JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 176.96.138.149

176.96.138.149 was found in our database!

This IP was reported 38 times. Confidence of Abuse is 0%: ?

ISP	dataforest GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS58212
Domain Name	dataforest.net
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 176.96.138.149

Whois 176.96.138.149

IP Abuse Reports for 176.96.138.149:

This IP address has been reported a total of 38 times from 32 distinct sources. 176.96.138.149 was first reported on February 28th 2024, and the most recent report was 5 months ago.

Old Reports: The most recent abuse report for this IP address is from 5 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2025-12-29 17:28:42 (5 months ago)	2025-12-29T17:25:43.014344+00:00 ubuntu sshd[925926]: pam_unix(sshd:auth): authentication failure; l ... show more 2025-12-29T17:25:43.014344+00:00 ubuntu sshd[925926]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.96.138.149 2025-12-29T17:25:44.914003+00:00 ubuntu sshd[925926]: Failed password for invalid user sshuser from 176.96.138.149 port 59546 ssh2 2025-12-29T17:28:42.022671+00:00 ubuntu sshd[925945]: Invalid user user from 176.96.138.149 port 37974 ... show less	Brute-Force SSH
Anonymous	2025-12-29 17:09:13 (5 months ago)	2025-12-29T19:06:28.326292+02:00 v1736525760 sshd-session[601585]: Invalid user vpn from 176.96.138. ... show more 2025-12-29T19:06:28.326292+02:00 v1736525760 sshd-session[601585]: Invalid user vpn from 176.96.138.149 port 33116 2025-12-29T19:08:10.655922+02:00 v1736525760 sshd-session[601603]: Invalid user kiosk from 176.96.138.149 port 60648 2025-12-29T19:09:12.456169+02:00 v1736525760 sshd-session[601676]: Invalid user usuario1 from 176.96.138.149 port 44662 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2025-12-29 17:07:59 (5 months ago)	(sshd) Failed SSH login from 176.96.138.149 (DE/Germany/-): 5 in the last 3600 secs; Ports: ; Direc ... show more (sshd) Failed SSH login from 176.96.138.149 (DE/Germany/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Dec 29 11:03:54 14390 sshd[17068]: Invalid user vpn from 176.96.138.149 port 57612 Dec 29 11:03:57 14390 sshd[17068]: Failed password for invalid user vpn from 176.96.138.149 port 57612 ssh2 Dec 29 11:07:20 14390 sshd[17470]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.96.138.149 user=root Dec 29 11:07:23 14390 sshd[17470]: Failed password for root from 176.96.138.149 port 44174 ssh2 Dec 29 11:07:57 14390 sshd[17482]: Invalid user kiosk from 176.96.138.149 port 41146 show less	Brute-Force SSH
🇺🇸 bigscoots.com	2025-12-29 16:42:55 (5 months ago)	176.96.138.149 (DE/Germany/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; P ... show more 176.96.138.149 (DE/Germany/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Dec 29 10:02:24 15335 sshd[27203]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.52.215.252 user=root Dec 29 10:02:25 15335 sshd[27203]: Failed password for root from 164.52.215.252 port 31684 ssh2 Dec 29 10:42:34 15335 sshd[30144]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.96.138.149 user=root Dec 29 10:03:07 15335 sshd[27269]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.52.215.252 user=root Dec 29 10:00:50 15335 sshd[27047]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.52.215.252 user=root Dec 29 10:00:51 15335 sshd[27047]: Failed password for root from 164.52.215.252 port 64764 ssh2 IP Addresses Blocked: 164.52.215.252 (IN/India/e2e-84-252.ssdcloudindia.net) show less	Brute-Force SSH
🇳🇱 trivox.sh	2025-12-29 16:01:27 (5 months ago)	Dec 29 15:52:29 ipmi sshd[341886]: Failed password for invalid user minh from 176.96.138.149 port 37 ... show more Dec 29 15:52:29 ipmi sshd[341886]: Failed password for invalid user minh from 176.96.138.149 port 37606 ssh2 Dec 29 15:52:29 ipmi sshd[341886]: Disconnected from invalid user minh 176.96.138.149 port 37606 [preauth] Dec 29 15:56:43 ipmi sshd[342113]: Invalid user ubuntu from 176.96.138.149 port 52232 Dec 29 15:56:43 ipmi sshd[342113]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.96.138.149 Dec 29 15:56:45 ipmi sshd[342113]: Failed password for invalid user ubuntu from 176.96.138.149 port 52232 ssh2 ... show less	Brute-Force SSH
🇸🇬 kipfel★	2025-12-29 15:39:30 (5 months ago)	2025-12-29T23:38:16.903355+08:00 ovh-dedi-ie-ksgame25-sgp sshd[1366019]: Invalid user admin2 from 17 ... show more 2025-12-29T23:38:16.903355+08:00 ovh-dedi-ie-ksgame25-sgp sshd[1366019]: Invalid user admin2 from 176.96.138.149 port 59000 2025-12-29T23:38:52.773640+08:00 ovh-dedi-ie-ksgame25-sgp sshd[1366060]: Invalid user banana from 176.96.138.149 port 57472 2025-12-29T23:39:29.312738+08:00 ovh-dedi-ie-ksgame25-sgp sshd[1366096]: Invalid user sopuser from 176.96.138.149 port 55438 ... show less	Brute-Force SSH
🇩🇪 cybergecko.de	2025-12-29 15:36:52 (5 months ago)	Dec 29 16:36:15 CyberGecko sshd[2765316]: pam_unix(sshd:auth): authentication failure; logname= uid= ... show more Dec 29 16:36:15 CyberGecko sshd[2765316]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.96.138.149 user=root Dec 29 16:36:16 CyberGecko sshd[2765316]: Failed password for root from 176.96.138.149 port 51978 ssh2 Dec 29 16:36:49 CyberGecko sshd[2765471]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.96.138.149 user=root Dec 29 16:36:51 CyberGecko sshd[2765471]: Failed password for root from 176.96.138.149 port 35604 ssh2 ... show less	Brute-Force SSH
🇮🇹 Portuseco Biling	2025-12-29 15:36:13 (5 months ago)	4VPS-Milan-F2B blocked SSH BF	Brute-Force SSH
🇩🇪 YumXac	2025-12-29 15:36:08 (5 months ago)	2025-12-29T16:35:34.233392+01:00 pve-osd-202 sshd[1579693]: pam_unix(sshd:auth): authentication fail ... show more 2025-12-29T16:35:34.233392+01:00 pve-osd-202 sshd[1579693]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.96.138.149 user=root 2025-12-29T16:35:36.168583+01:00 pve-osd-202 sshd[1579693]: Failed password for root from 176.96.138.149 port 45784 ssh2 2025-12-29T16:35:37.707061+01:00 pve-osd-202 sshd[1579693]: Disconnected from authenticating user root 176.96.138.149 port 45784 [preauth] 2025-12-29T16:36:06.329506+01:00 pve-osd-202 sshd[1580232]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.96.138.149 user=root 2025-12-29T16:36:08.324619+01:00 pve-osd-202 sshd[1580232]: Failed password for root from 176.96.138.149 port 45012 ssh2 ... show less	Brute-Force SSH
🇬🇧 Birdo	2025-12-29 15:31:30 (5 months ago)	[Birdo SSH Honeypot] SSH login attempt	Port Scan Hacking Brute-Force Exploited Host SSH
Anonymous	2025-12-29 14:28:37 (5 months ago)	2025-12-29T16:25:06.644285+02:00 dns2.mi-pietsch.de sshd-session[784298]: Invalid user devops from 1 ... show more 2025-12-29T16:25:06.644285+02:00 dns2.mi-pietsch.de sshd-session[784298]: Invalid user devops from 176.96.138.149 port 41258 2025-12-29T16:27:28.546021+02:00 dns2.mi-pietsch.de sshd-session[784353]: Invalid user azureuser from 176.96.138.149 port 48168 2025-12-29T16:28:37.241045+02:00 dns2.mi-pietsch.de sshd-session[784386]: Invalid user rudi from 176.96.138.149 port 47782 ... show less	Brute-Force SSH
🇬🇧 NotCool	2025-12-29 14:28:28 (5 months ago)	(sshd) Failed SSH login from 176.96.138.149 (DE/Germany/-): 10 in the last 3600 secs	Brute-Force SSH
🇺🇸 bigscoots.com	2025-12-29 14:04:56 (5 months ago)	(sshd) Failed SSH login from 176.96.138.149 (DE/Germany/-): 5 in the last 3600 secs; Ports: ; Direc ... show more (sshd) Failed SSH login from 176.96.138.149 (DE/Germany/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Dec 29 08:02:35 18749 sshd[10605]: Invalid user opc from 176.96.138.149 port 47688 Dec 29 08:02:37 18749 sshd[10605]: Failed password for invalid user opc from 176.96.138.149 port 47688 ssh2 Dec 29 08:04:07 18749 sshd[10746]: Invalid user backups from 176.96.138.149 port 43840 Dec 29 08:04:09 18749 sshd[10746]: Failed password for invalid user backups from 176.96.138.149 port 43840 ssh2 Dec 29 08:04:50 18749 sshd[10756]: Invalid user vivek from 176.96.138.149 port 53036 show less	Brute-Force SSH
🇺🇸 hyena	2025-12-29 13:44:21 (5 months ago)	Multiple unauthorized login attempts via SSH.	SSH
🇩🇪 LoNET	2025-12-29 13:42:22 (5 months ago)	Report 2002904 with IP 3050462 for SSH brute-force attack by source 3045129 via ssh-honeypot/0.2.0+h ... show more Report 2002904 with IP 3050462 for SSH brute-force attack by source 3045129 via ssh-honeypot/0.2.0+http show less	Brute-Force SSH

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 178.62.97.244

🇮🇳 103.78.46.15

🇫🇷 92.205.211.106

🇫🇷 92.204.239.201

🇫🇷 91.231.89.184

🇸🇬 68.183.180.73

🇩🇪 49.12.86.49

🇩🇪 49.12.77.100

🇹🇿 41.59.99.40

🇺🇦 37.221.128.229

🇺🇸 18.190.15.50

🇩🇪 5.44.111.149

🇫🇷 5.35.248.158

🇫🇷 5.35.241.52

🇭🇰 199.45.154.179

🇧🇷 190.11.214.205

🇧🇷 187.75.9.108

🇫🇮 178.20.210.208

🇸🇬 152.32.217.179

🇺🇸 100.56.20.64