This IP address has been reported a total of
6,491
times from
1,301 distinct
sources.
197.248.207.139 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-06-03T06:53:14.759938+02:00 magic sshd-session[3458948]: pam_unix(sshd:auth): authentication fa ...
show more2026-06-03T06:53:14.759938+02:00 magic sshd-session[3458948]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.248.207.139
2026-06-03T06:53:17.530126+02:00 magic sshd-session[3458948]: Failed password for invalid user apollo from 197.248.207.139 port 4661 ssh2
2026-06-03T06:57:17.933064+02:00 magic sshd-session[3460098]: Invalid user test_user from 197.248.207.139 port 33656
show less
Jun 3 02:43:47 elasticsearch sshd[1692911]: Invalid user pmo from 197.248.207.139 port 60248
Jun 3 ...
show moreJun 3 02:43:47 elasticsearch sshd[1692911]: Invalid user pmo from 197.248.207.139 port 60248
Jun 3 02:51:19 elasticsearch sshd[1692920]: Invalid user jxpt from 197.248.207.139 port 65092
Jun 3 02:53:23 elasticsearch sshd[1692924]: Invalid user dts from 197.248.207.139 port 57639
...
show less
2026-06-03T10:48:45.904485+09:00 lw-vm-v1-nrt sshd[3669494]: pam_unix(sshd:auth): authentication fai ...
show more2026-06-03T10:48:45.904485+09:00 lw-vm-v1-nrt sshd[3669494]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.248.207.139
2026-06-03T10:48:47.624793+09:00 lw-vm-v1-nrt sshd[3669494]: Failed password for invalid user sunil from 197.248.207.139 port 19401 ssh2
2026-06-03T10:59:26.322638+09:00 lw-vm-v1-nrt sshd[3673261]: Invalid user rr from 197.248.207.139 port 11067
...
show less
2026-06-03T01:21:09.498359+00:00 ubuntu sshd[2521023]: Invalid user salman from 197.248.207.139 port ...
show more2026-06-03T01:21:09.498359+00:00 ubuntu sshd[2521023]: Invalid user salman from 197.248.207.139 port 61732
2026-06-03T01:27:21.109117+00:00 ubuntu sshd[2521141]: Invalid user monitoring from 197.248.207.139 port 4057
...
show less
[CDN] Auto banned by Fail2Ban. Reason: SSH brute force / repeated failed login attempts. Evidence:
...
show more[CDN] Auto banned by Fail2Ban. Reason: SSH brute force / repeated failed login attempts. Evidence:
Jun 3 01:48:22 cdn sshd[490951]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.248.207.139
Jun 3 01:48:25 cdn sshd[490951]: Failed password for invalid user tym from 197.248.207.139 port 23712 ssh2
Jun 3 01:50:25 cdn sshd[491066]: Invalid user rishabh from 197.248.207.139 port 9585
Jun 3 01:50:25 cdn sshd[491066]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.248.207.139
Jun 3 01:50:27 cdn sshd[491066]: Failed password for invalid user rishabh from 197.248.207.139 port 9585 ssh2
show less
2026-06-03T00:47:16.320606+00:00 ubuntu sshd[2520742]: Invalid user tym from 197.248.207.139 port 35 ...
show more2026-06-03T00:47:16.320606+00:00 ubuntu sshd[2520742]: Invalid user tym from 197.248.207.139 port 35507
2026-06-03T00:49:22.909079+00:00 ubuntu sshd[2520771]: Invalid user rishabh from 197.248.207.139 port 12230
...
show less
Brute-Force
SSH
Showing 46 to
60
of 6491 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩