This IP address has been reported a total of
65
times from
45 distinct
sources.
197.248.207.138 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-07-16T08:45:18.844098+02:00 pbs sshd-session[2774462]: pam_unix(sshd:auth): authentication fail ...
show more2026-07-16T08:45:18.844098+02:00 pbs sshd-session[2774462]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.248.207.138
2026-07-16T08:45:21.083125+02:00 pbs sshd-session[2774462]: Failed password for invalid user public from 197.248.207.138 port 1429 ssh2
2026-07-16T08:48:27.892789+02:00 pbs sshd-session[2774568]: Invalid user mostafa from 197.248.207.138 port 1430
2026-07-16T08:48:27.897603+02:00 pbs sshd-session[2774568]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.248.207.138
2026-07-16T08:48:29.839453+02:00 pbs sshd-session[2774568]: Failed password for invalid user mostafa from 197.248.207.138 port 1430 ssh2
...
show less
2026-07-16T08:24:08.124590+02:00 pbs sshd-session[2773701]: Invalid user vincent from 197.248.207.13 ...
show more2026-07-16T08:24:08.124590+02:00 pbs sshd-session[2773701]: Invalid user vincent from 197.248.207.138 port 1422
2026-07-16T08:24:08.129745+02:00 pbs sshd-session[2773701]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.248.207.138
2026-07-16T08:24:09.511990+02:00 pbs sshd-session[2773701]: Failed password for invalid user vincent from 197.248.207.138 port 1422 ssh2
2026-07-16T08:26:54.051020+02:00 pbs sshd-session[2773805]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.248.207.138 user=root
2026-07-16T08:26:56.410458+02:00 pbs sshd-session[2773805]: Failed password for root from 197.248.207.138 port 1423 ssh2
...
show less
2026-07-16T08:00:27.887333+02:00 pbs sshd-session[2772856]: Failed password for invalid user vyos fr ...
show more2026-07-16T08:00:27.887333+02:00 pbs sshd-session[2772856]: Failed password for invalid user vyos from 197.248.207.138 port 1427 ssh2
2026-07-16T08:03:19.438918+02:00 pbs sshd-session[2772958]: Invalid user egarcia from 197.248.207.138 port 1428
2026-07-16T08:03:19.443860+02:00 pbs sshd-session[2772958]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.248.207.138
2026-07-16T08:03:21.884995+02:00 pbs sshd-session[2772958]: Failed password for invalid user egarcia from 197.248.207.138 port 1428 ssh2
2026-07-16T08:06:06.625645+02:00 pbs sshd-session[2773062]: Invalid user deploy from 197.248.207.138 port 1429
...
show less
2026-07-16T02:49:12.938499-03:00 server sshd[2571847]: Invalid user weblogic from 197.248.207.138 po ...
show more2026-07-16T02:49:12.938499-03:00 server sshd[2571847]: Invalid user weblogic from 197.248.207.138 port 1217
2026-07-16T02:51:58.831735-03:00 server sshd[2574259]: Connection from 197.248.207.138 port 1397 on 10.x.x.x port 22 rdomain ""
2026-07-16T02:52:00.610467-03:00 server sshd[2574259]: Invalid user git-admin from 197.248.207.138 port 1397
...
show less
2026-07-16T07:40:38.637733+02:00 pbs sshd-session[2772124]: Invalid user tkadmin from 197.248.207.13 ...
show more2026-07-16T07:40:38.637733+02:00 pbs sshd-session[2772124]: Invalid user tkadmin from 197.248.207.138 port 1322
2026-07-16T07:40:38.643951+02:00 pbs sshd-session[2772124]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.248.207.138
2026-07-16T07:40:41.211845+02:00 pbs sshd-session[2772124]: Failed password for invalid user tkadmin from 197.248.207.138 port 1322 ssh2
2026-07-16T07:43:26.417585+02:00 pbs sshd-session[2772239]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.248.207.138 user=root
2026-07-16T07:43:28.463225+02:00 pbs sshd-session[2772239]: Failed password for root from 197.248.207.138 port 1393 ssh2
...
show less
2026-07-15T23:38:45.301625-06:00 chawla sshd[458750]: pam_unix(sshd:auth): authentication failure; l ...
show more2026-07-15T23:38:45.301625-06:00 chawla sshd[458750]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.248.207.138 user=root
2026-07-15T23:38:47.774010-06:00 chawla sshd[458750]: Failed password for root from 197.248.207.138 port 1194 ssh2
2026-07-15T23:41:36.264160-06:00 chawla sshd[458817]: Invalid user tkadmin from 197.248.207.138 port 1261
...
show less
Brute-Force
SSH
Anonymous
2026-07-16T05:22:20.707421+00:00 mail sshd[1033515]: pam_unix(sshd:auth): authentication failure; lo ...
show more2026-07-16T05:22:20.707421+00:00 mail sshd[1033515]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.248.207.138 user=root
2026-07-16T05:22:22.959942+00:00 mail sshd[1033515]: Failed password for root from 197.248.207.138 port 1350 ssh2
2026-07-16T05:25:21.626571+00:00 mail sshd[1033551]: Invalid user user1 from 197.248.207.138 port 1224
2026-07-16T05:25:21.632018+00:00 mail sshd[1033551]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.248.207.138
2026-07-16T05:25:24.064456+00:00 mail sshd[1033551]: Failed password for invalid user user1 from 197.248.207.138 port 1224 ssh2
...
show less
2026-07-16T07:22:02.204486+02:00 eproxy sshd[437497]: User root not allowed because account is locke ...
show more2026-07-16T07:22:02.204486+02:00 eproxy sshd[437497]: User root not allowed because account is locked
2026-07-16T07:22:02.351611+02:00 eproxy sshd[437497]: Received disconnect from 197.248.207.138 port 1269:11: Bye Bye [preauth]
...
show less
Jul 15 23:16:25 phobos sshd[419102]: Failed password for invalid user lx from 197.248.207.138 port 1 ...
show moreJul 15 23:16:25 phobos sshd[419102]: Failed password for invalid user lx from 197.248.207.138 port 1420 ssh2
Jul 15 23:21:31 phobos sshd[419173]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.248.207.138 user=root
Jul 15 23:21:34 phobos sshd[419173]: Failed password for root from 197.248.207.138 port 1310 ssh2
...
show less
2026-07-16T07:12:37.968419+02:00 thor sshd-session[68512]: pam_unix(sshd:auth): authentication failu ...
show more2026-07-16T07:12:37.968419+02:00 thor sshd-session[68512]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.248.207.138
2026-07-16T07:12:40.749928+02:00 thor sshd-session[68512]: Failed password for invalid user lx from 197.248.207.138 port 1331 ssh2
2026-07-16T07:12:42.582704+02:00 thor sshd-session[68512]: Disconnected from invalid user lx 197.248.207.138 port 1331 [preauth]
...
show less
Brute-Force
SSH
Anonymous
SSH brute force attempt. User: jhlee, Pass: [REDACTED]
Brute-Force
SSH
Anonymous
SSH brute force attempt. User: root, Pass: [REDACTED]
Brute-Force
SSH
Showing 1 to
15
of 65 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩