This IP address has been reported a total of
1,603
times from
697 distinct
sources.
197.140.11.157 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
May 22 14:43:11 vps2 sshd[1232294]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid ...
show moreMay 22 14:43:11 vps2 sshd[1232294]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.140.11.157
May 22 14:43:13 vps2 sshd[1232294]: Failed password for invalid user postgres from 197.140.11.157 port 53976 ssh2
May 22 14:48:53 vps2 sshd[1233331]: Invalid user pgadmin from 197.140.11.157 port 60850
...
show less
Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-05-22T12:04:45Z and 2026-05-2 ...
show moreCowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-05-22T12:04:45Z and 2026-05-22T12:42:49Z
show less
SSH Brute force: 25 attempts were recorded from 197.140.11.157
2026-05-22T14:06:24+02:00 Disconnecte ...
show moreSSH Brute force: 25 attempts were recorded from 197.140.11.157
2026-05-22T14:06:24+02:00 Disconnected from authenticating user root 197.140.11.157 port 56072 [preauth]
2026-05-22T14:10:15+02:00 Invalid user user from 197.140.11.157 port 41960
2026-05-22T14:02:32+02:00 Disconnected from authenticating user root 197.140.11.157 port 55448 [preauth]
2026-05-22T14:08:05+02:00 Invalid user user from 197.140.11.157 port 57424
2026-05-22T14:11:56+02:00 Invalid user admin from 197.140.11.157 port 49362
2026-05-22T13:17:10+02:00 Disconnected from authenticating user root 197.140.11.157 port 38336 [preauth]
2026-05-22T13:22:24+02:00 Invalid user ftptest from 197.140.11.157 port 34732
2026-05-22T13:26:48+02:00 Disconnected from authenticating user root 197.140.11.157 port 39370 [preauth]
2026-05-22T13:30:59+02:00 Disconnected from authenticating user root 197.140.11.157 port 51730 [preauth]
2026-05-
show less
2026-05-22T07:10:14.517483-05:00 vault sshd[1178094]: pam_unix(sshd:auth): authentication failure; l ...
show more2026-05-22T07:10:14.517483-05:00 vault sshd[1178094]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.140.11.157
2026-05-22T07:10:16.786372-05:00 vault sshd[1178094]: Failed password for invalid user user from 197.140.11.157 port 47464 ssh2
2026-05-22T07:14:00.373623-05:00 vault sshd[1206533]: Invalid user admin from 197.140.11.157 port 50034
2026-05-22T07:14:00.376305-05:00 vault sshd[1206533]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.140.11.157
2026-05-22T07:14:02.668419-05:00 vault sshd[1206533]: Failed password for invalid user admin from 197.140.11.157 port 50034 ssh2
...
show less
May 22 13:21:04 fw01 sshd[1970168]: Invalid user ftptest from 197.140.11.157 port 44526
May 22 13:38 ...
show moreMay 22 13:21:04 fw01 sshd[1970168]: Invalid user ftptest from 197.140.11.157 port 44526
May 22 13:38:22 fw01 sshd[1970938]: Invalid user uftp from 197.140.11.157 port 49116
May 22 13:42:44 fw01 sshd[1970981]: Invalid user sonar from 197.140.11.157 port 32900
May 22 13:47:02 fw01 sshd[1971096]: Invalid user steam from 197.140.11.157 port 54648
...
show less
2026-05-22T11:21:19.330996+00:00 habibi.infra.lumis.moe sshd-session[854448]: Invalid user ftptest f ...
show more2026-05-22T11:21:19.330996+00:00 habibi.infra.lumis.moe sshd-session[854448]: Invalid user ftptest from 197.140.11.157 port 37236
2026-05-22T11:21:19.335016+00:00 habibi.infra.lumis.moe sshd-session[854448]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.140.11.157
2026-05-22T11:21:21.437279+00:00 habibi.infra.lumis.moe sshd-session[854448]: Failed password for invalid user ftptest from 197.140.11.157 port 37236 ssh2
...
show less
Brute-Force
SSH
Anonymous
Fail2Ban banned IP after 3 attempts against AbuseIPDB
197.140.11.157 (DZ/Algeria/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; P ...
show more197.140.11.157 (DZ/Algeria/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 22 05:28:20 14048 sshd[11960]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.255.227 user=root
May 22 05:28:23 14048 sshd[11960]: Failed password for root from 141.98.255.227 port 45606 ssh2
May 22 05:23:42 14048 sshd[9682]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.24.11.144 user=root
May 22 05:23:44 14048 sshd[9682]: Failed password for root from 185.24.11.144 port 46824 ssh2
May 22 06:17:17 14048 sshd[2297]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.140.11.157 user=root
IP Addresses Blocked:
141.98.255.227 (SE/Sweden/-)
185.24.11.144 (AT/Austria/unn-185-24-11-144.datapacket.com)
show less
Brute-Force
SSH
Anonymous
2026-05-22T13:16:40.839192 localhost.localdomain sshd[3513837]: Failed password for root from 197.14 ...
show more2026-05-22T13:16:40.839192 localhost.localdomain sshd[3513837]: Failed password for root from 197.140.11.157 port 43930 ssh2
2026-05-22T13:16:42.127378 localhost.localdomain sshd[3513837]: Disconnected from authenticating user root 197.140.11.157 port 43930 [preauth]
...
show less