This IP address has been reported a total of
127
times from
81 distinct
sources.
31.197.172.42 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
2026-07-19T13:44:51.930695+08:00 HKCM1-20260502115917ab4c7d sshd[36285]: pam_unix(sshd:auth): authen ...
show more2026-07-19T13:44:51.930695+08:00 HKCM1-20260502115917ab4c7d sshd[36285]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.197.172.42 user=root
2026-07-19T13:44:53.629302+08:00 HKCM1-20260502115917ab4c7d sshd[36285]: Failed password for root from 31.197.172.42 port 13280 ssh2
2026-07-19T13:44:54.084309+08:00 HKCM1-20260502115917ab4c7d sshd[36287]: Invalid user admin from 31.197.172.42 port 20417
2026-07-19T13:44:56.180028+08:00 HKCM1-20260502115917ab4c7d sshd[36289]: Invalid user user from 31.197.172.42 port 13282
2026-07-19T13:44:54.093957+08:00 HKCM1-20260502115917ab4c7d sshd[36287]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.197.172.42
2026-07-19T13:44:56.203293+08:00 HKCM1-20260502115917ab4c7d sshd[36287]: Failed password for invalid user admin from 31.197.172.42 port 20417 ssh2
...
show less
Brute-Force
SSH
Anonymous
2026-07-16T05:05:46.283491+00:00 UnitedStates1 sshd-session[74569]: Connection closed by 31.197.172. ...
show more2026-07-16T05:05:46.283491+00:00 UnitedStates1 sshd-session[74569]: Connection closed by 31.197.172.42 port 11012 [preauth]
2026-07-16T05:05:47.540404+00:00 UnitedStates1 sshd-session[74742]: Unable to negotiate with 31.197.172.42 port 62176: no matching cipher found. Their offer: aes128-ctr [preauth]
...
show less
2026-07-15T14:04:43.799625+02:00 weberin sshd[327830]: Invalid user admin from 31.197.172.42 port 11 ...
show more2026-07-15T14:04:43.799625+02:00 weberin sshd[327830]: Invalid user admin from 31.197.172.42 port 11858
2026-07-15T14:04:42.267478+02:00 weberin sshd[327826]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.197.172.42
2026-07-15T14:04:44.245556+02:00 weberin sshd[327826]: Failed password for invalid user admin from 31.197.172.42 port 56832 ssh2
2026-07-15T14:04:44.570030+02:00 weberin sshd[327832]: Invalid user user from 31.197.172.42 port 56834
2026-07-15T14:04:45.374343+02:00 weberin sshd[327834]: Invalid user user2 from 31.197.172.42 port 56835
...
show less
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ...
show moreAutomated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).
show less
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ...
show moreAutomated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).
show less
Multiple SSH login attempts from 31.197.172.42 targeting user(s): admin,root | Server Managed by Foc ...
show moreMultiple SSH login attempts from 31.197.172.42 targeting user(s): admin,root | Server Managed by Focusnic
show less
2026-06-24T00:01:56.563742+00:00 expanse-johor-game-node sshd[3854931]: Invalid user admin from 31.1 ...
show more2026-06-24T00:01:56.563742+00:00 expanse-johor-game-node sshd[3854931]: Invalid user admin from 31.197.172.42 port 23584
2026-06-24T00:01:58.975913+00:00 expanse-johor-game-node sshd[3855145]: Invalid user admin from 31.197.172.42 port 23585
2026-06-24T00:02:00.169059+00:00 expanse-johor-game-node sshd[3856181]: Invalid user user from 31.197.172.42 port 5327
2026-06-24T00:02:01.389127+00:00 expanse-johor-game-node sshd[3856283]: Invalid user user2 from 31.197.172.42 port 23586
2026-06-24T00:02:03.851996+00:00 expanse-johor-game-node sshd[3858449]: Invalid user admin from 31.197.172.42 port 23587
...
show less
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ...
show moreAutomated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).
show less
2026-06-11T19:10:51+12:00 sshd[1828182]: Failed password for invalid user admin from 31.197.172.42 ...
show more2026-06-11T19:10:51+12:00 sshd[1828182]: Failed password for invalid user admin from 31.197.172.42 port 65248 ssh2
2026-06-11T19:10:51+12:00 sshd[1828184]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.197.172.42 user=root
2026-06-11T19:10:52+12:00 sshd[1828184]: Failed password for root from 31.197.172.42 port 2519 ssh2
...
show less
Jun 9 13:17:50 UK1 sshd[3591358]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ...
show moreJun 9 13:17:50 UK1 sshd[3591358]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.197.172.42
Jun 9 13:17:50 UK1 sshd[3591358]: Invalid user admin from 31.197.172.42 port 5975
Jun 9 13:17:52 UK1 sshd[3591358]: Failed password for invalid user admin from 31.197.172.42 port 5975 ssh2
Jun 9 13:17:51 UK1 sshd[3591360]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.197.172.42 user=root
Jun 9 13:17:53 UK1 sshd[3591360]: Failed password for root from 31.197.172.42 port 31424 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 127 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩