Log in to view charts and search reports for this IP.
Log In
Reports Activity
Example preview
Report Categories (Last 60 Days)
Example preview
Top Reporter Countries (Last 60 Days)
Example preview
Account required for the enhanced features
Log inSign up
IP Abuse Reports for 169.150.196.161
This IP address has been reported a total of
105
times from
32 distinct
sources.
169.150.196.161 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 10
reports;
Czechia
with 5
reports;
France
with 3
reports.
The most common categories in these recent reports were:
Brute-Force
14
times;
Web App Attack
8
times;
Port Scan
7
times;
Bad Web Bot
6
times;
DDoS Attack
2
times;
Other
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[FriSep2512:10:35.0772322026][security2:error][pid737898:tid737990][client169.150.196.161:0]ModSecur ...
show more[FriSep2512:10:35.0772322026][security2:error][pid737898:tid737990][client169.150.196.161:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"traslochiamo.ch\"][uri\"/xmlrpc.php\"][unique_id\"arZIm90WJvb-ZwihQ9UwOgAAAJY\"]
show less
[23/Sep/2026:21:45:30 +0300] -- 169.150.196.161 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET ...
show more[23/Sep/2026:21:45:30 +0300] -- 169.150.196.161 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET /.env HTTP/1.1
show less
[22/Sep/2026:21:43:34 +0300] -- 169.150.196.161 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.g ...
show more[22/Sep/2026:21:43:34 +0300] -- 169.150.196.161 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git/HEAD HTTP/1.1
show less
HTTP application-layer DoS / botnet traffic from 169.150.196.161: repeated high-cost dynamic page an ...
show moreHTTP application-layer DoS / botnet traffic from 169.150.196.161: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host.
show less
DDoS Attack
Bad Web Bot
Exploited Host
Anonymous
Failed login attempt detected by Fail2Ban in plesk-postfix jail
Blocked by UFW (TCP on 55500)
Source port: 40612
TTL: 49
Packet length: 60
TOS: 0x08
This report (f ...
show moreBlocked by UFW (TCP on 55500)
Source port: 40612
TTL: 49
Packet length: 60
TOS: 0x08
This report (for 169.150.196.161) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Blocked by UFW (TCP on 55500)
Source port: 17270
TTL: 49
Packet length: 60
TOS: 0x08
This report (f ...
show moreBlocked by UFW (TCP on 55500)
Source port: 17270
TTL: 49
Packet length: 60
TOS: 0x08
This report (for 169.150.196.161) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Email account brute force: 1 attempts were recorded from 169.150.196.161
2026-08-22T07:42:58+02:00 w ...
show moreEmail account brute force: 1 attempts were recorded from 169.150.196.161
2026-08-22T07:42:58+02:00 warning: unknown[169.150.196.161]: SASL PLAIN authentication failed: authentication failure, [email protected]show less
Blocked by UFW (TCP on 63664)
Source port: 10574
TTL: 48
Packet length: 60
TOS: 0x08
This report (f ...
show moreBlocked by UFW (TCP on 63664)
Source port: 10574
TTL: 48
Packet length: 60
TOS: 0x08
This report (for 169.150.196.161) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Email account brute force: 1 attempts were recorded from 169.150.196.161
2026-08-20T12:22:51+02:00 w ...
show moreEmail account brute force: 1 attempts were recorded from 169.150.196.161
2026-08-20T12:22:51+02:00 warning: unknown[169.150.196.161]: SASL PLAIN authentication failed: authentication failure, [email protected]show less
