This IP address has been reported a total of
16
times from
15 distinct
sources.
207.244.237.48 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-06-22T22:35:05.042277+02:00 extreme-est sshd-session[380992]: Failed password for nobody from 2 ...
show more2026-06-22T22:35:05.042277+02:00 extreme-est sshd-session[380992]: Failed password for nobody from 207.244.237.48 port 53496 ssh2
... (mode: instant ban, root access or sth similar)
show less
Jun 22 19:19:45 h2930838 sshd[27438]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ...
show moreJun 22 19:19:45 h2930838 sshd[27438]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.244.237.48 user=nobody
Jun 22 19:19:48 h2930838 sshd[27438]: Failed password for invalid user nobody from 207.244.237.48 port 45108 ssh2
show less
2026-06-21T15:28:28.177629alwww1 sshd[1773225]: User nobody from 207.244.237.48 not allowed because ...
show more2026-06-21T15:28:28.177629alwww1 sshd[1773225]: User nobody from 207.244.237.48 not allowed because not listed in AllowUsers
2026-06-21T15:28:28.182117alwww1 sshd[1773225]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.244.237.48 user=nobody
2026-06-21T15:28:30.308769alwww1 sshd[1773225]: Failed password for invalid user nobody from 207.244.237.48 port 55428 ssh2
2026-06-21T15:28:31.928359alwww1 sshd[1773225]: Disconnecting invalid user nobody 207.244.237.48 port 55428: Change of username or service not allowed: (nobody,ssh-connection) -> (user,ssh-connection) [preauth]
...
show less
Jun 21 13:59:19 ***** sshd[783110]: User nobody from 207.244.237.48 not allowed because not listed i ...
show moreJun 21 13:59:19 ***** sshd[783110]: User nobody from 207.244.237.48 not allowed because not listed in AllowUsers
show less
[Sat Jun 20 07:39:12 PM CEST 2026] [Automated Fail2Ban Report] Unauthorized attempt to connect via S ...
show more[Sat Jun 20 07:39:12 PM CEST 2026] [Automated Fail2Ban Report] Unauthorized attempt to connect via SSH
show less
2026-06-20T13:35:12.232909+02:00 kotiacat sshd-session[2217190]: Disconnecting authenticating user n ...
show more2026-06-20T13:35:12.232909+02:00 kotiacat sshd-session[2217190]: Disconnecting authenticating user nobody 207.244.237.48 port 47334: Change of username or service not allowed: (nobody,ssh-connection) -> (tomcat,ssh-connection) [preauth]
...
show less
Brute-Force
SSH
Showing 1 to
15
of 16 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩