This IP address has been reported a total of
38
times from
32 distinct
sources.
115.196.192.141 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
Invalid user wibuehl from 115.196.192.141 port 50320
2026-10-22T03:19:43.558693+02:00 ns3124905 sshd-session[60862]: Invalid user valdemoder2026 from 115 ...
show more2026-10-22T03:19:43.558693+02:00 ns3124905 sshd-session[60862]: Invalid user valdemoder2026 from 115.196.192.141 port 45324
...
show less
2026-10-22T03:37:36.867175+03:00 6kw sshd[66389]: Failed password for root from 115.196.192.141 port ...
show more2026-10-22T03:37:36.867175+03:00 6kw sshd[66389]: Failed password for root from 115.196.192.141 port 59564 ssh2
...
show less
Automated fail2ban report from server 176.99.5.35.
Attack type: SSH brute-force (jails: sshd).
Obser ...
show moreAutomated fail2ban report from server 176.99.5.35.
Attack type: SSH brute-force (jails: sshd).
Observed: 2026-10-22T00:39:11+03:00.
Detections: 1 ban event(s), 4 failed attempts.
Ban duration: 1d.
Patterns: invalid usernames tried; password attempts for invalid users; PAM authentication failures.
No personal data included.
--
Reported via Fail2Ban_AbuseIPDB Monitor: https://github.com/paulmann/Fail2Ban_AbuseIPDB
show less
2026-10-21T23:24:23.161080whm11.palvelukanava.fi sshd[59878]: Invalid user ubuntu from 115.196.192.1 ...
show more2026-10-21T23:24:23.161080whm11.palvelukanava.fi sshd[59878]: Invalid user ubuntu from 115.196.192.141 port 48748
2026-10-21T23:24:23.427495whm11.palvelukanava.fi sshd[59878]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.196.192.141
2026-10-21T23:24:25.363140whm11.palvelukanava.fi sshd[59878]: Failed password for invalid user ubuntu from 115.196.192.141 port 48748 ssh2
...
show less
Oct 21 17:50:21 ubuntu sshd[1037704]: Invalid user ubuntu from 115.196.192.141 port 60098
Oct 21 17: ...
show moreOct 21 17:50:21 ubuntu sshd[1037704]: Invalid user ubuntu from 115.196.192.141 port 60098
Oct 21 17:50:21 ubuntu sshd[1037704]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.196.192.141
Oct 21 17:50:23 ubuntu sshd[1037704]: Failed password for invalid user ubuntu from 115.196.192.141 port 60098 ssh2
...
show less
Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: fail2ban_ban. So ...
show moreDetected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: fail2ban_ban. Sources: fail2ban. First seen: 2026-10-21. Risk score: 20/100.
show less
Oct 21 09:57:24 mailman sshd[21362]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eui ...
show moreOct 21 09:57:24 mailman sshd[21362]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.196.192.141
Oct 21 09:57:27 mailman sshd[21362]: Failed password for invalid user [redacted] from 115.196.192.141 port 42578 ssh2
Oct 21 09:57:28 mailman sshd[21362]: Connection closed by 115.196.192.141 port 42578 [preauth]
show less
Brute-Force
SSH
Showing 1 to
15
of 38 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩