This IP address has been reported a total of
19
times from
19 distinct
sources.
107.175.239.48 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
2026-09-02T12:49:30.088733+00:00 nyc-1-f14-20 sshd-session[3986654]: Failed password for root from 1 ...
show more2026-09-02T12:49:30.088733+00:00 nyc-1-f14-20 sshd-session[3986654]: Failed password for root from 107.175.239.48 port 58602 ssh2
2026-09-02T12:50:21.204391+00:00 nyc-1-f14-20 sshd-session[3986976]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.175.239.48 user=root
2026-09-02T12:50:23.168475+00:00 nyc-1-f14-20 sshd-session[3986976]: Failed password for root from 107.175.239.48 port 43352 ssh2
...
show less
Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 2222 [1] TCP
Reported by DisPaisy ...
show moreHoneypot [fra-de-honeypot]: Empty payload (likely service probe); 2222 [1] TCP
Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less
2026-09-01T20:04:44.247020+00:00 vps1 sshd[3978322]: Connection reset by 107.175.239.48 port 54696
2 ...
show more2026-09-01T20:04:44.247020+00:00 vps1 sshd[3978322]: Connection reset by 107.175.239.48 port 54696
2026-09-01T20:04:49.481574+00:00 vps1 sshd[3978346]: error: kex_exchange_identification: read: Connection reset by peer
2026-09-01T20:04:49.481626+00:00 vps1 sshd[3978346]: Connection reset by 107.175.239.48 port 50116
...
show less
2026-09-01T18:51:45.787274Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 107.175.239.48:517 ...
show more2026-09-01T18:51:45.787274Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 107.175.239.48:51712 (158.69.22.11:2222) [session: 780f0514866d]
2026-09-01T18:51:49.643709Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 107.175.239.48:51726 (158.69.22.11:2222) [session: ba1ae04af171]
...
show less
2026-08-25T19:54:57.622199+00:00 smokeping-nik-ams01.pdx.net.uk sshd[96104]: Failed password for roo ...
show more2026-08-25T19:54:57.622199+00:00 smokeping-nik-ams01.pdx.net.uk sshd[96104]: Failed password for root from 107.175.239.48 port 48394 ssh2
2026-08-25T19:55:14.257565+00:00 smokeping-nik-ams01.pdx.net.uk sshd[96134]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.175.239.48 user=root
2026-08-25T19:55:16.149394+00:00 smokeping-nik-ams01.pdx.net.uk sshd[96134]: Failed password for root from 107.175.239.48 port 57140 ssh2
...
show less
Aug 19 17:13:09 UBSDev sshd[939321]: Failed password for root from 107.175.239.48 port 44228 ssh2
Au ...
show moreAug 19 17:13:09 UBSDev sshd[939321]: Failed password for root from 107.175.239.48 port 44228 ssh2
Aug 19 17:13:29 UBSDev sshd[939323]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.175.239.48 user=root
Aug 19 17:13:31 UBSDev sshd[939323]: Failed password for root from 107.175.239.48 port 37252 ssh2
Aug 19 17:13:53 UBSDev sshd[939325]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.175.239.48 user=root
Aug 19 17:13:55 UBSDev sshd[939325]: Failed password for root from 107.175.239.48 port 49940 ssh2
Aug 19 17:14:16 UBSDev sshd[939329]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.175.239.48 user=root
Aug 19 17:14:19 UBSDev sshd[939329]: Failed password for root from 107.175.239.48 port 41532 ssh2
...
show less
Aug 18 01:14:31 vmori-manager-1 sshd[265128]: Connection closed by authenticating user root 107.175. ...
show moreAug 18 01:14:31 vmori-manager-1 sshd[265128]: Connection closed by authenticating user root 107.175.239.48 port 59038 [preauth]
...
show less
Brute-Force
SSH
Showing 1 to
15
of 19 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩