This IP address has been reported a total of
11
times from
8 distinct
sources.
189.112.133.194 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-08-28T12:21:20.331476+00:00 sg-jumphost-server sshd[1419793]: Connection closed by authenticati ...
show more2026-08-28T12:21:20.331476+00:00 sg-jumphost-server sshd[1419793]: Connection closed by authenticating user root 189.112.133.194 port 46341 [preauth]
...
show less
2026-08-28T11:15:00.316800+00:00 sg-jumphost-server sshd[1413281]: Invalid user safepal from 189.112 ...
show more2026-08-28T11:15:00.316800+00:00 sg-jumphost-server sshd[1413281]: Invalid user safepal from 189.112.133.194 port 41598
2026-08-28T11:15:00.665285+00:00 sg-jumphost-server sshd[1413281]: Connection closed by invalid user safepal 189.112.133.194 port 41598 [preauth]
...
show less
2026-08-28T04:36:00.809371-04:00 site sshd-session[114659]: Invalid user ubuntu from 189.112.133.194 ...
show more2026-08-28T04:36:00.809371-04:00 site sshd-session[114659]: Invalid user ubuntu from 189.112.133.194 port 56717
2026-08-28T05:46:50.428165-04:00 site sshd-session[116384]: User root from 189.112.133.194 not allowed because not listed in AllowUsers
2026-08-28T07:04:38.576298-04:00 site sshd-session[120092]: Invalid user safepal from 189.112.133.194 port 40713
...
show less
2026-08-28T09:55:45.437061+00:00 sg-jumphost-server sshd[1405872]: Connection closed by authenticati ...
show more2026-08-28T09:55:45.437061+00:00 sg-jumphost-server sshd[1405872]: Connection closed by authenticating user root 189.112.133.194 port 59338 [preauth]
2026-08-28T09:57:21.663695+00:00 sg-jumphost-server sshd[1406038]: Connection closed by authenticating user root 189.112.133.194 port 43833 [preauth]
...
show less
Aug 28 08:20:24 mx sshd[1138343]: Failed password for invalid user ubuntu from 189.112.133.194 port ...
show moreAug 28 08:20:24 mx sshd[1138343]: Failed password for invalid user ubuntu from 189.112.133.194 port 60677 ssh2
Aug 28 09:28:49 mx sshd[1141796]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.112.133.194 user=root
Aug 28 09:28:51 mx sshd[1141796]: Failed password for root from 189.112.133.194 port 53160 ssh2
...
show less
Automated sensor: 3 SSH brute-force attempts over the last 24h (latest 2026-08-28T09:03Z). Usernames ...
show moreAutomated sensor: 3 SSH brute-force attempts over the last 24h (latest 2026-08-28T09:03Z). Usernames tried: ubuntu.
show less
2026-08-28T08:44:07.068862+00:00 sg-jumphost-server sshd[1398617]: Invalid user ubuntu from 189.112. ...
show more2026-08-28T08:44:07.068862+00:00 sg-jumphost-server sshd[1398617]: Invalid user ubuntu from 189.112.133.194 port 50849
2026-08-28T08:44:07.424609+00:00 sg-jumphost-server sshd[1398617]: Connection closed by invalid user ubuntu 189.112.133.194 port 50849 [preauth]
2026-08-28T08:45:29.372900+00:00 sg-jumphost-server sshd[1398794]: Invalid user ubuntu from 189.112.133.194 port 34226
...
show less