197.248.207.139
197.248.207.139 is a threat-intelligence indicator (IPv4 address) classified as Suspicious, corroborated across 7 independent feeds. It is aggregated and de-duplicated from many open and commercial threat feeds, with confidence scoring and decay over time.
Indicator facts
- Type
- IPv4 address
- Indicator
197.248.207.139- Classification
- Suspicious
- Confidence
- 100 / 100
- Corroboration
- 7 independent sources
- First seen
- Last seen
- Network (ASN)
- AS37061 — Safaricom
- Country
- KE
Tags
- brute-force
- ssh
- aggregate-source
- attacker
- sshpwauth
- honeypot
- scanner
Related CVEs (82)
- CVE-2023-26555
- CVE-2023-26554
- CVE-2023-26553
- CVE-2023-26552
- CVE-2023-26551
- CVE-2020-15025
- CVE-2020-13817
- CVE-2020-11868
- CVE-2019-8936
- CVE-2018-8956
- CVE-2018-7185
- CVE-2018-7184
- CVE-2018-7183
- CVE-2018-7182
- CVE-2018-7170
- CVE-2018-12327
- CVE-2017-6464
- CVE-2017-6463
- CVE-2017-6462
- CVE-2017-6460
- CVE-2017-6459
- CVE-2017-6458
- CVE-2017-6455
- CVE-2017-6452
- CVE-2017-6451
- CVE-2016-9312
- CVE-2016-9311
- CVE-2016-9310
- CVE-2016-9042
- CVE-2016-7434
- CVE-2016-7433
- CVE-2016-7431
- CVE-2016-7429
- CVE-2016-7428
- CVE-2016-7427
- CVE-2016-7426
- CVE-2016-4957
- CVE-2016-4956
- CVE-2016-4955
- CVE-2016-4954
- CVE-2016-4953
- CVE-2016-2519
- CVE-2016-2518
- CVE-2016-2517
- CVE-2016-2516
- CVE-2016-1551
- CVE-2016-1550
- CVE-2016-1549
- CVE-2016-1548
- CVE-2016-1547
← Threat intelligence command center · Explore the indicator corpus