This IP address has been reported a total of
6,502
times from
1,302 distinct
sources.
197.248.207.139 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Mar 12 14:22:21 do1 sshd[1569852]: Failed password for invalid user ttt from 197.248.207.139 port 40 ...
show moreMar 12 14:22:21 do1 sshd[1569852]: Failed password for invalid user ttt from 197.248.207.139 port 40768 ssh2
Mar 12 14:22:22 do1 sshd[1569852]: Disconnected from invalid user ttt 197.248.207.139 port 40768 [preauth]
Mar 12 14:27:44 do1 sshd[1573041]: Invalid user service from 197.248.207.139 port 27403
Mar 12 14:27:44 do1 sshd[1573041]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.248.207.139
Mar 12 14:27:47 do1 sshd[1573041]: Failed password for invalid user service from 197.248.207.139 port 27403 ssh2
...
show less
Mar 12 18:15:47 qube2 sshd[2263277]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eui ...
show moreMar 12 18:15:47 qube2 sshd[2263277]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.248.207.139
Mar 12 18:15:49 qube2 sshd[2263277]: Failed password for invalid user admin from 197.248.207.139 port 33030 ssh2
Mar 12 18:19:36 qube2 sshd[2265018]: Invalid user kali from 197.248.207.139 port 20366
...
show less
2026-03-12T17:13:52.420269+00:00 my-vps sshd-session[704100]: pam_unix(sshd:auth): authentication fa ...
show more2026-03-12T17:13:52.420269+00:00 my-vps sshd-session[704100]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.248.207.139
2026-03-12T17:13:55.090196+00:00 my-vps sshd-session[704100]: Failed password for invalid user admin from 197.248.207.139 port 25224 ssh2
2026-03-12T17:18:55.082367+00:00 my-vps sshd-session[717034]: Invalid user kali from 197.248.207.139 port 31606
...
show less
2026-03-12T18:15:10.456096+01:00 main sshd[468533]: Invalid user admin from 197.248.207.139 port 468 ...
show more2026-03-12T18:15:10.456096+01:00 main sshd[468533]: Invalid user admin from 197.248.207.139 port 4681
...
show less
Mar 12 16:54:08 localhost sshd[813160]: Failed password for invalid user sa from 197.248.207.139 por ...
show moreMar 12 16:54:08 localhost sshd[813160]: Failed password for invalid user sa from 197.248.207.139 port 61688 ssh2
Mar 12 16:56:27 localhost sshd[813192]: Invalid user hr from 197.248.207.139 port 13318
Mar 12 16:56:27 localhost sshd[813192]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.248.207.139
Mar 12 16:56:30 localhost sshd[813192]: Failed password for invalid user hr from 197.248.207.139 port 13318 ssh2
Mar 12 16:58:56 localhost sshd[813232]: Invalid user umar from 197.248.207.139 port 36410
...
show less
Mar 12 16:39:46 localhost sshd[812977]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ...
show moreMar 12 16:39:46 localhost sshd[812977]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.248.207.139
Mar 12 16:39:47 localhost sshd[812977]: Failed password for invalid user webuser from 197.248.207.139 port 32114 ssh2
Mar 12 16:42:09 localhost sshd[813025]: Invalid user zzy from 197.248.207.139 port 32533
Mar 12 16:42:09 localhost sshd[813025]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.248.207.139
Mar 12 16:42:11 localhost sshd[813025]: Failed password for invalid user zzy from 197.248.207.139 port 32533 ssh2
...
show less
Brute-Force
SSH
Showing 6376 to
6390
of 6502 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩