This IP address has been reported a total of
114
times from
81 distinct
sources.
191.96.196.81 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
This IP address carried out 108 port scanning attempts on 18-05-2026. For more information or to rep ...
show moreThis IP address carried out 108 port scanning attempts on 18-05-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
This IP address carried out 22 SSH credential attack (attempts) on 18-05-2026. For more information ...
show moreThis IP address carried out 22 SSH credential attack (attempts) on 18-05-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
191.96.196.81 (US/United States/wofte.site), 5 distributed sshd attacks on account [root] in the las ...
show more191.96.196.81 (US/United States/wofte.site), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 18 09:13:36 14421 sshd[19516]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.96.196.81 user=root
May 18 09:13:38 14421 sshd[19516]: Failed password for root from 191.96.196.81 port 54112 ssh2
May 18 09:13:15 14421 sshd[19512]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.97.168.113 user=root
May 18 09:13:17 14421 sshd[19512]: Failed password for root from 209.97.168.113 port 47392 ssh2
May 18 09:14:35 14421 sshd[19597]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.133.39.206 user=root
IP Addresses Blocked:
show less
2026-05-18T13:53:07.662837+00:00 sg-jumphost-server sshd[38584]: Disconnected from authenticating us ...
show more2026-05-18T13:53:07.662837+00:00 sg-jumphost-server sshd[38584]: Disconnected from authenticating user root 191.96.196.81 port 55066 [preauth]
2026-05-18T13:55:04.062039+00:00 sg-jumphost-server sshd[38664]: Disconnected from authenticating user root 191.96.196.81 port 53058 [preauth]
...
show less
2026-05-18T13:31:27.950696+00:00 sg-jumphost-server sshd[37859]: Disconnected from authenticating us ...
show more2026-05-18T13:31:27.950696+00:00 sg-jumphost-server sshd[37859]: Disconnected from authenticating user root 191.96.196.81 port 40372 [preauth]
2026-05-18T13:34:42.352915+00:00 sg-jumphost-server sshd[37964]: Disconnected from authenticating user root 191.96.196.81 port 44926 [preauth]
2026-05-18T13:36:50.566875+00:00 sg-jumphost-server sshd[38085]: Disconnected from authenticating user root 191.96.196.81 port 42916 [preauth]
...
show less
(sshd) Failed SSH login from 191.96.196.81 (US/United States/wofte.site): 5 in the last 3600 secs; P ...
show more(sshd) Failed SSH login from 191.96.196.81 (US/United States/wofte.site): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: May 18 14:41:43 zone sshd[1298345]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.96.196.81 user=root
May 18 14:41:45 zone sshd[1298345]: Failed password for root from 191.96.196.81 port 36024 ssh2
May 18 14:46:38 zone sshd[1301091]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.96.196.81 user=root
May 18 14:46:40 zone sshd[1301091]: Failed password for root from 191.96.196.81 port 49298 ssh2
May 18 14:48:34 zone sshd[1302233]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.96.196.81 user=root
show less
May 18 06:46:41 lighthope sshd[39934]: Failed password for root from 191.96.196.81 port 43750 ssh2
M ...
show moreMay 18 06:46:41 lighthope sshd[39934]: Failed password for root from 191.96.196.81 port 43750 ssh2
May 18 06:48:33 lighthope sshd[39973]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.96.196.81 user=root
May 18 06:48:35 lighthope sshd[39973]: Failed password for root from 191.96.196.81 port 40152 ssh2
...
show less
May 18 10:50:46 hermes sshd[497981]: Failed password for root from 191.96.196.81 port 46696 ssh2
May ...
show moreMay 18 10:50:46 hermes sshd[497981]: Failed password for root from 191.96.196.81 port 46696 ssh2
May 18 10:52:44 hermes sshd[498105]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.96.196.81 user=root
May 18 10:52:47 hermes sshd[498105]: Failed password for root from 191.96.196.81 port 43304 ssh2
...
show less
May 18 10:49:42 v4bgp sshd[1518146]: Failed password for root from 191.96.196.81 port 50524 ssh2
May ...
show moreMay 18 10:49:42 v4bgp sshd[1518146]: Failed password for root from 191.96.196.81 port 50524 ssh2
May 18 10:51:32 v4bgp sshd[1518214]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.96.196.81 user=root
May 18 10:51:35 v4bgp sshd[1518214]: Failed password for root from 191.96.196.81 port 47110 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 114 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩