JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 189.147.20.241

189.147.20.241 was found in our database!

This IP was reported 2,208 times. Confidence of Abuse is 100%: ?

100%

ISP	Gestión de direccionamiento UniNet
Usage Type	Fixed Line ISP
ASN	AS8151
Hostname(s)	dsl-241-20-147-189-dynamic.prod-infinitum.com.mx
Domain Name	uninet.net.mx
Country	🇲🇽 Mexico
City	Mexico City, Mexico City

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 189.147.20.241

Whois 189.147.20.241

IP Abuse Reports for 189.147.20.241:

This IP address has been reported a total of 2,208 times from 771 distinct sources. 189.147.20.241 was first reported on March 29th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-05-30 08:05:12 (1 week ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇧🇷 ICS Labs	2026-05-16 19:00:32 (2 weeks ago)	ICS Labs identified 189.147.20.241 as a malicious indicator from threat intelligence.	Hacking
🇸🇪 jonathanselea.se	2026-05-13 07:47:34 (3 weeks ago)	$f2bV_matches	SSH
🇳🇱 GG UNLUCKI	2026-05-12 17:45:48 (3 weeks ago)	Historical Fail2Ban SSH ban observed on this host. Source: fail2ban.log. Categories: SSH brute-force ... show more Historical Fail2Ban SSH ban observed on this host. Source: fail2ban.log. Categories: SSH brute-force. show less	Brute-Force SSH
🇫🇷 gooko	2026-05-11 09:07:40 (3 weeks ago)	SSH brute-force attack detected by fail2ban jail 'sshd'	Brute-Force SSH
🇩🇪 ghostwarriors	2026-05-09 11:21:21 (3 weeks ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇺🇸 helix	2026-05-02 01:32:04 (1 month ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ... show more Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts). show less	Brute-Force SSH
🇺🇸 helix	2026-04-30 21:20:22 (1 month ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ... show more Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts). show less	Brute-Force SSH
🇬🇧 AdrianT	2026-04-30 18:49:55 (1 month ago)	SSH brute force	Brute-Force SSH
🇺🇸 helix	2026-04-28 20:48:25 (1 month ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ... show more Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts). show less	Brute-Force SSH
🇨🇳 ThreatBook.io	2026-04-27 22:47:28 (1 month ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/189.147.20.241	SSH
🇮🇹 cazae	2026-04-27 12:46:46 (1 month ago)	2026-04-27T13:44:52.345369+01:00 server1 sshd-session[3446694]: Failed password for root from 189.14 ... show more 2026-04-27T13:44:52.345369+01:00 server1 sshd-session[3446694]: Failed password for root from 189.147.20.241 port 35012 ssh2 2026-04-27T13:45:48.543245+01:00 server1 sshd-session[3446721]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.147.20.241 user=root 2026-04-27T13:45:50.908267+01:00 server1 sshd-session[3446721]: Failed password for root from 189.147.20.241 port 57762 ssh2 2026-04-27T13:46:44.783864+01:00 server1 sshd-session[3446746]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.147.20.241 user=root 2026-04-27T13:46:46.006366+01:00 server1 sshd-session[3446746]: Failed password for root from 189.147.20.241 port 24342 ssh2 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-04-27 12:05:53 (1 month ago)	189.147.20.241 (MX/Mexico/dsl-241-20-147-189-dynamic.prod-infinitum.com.mx), 5 distributed sshd atta ... show more 189.147.20.241 (MX/Mexico/dsl-241-20-147-189-dynamic.prod-infinitum.com.mx), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 27 07:05:49 14133 sshd[26798]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.47.159.50 user=root Apr 27 07:03:25 14133 sshd[26508]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.147.20.241 user=root Apr 27 07:03:27 14133 sshd[26508]: Failed password for root from 189.147.20.241 port 62479 ssh2 Apr 27 06:58:50 14133 sshd[25880]: Failed password for root from 94.29.124.154 port 23632 ssh2 Apr 27 06:58:48 14133 sshd[25880]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.29.124.154 user=root IP Addresses Blocked: 101.47.159.50 (SG/Singapore/-) show less	Brute-Force SSH
🇩🇪 ghostwarriors	2026-04-27 09:50:09 (1 month ago)	Unauthorized connection to FTP port 21	FTP Brute-Force Brute-Force
🇨🇭 NV	2026-04-27 09:30:36 (1 month ago)	pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.147.20.2 ... show more pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.147.20.241 user=root Failed password for root from 189.147.20.241 port 45994 ssh2 show less	Brute-Force SSH

Showing 1 to 15 of 2208 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 172.217.43.154

🇺🇸 135.237.126.198

🇺🇸 91.230.168.92

🇺🇸 65.49.1.142

🇬🇧 35.203.211.244

🇩🇪 213.209.159.236

🇺🇸 162.216.149.165

🇬🇧 2a06:4880:6000::8c

🇩🇪 2a02:4780:3f:2162:0:31bf:e441:1

🇭🇰 123.58.213.128

🇺🇸 109.105.210.52

🇨🇳 101.96.198.153

🇺🇸 100.29.192.107

🇭🇰 47.83.124.31

🇨🇦 24.222.210.134

🇸🇬 2404:6800:4003:c1a::12c

🇮🇱 212.199.105.109

🇺🇸 147.185.132.88

🇳🇱 85.11.167.106

🇺🇸 65.49.1.156