This IP address has been reported a total of
40
times from
29 distinct
sources.
48.211.211.39 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
48.211.211.39 fell into Endlessh tarpit; 0/26 total connections are currently still open. Total time ...
show more48.211.211.39 fell into Endlessh tarpit; 0/26 total connections are currently still open. Total time wasted: 1m 6s. Total bytes sent by tarpit: 5.00KiB. Report generated by Endlessh Report Generator v1.2.3
show less
2026-06-08T01:47:44.996871+02:00 vmd172806 sshd[466861]: Failed password for root from 48.211.211.39 ...
show more2026-06-08T01:47:44.996871+02:00 vmd172806 sshd[466861]: Failed password for root from 48.211.211.39 port 38953 ssh2
2026-06-08T02:24:30.645617+02:00 vmd172806 sshd[478893]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=48.211.211.39 user=root
2026-06-08T02:24:32.878510+02:00 vmd172806 sshd[478893]: Failed password for root from 48.211.211.39 port 38953 ssh2
...
show less
2026-06-08T02:02:23.534604 yip.floofy.tech sshd[3327332]: Failed password for root from 48.211.211.3 ...
show more2026-06-08T02:02:23.534604 yip.floofy.tech sshd[3327332]: Failed password for root from 48.211.211.39 port 38953 ssh2
2026-06-08T02:14:06.041451 yip.floofy.tech sshd[3332681]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=48.211.211.39 user=root
2026-06-08T02:14:07.551657 yip.floofy.tech sshd[3332681]: Failed password for root from 48.211.211.39 port 38953 ssh2
...
show less
Jun 8 01:53:06 themis sshd-session[352729]: User root from 48.211.211.39 not allowed because none o ...
show moreJun 8 01:53:06 themis sshd-session[352729]: User root from 48.211.211.39 not allowed because none of user's groups are listed in AllowGroups
Jun 8 01:53:08 themis sshd-session[352729]: error: PAM: Authentication failure for illegal user root from 48.211.211.39
Jun 8 01:53:08 themis sshd-session[352729]: Failed keyboard-interactive/pam for invalid user root from 48.211.211.39 port 38953 ssh2
...
show less
Jun 8 01:18:02 kronos sshd-session[1169260]: User root from 48.211.211.39 not allowed because none ...
show moreJun 8 01:18:02 kronos sshd-session[1169260]: User root from 48.211.211.39 not allowed because none of user's groups are listed in AllowGroups
Jun 8 01:18:05 kronos sshd-session[1169260]: error: PAM: Authentication failure for illegal user root from 48.211.211.39
Jun 8 01:18:05 kronos sshd-session[1169260]: Failed keyboard-interactive/pam for invalid user root from 48.211.211.39 port 38953 ssh2
...
show less
Jun 7 22:25:11 Ubuntu-2204-jammy-amd64-base sshd[104350]: User root from 48.211.211.39 not allowed ...
show moreJun 7 22:25:11 Ubuntu-2204-jammy-amd64-base sshd[104350]: User root from 48.211.211.39 not allowed because not listed in AllowUsers
...
show less
Jun 8 00:12:47 maia sshd-session[4168730]: User root from 48.211.211.39 not allowed because none of ...
show moreJun 8 00:12:47 maia sshd-session[4168730]: User root from 48.211.211.39 not allowed because none of user's groups are listed in AllowGroups
Jun 8 00:12:50 maia sshd-session[4168730]: error: PAM: Authentication failure for illegal user root from 48.211.211.39
Jun 8 00:12:50 maia sshd-session[4168730]: Failed keyboard-interactive/pam for invalid user root from 48.211.211.39 port 38953 ssh2
...
show less
2026-06-07T19:18:22.266275 srv.apciemc.org sshd-session[8819]: Connection closed by authenticating u ...
show more2026-06-07T19:18:22.266275 srv.apciemc.org sshd-session[8819]: Connection closed by authenticating user root 48.211.211.39 port 38953 [preauth]
2026-06-07T21:02:02.783881 srv.apciemc.org sshd-session[9048]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=48.211.211.39 user=root
2026-06-07T21:02:04.578231 srv.apciemc.org sshd-session[9048]: Failed password for root from 48.211.211.39 port 38953 ssh2
...
show less
Brute-Force
Showing 1 to
15
of 40 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩