JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 197.248.207.139

197.248.207.139 was found in our database!

This IP was reported 6,507 times. Confidence of Abuse is 100%: ?

100%

ISP	Safaricom Limited
Usage Type	Fixed Line ISP
ASN	AS37061
Hostname(s)	197-248-207-139.safaricombusiness.co.ke
Domain Name	safaricom.co.ke
Country	🇰🇪 Kenya
City	Nairobi, Nairobi County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 197.248.207.139

Whois 197.248.207.139

IP Abuse Reports for 197.248.207.139:

This IP address has been reported a total of 6,507 times from 1,302 distinct sources. 197.248.207.139 was first reported on March 12th 2024, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 brycemaxheimer	2026-06-02 15:50:01 (1 day ago)	Cowrie SSH honeypot: 16 events in 10m window 2026-06-02T15:40:00+00:00. Users tried: 345gs5662d34,co ... show more Cowrie SSH honeypot: 16 events in 10m window 2026-06-02T15:40:00+00:00. Users tried: 345gs5662d34,cowrie,hardy,minecraft,online. Commands: cd ~; chattr -ia .ssh; lockr -ia .ssh ; cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXx ; cd ~; chattr -ia .ssh; lockr -ia .ssh ; cd ~ && rm -rf .s show less	Hacking Brute-Force SSH
🇺🇸 brycemaxheimer	2026-06-02 15:30:01 (1 day ago)	Cowrie SSH honeypot: 11 events in 10m window 2026-06-02T15:20:00+00:00. Users tried: 345gs5662d34,ba ... show more Cowrie SSH honeypot: 11 events in 10m window 2026-06-02T15:20:00+00:00. Users tried: 345gs5662d34,bastion,bitrix,kannel,noc. Commands: cd ~; chattr -ia .ssh; lockr -ia .ssh ; cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXx show less	Hacking Brute-Force SSH
🇺🇸 Runlevel0	2026-06-02 15:24:55 (1 day ago)	Too many failed attempts / attacks from 197.248.207.139	Brute-Force FTP Brute-Force Port Scan
🇺🇸 brycemaxheimer	2026-06-02 15:10:02 (1 day ago)	Cowrie SSH honeypot: 1 events in 10m window 2026-06-02T15:00:00+00:00. Users tried: stephen. Command ... show more Cowrie SSH honeypot: 1 events in 10m window 2026-06-02T15:00:00+00:00. Users tried: stephen. Commands: show less	Brute-Force SSH
🇨🇭 GAS	2026-06-02 14:23:29 (1 day ago)	SSH Honeypot attack. 2026-05-30T22:00:12Z{"client_version":"SSH-2.0-libssh_0.9.6","duser":"frappe"," ... show more SSH Honeypot attack. 2026-05-30T22:00:12Z{"client_version":"SSH-2.0-libssh_0.9.6","duser":"frappe","level":"info","msg":"Request with password","password":"123123","server_version":"SSH-2.0-OpenSSH_7.4","src":"197.248.207.139","time":"2026-05-31T03:33:16.727433158Z"} 2026-05-30T22:00:12Z{"client_version":"SSH-2.0-libssh_0.9.6","duser":"ldap","level":"info","msg":"Request with password","password":"ldap","server_version":"SSH-2.0-OpenSSH_7.4","src":"197.248.207.139","time":"2026-05-31T03:39:56.736750882Z"} 2026-05-30T22:00:12Z{"client_version":"SSH-2.0-libssh_0.9.6","duser":"root","level":"info","msg":"Request with password","password":",ki89ol.","server_version":"SSH-2.0-OpenSSH_7.4","src":"197.248.207.139","time":"2026-05-31T03:44:42.000687461Z"} 2026-05-30T22:00:12Z{"client_version":"SSH-2.0-libssh_0.9.6","duser":"dhis","level":"info","msg":"Request with password","password":"dhis","server_version":"SSH-2.0-OpenSSH_7.4","src":"197.248.207.139","time":"2026-05-31T03:46:24.217355874Z"} 2026-05-30T22:00:12 ... show less	Brute-Force SSH
🇩🇪 pnpde.social	2026-06-02 14:20:51 (1 day ago)	2026-06-02T16:18:45.190120+02:00 deneir sshd[635987]: pam_unix(sshd:auth): authentication failure; l ... show more 2026-06-02T16:18:45.190120+02:00 deneir sshd[635987]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.248.207.139 user=root 2026-06-02T16:18:46.744390+02:00 deneir sshd[635987]: Failed password for root from 197.248.207.139 port 32313 ssh2 2026-06-02T16:20:48.369689+02:00 deneir sshd[641562]: Invalid user superset from 197.248.207.139 port 54340 2026-06-02T16:20:48.375138+02:00 deneir sshd[641562]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.248.207.139 2026-06-02T16:20:50.481782+02:00 deneir sshd[641562]: Failed password for invalid user superset from 197.248.207.139 port 54340 ssh2 ... show less	Brute-Force SSH
🇩🇪 pnpde.social	2026-06-02 14:05:30 (1 day ago)	2026-06-02T16:03:38.153571+02:00 deneir sshd[595308]: pam_unix(sshd:auth): authentication failure; l ... show more 2026-06-02T16:03:38.153571+02:00 deneir sshd[595308]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.248.207.139 user=root 2026-06-02T16:03:39.858838+02:00 deneir sshd[595308]: Failed password for root from 197.248.207.139 port 2413 ssh2 2026-06-02T16:05:28.077083+02:00 deneir sshd[600250]: Invalid user ghost from 197.248.207.139 port 2051 2026-06-02T16:05:28.086654+02:00 deneir sshd[600250]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.248.207.139 2026-06-02T16:05:29.892381+02:00 deneir sshd[600250]: Failed password for invalid user ghost from 197.248.207.139 port 2051 ssh2 ... show less	Brute-Force SSH
🇺🇸 yzfdude1	2026-06-02 14:00:14 (1 day ago)	2026-06-02T08:00:12.233659-06:00 vaako sshd[3428593]: Invalid user ca from 197.248.207.139 port 6457 ... show more 2026-06-02T08:00:12.233659-06:00 vaako sshd[3428593]: Invalid user ca from 197.248.207.139 port 64570 2026-06-02T08:00:12.239079-06:00 vaako sshd[3428593]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.248.207.139 2026-06-02T08:00:13.663448-06:00 vaako sshd[3428593]: Failed password for invalid user ca from 197.248.207.139 port 64570 ssh2 ... show less	Brute-Force SSH
Anonymous	2026-06-02 12:59:04 (1 day ago)	2026-06-02T12:48:39.423245 EUR sshd[17687]: Invalid user mohit from 197.248.207.139 port 36425 2026- ... show more 2026-06-02T12:48:39.423245 EUR sshd[17687]: Invalid user mohit from 197.248.207.139 port 36425 2026-06-02T12:55:33.177337 EUR sshd[19450]: Invalid user test from 197.248.207.139 port 3793 2026-06-02T12:59:04.119214 EUR sshd[20210]: Invalid user clawd from 197.248.207.139 port 20349 ... show less	Brute-Force SSH
🇵🇱 Wepted	2026-06-02 12:58:50 (1 day ago)	2026-06-02T14:46:57.556970+02:00 axisverse sshd-session[554117]: Invalid user mohit from 197.248.207 ... show more 2026-06-02T14:46:57.556970+02:00 axisverse sshd-session[554117]: Invalid user mohit from 197.248.207.139 port 36056 2026-06-02T14:55:15.945575+02:00 axisverse sshd-session[568946]: Invalid user test from 197.248.207.139 port 10894 2026-06-02T14:58:49.215296+02:00 axisverse sshd-session[575561]: Invalid user clawd from 197.248.207.139 port 19920 ... show less	Brute-Force SSH
🇺🇸 vertali	2026-06-02 12:58:02 (1 day ago)	CSF/LFD blocked 197.248.207.139 after LF_SSHD on * (inout, perm=1, ttl=1s). Reason: (sshd) Failed SS ... show more CSF/LFD blocked 197.248.207.139 after LF_SSHD on * (inout, perm=1, ttl=1s). Reason: (sshd) Failed SSH login from 197.248.207.139 (KE/Kenya/197-248-207-139.safaricombusiness.co.ke): 5 in the last 3600 secs. Evidence: Jun 2 07:52:52 paladin sshd[595402]: Invalid user mohit from 197.248.207.139 port 14916 show less	Brute-Force SSH
Anonymous	2026-06-02 12:42:33 (1 day ago)	2026-06-02T14:40:34.487168 prodWEB sshd[45511]: Failed password for invalid user manager from 197.24 ... show more 2026-06-02T14:40:34.487168 prodWEB sshd[45511]: Failed password for invalid user manager from 197.248.207.139 port 17616 ssh2 2026-06-02T14:42:20.769328 prodWEB sshd[45540]: Connection from 197.248.207.139 port 13361 on 57.128.10.223 port 22 rdomain "" 2026-06-02T14:42:21.498075 prodWEB sshd[45540]: Invalid user admin from 197.248.207.139 port 13361 ... show less	Brute-Force SSH
Anonymous	2026-06-02 12:17:14 (1 day ago)	2026-06-02T14:17:04.446251 prodWEB sshd[45137]: Connection from 197.248.207.139 port 56945 on 57.128 ... show more 2026-06-02T14:17:04.446251 prodWEB sshd[45137]: Connection from 197.248.207.139 port 56945 on 57.128.10.223 port 22 rdomain "" 2026-06-02T14:17:05.201088 prodWEB sshd[45137]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.248.207.139 user=root 2026-06-02T14:17:07.258632 prodWEB sshd[45137]: Failed password for root from 197.248.207.139 port 56945 ssh2 ... show less	Brute-Force SSH
🇺🇸 clair	2026-06-02 11:57:27 (1 day ago)	2026-06-02T07:52:06.441649-04:00 amadeus sshd-session[595685]: Invalid user stage from 197.248.207.1 ... show more 2026-06-02T07:52:06.441649-04:00 amadeus sshd-session[595685]: Invalid user stage from 197.248.207.139 port 63441 2026-06-02T07:57:25.273766-04:00 amadeus sshd-session[607073]: Connection from 197.248.207.139 port 49690 on 192.168.1.93 port 22 rdomain "" 2026-06-02T07:57:26.774031-04:00 amadeus sshd-session[607073]: Invalid user admin from 197.248.207.139 port 49690 ... show less	Brute-Force SSH
Anonymous	2026-06-02 11:52:11 (1 day ago)	2026-06-02T13:44:40.158330 prodWEB sshd[44655]: Failed password for invalid user valentina from 197. ... show more 2026-06-02T13:44:40.158330 prodWEB sshd[44655]: Failed password for invalid user valentina from 197.248.207.139 port 38442 ssh2 2026-06-02T13:52:04.130997 prodWEB sshd[44759]: Connection from 197.248.207.139 port 19422 on 57.128.10.223 port 22 rdomain "" 2026-06-02T13:52:04.859528 prodWEB sshd[44759]: Invalid user stage from 197.248.207.139 port 19422 ... show less	Brute-Force SSH

Showing 106 to 120 of 6507 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 174.75.211.204

🇮🇷 2.180.41.169

🇭🇰 202.82.20.241

🇳🇱 193.176.31.243

🇫🇷 185.255.126.68

🇵🇰 103.102.40.224

🇵🇸 87.252.110.52

🇨🇦 85.217.149.68

🇬🇧 81.19.219.250

🇺🇸 34.21.76.3

🇲🇽 2806:10a6:14:f243:653f:4fa9:2b51:8097

🇵🇭 222.127.153.46

🇪🇸 212.231.190.106

🇮🇩 202.72.196.75

🇦🇺 202.62.129.18

🇮🇳 202.62.88.27

🇺🇸 174.75.211.203

🇺🇸 170.106.179.118

🇯🇵 160.251.233.37

🇵🇰 153.117.1.188