217.148.51.196

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
102 reports
76 reporters ยท latest 13 minutes ago
ISP
Ekaterinburg-2000 LLC
Usage Type
Fixed Line ISP
ASN
AS31499
Hostname(s)
ip-51-196.ycc.ru
Domain Name
motivtelecom.ru
Country
๐Ÿ‡ท๐Ÿ‡บ Russian Federation
City
Yekaterinburg, Sverdlovsk Oblast
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
102 from 76 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations ๐Ÿ‡ฉ๐Ÿ‡ช Germany 17 ๐Ÿ‡บ๐Ÿ‡ธ United States of America 15 ๐Ÿ‡ซ๐Ÿ‡ท France 10
Most common categories Brute-Force 87 SSH 22 Hacking 12 Port Scan 7 Email Spam 7
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡ฒ๐Ÿ‡ณ Public CSIRT/CC of Mongolia
Honeypot hit: Brute-force attack detected on 22/SSH โ€ข Credential used: admin:admin1 โ€ข Number of login attempts: 1 โ€ข Client: SSH-2.0-OpenSSH_7.4
Hacking SSH
๐Ÿ‡น๐Ÿ‡ญ thaizone.com
Password guessing attack (SM11) #1
Email Spam Brute-Force
Anonymous
Brute-Force
๐Ÿ‡ธ๐Ÿ‡ฌ pusathosting.com
imap1 failed login
Brute-Force
๐Ÿ‡บ๐Ÿ‡ธ k3rn3l109
Sentinel honeypot: cowrie-persistent hit on fake SSH service (server-02-VA) UA=cowrie/ssh
Brute-Force SSH Hacking
๐Ÿ‡บ๐Ÿ‡ธ mc4bbs
Brute-Force SSH
๐Ÿ‡ซ๐Ÿ‡ท oh.mg
(sshd) Failed SSH login from 217.148.51.196 (RU/Russia/ip-51-196.ycc.ru): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Nov 13 23:46:37 joshua sshd[3343351]: Invalid user admin from 217.148.51.196 port 47828
Port Scan
๐Ÿ‡ฎ๐Ÿ‡ฉ xveil
2026-11-14T06:11:28.207550 mail-honeypot postfix/submission/smtpd[4536]: warning: unknown[217.148.51.196]: SASL LOGIN authentication failed: authentication failure ...
Brute-Force
๐Ÿ‡บ๐Ÿ‡ธ IndigoRidge
Knock-Knock SSH honeypot activity; time=2026-11-13 23:07:09; username=admin
Brute-Force SSH
Anonymous
2026-11-14T00:03:45.082211 biopolis.pcconsultant.it postfix/smtpd[2868516]: warning: unknown[217.148.51.196]: SASL LOGIN authentication failed: authentication failure, [email protected] ...
Brute-Force
๐Ÿ‡น๐Ÿ‡ท Threat.live
Threat.live: Brute Force
Brute-Force
๐Ÿ‡ฉ๐Ÿ‡ช localhost-admin
Unauthorized connection attempt detected, SMTP Brute-Force
Brute-Force
Anonymous
Brute-Force SSH
๐Ÿ‡ฉ๐Ÿ‡ช mnpx
SMTP login attempt (2ร—) over 0h:30m; first seen here 2026-11-12T08:04Z
Brute-Force
๐Ÿ‡ฉ๐Ÿ‡ช R.G.
217.148.51.196 (RU/Russia/ip-51-196.ycc.ru), 7 distributed smtpauth attacks on account [cloacked] in the last 600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs:
Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

๐Ÿ‡จ๐Ÿ‡ฑ 190.114.38.72
๐Ÿ‡ต๐Ÿ‡ฑ 176.53.159.198
๐Ÿ‡จ๐Ÿ‡ณ 112.86.225.251
๐Ÿ‡ซ๐Ÿ‡ท 91.231.89.248
๐Ÿ‡บ๐Ÿ‡ธ 91.230.168.215
๐Ÿ‡ญ๐Ÿ‡ท 85.203.20.245
๐Ÿ‡บ๐Ÿ‡ธ 76.36.145.10
๐Ÿ‡บ๐Ÿ‡ธ 75.64.204.138
๐Ÿ‡บ๐Ÿ‡ธ 47.251.182.100
๐Ÿ‡บ๐Ÿ‡ธ 45.79.209.156
๐Ÿ‡ฌ๐Ÿ‡ง 31.14.254.108
๐Ÿ‡ฐ๐Ÿ‡ท 220.118.190.204
๐Ÿ‡บ๐Ÿ‡ธ 194.180.236.234
๐Ÿ‡ฉ๐Ÿ‡ช 193.108.119.193
๐Ÿ‡บ๐Ÿ‡ธ 164.92.106.15
๐Ÿ‡บ๐Ÿ‡ธ 96.38.145.151
๐Ÿ‡บ๐Ÿ‡ธ 68.10.53.120
๐Ÿ‡บ๐Ÿ‡ธ 47.251.37.0
๐Ÿ‡ญ๐Ÿ‡ฐ 42.200.148.126
๐Ÿ‡ธ๐Ÿ‡ฌ 8.219.71.23
feedback