This IP address has been reported a total of
1,954
times from
788 distinct
sources.
189.190.200.148 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
2026-05-21T19:18:24.900322 orion-manager sshd[3795114]: Invalid user rao from 189.190.200.148 port 4 ...
show more2026-05-21T19:18:24.900322 orion-manager sshd[3795114]: Invalid user rao from 189.190.200.148 port 48916
2026-05-21T19:21:49.949587 orion-manager sshd[3818469]: Invalid user vipshop from 189.190.200.148 port 40948
2026-05-21T19:35:11.619454 orion-manager sshd[3909885]: Invalid user huaxia from 189.190.200.148 port 57706
2026-05-21T19:38:33.887051 orion-manager sshd[3932826]: Invalid user xiaojun from 189.190.200.148 port 58954
2026-05-21T19:41:54.074184 orion-manager sshd[3955743]: Invalid user backup from 189.190.200.148 port 48962
...
show less
Brute-Force
SSH
Anonymous
(sshd) Failed SSH login from 189.190.200.148 (MX/Mexico/dsl-148-200-190-189-dynamic.prod-infinitum.c ...
show more(sshd) Failed SSH login from 189.190.200.148 (MX/Mexico/dsl-148-200-190-189-dynamic.prod-infinitum.com.mx): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: May 21 15:14:39 sshd[45453]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.190.200.148 user=[USERNAME]
show less
May 21 19:09:04 cloud-server-0 sshd[633529]: Failed password for root from 189.190.200.148 port 5400 ...
show moreMay 21 19:09:04 cloud-server-0 sshd[633529]: Failed password for root from 189.190.200.148 port 54008 ssh2
May 21 19:16:17 cloud-server-0 sshd[633628]: Invalid user rao from 189.190.200.148 port 42692
...
show less
2026-05-21T19:37:09.988032+01:00 debianserver sshd-session[2885682]: pam_unix(sshd:auth): authentica ...
show more2026-05-21T19:37:09.988032+01:00 debianserver sshd-session[2885682]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.190.200.148 user=root
2026-05-21T19:37:11.873976+01:00 debianserver sshd-session[2885682]: Failed password for root from 189.190.200.148 port 48130 ssh2
2026-05-21T19:42:18.816586+01:00 debianserver sshd-session[2885852]: Invalid user ali from 189.190.200.148 port 54260
...
show less
May 21 20:34:15 srv-ubuntu-dev3 sshd[28190]: pam_unix(sshd:auth): authentication failure; logname= u ...
show moreMay 21 20:34:15 srv-ubuntu-dev3 sshd[28190]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.190.200.148 user=root
May 21 20:34:17 srv-ubuntu-dev3 sshd[28190]: Failed password for root from 189.190.200.148 port 40286 ssh2
May 21 20:34:17 srv-ubuntu-dev3 sshd[28190]: Disconnected from authenticating user root 189.190.200.148 port 40286 [preauth]
May 21 20:39:24 srv-ubuntu-dev3 sshd[29110]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.190.200.148 user=root
May 21 20:39:26 srv-ubuntu-dev3 sshd[29110]: Failed password for root from 189.190.200.148 port 51810 ssh2
...
show less
May 21 20:13:30 srv-ubuntu-dev3 sshd[25194]: pam_unix(sshd:auth): authentication failure; logname= u ...
show moreMay 21 20:13:30 srv-ubuntu-dev3 sshd[25194]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.190.200.148 user=root
May 21 20:13:32 srv-ubuntu-dev3 sshd[25194]: Failed password for root from 189.190.200.148 port 35004 ssh2
May 21 20:13:32 srv-ubuntu-dev3 sshd[25194]: Disconnected from authenticating user root 189.190.200.148 port 35004 [preauth]
May 21 20:18:41 srv-ubuntu-dev3 sshd[26041]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.190.200.148 user=root
May 21 20:18:43 srv-ubuntu-dev3 sshd[26041]: Failed password for root from 189.190.200.148 port 57316 ssh2
...
show less
2026-05-21T20:07:18.477316+02:00 ..de sshd-session[1958628]: Disconnected from authenticating user r ...
show more2026-05-21T20:07:18.477316+02:00 ..de sshd-session[1958628]: Disconnected from authenticating user root 189.190.200.148 port 45632 [preauth]
2026-05-21T20:12:34.429316+02:00 ..de sshd-session[1963327]: Disconnected from authenticating user root 189.190.200.148 port 34692 [preauth]
2026-05-21T20:17:41.643830+02:00 ..de sshd-session[1967738]: Disconnected from authenticating user root 189.190.200.148 port 55928 [preauth]
...
show less
2026-05-21T19:11:35.434076+01:00 debianserver sshd-session[2884873]: Failed password for root from 1 ...
show more2026-05-21T19:11:35.434076+01:00 debianserver sshd-session[2884873]: Failed password for root from 189.190.200.148 port 53340 ssh2
2026-05-21T19:16:29.229589+01:00 debianserver sshd-session[2884995]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.190.200.148 user=root
2026-05-21T19:16:31.342080+01:00 debianserver sshd-session[2884995]: Failed password for root from 189.190.200.148 port 55346 ssh2
...
show less
2026-05-21T21:10:59.998915 ns2.open-bs.ru sshd-session[6819]: Failed password for root from 189.190. ...
show more2026-05-21T21:10:59.998915 ns2.open-bs.ru sshd-session[6819]: Failed password for root from 189.190.200.148 port 54888 ssh2
2026-05-21T21:15:41.293232 ns2.open-bs.ru sshd-session[6825]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.190.200.148 user=root
2026-05-21T21:15:42.872861 ns2.open-bs.ru sshd-session[6825]: Failed password for root from 189.190.200.148 port 43014 ssh2
...
show less
2026-05-21T18:07:53.753Z, an unauthorized access attempt was detected on port 22 (SSH) from source I ...
show more2026-05-21T18:07:53.753Z, an unauthorized access attempt was detected on port 22 (SSH) from source IP address 189.190.200.148.
show less
Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-05-21T18:04:08Z and 2026-05-2 ...
show moreCowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-05-21T18:04:08Z and 2026-05-21T18:04:31Z
show less
Brute-Force
SSH
Showing 1906 to
1920
of 1954 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩