalid user ftpuser from 117.149.196.213 port 33660 ssh2 ... show less	Brute-Force SSH
Anonymous	2026-05-28 19:23:04 (6 days ago)	May 28 21:23:01 vmi3075181 sshd[463205]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show more May 28 21:23:01 vmi3075181 sshd[463205]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.149.196.213 May 28 21:23:03 vmi3075181 sshd[463205]: Failed password for invalid user debian from 117.149.196.213 port 40756 ssh2 ... show less	Brute-Force SSH
🇩🇪 SkyCastle	2026-05-28 17:46:35 (6 days ago)	2026-05-28T17:44:42.219152+00:00 panel sshd[3151281]: Failed password for invalid user freddy from 1 ... show more 2026-05-28T17:44:42.219152+00:00 panel sshd[3151281]: Failed password for invalid user freddy from 117.149.196.213 port 51500 ssh2 2026-05-28T17:46:33.515729+00:00 panel sshd[3162518]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.149.196.213 user=root 2026-05-28T17:46:35.296183+00:00 panel sshd[3162518]: Failed password for root from 117.149.196.213 port 53504 ssh2 ... show less	Brute-Force SSH
🇩🇪 Kotiacat_one	2026-05-28 17:26:29 (6 days ago)	2026-05-28T20:26:28.612080+03:00 kotia sshd[111929]: Invalid user mailuser from 117.149.196.213 port ... show more 2026-05-28T20:26:28.612080+03:00 kotia sshd[111929]: Invalid user mailuser from 117.149.196.213 port 43252 ... show less	Brute-Force SSH
🇦🇺 dyln	2026-05-28 14:05:05 (6 days ago)	Dyls honeypot brute-force: SSH (2 total hits)	Brute-Force SSH
🇩🇪 licen777	2026-05-28 12:29:22 (6 days ago)	Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-05-28T11:03:03Z and 2026-05-2 ... show more Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-05-28T11:03:03Z and 2026-05-28T12:29:22Z show less	Brute-Force SSH
🇫🇷 Safronus	2026-05-28 08:34:05 (6 days ago)	Banned by fail2ban jail=sshd-logger match=$f2bV_matches	Brute-Force SSH
🇺🇸 bigscoots.com	2026-05-27 18:56:56 (1 week ago)	117.149.196.213 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Po ... show more 117.149.196.213 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 27 13:56:41 13419 sshd[4513]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.149.196.213 user=root May 27 13:48:10 13419 sshd[3603]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.233.68.72 user=root May 27 13:46:25 13419 sshd[3400]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.233.68.72 user=root May 27 13:46:27 13419 sshd[3400]: Failed password for root from 194.233.68.72 port 34322 ssh2 May 27 13:34:22 13419 sshd[2073]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.78.235.121 user=root IP Addresses Blocked: show less	Brute-Force SSH

Showing 61 to 75 of 1078 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2604:a880:2:d1:0:1:58ce:3001

🇺🇸 216.25.89.138

🇺🇦 159.26.120.25

🇮🇳 103.64.129.82

🇬🇧 2a03:b0c0:1:e0:0:1:6a2d:1001

🇮🇳 117.211.78.172

🇺🇸 104.243.44.175

🇷🇴 92.118.39.236

🇭🇺 89.134.210.182

🇰🇷 47.80.62.159

🇺🇸 216.133.145.160

🇳🇱 185.226.197.47

🇺🇸 162.216.150.152

🇮🇳 128.185.208.42

🇮🇳 103.87.94.103

🇬🇧 92.25.167.165

🇸🇬 34.126.89.41

🇺🇸 216.25.89.94

🇺🇸 216.25.89.85

🇺🇸 205.210.31.37