This IP address has been reported a total of
22
times from
22 distinct
sources.
196.70.139.96 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
Jul 8 08:16:57 login sshd[179516]: Invalid user user from 196.70.139.96 port 43050
Jul 8 08:16:58 ...
show moreJul 8 08:16:57 login sshd[179516]: Invalid user user from 196.70.139.96 port 43050
Jul 8 08:16:58 login sshd[179518]: Invalid user user from 196.70.139.96 port 43062
Jul 8 08:16:59 login sshd[179520]: Invalid user user from 196.70.139.96 port 43076
...
show less
Unwanted traffic detected by honeypot on July 07, 2026: brute force and hacking attacks (1 over ssh) ...
show moreUnwanted traffic detected by honeypot on July 07, 2026: brute force and hacking attacks (1 over ssh).
show less
Jul 8 08:59:51 cloud sshd[748442]: Invalid user user from 196.70.139.96 port 60324
Jul 8 08:59:52 ...
show moreJul 8 08:59:51 cloud sshd[748442]: Invalid user user from 196.70.139.96 port 60324
Jul 8 08:59:52 cloud sshd[748444]: Invalid user user from 196.70.139.96 port 60326
Jul 8 08:59:53 cloud sshd[748446]: Invalid user user from 196.70.139.96 port 60330
Jul 8 08:59:55 cloud sshd[748448]: Invalid user user from 196.70.139.96 port 60340
Jul 8 08:59:57 cloud sshd[748450]: Invalid user user from 196.70.139.96 port 37560
show less
Jul 7 23:02:00 b146-52 sshd[254997]: Failed password for root from 196.70.139.96 port 60572 ssh2
Ju ...
show moreJul 7 23:02:00 b146-52 sshd[254997]: Failed password for root from 196.70.139.96 port 60572 ssh2
Jul 7 23:02:04 b146-52 sshd[255000]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.70.139.96 user=root
Jul 7 23:02:06 b146-52 sshd[255000]: Failed password for root from 196.70.139.96 port 60582 ssh2
...
show less
2026-07-07T23:40:15.340896-05:00 ip-172-31-76-241 sshd[887313]: Connection closed by authenticating ...
show more2026-07-07T23:40:15.340896-05:00 ip-172-31-76-241 sshd[887313]: Connection closed by authenticating user root 196.70.139.96 port 45450 [preauth]
2026-07-07T23:40:17.382494-05:00 ip-172-31-76-241 sshd[887375]: Connection closed by authenticating user root 196.70.139.96 port 34862 [preauth]
2026-07-07T23:40:19.973140-05:00 ip-172-31-76-241 sshd[887422]: Connection closed by authenticating user root 196.70.139.96 port 34870 [preauth]
...
show less
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ...
show moreAutomated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).
show less
2026-07-08 02:53:27 UTC Unauthorized activity to TCP port 22. SSH
SSH
Anonymous
2026-07-08T10:42:09.548425+08:00 kltw-debian sshd[200531]: Connection closed by authenticating user ...
show more2026-07-08T10:42:09.548425+08:00 kltw-debian sshd[200531]: Connection closed by authenticating user root 196.70.139.96 port 49310 [preauth]
2026-07-08T10:42:13.132872+08:00 kltw-debian sshd[200533]: Connection closed by authenticating user root 196.70.139.96 port 45876 [preauth]
2026-07-08T10:42:17.591729+08:00 kltw-debian sshd[200535]: Connection closed by authenticating user root 196.70.139.96 port 45892 [preauth]
2026-07-08T10:42:21.064360+08:00 kltw-debian sshd[200537]: Connection closed by authenticating user root 196.70.139.96 port 41828 [preauth]
2026-07-08T10:42:24.845888+08:00 kltw-debian sshd[200539]: Connection closed by authenticating user root 196.70.139.96 port 41834 [preauth]
...
show less
2026-07-08T02:12:38.410449+00:00 edge-thn-par02.int.pdx.net.uk sshd[3508280]: Invalid user user from ...
show more2026-07-08T02:12:38.410449+00:00 edge-thn-par02.int.pdx.net.uk sshd[3508280]: Invalid user user from 196.70.139.96 port 37304
2026-07-08T02:12:41.772395+00:00 edge-thn-par02.int.pdx.net.uk sshd[3508285]: Invalid user user from 196.70.139.96 port 37312
2026-07-08T02:12:44.546754+00:00 edge-thn-par02.int.pdx.net.uk sshd[3508287]: Invalid user user from 196.70.139.96 port 37328
...
show less
Brute-Force
SSH
Showing 1 to
15
of 22 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩