This IP address has been reported a total of
136
times from
97 distinct
sources.
196.196.150.101 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ...
show moreAutomated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).
show less
This IP address carried out 100 SSH credential attack (attempts) on 16-05-2026. For more information ...
show moreThis IP address carried out 100 SSH credential attack (attempts) on 16-05-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ...
show moreAutomated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).
show less
The IP 196.196.150.101 tried multiple SSH_BRUTE_FORCE logins
Brute-Force
Anonymous
May 17 08:07:01 f2b auth.info sshd[927408]: Invalid user admin from 196.196.150.101 port 36328
May 1 ...
show moreMay 17 08:07:01 f2b auth.info sshd[927408]: Invalid user admin from 196.196.150.101 port 36328
May 17 08:07:01 f2b auth.info sshd[927408]: Failed password for invalid user admin from 196.196.150.101 port 36328 ssh2
May 17 08:07:01 f2b auth.info sshd[927408]: Disconnected from invalid user admin 196.196.150.101 port 36328 [preauth]
...
show less
May 17 09:40:24 cti1.cti.srvfarm.net sshd[1850324]: Disconnected from authenticating user root 196.1 ...
show moreMay 17 09:40:24 cti1.cti.srvfarm.net sshd[1850324]: Disconnected from authenticating user root 196.196.150.101 port 39704 [preauth]
May 17 09:46:32 cti1.cti.srvfarm.net sshd[1851873]: Disconnected from authenticating user root 196.196.150.101 port 43256 [preauth]
May 17 09:47:45 cti1.cti.srvfarm.net sshd[1852206]: Disconnected from authenticating user root 196.196.150.101 port 49150 [preauth]
May 17 09:48:55 cti1.cti.srvfarm.net sshd[1852500]: Disconnected from authenticating user root 196.196.150.101 port 33922 [preauth]
May 17 09:50:04 cti1.cti.srvfarm.net sshd[1852853]: Disconnected from authenticating user root 196.196.150.101 port 53170 [preauth]
show less
May 17 08:20:58 nervous-edison8 sshd[74552]: Failed password for root from 196.196.150.101 port 5384 ...
show moreMay 17 08:20:58 nervous-edison8 sshd[74552]: Failed password for root from 196.196.150.101 port 53840 ssh2
May 17 08:22:07 nervous-edison8 sshd[74632]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.196.150.101 user=root
May 17 08:22:09 nervous-edison8 sshd[74632]: Failed password for root from 196.196.150.101 port 60170 ssh2
May 17 08:23:16 nervous-edison8 sshd[74745]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.196.150.101 user=root
May 17 08:23:19 nervous-edison8 sshd[74745]: Failed password for root from 196.196.150.101 port 52230 ssh2
...
show less
2026-05-17T06:37:44.304581+00:00 edge-tdt-man01.int.pdx.net.uk sshd[1088804]: Invalid user bob from ...
show more2026-05-17T06:37:44.304581+00:00 edge-tdt-man01.int.pdx.net.uk sshd[1088804]: Invalid user bob from 196.196.150.101 port 34066
2026-05-17T06:38:49.235865+00:00 edge-tdt-man01.int.pdx.net.uk sshd[1088880]: Invalid user trader from 196.196.150.101 port 36796
2026-05-17T06:42:11.912768+00:00 edge-tdt-man01.int.pdx.net.uk sshd[1089240]: Invalid user vitor from 196.196.150.101 port 43120
...
show less
2026-05-17T08:33:37.909181+02:00 magic sshd-session[75888]: Failed password for root from 196.196.15 ...
show more2026-05-17T08:33:37.909181+02:00 magic sshd-session[75888]: Failed password for root from 196.196.150.101 port 52382 ssh2
2026-05-17T08:34:46.920570+02:00 magic sshd-session[75912]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.196.150.101 user=root
2026-05-17T08:34:49.060112+02:00 magic sshd-session[75912]: Failed password for root from 196.196.150.101 port 33622 ssh2
show less
196.196.150.101 (ES/Spain/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Po ...
show more196.196.150.101 (ES/Spain/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 17 01:25:40 13979 sshd[17956]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.196.150.101 user=root
May 17 01:25:41 13979 sshd[17956]: Failed password for root from 196.196.150.101 port 54290 ssh2
May 17 01:28:32 13979 sshd[18186]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.136.92.48 user=root
May 17 01:28:35 13979 sshd[18186]: Failed password for root from 213.136.92.48 port 42406 ssh2
May 17 01:29:00 13979 sshd[18190]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.136.92.48 user=root
IP Addresses Blocked:
show less
May 17 01:51:07 www4 sshd[936426]: Failed password for root from 196.196.150.101 port 42802 ssh2
May ...
show moreMay 17 01:51:07 www4 sshd[936426]: Failed password for root from 196.196.150.101 port 42802 ssh2
May 17 01:52:26 www4 sshd[936481]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.196.150.101 user=root
May 17 01:52:28 www4 sshd[936481]: Failed password for root from 196.196.150.101 port 45040 ssh2
May 17 01:53:43 www4 sshd[936529]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.196.150.101 user=root
May 17 01:53:45 www4 sshd[936529]: Failed password for root from 196.196.150.101 port 34476 ssh2
...
show less