Log in to view charts and search reports for this IP.
Log In
Top Reporter Countries (Last 60 Days)
Example preview
Report Categories (Last 60 Days)
Example preview
Reports Activity
Example preview
Account required for the enhanced features
Log inSign up
IP Abuse Reports for 191.249.61.197:
This IP address has been reported a total of
19
times from
19 distinct
sources.
191.249.61.197 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Canada
with 3
reports;
Germany
with 3
reports;
United States of America
with 3
reports.
The most common categories in these recent reports were:
SSH
13
times;
Brute-Force
13
times;
Port Scan
5
times;
Hacking
2
times;
Web App Attack
1
time;
Other
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
191.249.61.197 (BR/Brazil/191.249.61.197.dynamic.adsl.gvt.net.br), 5 distributed sshd attacks on acc ...
show more191.249.61.197 (BR/Brazil/191.249.61.197.dynamic.adsl.gvt.net.br), 5 distributed sshd attacks on account [redacted]
show less
SSH Brute force: 1 attempts were recorded from 191.249.61.197
2026-09-06T01:28:11+02:00 Connection c ...
show moreSSH Brute force: 1 attempts were recorded from 191.249.61.197
2026-09-06T01:28:11+02:00 Connection closed by authenticating user root 191.249.61.197 port 34302 [preauth]
show less
Honeypot [honeypot-ca-sensor1]: Brute-force attack detected on 22/SSH
• Credentials: root:ubuntu, ro ...
show moreHoneypot [honeypot-ca-sensor1]: Brute-force attack detected on 22/SSH
• Credentials: root:ubuntu, root:debian, root:centos
• Number of login attempts: 3
• 1 command(s) were executed during the session
• Client: SSH-2.0-Go
• Uploaded files: sshd
show less
Sep 5 17:27:35 Ubuntu-2204-jammy-amd64-base sshd[2308811]: User root from 191.249.61.197 not allowe ...
show moreSep 5 17:27:35 Ubuntu-2204-jammy-amd64-base sshd[2308811]: User root from 191.249.61.197 not allowed because not listed in AllowUsers
...
show less
systemd timer sync; fail2ban jail=sshd host=tk ip=191.249.61.197; evidence=fail2ban log NOTICE Ban e ...
show moresystemd timer sync; fail2ban jail=sshd host=tk ip=191.249.61.197; evidence=fail2ban log NOTICE Ban event
show less
