This IP address has been reported a total of
20
times from
19 distinct
sources.
117.48.216.106 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-07-02T14:36:15.239730-06:00 Host-KLAX-C sshd[192992]: Connection reset by 117.48.216.106 port 4 ...
show more2026-07-02T14:36:15.239730-06:00 Host-KLAX-C sshd[192992]: Connection reset by 117.48.216.106 port 43634 [preauth]
...
show less
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ...
show moreAutomated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).
show less
[mirai-detector honeypot] Inbound attack against our honeypot on tcp/2222 (ssh).
Family fingerprint: ...
show more[mirai-detector honeypot] Inbound attack against our honeypot on tcp/2222 (ssh).
Family fingerprint: ssh-bruteforce
Commands captured:
$ SSH-2.0-libssh_0.9.6
show less
Honeypot hit: Brute-force attack detected on 22/SSH
• Credential used: postgres:postgres
• Number of ...
show moreHoneypot hit: Brute-force attack detected on 22/SSH
• Credential used: postgres:postgres
• Number of login attempts: 1
• Client: SSH-2.0-libssh_0.9.6
show less
SSH Brute force: 2 attempts were recorded from 117.48.216.106
2026-07-02T16:06:33+02:00 Disconnected ...
show moreSSH Brute force: 2 attempts were recorded from 117.48.216.106
2026-07-02T16:06:33+02:00 Disconnected from authenticating user root 117.48.216.106 port 58428 [preauth]
2026-07-02T16:25:58+02:00 Disconnected from authenticating user root 117.48.216.106 port 58176 [preauth]
show less
2026-07-02T22:21:09.689405+08:00 [Host] sshd-session[2060458]: Failed password for root from 117.48. ...
show more2026-07-02T22:21:09.689405+08:00 [Host] sshd-session[2060458]: Failed password for root from 117.48.216.106 port 40668 ssh2
2026-07-02T22:21:11.146390+08:00 [Host] sshd-session[2060458]: Disconnected from authenticating user root 117.48.216.106 port 40668 [preauth]
2026-07-02T22:29:51.158730+08:00 [Host] sshd-session[2061552]: Connection closed by 117.48.216.106 port 52646 [preauth]
...
show less
Jul 2 13:48:24 es sshd[4066267]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ...
show moreJul 2 13:48:24 es sshd[4066267]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.48.216.106 user=root
Jul 2 13:48:25 es sshd[4066267]: Failed password for root from 117.48.216.106 port 53496 ssh2
...
show less
Jul 2 17:49:03 localhost sshd[2992866]: Failed password for invalid user de2 from 117.48.216.106 po ...
show moreJul 2 17:49:03 localhost sshd[2992866]: Failed password for invalid user de2 from 117.48.216.106 port 41654 ssh2
Jul 2 17:50:09 localhost sshd[2993137]: Invalid user vidyo from 117.48.216.106 port 44212
Jul 2 17:50:09 localhost sshd[2993137]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.48.216.106
Jul 2 17:50:11 localhost sshd[2993137]: Failed password for invalid user vidyo from 117.48.216.106 port 44212 ssh2
Jul 2 17:56:01 localhost sshd[2994447]: Invalid user otter from 117.48.216.106 port 38138
...
show less
Brute-Force
FTP Brute-Force
Port Scan
Hacking
Bad Web Bot
Web App Attack
SSH