This IP address has been reported a total of
59
times from
48 distinct
sources.
5.202.195.196 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 17
reports;
United States of America
with 16
reports;
Finland
with 4
reports.
The most common categories in these recent reports were:
Brute-Force
46
times;
SSH
41
times;
Port Scan
12
times;
Hacking
7
times;
Web Spam
1
time;
Other
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Oct 4 12:42:12 web sshd[68299]: Failed password for root from 5.202.195.196 port 51036 ssh2
Oct 4 ...
show moreOct 4 12:42:12 web sshd[68299]: Failed password for root from 5.202.195.196 port 51036 ssh2
Oct 4 12:42:17 web sshd[68319]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.202.195.196 user=root
Oct 4 12:42:19 web sshd[68319]: Failed password for root from 5.202.195.196 port 58914 ssh2
...
show less
Oct 4 12:26:24 web sshd[66298]: Failed password for root from 5.202.195.196 port 44550 ssh2
Oct 4 ...
show moreOct 4 12:26:24 web sshd[66298]: Failed password for root from 5.202.195.196 port 44550 ssh2
Oct 4 12:26:26 web sshd[66425]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.202.195.196 user=root
Oct 4 12:26:28 web sshd[66425]: Failed password for root from 5.202.195.196 port 33336 ssh2
...
show less
2026-10-04T08:10:58.342412+00:00 dokuwiki-corlud sshd[47655]: Invalid user user from 5.202.195.196 p ...
show more2026-10-04T08:10:58.342412+00:00 dokuwiki-corlud sshd[47655]: Invalid user user from 5.202.195.196 port 48512
2026-10-04T08:11:19.052011+00:00 dokuwiki-corlud sshd[47657]: Invalid user user from 5.202.195.196 port 40876
2026-10-04T08:11:26.269073+00:00 dokuwiki-corlud sshd[47659]: Invalid user user from 5.202.195.196 port 39972
2026-10-04T08:11:40.275994+00:00 dokuwiki-corlud sshd[47661]: Invalid user user from 5.202.195.196 port 41480
2026-10-04T08:11:47.097716+00:00 dokuwiki-corlud sshd[47663]: Invalid user user from 5.202.195.196 port 40366
...
show less
2026-10-04T09:20:56.141056+02:00 server sshd-session[5252]: Connection closed by authenticating user ...
show more2026-10-04T09:20:56.141056+02:00 server sshd-session[5252]: Connection closed by authenticating user root 5.202.195.196 port 50888 [preauth]
...
show less
Port Scan on Honeypot | Ports: 22/SSH | Proto: TCP(1) | Flags: all SYN | TTL: 46 | Len: 60B | Win: 6 ...
show morePort Scan on Honeypot | Ports: 22/SSH | Proto: TCP(1) | Flags: all SYN | TTL: 46 | Len: 60B | Win: 64240(1) | F2B/ufw-honeypot@2026-10-03T17:05:25Z
show less
Port Scan
Hacking
Anonymous
Suspicious brute-force activity detected by MikroTik and the source IP was added to the Brut_knock_B ...
show moreSuspicious brute-force activity detected by MikroTik and the source IP was added to the Brut_knock_Blacklist.
show less
2026-10-03T03:35:28.185154-06:00 b146-29 sshd[3632267]: pam_unix(sshd:auth): authentication failure; ...
show more2026-10-03T03:35:28.185154-06:00 b146-29 sshd[3632267]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.202.195.196 user=root
2026-10-03T03:35:30.150285-06:00 b146-29 sshd[3632267]: Failed password for invalid user root from 5.202.195.196 port 58638 ssh2
2026-10-03T03:35:33.199995-06:00 b146-29 sshd[3632276]: User root from 5.202.195.196 not allowed because none of user's groups are listed in AllowGroups
...
show less
