AbuseIPDB » 195.190.104.66

195.190.104.66 was found in our database!

This IP was reported 25,160 times. Confidence of Abuse is 100%: ?

100%

ISP	111250 Russia
Usage Type	Fixed Line ISP
ASN	AS3216
Hostname(s)	spb-195-190-104-66.sovintel.ru
Domain Name	russianpost.ru
Country	Russian Federation
City	Vologda, Vologda Oblast

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 195.190.104.66

Whois 195.190.104.66

IP Abuse Reports for 195.190.104.66:

This IP address has been reported a total of 25,160 times from 1,464 distinct sources. 195.190.104.66 was first reported on April 2nd 2024, and the most recent report was 1 minute ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Study Bitcoin 🤗	2025-07-13 05:48:24 (1 minute ago)	SSH Fail2Ban [srv135]	Brute-Force
amit177	2025-07-13 05:46:48 (3 minutes ago)		Brute-Force SSH
rafled	2025-07-13 05:25:37 (24 minutes ago)	Jul 13 05:25:36 proxy sshd[2502175]: Invalid user root1 from 195.190.104.66 port 50104 ...	Brute-Force SSH
daramarak	2025-07-13 05:13:25 (36 minutes ago)	Jul 13 01:06:05 luna sshd[1558828]: User root from 195.190.104.66 not allowed because not listed in ... show moreJul 13 01:06:05 luna sshd[1558828]: User root from 195.190.104.66 not allowed because not listed in AllowUsers Jul 13 01:10:16 luna sshd[1559247]: User root from 195.190.104.66 not allowed because not listed in AllowUsers Jul 13 01:11:20 luna sshd[1559281]: User root from 195.190.104.66 not allowed because not listed in AllowUsers Jul 13 01:12:22 luna sshd[1559312]: User root from 195.190.104.66 not allowed because not listed in AllowUsers Jul 13 01:13:24 luna sshd[1559340]: User root from 195.190.104.66 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
anon333	2025-07-13 04:50:40 (59 minutes ago)	Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2025-07-13T04:46:12Z and 2025-07-1 ... show moreCowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2025-07-13T04:46:12Z and 2025-07-13T04:50:40Z show less	Brute-Force SSH
r	2025-07-13 04:42:55 (1 hour ago)	Jul 13 04:42:54 panel sshd[17584]: Failed password for root from 195.190.104.66 port 59550 ssh2	Brute-Force SSH
sbajic	2025-07-13 04:34:56 (1 hour ago)	2025-07-13T06:33:53.855723+02:00 mercurius sshd[1470098]: pam_unix(sshd:auth): authentication failur ... show more2025-07-13T06:33:53.855723+02:00 mercurius sshd[1470098]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.190.104.66 user=root 2025-07-13T06:33:55.498229+02:00 mercurius sshd[1470098]: Failed password for invalid user root from 195.190.104.66 port 57036 ssh2 2025-07-13T06:34:55.611853+02:00 mercurius sshd[1470133]: User root from 195.190.104.66 not allowed because none of user's groups are listed in AllowGroups ... show less	Brute-Force SSH
sbajic	2025-07-13 04:11:41 (1 hour ago)	2025-07-13T06:08:45.208316+02:00 mercurius sshd[1469640]: pam_unix(sshd:auth): authentication failur ... show more2025-07-13T06:08:45.208316+02:00 mercurius sshd[1469640]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.190.104.66 user=root 2025-07-13T06:08:47.162003+02:00 mercurius sshd[1469640]: Failed password for invalid user root from 195.190.104.66 port 50580 ssh2 2025-07-13T06:11:41.424093+02:00 mercurius sshd[1469702]: User root from 195.190.104.66 not allowed because none of user's groups are listed in AllowGroups ... show less	Brute-Force SSH
paradoxnetworks	2025-07-13 03:37:30 (2 hours ago)	2025-07-13T03:36:24.601283+00:00 edge-con-sto01.int.pdx.net.uk sshd[1970561]: Failed password for ro ... show more2025-07-13T03:36:24.601283+00:00 edge-con-sto01.int.pdx.net.uk sshd[1970561]: Failed password for root from 195.190.104.66 port 44528 ssh2 2025-07-13T03:37:27.861248+00:00 edge-con-sto01.int.pdx.net.uk sshd[1970833]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.190.104.66 user=root 2025-07-13T03:37:29.331871+00:00 edge-con-sto01.int.pdx.net.uk sshd[1970833]: Failed password for root from 195.190.104.66 port 40678 ssh2 ... show less	Brute-Force SSH
cata77tm	2025-07-13 03:01:21 (2 hours ago)	(sshd) Failed SSH login from 195.190.104.66 (RU/Russia/spb-195-190-104-66.sovintel.ru): 5 in the las ... show more(sshd) Failed SSH login from 195.190.104.66 (RU/Russia/spb-195-190-104-66.sovintel.ru): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jul 13 05:56:46 s1 sshd[12261]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.190.104.66 user=root Jul 13 05:56:47 s1 sshd[12261]: Failed password for root from 195.190.104.66 port 52698 ssh2 Jul 13 06:00:08 s1 sshd[12846]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.190.104.66 user=root Jul 13 06:00:11 s1 sshd[12846]: Failed password for root from 195.190.104.66 port 45656 ssh2 Jul 13 06:01:19 s1 sshd[12982]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.190.104.66 user=root show less	Port Scan
Woodie	2025-07-13 02:31:11 (3 hours ago)	2025-07-12T22:22:54.742474-04:00 debian sshd[575180]: Failed password for invalid user qw from 195.1 ... show more2025-07-12T22:22:54.742474-04:00 debian sshd[575180]: Failed password for invalid user qw from 195.190.104.66 port 40188 ssh2 2025-07-12T22:28:09.795819-04:00 debian sshd[579362]: Invalid user wireguard from 195.190.104.66 port 34790 2025-07-12T22:28:09.799136-04:00 debian sshd[579362]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.190.104.66 2025-07-12T22:28:11.779089-04:00 debian sshd[579362]: Failed password for invalid user wireguard from 195.190.104.66 port 34790 ssh2 2025-07-12T22:31:10.762437-04:00 debian sshd[582016]: Invalid user ftp2 from 195.190.104.66 port 48966 ... show less	Brute-Force SSH
ICT KnTl	2025-07-13 02:25:49 (3 hours ago)	...	Brute-Force SSH
NetWatch	2025-07-13 01:55:06 (3 hours ago)	The IP 195.190.104.66 tried multiple SSH logins	Brute-Force SSH
MazenHost	2025-07-13 01:52:10 (3 hours ago)	Jul 13 04:49:57 extremerp22 sshd[164111]: Invalid user grafana from 195.190.104.66 port 40976 ... show moreJul 13 04:49:57 extremerp22 sshd[164111]: Invalid user grafana from 195.190.104.66 port 40976 Jul 13 04:49:57 extremerp22 sshd[164111]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.190.104.66 Jul 13 04:49:59 extremerp22 sshd[164111]: Failed password for invalid user grafana from 195.190.104.66 port 40976 ssh2 Jul 13 04:51:01 extremerp22 sshd[164118]: Invalid user ts from 195.190.104.66 port 36132 Jul 13 04:51:01 extremerp22 sshd[164118]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.190.104.66 Jul 13 04:51:03 extremerp22 sshd[164118]: Failed password for invalid user ts from 195.190.104.66 port 36132 ssh2 Jul 13 04:52:01 extremerp22 sshd[164126]: Invalid user minecraft from 195.190.104.66 port 59498 ... show less	Brute-Force SSH
mueller-nils.com	2025-07-13 00:56:51 (4 hours ago)	Jul 13 02:55:48 [host] sshd[2283]: Failed password for root from 195.190.104.66 port 59192 ssh2<br / ... show moreJul 13 02:55:48 [host] sshd[2283]: Failed password for root from 195.190.104.66 port 59192 ssh2 Jul 13 02:55:48 [host] sshd[2283]: Disconnected from authenticating user root 195.190.104.66 port 59 Jul 13 02:56:47 [host] sshd[2519]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= Jul 13 02:56:50 [host] sshd[2519]: Failed password for root from 195.190.104.66 port 55276 ssh2 Jul 13 02:56:50 [host] sshd[2519]: Disconnected from authenticating user root 195.190.104.66 port 55 show less	Brute-Force SSH

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩