Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Nov 8 10:10:00 <server> sshd\[12871\]: User root from 117.72.47.157 not allowed because not listed in AllowUsersNov 8 10:10:01 <server> sshd\[12871\]: Failed password for invalid user root from 117.72.47.157 port 33500 ssh2
...
Automated SSH brute-force attack detected. The IP repeatedly attempted to authenticate to port 22 using multiple usernames and password guesses within a short timeframe.
Failed password for juan from 117.72.47.157 port 38834 ssh2
Disconnected from juan 117.72.47.157 port 38834 [preauth]
Failed password for github from 117.72.47.157 port 50306 ssh2
2026-11-07T16:31:30.158352shield sshd\[10261\]: Invalid user 123456 from 117.72.47.157 port 55672
2026-11-07T16:31:30.167427shield sshd\[10261\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.72.47.157 ...
show more2026-11-07T16:31:30.158352shield sshd\[10261\]: Invalid user 123456 from 117.72.47.157 port 55672
2026-11-07T16:31:30.167427shield sshd\[10261\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.72.47.157
2026-11-07T16:31:32.510119shield sshd\[10261\]: Failed password for invalid user 123456 from 117.72.47.157 port 55672 ssh2
2026-11-07T16:31:43.345166shield sshd\[10465\]: Invalid user 123456 from 117.72.47.157 port 56560
2026-11-07T16:31:43.350757shield sshd\[10465\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.72.47.157
show less
