This IP address has been reported a total of
648
times from
342 distinct
sources.
189.146.252.91 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
(sshd) Failed SSH login from 189.146.252.91 (MX/Mexico/dsl-91-252-146-189-dynamic.prod-infinitum.com ...
show more(sshd) Failed SSH login from 189.146.252.91 (MX/Mexico/dsl-91-252-146-189-dynamic.prod-infinitum.com.mx): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: May 25 10:24:57 15547 sshd[2776]: Invalid user curl from 189.146.252.91 port 53814
May 25 10:24:59 15547 sshd[2776]: Failed password for invalid user curl from 189.146.252.91 port 53814 ssh2
May 25 10:29:30 15547 sshd[3308]: Invalid user localhost from 189.146.252.91 port 46368
May 25 10:29:33 15547 sshd[3308]: Failed password for invalid user localhost from 189.146.252.91 port 46368 ssh2
May 25 10:32:59 15547 sshd[3662]: Invalid user peter from 189.146.252.91 port 35888
show less
2026-05-25T17:20:59.688212+02:00 admin sshd[2460340]: Failed password for invalid user curl from 189 ...
show more2026-05-25T17:20:59.688212+02:00 admin sshd[2460340]: Failed password for invalid user curl from 189.146.252.91 port 36580 ssh2
2026-05-25T17:28:03.870641+02:00 admin sshd[2460775]: Invalid user localhost from 189.146.252.91 port 60312
2026-05-25T17:28:03.873584+02:00 admin sshd[2460775]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.146.252.91
2026-05-25T17:28:05.526080+02:00 admin sshd[2460775]: Failed password for invalid user localhost from 189.146.252.91 port 60312 ssh2
2026-05-25T17:31:39.927806+02:00 admin sshd[2461019]: Invalid user peter from 189.146.252.91 port 40580
...
show less
Brute-Force
SSH
Anonymous
May 25 15:18:09 ubuntu sshd[920327]: Invalid user curl from 189.146.252.91 port 39932
May 25 15:27:0 ...
show moreMay 25 15:18:09 ubuntu sshd[920327]: Invalid user curl from 189.146.252.91 port 39932
May 25 15:27:00 ubuntu sshd[926935]: Invalid user localhost from 189.146.252.91 port 34796
May 25 15:30:40 ubuntu sshd[929754]: Invalid user peter from 189.146.252.91 port 46836
...
show less
2026-05-25T15:17:26.628173+00:00 nl-ams01-wavy sshd-session[2879385]: Invalid user curl from 189.146 ...
show more2026-05-25T15:17:26.628173+00:00 nl-ams01-wavy sshd-session[2879385]: Invalid user curl from 189.146.252.91 port 41508
2026-05-25T15:26:43.576287+00:00 nl-ams01-wavy sshd-session[2951216]: Invalid user localhost from 189.146.252.91 port 48008
2026-05-25T15:30:25.020468+00:00 nl-ams01-wavy sshd-session[2980429]: Invalid user peter from 189.146.252.91 port 38722
show less
2026-05-25T16:17:32.340307+01:00 mxbackup sshd[45861]: pam_unix(sshd:auth): authentication failure; ...
show more2026-05-25T16:17:32.340307+01:00 mxbackup sshd[45861]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.146.252.91
2026-05-25T16:17:34.034486+01:00 mxbackup sshd[45861]: Failed password for invalid user curl from 189.146.252.91 port 34494 ssh2
2026-05-25T16:26:46.135032+01:00 mxbackup sshd[45921]: Invalid user localhost from 189.146.252.91 port 51076
...
show less
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/tpot-ssh-high.
Brute-Force
SSH
Anonymous
May 25 17:32:48 ipht sshd[1400850]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid ...
show moreMay 25 17:32:48 ipht sshd[1400850]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.146.252.91 user=root
May 25 17:32:50 ipht sshd[1400850]: Failed password for root from 189.146.252.91 port 44966 ssh2
May 25 17:36:23 ipht sshd[1401788]: Invalid user glenn from 189.146.252.91 port 39728
...
show less
May 25 08:26:35 ssg-imac1 sshd[89927]: Failed password for root from 189.146.252.91 port 57516 ssh2
...
show moreMay 25 08:26:35 ssg-imac1 sshd[89927]: Failed password for root from 189.146.252.91 port 57516 ssh2
May 25 08:30:05 ssg-imac1 sshd[89934]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.146.252.91 user=admin
May 25 08:30:07 ssg-imac1 sshd[89934]: Failed password for admin from 189.146.252.91 port 48020 ssh2
...
show less
May 25 15:39:57 service sshd[767117]: Invalid user user from 189.146.252.91 port 47208
May 25 15:44: ...
show moreMay 25 15:39:57 service sshd[767117]: Invalid user user from 189.146.252.91 port 47208
May 25 15:44:19 service sshd[767401]: Invalid user steam from 189.146.252.91 port 41626
...
show less
Brute-Force
SSH
Showing 181 to
195
of 648 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩