This IP address has been reported a total of
279
times from
172 distinct
sources.
189.152.3.238 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
2026-05-28T20:22:24.153440+00:00 bsky-pds-2queer sshd-session[4171993]: Invalid user erp from 189.15 ...
show more2026-05-28T20:22:24.153440+00:00 bsky-pds-2queer sshd-session[4171993]: Invalid user erp from 189.152.3.238 port 34996
2026-05-28T20:22:24.158258+00:00 bsky-pds-2queer sshd-session[4171993]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.152.3.238
2026-05-28T20:22:26.623429+00:00 bsky-pds-2queer sshd-session[4171993]: Failed password for invalid user erp from 189.152.3.238 port 34996 ssh2
2026-05-28T20:24:00.811796+00:00 bsky-pds-2queer sshd-session[4172915]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.152.3.238 user=root
2026-05-28T20:24:02.696497+00:00 bsky-pds-2queer sshd-session[4172915]: Failed password for root from 189.152.3.238 port 43672 ssh2
...
show less
Brute-Force
SSH
Anonymous
May 28 20:20:05 sftp-cognizant-san-jose-1 sshd[778455]: pam_unix(sshd:auth): authentication failure; ...
show moreMay 28 20:20:05 sftp-cognizant-san-jose-1 sshd[778455]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.152.3.238
May 28 20:20:07 sftp-cognizant-san-jose-1 sshd[778455]: Failed password for invalid user vlad from 189.152.3.238 port 46172 ssh2
May 28 20:22:35 sftp-cognizant-san-jose-1 sshd[778476]: Invalid user erp from 189.152.3.238 port 35034
...
show less
2026-05-28T21:15:03.916528+01:00 ozelot sshd-session[1006098]: pam_unix(sshd:auth): authentication f ...
show more2026-05-28T21:15:03.916528+01:00 ozelot sshd-session[1006098]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.152.3.238
2026-05-28T21:15:05.827231+01:00 ozelot sshd-session[1006098]: Failed password for invalid user vlad from 189.152.3.238 port 42588 ssh2
2026-05-28T21:21:56.373963+01:00 ozelot sshd-session[1081753]: Invalid user erp from 189.152.3.238 port 47344
show less
2026-05-28T21:44:21.460178+02:00 gw-de19-01.guestgw.net sshd[446640]: Disconnected from authenticati ...
show more2026-05-28T21:44:21.460178+02:00 gw-de19-01.guestgw.net sshd[446640]: Disconnected from authenticating user root 189.152.3.238 port 40428 [preauth]
2026-05-28T21:48:59.620789+02:00 gw-de19-01.guestgw.net sshd[447975]: Disconnected from authenticating user root 189.152.3.238 port 55844 [preauth]
2026-05-28T21:50:34.206139+02:00 gw-de19-01.guestgw.net sshd[448505]: Disconnected from authenticating user root 189.152.3.238 port 38006 [preauth]
2026-05-28T21:52:06.741014+02:00 gw-de19-01.guestgw.net sshd[448969]: Disconnected from authenticating user root 189.152.3.238 port 42090 [preauth]
2026-05-28T21:53:34.445529+02:00 gw-de19-01.guestgw.net sshd[449364]: Invalid user frappe from 189.152.3.238 port 52356
show less
Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-05-28T19:16:26Z and 2026-05-2 ...
show moreCowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-05-28T19:16:26Z and 2026-05-28T19:22:25Z
show less
2026-05-28T21:10:31.652968+02:00 gw-de36-01.guestgw.net sshd[311506]: Disconnected from authenticati ...
show more2026-05-28T21:10:31.652968+02:00 gw-de36-01.guestgw.net sshd[311506]: Disconnected from authenticating user root 189.152.3.238 port 57940 [preauth]
2026-05-28T21:15:46.078542+02:00 gw-de36-01.guestgw.net sshd[313039]: Disconnected from authenticating user admin 189.152.3.238 port 45434 [preauth]
2026-05-28T21:17:10.889407+02:00 gw-de36-01.guestgw.net sshd[313484]: Disconnected from authenticating user root 189.152.3.238 port 59118 [preauth]
2026-05-28T21:18:43.866444+02:00 gw-de36-01.guestgw.net sshd[313995]: Disconnected from authenticating user root 189.152.3.238 port 57344 [preauth]
2026-05-28T21:20:22.973943+02:00 gw-de36-01.guestgw.net sshd[314658]: Disconnected from authenticating user root 189.152.3.238 port 49512 [preauth]
show less
2026-05-28T19:06:51.918497+00:00 vps-d3a39c2f sshd-session[2038188]: User root from 189.152.3.238 no ...
show more2026-05-28T19:06:51.918497+00:00 vps-d3a39c2f sshd-session[2038188]: User root from 189.152.3.238 not allowed because not listed in AllowUsers
2026-05-28T19:15:19.521482+00:00 vps-d3a39c2f sshd-session[2043979]: Invalid user admin from 189.152.3.238 port 37342
2026-05-28T19:16:43.896871+00:00 vps-d3a39c2f sshd-session[2044960]: User root from 189.152.3.238 not allowed because not listed in AllowUsers
...
show less
Brute-Force
SSH
Anonymous
SSH brute force attempt. User: me, Pass: [REDACTED]