This IP address has been reported a total of
30
times from
25 distinct
sources.
196.2.88.48 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 7
reports;
Canada
with 4
reports;
Hungary
with 3
reports.
The most common categories in these recent reports were:
SSH
21
times;
Brute-Force
19
times;
Web App Attack
4
times;
Port Scan
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-10-06T19:36:24.642673+02:00 r2d2 sshd-session[335513]: Invalid user ubnt from 196.2.88.48 port ...
show more2026-10-06T19:36:24.642673+02:00 r2d2 sshd-session[335513]: Invalid user ubnt from 196.2.88.48 port 33579
...
show less
SSH brute-force attempt on Cowrie honeypot on TCP/22.
Brute-Force
SSH
Anonymous
196.2.88.48 (MA/Morocco/ppp48-88-2-196.adsl.mtds.com), 5 distributed sshd attacks on account [teleco ...
show more196.2.88.48 (MA/Morocco/ppp48-88-2-196.adsl.mtds.com), 5 distributed sshd attacks on account [telecomadmin] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Oct 4 15:39:19 syd2 sshd[1674304]: Invalid user telecomadmin from 190.206.23.171 port 48727
Oct 4 15:39:22 syd2 sshd[1674304]: Failed password for invalid user telecomadmin from 190.206.23.171 port 48727 ssh2
Oct 4 15:38:49 syd2 sshd[1674172]: Invalid user telecomadmin from 220.126.249.217 port 34770
Oct 4 15:39:26 syd2 sshd[1674341]: Invalid user telecomadmin from 196.2.88.48 port 35666
Oct 4 15:38:52 syd2 sshd[1674172]: Failed password for invalid user telecomadmin from 220.126.249.217 port 34770 ssh2
IP Addresses Blocked:
190.206.23.171 (VE/Venezuela/190-206-23-171.pod-00-p64.cantv.net)
220.126.249.217 (KR/South Korea/-)
show less
Honeypot hit: Brute-force attack detected on 22/SSH
• Credential used: admin:Admin@123
• Number of l ...
show moreHoneypot hit: Brute-force attack detected on 22/SSH
• Credential used: admin:Admin@123
• Number of login attempts: 1
• Client: SSH-2.0-Go
show less
196.2.88.48 (MA/Morocco/ppp48-88-2-196.adsl.mtds.com), 5 distributed sshd attacks on account [admin] ...
show more196.2.88.48 (MA/Morocco/ppp48-88-2-196.adsl.mtds.com), 5 distributed sshd attacks on account [admin] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 25 18:09:45 15299 sshd[17717]: Failed password for invalid user admin from 196.2.88.48 port 50536 ssh2
Sep 25 18:19:01 15299 sshd[24512]: Invalid user admin from 41.59.141.25 port 47510
Sep 25 18:13:00 15299 sshd[20078]: Invalid user admin from 2.190.128.25 port 35091
Sep 25 18:13:02 15299 sshd[20078]: Failed password for invalid user admin from 2.190.128.25 port 35091 ssh2
Sep 25 18:09:42 15299 sshd[17717]: Invalid user admin from 196.2.88.48 port 50536
IP Addresses Blocked:
show less
