JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 48.217.107.113

48.217.107.113 was found in our database!

This IP was reported 76 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Washington, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 48.217.107.113

Whois 48.217.107.113

IP Abuse Reports for 48.217.107.113:

This IP address has been reported a total of 76 times from 61 distinct sources. 48.217.107.113 was first reported on April 8th 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇿 cazae	2026-04-08 19:50:32 (1 month ago)	2026-04-08T20:18:26.455499+01:00 server1 sshd-session[1018404]: Failed password for root from 48.217 ... show more 2026-04-08T20:18:26.455499+01:00 server1 sshd-session[1018404]: Failed password for root from 48.217.107.113 port 45064 ssh2 2026-04-08T20:42:02.786305+01:00 server1 sshd-session[1018920]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=48.217.107.113 user=root 2026-04-08T20:42:04.876116+01:00 server1 sshd-session[1018920]: Failed password for root from 48.217.107.113 port 45064 ssh2 2026-04-08T20:50:29.525816+01:00 server1 sshd-session[1019123]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=48.217.107.113 user=root 2026-04-08T20:50:31.284253+01:00 server1 sshd-session[1019123]: Failed password for root from 48.217.107.113 port 45064 ssh2 ... show less	Brute-Force SSH
🇺🇸 PlusReed	2026-04-08 19:46:30 (1 month ago)	Apr 8 15:38:00 plusreed sshd[12016]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ... show more Apr 8 15:38:00 plusreed sshd[12016]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=48.217.107.113 user=root Apr 8 15:38:02 plusreed sshd[12016]: Failed password for root from 48.217.107.113 port 45064 ssh2 Apr 8 15:46:27 plusreed sshd[14479]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=48.217.107.113 user=root Apr 8 15:46:29 plusreed sshd[14479]: Failed password for root from 48.217.107.113 port 45064 ssh2 ... show less	Brute-Force SSH
🇺🇸 heyzg	2026-04-08 19:37:21 (1 month ago)	SSH honeypot \| Reconnaissance + Auth Attempts (Moderate) \| 5 auths, 38 cmds, 73.0m \| go_scanner (lik ... show more SSH honeypot \| Reconnaissance + Auth Attempts (Moderate) \| 5 auths, 38 cmds, 73.0m \| go_scanner (likely bot) show less	Hacking SSH
🇺🇸 Rayulcifer	2026-04-08 19:31:52 (1 month ago)	2026-04-08T13:30:39.533653-05:00 ip-172-31-76-241 sshd[580615]: Connection closed by authenticating ... show more 2026-04-08T13:30:39.533653-05:00 ip-172-31-76-241 sshd[580615]: Connection closed by authenticating user root 48.217.107.113 port 45064 [preauth] 2026-04-08T13:38:56.804335-05:00 ip-172-31-76-241 sshd[663687]: Connection closed by authenticating user root 48.217.107.113 port 45064 [preauth] 2026-04-08T14:31:20.434896-05:00 ip-172-31-76-241 sshd[983850]: Connection closed by authenticating user root 48.217.107.113 port 45064 [preauth] ... show less	Brute-Force SSH
Anonymous	2026-04-08 19:27:57 (1 month ago)	2026-04-08 20:58:19,080 fail2ban.actions [3196941]: NOTICE [sshd] Ban 48.217.107.113 2026-04 ... show more 2026-04-08 20:58:19,080 fail2ban.actions [3196941]: NOTICE [sshd] Ban 48.217.107.113 2026-04-08 21:27:57,023 fail2ban.actions [3196941]: NOTICE [sshd] Ban 48.217.107.113 ... show less	Brute-Force Exploited Host
Anonymous	2026-04-08 19:27:18 (1 month ago)	2026-04-08T20:50:18.576009Hermes sshd[294700]: refused connect from 48.217.107.113 (48.217.107.113) ... show more 2026-04-08T20:50:18.576009Hermes sshd[294700]: refused connect from 48.217.107.113 (48.217.107.113) 2026-04-08T20:57:38.231599Hermes sshd[294726]: refused connect from 48.217.107.113 (48.217.107.113) 2026-04-08T21:04:56.365160Hermes sshd[294746]: refused connect from 48.217.107.113 (48.217.107.113) 2026-04-08T21:19:40.968954Hermes sshd[294843]: refused connect from 48.217.107.113 (48.217.107.113) 2026-04-08T21:27:17.904869Hermes sshd[294854]: refused connect from 48.217.107.113 (48.217.107.113) ... show less	Brute-Force SSH
🇺🇸 PlusReed	2026-04-08 19:22:20 (1 month ago)	Apr 8 15:07:31 plusreed sshd[3671]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eui ... show more Apr 8 15:07:31 plusreed sshd[3671]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=48.217.107.113 user=root Apr 8 15:07:33 plusreed sshd[3671]: Failed password for root from 48.217.107.113 port 45064 ssh2 Apr 8 15:14:50 plusreed sshd[5836]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=48.217.107.113 user=root Apr 8 15:14:52 plusreed sshd[5836]: Failed password for root from 48.217.107.113 port 45064 ssh2 Apr 8 15:22:18 plusreed sshd[7781]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=48.217.107.113 user=root Apr 8 15:22:20 plusreed sshd[7781]: Failed password for root from 48.217.107.113 port 45064 ssh2 ... show less	Brute-Force SSH
🇩🇪 ghostwarriors	2026-04-08 19:20:02 (1 month ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇫🇷 asemen	2026-04-08 19:17:54 (1 month ago)	2026-04-08T20:55:49.917640mbox.semen.de sshd[3010547]: Failed password for root from 48.217.107.113 ... show more 2026-04-08T20:55:49.917640mbox.semen.de sshd[3010547]: Failed password for root from 48.217.107.113 port 45064 ssh2 2026-04-08T21:03:05.849099mbox.semen.de sshd[3012353]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=48.217.107.113 user=root 2026-04-08T21:03:07.943599mbox.semen.de sshd[3012353]: Failed password for root from 48.217.107.113 port 45064 ssh2 2026-04-08T21:10:24.981561mbox.semen.de sshd[3014962]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=48.217.107.113 user=root 2026-04-08T21:10:27.006441mbox.semen.de sshd[3014962]: Failed password for root from 48.217.107.113 port 45064 ssh2 2026-04-08T21:17:51.459271mbox.semen.de sshd[3016874]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=48.217.107.113 user=root 2026-04-08T21:17:53.182926mbox.semen.de sshd[3016874]: Failed password for root from 48.217.107.113 port 45064 ssh2 ... show less	Port Scan Brute-Force SSH
Anonymous	2026-04-08 19:11:28 (1 month ago)	Apr 8 21:11:26 vmi3075181 sshd[2903800]: pam_unix(sshd:auth): authentication failure; logname= uid= ... show more Apr 8 21:11:26 vmi3075181 sshd[2903800]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=48.217.107.113 user=root Apr 8 21:11:28 vmi3075181 sshd[2903800]: Failed password for root from 48.217.107.113 port 45064 ssh2 ... show less	Brute-Force SSH
🇩🇪 yogi70	2026-04-08 19:09:47 (1 month ago)	Multiple failed SSH logins	Brute-Force SSH
Anonymous	2026-04-08 19:08:40 (1 month ago)	(sshd) Failed SSH login from 48.217.107.113 (US/United States/-): 4 in the last 3600 secs; Ports: ; ... show more (sshd) Failed SSH login from 48.217.107.113 (US/United States/-): 4 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SSHD; Logs: Apr 8 18:38:44 xn--80aqlfee4d sshd[28193]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=48.217.107.113 user=root Apr 8 18:38:46 xn--80aqlfee4d sshd[28193]: Failed password for root from 48.217.107.113 port 45064 ssh2 Apr 8 19:08:35 xn--80aqlfee4d sshd[9014]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=48.217.107.113 user=root Apr 8 19:08:36 xn--80aqlfee4d sshd[9014]: Failed password for root from 48.217.107.113 port 45064 ssh2 show less	Port Scan
🇿🇦 voolik.com	2026-04-08 19:02:30 (1 month ago)	2026-04-08T20:40:04.987648+02:00 bla016-truserv-jhb1-001 sshd[1644900]: refused connect from 48.217. ... show more 2026-04-08T20:40:04.987648+02:00 bla016-truserv-jhb1-001 sshd[1644900]: refused connect from 48.217.107.113 (48.217.107.113) 2026-04-08T20:42:47.903508+02:00 bla016-truserv-jhb1-001 sshd[1652048]: refused connect from 48.217.107.113 (48.217.107.113) 2026-04-08T20:57:39.039319+02:00 bla016-truserv-jhb1-001 sshd[1691377]: refused connect from 48.217.107.113 (48.217.107.113) 2026-04-08T21:02:30.391155+02:00 bla016-truserv-jhb1-001 sshd[1704572]: refused connect from 48.217.107.113 (48.217.107.113) ... show less	Brute-Force SSH
🇫🇷 suble.org	2026-04-08 19:01:03 (1 month ago)	2026-04-08T20:24:06.999370+02:00 swsrv sshd[1611650]: User root from 48.217.107.113 not allowed beca ... show more 2026-04-08T20:24:06.999370+02:00 swsrv sshd[1611650]: User root from 48.217.107.113 not allowed because not listed in AllowUsers 2026-04-08T20:30:12.473307+02:00 swsrv sshd[1623413]: User root from 48.217.107.113 not allowed because not listed in AllowUsers 2026-04-08T20:53:43.664734+02:00 swsrv sshd[1674012]: User root from 48.217.107.113 not allowed because not listed in AllowUsers 2026-04-08T21:01:02.732974+02:00 swsrv sshd[1687672]: User root from 48.217.107.113 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
🇺🇸 Nazgul	2026-04-08 18:58:33 (1 month ago)	SSH brute force attempt (f4)	Brute-Force SSH

Showing 31 to 45 of 76 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.231

🇭🇳 170.83.118.254

🇺🇸 135.237.127.207

🇳🇱 204.76.203.219

🇩🇪 185.169.3.152

🇺🇸 184.105.247.222

🇺🇸 162.216.150.40

🇮🇩 103.149.178.233

🇩🇪 82.21.68.118

🇳🇱 78.142.18.40

🇺🇸 72.10.32.138

🇳🇱 45.148.10.141

🇯🇵 20.190.141.37

🇺🇸 20.102.43.161

🇻🇳 14.225.7.70

🇺🇸 2607:f8b0:4001:c0d::12d

🇩🇪 209.38.222.175

🇧🇷 190.109.97.198

🇧🇷 189.113.198.58

🇵🇦 181.197.138.35