This IP address has been reported a total of
326
times from
189 distinct
sources.
197.248.15.98 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
May 7 11:03:07 orion01 sshd[3660312]: Invalid user user from 197.248.15.98 port 52652
May 7 11:03: ...
show moreMay 7 11:03:07 orion01 sshd[3660312]: Invalid user user from 197.248.15.98 port 52652
May 7 11:03:08 orion01 sshd[3660482]: Invalid user user from 197.248.15.98 port 52656
May 7 11:03:09 orion01 sshd[3660490]: Invalid user user from 197.248.15.98 port 52666
May 7 11:03:10 orion01 sshd[3660492]: Invalid user user from 197.248.15.98 port 52672
May 7 11:03:11 orion01 sshd[3660494]: Invalid user user from 197.248.15.98 port 52680
...
show less
May 7 11:40:33 dev sshd[3056136]: Failed password for root from 197.248.15.98 port 47818 ssh2
May ...
show moreMay 7 11:40:33 dev sshd[3056136]: Failed password for root from 197.248.15.98 port 47818 ssh2
May 7 11:40:35 dev sshd[3056138]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.248.15.98 user=root
May 7 11:40:37 dev sshd[3056138]: Failed password for root from 197.248.15.98 port 47834 ssh2
May 7 11:40:39 dev sshd[3056140]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.248.15.98 user=root
May 7 11:40:41 dev sshd[3056140]: Failed password for root from 197.248.15.98 port 50282 ssh2
...
show less
May 7 00:36:07 lamvda sshd[4108680]: Invalid user user from 197.248.15.98 port 46262
...
Brute-Force
SSH
Anonymous
2026-05-06T18:48:02.994113+00:00 mail sshd[1579659]: Invalid user user from 197.248.15.98 port 47596 ...
show more2026-05-06T18:48:02.994113+00:00 mail sshd[1579659]: Invalid user user from 197.248.15.98 port 47596
2026-05-06T18:48:04.139503+00:00 mail sshd[1579663]: Invalid user user from 197.248.15.98 port 47608
2026-05-06T18:48:05.293663+00:00 mail sshd[1579665]: Invalid user user from 197.248.15.98 port 47614
...
show less
May 6 09:09:03 bongen-tmp-rt.local sshd[3736197]: Connection closed by authenticating user root 197 ...
show moreMay 6 09:09:03 bongen-tmp-rt.local sshd[3736197]: Connection closed by authenticating user root 197.248.15.98 port 44048 [preauth]
May 6 09:09:05 bongen-tmp-rt.local sshd[3736283]: Connection closed by authenticating user root 197.248.15.98 port 44062 [preauth]
May 6 09:09:06 bongen-tmp-rt.local sshd[3736285]: Connection closed by authenticating user root 197.248.15.98 port 44066 [preauth]
May 6 09:09:07 bongen-tmp-rt.local sshd[3736288]: Connection closed by authenticating user root 197.248.15.98 port 42140 [preauth]
May 6 09:09:09 bongen-tmp-rt.local sshd[3736290]: Connection closed by authenticating user root 197.248.15.98 port 42150 [preauth]
show less
May 5 23:03:03 b146-62 sshd[1256581]: Failed password for root from 197.248.15.98 port 55332 ssh2
M ...
show moreMay 5 23:03:03 b146-62 sshd[1256581]: Failed password for root from 197.248.15.98 port 55332 ssh2
May 5 23:03:07 b146-62 sshd[1256583]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.248.15.98 user=root
May 5 23:03:10 b146-62 sshd[1256583]: Failed password for root from 197.248.15.98 port 59018 ssh2
...
show less
Detected by CrowdSec on as207169-92d01eb6: CrowdSec: crowdsecurity/ssh-slow-bf | ASN: 37061 (Safaric ...
show moreDetected by CrowdSec on as207169-92d01eb6: CrowdSec: crowdsecurity/ssh-slow-bf | ASN: 37061 (Safaricom) | Country: KE | Range: 197.248.0.0/16
show less