This IP address has been reported a total of
14
times from
13 distinct
sources.
82.97.254.207 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT | PORTS ...
show moreVerified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT | PORTS=22 | HITS=2 | IPSET=ADD | FIRST=2026-06-07 13:30:07 | LAST=2026-06-07 13:30:07. Last seen 2026-06-07 13:30:07.
show less
2026-06-07T11:12:55.225850+00:00 hmpr-01 sshd[1613243]: Invalid user orangepi from 82.97.254.207 por ...
show more2026-06-07T11:12:55.225850+00:00 hmpr-01 sshd[1613243]: Invalid user orangepi from 82.97.254.207 port 42790
2026-06-07T11:12:55.232452+00:00 hmpr-01 sshd[1613243]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.97.254.207
2026-06-07T11:12:57.162190+00:00 hmpr-01 sshd[1613243]: Failed password for invalid user orangepi from 82.97.254.207 port 42790 ssh2
2026-06-07T11:13:31.481548+00:00 hmpr-01 sshd[1613405]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.97.254.207 user=root
2026-06-07T11:13:33.351510+00:00 hmpr-01 sshd[1613405]: Failed password for root from 82.97.254.207 port 49012 ssh2
...
show less
Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: ME ...
show moreHoneypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud
show less
2026-06-07T10:27:49.362956+00:00 df-1blu sshd[483572]: Invalid user admin from 82.97.254.207 port 33 ...
show more2026-06-07T10:27:49.362956+00:00 df-1blu sshd[483572]: Invalid user admin from 82.97.254.207 port 33960
2026-06-07T10:28:20.105012+00:00 df-1blu sshd[484023]: Invalid user orangepi from 82.97.254.207 port 34466
2026-06-07T10:31:59.258928+00:00 df-1blu sshd[487084]: Invalid user test from 82.97.254.207 port 45974
2026-06-07T10:32:33.499228+00:00 df-1blu sshd[487545]: Invalid user user from 82.97.254.207 port 42636
2026-06-07T10:33:36.171184+00:00 df-1blu sshd[488338]: Invalid user admin from 82.97.254.207 port 48190
...
show less
(sshd) Failed SSH login from 82.97.254.207 (RU/Russia/-): 5 in the last 3600 secs; Ports: *; Directi ...
show more(sshd) Failed SSH login from 82.97.254.207 (RU/Russia/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jun 7 05:27:42 12525 sshd[19424]: Invalid user admin from 82.97.254.207 port 37170
Jun 7 05:27:44 12525 sshd[19424]: Failed password for invalid user admin from 82.97.254.207 port 37170 ssh2
Jun 7 05:28:15 12525 sshd[19804]: Invalid user orangepi from 82.97.254.207 port 34542
Jun 7 05:28:18 12525 sshd[19804]: Failed password for invalid user orangepi from 82.97.254.207 port 34542 ssh2
Jun 7 05:28:50 12525 sshd[19948]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.97.254.207 user=root
show less
Apr 13 18:25:39 jira sshd[818503]: Connection closed by authenticating user root 82.97.254.207 port ...
show moreApr 13 18:25:39 jira sshd[818503]: Connection closed by authenticating user root 82.97.254.207 port 47362 [preauth]
Apr 13 18:25:39 jira sshd[818518]: Connection from 82.97.254.207 port 49248 on 138.201.123.138 port 22 rdomain ""
Apr 13 18:25:47 jira sshd[818518]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.97.254.207 user=root
Apr 13 18:25:49 jira sshd[818518]: Failed password for root from 82.97.254.207 port 49248 ssh2
Apr 13 18:25:52 jira sshd[818518]: Connection closed by authenticating user root 82.97.254.207 port 49248 [preauth]
...
show less
Brute-Force
SSH
Showing 1 to
14
of 14 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩