This IP address has been reported a total of
348
times from
9 distinct
sources.
211.48.164.147 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
211.48.164.147 (KR/South Korea/-), 5 distributed sshd attacks on account [REDACTED] in the last 3600 ...
show more211.48.164.147 (KR/South Korea/-), 5 distributed sshd attacks on account [REDACTED] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Jul 11 08:38:48 sshd[20069]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.48.164.147 user=[USERNAME]
show less
2025-07-03T17:50:12.240843+00:00 ws1.trivox.sh sshd[2279793]: Connection closed by authenticating us ...
show more2025-07-03T17:50:12.240843+00:00 ws1.trivox.sh sshd[2279793]: Connection closed by authenticating user root 211.48.164.147 port 58025 [preauth]
2025-07-03T17:55:36.110420+00:00 ws1.trivox.sh sshd[2280443]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.48.164.147 user=root
2025-07-03T17:55:37.637222+00:00 ws1.trivox.sh sshd[2280443]: Failed password for root from 211.48.164.147 port 59248 ssh2
2025-07-03T17:55:37.967851+00:00 ws1.trivox.sh sshd[2280443]: Connection closed by authenticating user root 211.48.164.147 port 59248 [preauth]
...
show less
2025-07-03T07:12:06.019597+00:00 ws1.trivox.sh sshd[2194391]: Connection closed by authenticating us ...
show more2025-07-03T07:12:06.019597+00:00 ws1.trivox.sh sshd[2194391]: Connection closed by authenticating user root 211.48.164.147 port 49280 [preauth]
2025-07-03T07:18:04.973884+00:00 ws1.trivox.sh sshd[2195092]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.48.164.147 user=root
2025-07-03T07:18:06.500386+00:00 ws1.trivox.sh sshd[2195092]: Failed password for root from 211.48.164.147 port 52578 ssh2
2025-07-03T07:18:06.826079+00:00 ws1.trivox.sh sshd[2195092]: Connection closed by authenticating user root 211.48.164.147 port 52578 [preauth]
...
show less
Cluster member (Omitted) (US/United States/-) said, DENY 211.48.164.147, Reason:[(sshd) Failed SSH l ...
show moreCluster member (Omitted) (US/United States/-) said, DENY 211.48.164.147, Reason:[(sshd) Failed SSH login from 211.48.164.147 (KR/South Korea/-): 3 in the last (Omitted)]
show less
2025-07-02T20:28:47.425403+00:00 TV-DB1-R630-12 sshd[556145]: Failed password for root from 211.48.1 ...
show more2025-07-02T20:28:47.425403+00:00 TV-DB1-R630-12 sshd[556145]: Failed password for root from 211.48.164.147 port 63001 ssh2
2025-07-02T20:28:47.713648+00:00 TV-DB1-R630-12 sshd[556145]: Connection closed by authenticating user root 211.48.164.147 port 63001 [preauth]
2025-07-02T20:32:33.527797+00:00 TV-DB1-R630-12 sshd[556425]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.48.164.147 user=root
2025-07-02T20:32:36.298229+00:00 TV-DB1-R630-12 sshd[556425]: Failed password for root from 211.48.164.147 port 59187 ssh2
2025-07-02T20:32:38.175883+00:00 TV-DB1-R630-12 sshd[556425]: Connection closed by authenticating user root 211.48.164.147 port 59187 [preauth]
...
show less
2025-07-01T11:13:31.037887+00:00 ws1.trivox.sh sshd[1770015]: Connection closed by authenticating us ...
show more2025-07-01T11:13:31.037887+00:00 ws1.trivox.sh sshd[1770015]: Connection closed by authenticating user root 211.48.164.147 port 51718 [preauth]
2025-07-01T11:21:52.607797+00:00 ws1.trivox.sh sshd[1770999]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.48.164.147 user=root
2025-07-01T11:21:54.540095+00:00 ws1.trivox.sh sshd[1770999]: Failed password for root from 211.48.164.147 port 64996 ssh2
2025-07-01T11:21:56.123792+00:00 ws1.trivox.sh sshd[1770999]: Connection closed by authenticating user root 211.48.164.147 port 64996 [preauth]
...
show less
2025-07-01T09:35:43.699053+00:00 ws1.trivox.sh sshd[1757919]: Connection closed by authenticating us ...
show more2025-07-01T09:35:43.699053+00:00 ws1.trivox.sh sshd[1757919]: Connection closed by authenticating user root 211.48.164.147 port 64291 [preauth]
2025-07-01T09:45:22.425477+00:00 ws1.trivox.sh sshd[1759303]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.48.164.147 user=root
2025-07-01T09:45:24.491832+00:00 ws1.trivox.sh sshd[1759303]: Failed password for root from 211.48.164.147 port 49363 ssh2
2025-07-01T09:45:25.940367+00:00 ws1.trivox.sh sshd[1759303]: Connection closed by authenticating user root 211.48.164.147 port 49363 [preauth]
...
show less
Brute-Force
SSH
Showing 1 to
15
of 348 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩