This IP address has been reported a total of
649
times from
343 distinct
sources.
189.146.252.91 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
(sshd) Failed SSH login from 189.146.252.91 (MX/Mexico/Mexico City/Cuauhtémoc/dsl-91-252-146-189-dyn ...
show more(sshd) Failed SSH login from 189.146.252.91 (MX/Mexico/Mexico City/Cuauhtémoc/dsl-91-252-146-189-dynamic.prod-infinitum.com.mx)
show less
2026-05-23T08:09:08.370632+02:00 srv7 sshd[1459823]: pam_unix(sshd:auth): authentication failure; lo ...
show more2026-05-23T08:09:08.370632+02:00 srv7 sshd[1459823]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.146.252.91 user=root
2026-05-23T08:09:09.825361+02:00 srv7 sshd[1459823]: Failed password for root from 189.146.252.91 port 41020 ssh2
2026-05-23T08:12:36.174587+02:00 srv7 sshd[1460703]: Invalid user amir from 189.146.252.91 port 34454
2026-05-23T08:12:36.177967+02:00 srv7 sshd[1460703]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.146.252.91
2026-05-23T08:12:38.520083+02:00 srv7 sshd[1460703]: Failed password for invalid user amir from 189.146.252.91 port 34454 ssh2
...
show less
May 23 07:59:20 hestiacp-tunnel-ip sshd[931552]: pam_unix(sshd:auth): authentication failure; lognam ...
show moreMay 23 07:59:20 hestiacp-tunnel-ip sshd[931552]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.146.252.91 user=root
May 23 07:59:22 hestiacp-tunnel-ip sshd[931552]: Failed password for root from 189.146.252.91 port 38586 ssh2
May 23 08:02:53 hestiacp-tunnel-ip sshd[932745]: Invalid user ts from 189.146.252.91 port 58078
May 23 08:02:53 hestiacp-tunnel-ip sshd[932745]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.146.252.91
May 23 08:02:56 hestiacp-tunnel-ip sshd[932745]: Failed password for invalid user ts from 189.146.252.91 port 58078 ssh2
...
show less
2026-05-23T07:51:41.917787+02:00 router01.ib-heddier.de sshd[3461073]: Invalid user ubuntu from 189. ...
show more2026-05-23T07:51:41.917787+02:00 router01.ib-heddier.de sshd[3461073]: Invalid user ubuntu from 189.146.252.91 port 51960
2026-05-23T07:51:42.126298+02:00 router01.ib-heddier.de sshd[3461073]: Disconnected from invalid user ubuntu 189.146.252.91 port 51960 [preauth]
2026-05-23T07:58:53.844421+02:00 router01.ib-heddier.de sshd[3462088]: Disconnected from authenticating user root 189.146.252.91 port 49186 [preauth]
2026-05-23T08:02:29.507965+02:00 router01.ib-heddier.de sshd[3462660]: Invalid user ts from 189.146.252.91 port 51750
2026-05-23T08:02:29.714264+02:00 router01.ib-heddier.de sshd[3462660]: Disconnected from invalid user ts 189.146.252.91 port 51750 [preauth]
show less
189.146.252.91 (MX/Mexico/dsl-91-252-146-189-dynamic.prod-infinitum.com.mx), 5 distributed sshd atta ...
show more189.146.252.91 (MX/Mexico/dsl-91-252-146-189-dynamic.prod-infinitum.com.mx), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 23 00:57:54 14462 sshd[23430]: Failed password for root from 117.121.214.50 port 52862 ssh2
May 23 00:58:08 14462 sshd[23552]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.146.252.91 user=root
May 23 00:58:10 14462 sshd[23552]: Failed password for root from 189.146.252.91 port 60570 ssh2
May 23 00:57:52 14462 sshd[23430]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.121.214.50 user=root
May 23 00:56:55 14462 sshd[23283]: Failed password for root from 83.233.149.56 port 62371 ssh2
IP Addresses Blocked:
117.121.214.50 (TH/Thailand/-)
show less
May 23 07:19:29 vmd80284 sshd[1643644]: Invalid user roott from 189.146.252.91 port 43502
May 23 07: ...
show moreMay 23 07:19:29 vmd80284 sshd[1643644]: Invalid user roott from 189.146.252.91 port 43502
May 23 07:26:47 vmd80284 sshd[1648711]: Invalid user user from 189.146.252.91 port 57742
May 23 07:30:21 vmd80284 sshd[1651181]: Invalid user test from 189.146.252.91 port 39064
...
show less
2026-05-23T14:23:27.607792+09:00 icn-home-arm-rpi5b1 sshd[3805758]: pam_unix(sshd:auth): authenticat ...
show more2026-05-23T14:23:27.607792+09:00 icn-home-arm-rpi5b1 sshd[3805758]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.146.252.91 user=root
2026-05-23T14:23:29.768780+09:00 icn-home-arm-rpi5b1 sshd[3805758]: Failed password for root from 189.146.252.91 port 60062 ssh2
2026-05-23T14:27:02.460533+09:00 icn-home-arm-rpi5b1 sshd[3806275]: Invalid user user from 189.146.252.91 port 43218
2026-05-23T14:27:02.464856+09:00 icn-home-arm-rpi5b1 sshd[3806275]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.146.252.91
2026-05-23T14:27:04.475375+09:00 icn-home-arm-rpi5b1 sshd[3806275]: Failed password for invalid user user from 189.146.252.91 port 43218 ssh2
...
show less
May 23 07:18:54 s1-4-gra7 sshd[1101358]: Invalid user roott from 189.146.252.91 port 47434
May 23 07 ...
show moreMay 23 07:18:54 s1-4-gra7 sshd[1101358]: Invalid user roott from 189.146.252.91 port 47434
May 23 07:26:11 s1-4-gra7 sshd[1101803]: Invalid user user from 189.146.252.91 port 51506
show less
May 22 23:17:42 b146-15 sshd[152342]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ...
show moreMay 22 23:17:42 b146-15 sshd[152342]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.146.252.91 user=root
May 22 23:17:44 b146-15 sshd[152342]: Failed password for root from 189.146.252.91 port 48244 ssh2
May 22 23:21:19 b146-15 sshd[152402]: Invalid user roott from 189.146.252.91 port 44882
...
show less
Brute-Force
SSH
Anonymous
2026-05-23T07:17:39.491933+02:00 vm635618.cloud.nuxt.network sshd-session[50308]: pam_unix(sshd:auth ...
show more2026-05-23T07:17:39.491933+02:00 vm635618.cloud.nuxt.network sshd-session[50308]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.146.252.91 user=root
2026-05-23T07:17:41.434667+02:00 vm635618.cloud.nuxt.network sshd-session[50308]: Failed password for root from 189.146.252.91 port 59736 ssh2
2026-05-23T07:21:16.890504+02:00 vm635618.cloud.nuxt.network sshd-session[50317]: Invalid user roott from 189.146.252.91 port 51368
...
show less
Brute-Force
SSH
Showing 586 to
600
of 649 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩