This IP address has been reported a total of
15
times from
13 distinct
sources.
117.72.166.13 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-08-26T01:30:10.286370+02:00 r00tbase-TX150-S8 sshd-session[4077998]: Invalid user ubuntu from 1 ...
show more2026-08-26T01:30:10.286370+02:00 r00tbase-TX150-S8 sshd-session[4077998]: Invalid user ubuntu from 117.72.166.13 port 60282
2026-08-26T01:30:11.273656+02:00 r00tbase-TX150-S8 sshd-session[4078005]: Invalid user git from 117.72.166.13 port 60290
2026-08-26T01:30:12.291508+02:00 r00tbase-TX150-S8 sshd-session[4078007]: Invalid user test from 117.72.166.13 port 60302
2026-08-26T01:30:13.333939+02:00 r00tbase-TX150-S8 sshd-session[4078009]: Invalid user teste from 117.72.166.13 port 60316
2026-08-26T01:30:16.012221+02:00 r00tbase-TX150-S8 sshd-session[4078013]: Invalid user hduser from 117.72.166.13 port 60342
2026-08-26T01:30:17.293121+02:00 r00tbase-TX150-S8 sshd-session[4078015]: Invalid user pi from 117.72.166.13 port 60352
2026-08-26T01:30:18.623985+02:00 r00tbase-TX150-S8 sshd-session[4078017]: Invalid user appuser from 117.72.166.13 port 60354
2026-08-26T01:30:20.750007+02:00 r00tbase-TX150-S8 sshd-session[4078025]: Invalid user hadoop from 117.72.166.13 port 57264
2026-08-26T01:30:
...
show less
2026-08-25T21:55:02.063822+00:00 edge-drt-chi01.int.pdx.net.uk sshd[1197424]: Invalid user ftptest f ...
show more2026-08-25T21:55:02.063822+00:00 edge-drt-chi01.int.pdx.net.uk sshd[1197424]: Invalid user ftptest from 117.72.166.13 port 37140
2026-08-25T21:55:03.223053+00:00 edge-drt-chi01.int.pdx.net.uk sshd[1197441]: Invalid user ftpuser from 117.72.166.13 port 37146
2026-08-25T21:55:04.400281+00:00 edge-drt-chi01.int.pdx.net.uk sshd[1197443]: Invalid user es from 117.72.166.13 port 37152
...
show less
2026-08-25T14:05:38.491356+00:00 karl sshd-session[863203]: Failed password for invalid user odoo fr ...
show more2026-08-25T14:05:38.491356+00:00 karl sshd-session[863203]: Failed password for invalid user odoo from 117.72.166.13 port 38522 ssh2
2026-08-25T14:05:41.989889+00:00 karl sshd-session[863205]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.72.166.13 user=root
2026-08-25T14:05:44.372126+00:00 karl sshd-session[863205]: Failed password for root from 117.72.166.13 port 59110 ssh2
...
show less
2026-08-25T19:16:24.786023+05:30 ndc-hv01 sshd[2665150]: Invalid user odoo from 117.72.166.13 port 5 ...
show more2026-08-25T19:16:24.786023+05:30 ndc-hv01 sshd[2665150]: Invalid user odoo from 117.72.166.13 port 51054
2026-08-25T19:16:25.118682+05:30 ndc-hv01 sshd[2665150]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.72.166.13
2026-08-25T19:16:27.755488+05:30 ndc-hv01 sshd[2665150]: Failed password for invalid user odoo from 117.72.166.13 port 51054 ssh2
2026-08-25T19:16:31.436554+05:30 ndc-hv01 sshd[2665185]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.72.166.13 user=root
2026-08-25T19:16:33.898099+05:30 ndc-hv01 sshd[2665185]: Failed password for root from 117.72.166.13 port 51060 ssh2
...
show less
2026-08-25T09:50:29.928062+00:00 fra-mc-1 sshd[403063]: Invalid user testuser from 117.72.166.13 por ...
show more2026-08-25T09:50:29.928062+00:00 fra-mc-1 sshd[403063]: Invalid user testuser from 117.72.166.13 port 50820
2026-08-25T09:51:04.590895+00:00 fra-mc-1 sshd[451316]: Invalid user ubuntu from 117.72.166.13 port 59296
2026-08-25T09:51:06.018392+00:00 fra-mc-1 sshd[451579]: Invalid user teste from 117.72.166.13 port 59312
2026-08-25T09:51:07.532919+00:00 fra-mc-1 sshd[452472]: Invalid user steam from 117.72.166.13 port 59320
2026-08-25T09:51:10.055533+00:00 fra-mc-1 sshd[453666]: Invalid user ubuntu from 117.72.166.13 port 59334
...
show less
Brute-Force
SSH
Showing 1 to
15
of 15 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ