This IP address has been reported a total of
240
times from
195 distinct
sources.
191.96.196.40 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 70
reports;
United States of America
with 50
reports;
France
with 22
reports.
The most common categories in these recent reports were:
Brute-Force
223
times;
SSH
221
times;
Port Scan
7
times;
Hacking
6
times;
Web App Attack
4
times;
Other
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-10-12T20:09:16.480225-06:00 b146-52 sshd[706615]: pam_sss(sshd:auth): authentication failure; l ...
show more2026-10-12T20:09:16.480225-06:00 b146-52 sshd[706615]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.96.196.40 user=ftpuser2
2026-10-12T20:09:18.267873-06:00 b146-52 sshd[706615]: Failed password for invalid user ftpuser2 from 191.96.196.40 port 56414 ssh2
2026-10-12T20:12:36.167660-06:00 b146-52 sshd[706695]: User root from 191.96.196.40 not allowed because none of user's groups are listed in AllowGroups
...
show less
Oct 12 18:40:45 panduh sshd[722452]: Invalid user certbot from 191.96.196.40 port 59008
Oct 12 18:42 ...
show moreOct 12 18:40:45 panduh sshd[722452]: Invalid user certbot from 191.96.196.40 port 59008
Oct 12 18:42:38 panduh sshd[722894]: Invalid user devtest from 191.96.196.40 port 59142
Oct 12 18:44:32 panduh sshd[723299]: Invalid user pdv from 191.96.196.40 port 59272
Oct 12 18:46:22 panduh sshd[723739]: Invalid user aswin from 191.96.196.40 port 59400
...
show less
Brute-Force
SSH
Anonymous
SSH brute force attempt. User: gta, Pass: [REDACTED]
Oct 12 18:19:17 panduh sshd[717870]: Invalid user wtl from 191.96.196.40 port 57636
Oct 12 18:23:57 ...
show moreOct 12 18:19:17 panduh sshd[717870]: Invalid user wtl from 191.96.196.40 port 57636
Oct 12 18:23:57 panduh sshd[718900]: Invalid user cosmo from 191.96.196.40 port 57836
Oct 12 18:27:06 panduh sshd[719579]: Invalid user gs from 191.96.196.40 port 58096
Oct 12 18:29:06 panduh sshd[720039]: Invalid user ct from 191.96.196.40 port 58228
...
show less
Oct 13 03:24:18 mx1 sshd[1870060]: Invalid user cosmo from 191.96.196.40 port 58588
Oct 13 03:24:18 ...
show moreOct 13 03:24:18 mx1 sshd[1870060]: Invalid user cosmo from 191.96.196.40 port 58588
Oct 13 03:24:18 mx1 sshd[1870060]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.96.196.40
Oct 13 03:24:20 mx1 sshd[1870060]: Failed password for invalid user cosmo from 191.96.196.40 port 58588 ssh2
Oct 13 03:25:37 mx1 sshd[1870084]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.96.196.40 user=root
Oct 13 03:25:39 mx1 sshd[1870084]: Failed password for root from 191.96.196.40 port 58712 ssh2
...
show less
Brute-Force
SSH
Anonymous
SSH brute force detected by fail2ban
Brute-Force
Anonymous
SSH brute force attempt. User: wtl, Pass: [REDACTED]
2026-10-12T17:45:59.662711-07:00 bluejay sshd[2433524]: Failed password for invalid user appuser fro ...
show more2026-10-12T17:45:59.662711-07:00 bluejay sshd[2433524]: Failed password for invalid user appuser from 191.96.196.40 port 38524 ssh2
2026-10-12T17:51:33.126558-07:00 bluejay sshd[2434882]: Invalid user dark from 191.96.196.40 port 38746
2026-10-12T17:51:33.128752-07:00 bluejay sshd[2434882]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.96.196.40
2026-10-12T17:51:34.435159-07:00 bluejay sshd[2434882]: Failed password for invalid user dark from 191.96.196.40 port 38746 ssh2
...
show less
Brute-Force
SSH
Anonymous
2026-10-13T02:45:42.273621+02:00 vm986549.cloud.nuxt.network sshd-session[23313]: pam_unix(sshd:auth ...
show more2026-10-13T02:45:42.273621+02:00 vm986549.cloud.nuxt.network sshd-session[23313]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.96.196.40
2026-10-13T02:45:44.334201+02:00 vm986549.cloud.nuxt.network sshd-session[23313]: Failed password for invalid user appuser from 191.96.196.40 port 55894 ssh2
2026-10-13T02:51:30.974845+02:00 vm986549.cloud.nuxt.network sshd-session[23342]: Invalid user dark from 191.96.196.40 port 56102
...
show less
Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: honeypot_ssh. So ...
show moreDetected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: honeypot_ssh. Sources: honeypot. First seen: 2026-10-12. Risk score: 60/100.
show less
