Log in to view charts and search reports for this IP.
Log In
Reports Activity
Example preview
Report Categories (Last 60 Days)
Example preview
Top Reporter Countries (Last 60 Days)
Example preview
Account required for the enhanced features
Log inSign up
IP Abuse Reports for 189.149.254.122
This IP address has been reported a total of
281
times from
227 distinct
sources.
189.149.254.122 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 62
reports;
United States of America
with 62
reports;
France
with 28
reports.
The most common categories in these recent reports were:
Brute-Force
265
times;
SSH
252
times;
Hacking
17
times;
Port Scan
16
times;
Web App Attack
9
times;
Other
19
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-09-26T01:11:52.375834localhost sshd[1836371]: Invalid user xiao from 189.149.254.122 port 18771 ...
show more2026-09-26T01:11:52.375834localhost sshd[1836371]: Invalid user xiao from 189.149.254.122 port 18771
...
show less
Port Scan
Hacking
Brute-Force
Exploited Host
Web App Attack
2026-09-25T21:30:42.524566+02:00 [REDACTED] sshd[101995]: Invalid user team from 189.149.254.122 por ...
show more2026-09-25T21:30:42.524566+02:00 [REDACTED] sshd[101995]: Invalid user team from 189.149.254.122 port 30211
2026-09-25T21:33:39.388431+02:00 [REDACTED] sshd[102003]: Invalid user sjt from 189.149.254.122 port 29739
2026-09-25T21:35:03.547435+02:00 [REDACTED] sshd[102008]: Invalid user faizan from 189.149.254.122 port 21729
2026-09-25T21:36:29.077477+02:00 [REDACTED] sshd[102013]: Invalid user carlos from 189.149.254.122 port 62460
2026-09-25T21:39:23.723966+02:00 [REDACTED] sshd[102019]: Invalid user armando from 189.149.254.122 port 52389
show less
2026-09-25T21:10:43.739218+02:00 [REDACTED] sshd[101940]: Invalid user sy from 189.149.254.122 port ...
show more2026-09-25T21:10:43.739218+02:00 [REDACTED] sshd[101940]: Invalid user sy from 189.149.254.122 port 22303
2026-09-25T21:12:40.551241+02:00 [REDACTED] sshd[101942]: Invalid user nmt from 189.149.254.122 port 28575
2026-09-25T21:14:14.663292+02:00 [REDACTED] sshd[101945]: Invalid user test from 189.149.254.122 port 15242
2026-09-25T21:15:36.848030+02:00 [REDACTED] sshd[101952]: Invalid user qqqq from 189.149.254.122 port 29291
2026-09-25T21:17:02.957875+02:00 [REDACTED] sshd[101958]: Invalid user bch from 189.149.254.122 port 61787
show less
Brute-Force
SSH
Anonymous
2026-09-25T21:10:40.016442+02:00 HETZNER-FI-1 sshd[1171558]: Invalid user sy from 189.149.254.122 po ...
show more2026-09-25T21:10:40.016442+02:00 HETZNER-FI-1 sshd[1171558]: Invalid user sy from 189.149.254.122 port 29215
2026-09-25T21:12:40.057950+02:00 HETZNER-FI-1 sshd[1182751]: Invalid user nmt from 189.149.254.122 port 52630
2026-09-25T21:14:12.837536+02:00 HETZNER-FI-1 sshd[1191460]: Invalid user test from 189.149.254.122 port 40213
...
show less
2026-09-25T21:05:09.782093+02:00 vmi3268228 sshd[102596]: Invalid user sy from 189.149.254.122 port ...
show more2026-09-25T21:05:09.782093+02:00 vmi3268228 sshd[102596]: Invalid user sy from 189.149.254.122 port 46666
2026-09-25T21:11:43.860795+02:00 vmi3268228 sshd[102797]: Invalid user nmt from 189.149.254.122 port 42450
2026-09-25T21:13:18.569798+02:00 vmi3268228 sshd[102825]: Invalid user test from 189.149.254.122 port 61416
...
show less
Fail2ban ban on jail 'sshd'. Repeated failed authentication attempts against a monitored host. Detec ...
show moreFail2ban ban on jail 'sshd'. Repeated failed authentication attempts against a monitored host. Detected and correlated by Wazuh SIEM (rule 100110, level 10). Reported automatically.
show less
189.149.254.122 (MX/Mexico/dsl-122-254-149-189-dynamic.prod-infinitum.com.mx), 5 distributed sshd at ...
show more189.149.254.122 (MX/Mexico/dsl-122-254-149-189-dynamic.prod-infinitum.com.mx), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 25 12:13:03 15122 sshd[19804]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.149.254.122 user=root
Sep 25 12:13:05 15122 sshd[19804]: Failed password for root from 189.149.254.122 port 15419 ssh2
Sep 25 12:13:57 15122 sshd[20039]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.212.43.1 user=root
Sep 25 12:11:01 15122 sshd[18425]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.78.6.245 user=root
Sep 25 12:11:04 15122 sshd[18425]: Failed password for root from 115.78.6.245 port 42070 ssh2
IP Addresses Blocked:
show less
Brute-Force
SSH
Anonymous
2026-09-25T18:25:53.365942v22019037947384217 sshd[29855]: Invalid user murat from 189.149.254.122 po ...
show more2026-09-25T18:25:53.365942v22019037947384217 sshd[29855]: Invalid user murat from 189.149.254.122 port 62871
2026-09-25T18:25:53.530262v22019037947384217 sshd[29855]: Disconnected from 189.149.254.122 port 62871 [preauth]
2026-09-25T18:31:54.376383v22019037947384217 sshd[29882]: Invalid user beehive from 189.149.254.122 port 60311
...
show less
