JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

189.222.154.159

Recent Activity

Abuse Confidence Score

100% Critical

74 reports

62 reporters · latest 1 day ago

ISP: Telefonos del Noroeste, S.A. de C.V.
Usage Type: Fixed Line ISP
ASN: AS8151
Hostname(s): 189.222.154.159.dsl.dyn.telnor.net
Domain Name: telnor.com
Country: 🇲🇽 Mexico
City: Mexicali, Baja California

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

74 from 62 distinct reporters

First reported

November 7th 2026

Most recent report

1 day ago

Last 60 days

Top reporter locations 🇩🇪 Germany 21 🇺🇸 United States of America 12 🇳🇱 Netherlands 6

Most common categories Brute-Force 64 SSH 61 Port Scan 6 Hacking 5 Web App Attack 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-11-14 17:22:52 UTC · (1 day ago)	[ABYNTIS Lagezentrum] Malicious activity: sshd: brute force trying to get access to the system. Non existent user. Reviewed and blocked by the operator.	Hacking
🇺🇸 cwytech	2026-11-11 23:23:51 UTC · (3 days ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/tpot-ssh-crit.	Brute-Force SSH
🇺🇸 yzfdude1	2026-11-11 20:48:10 UTC · (4 days ago)	2026-11-11T13:48:01.187525-07:00 b146-36 sshd[382287]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.222.154.159 user=root 2026-11-11T13:48:03.307503-07:00 b146-36 sshd[382287]: Failed password for inval ... show more 2026-11-11T13:48:01.187525-07:00 b146-36 sshd[382287]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.222.154.159 user=root 2026-11-11T13:48:03.307503-07:00 b146-36 sshd[382287]: Failed password for invalid user root from 189.222.154.159 port 59042 ssh2 2026-11-11T13:48:07.118490-07:00 b146-36 sshd[382287]: Failed password for invalid user root from 189.222.154.159 port 59042 ssh2 ... show less	Brute-Force SSH
🇺🇸 [email protected]	2026-11-11 18:28:02 UTC · (4 days ago)	2 unauthorized SSH login attempts with 2 distinct credentials, including IoT/Mirai default credentials; interactive shell sessions after successful logins; payload: shell commands; seen 2026-11-11 (UTC)	Hacking Brute-Force SSH IoT Targeted
🇩🇪 tuxy	2026-11-11 17:59:14 UTC · (4 days ago)	2026-11-11T18:59:00.824504+01:00 vps.tuxy.dev sshd[2969432]: error: maximum authentication attempts exceeded for root from 189.222.154.159 port 46658 ssh2 [preauth] 2026-11-11T18:59:07.185103+01:00 vps.tuxy.dev sshd[2969434]: error: maximum authentic ... show more 2026-11-11T18:59:00.824504+01:00 vps.tuxy.dev sshd[2969432]: error: maximum authentication attempts exceeded for root from 189.222.154.159 port 46658 ssh2 [preauth] 2026-11-11T18:59:07.185103+01:00 vps.tuxy.dev sshd[2969434]: error: maximum authentication attempts exceeded for root from 189.222.154.159 port 46928 ssh2 [preauth] 2026-11-11T18:59:13.537801+01:00 vps.tuxy.dev sshd[2969484]: error: maximum authentication attempts exceeded for root from 189.222.154.159 port 47144 ssh2 [preauth] ... show less	Brute-Force SSH
🇧🇷 guibla	2026-11-11 17:53:00 UTC · (4 days ago)	Automated Fail2Ban detection of repeated malicious activity	Brute-Force SSH
🇺🇸 yzfdude1	2026-11-11 16:55:19 UTC · (4 days ago)	2026-11-11T09:55:14.088517-07:00 b146-InstructorB sshd[370607]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.222.154.159 user=root 2026-11-11T09:55:16.786706-07:00 b146-InstructorB sshd[370607]: Failed ... show more 2026-11-11T09:55:14.088517-07:00 b146-InstructorB sshd[370607]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.222.154.159 user=root 2026-11-11T09:55:16.786706-07:00 b146-InstructorB sshd[370607]: Failed password for invalid user root from 189.222.154.159 port 42970 ssh2 2026-11-11T09:55:19.290792-07:00 b146-InstructorB sshd[370607]: Failed password for invalid user root from 189.222.154.159 port 42970 ssh2 ... show less	Brute-Force SSH
🇫🇷 3mod.eu	2026-11-11 14:10:00 UTC · (4 days ago)	Nov 11 14:09:48 3mod sshd[1669410]: Failed password for root from 189.222.154.159 port 37834 ssh2 Nov 11 14:09:52 3mod sshd[1669410]: Failed password for root from 189.222.154.159 port 37834 ssh2 Nov 11 14:09:54 3mod sshd[1669410]: Failed password fo ... show more Nov 11 14:09:48 3mod sshd[1669410]: Failed password for root from 189.222.154.159 port 37834 ssh2 Nov 11 14:09:52 3mod sshd[1669410]: Failed password for root from 189.222.154.159 port 37834 ssh2 Nov 11 14:09:54 3mod sshd[1669410]: Failed password for root from 189.222.154.159 port 37834 ssh2 Nov 11 14:09:57 3mod sshd[1669410]: Failed password for root from 189.222.154.159 port 37834 ssh2 Nov 11 14:10:00 3mod sshd[1669410]: Failed password for root from 189.222.154.159 port 37834 ssh2 ... show less	Brute-Force SSH
🇨🇿 smidra	2026-11-11 14:00:19 UTC · (4 days ago)	189.222.154.159 brute-forcing ssh logins on Wed Nov 11 15:00:19 CET 2026	Brute-Force SSH
🇳🇱 paradoxnetworks	2026-11-11 13:26:59 UTC · (4 days ago)	2026-11-11T13:26:51.583030+00:00 netbox sshd-session[183841]: Failed password for root from 189.222.154.159 port 55910 ssh2 2026-11-11T13:26:55.067929+00:00 netbox sshd-session[183841]: Failed password for root from 189.222.154.159 port 55910 ssh2 20 ... show more 2026-11-11T13:26:51.583030+00:00 netbox sshd-session[183841]: Failed password for root from 189.222.154.159 port 55910 ssh2 2026-11-11T13:26:55.067929+00:00 netbox sshd-session[183841]: Failed password for root from 189.222.154.159 port 55910 ssh2 2026-11-11T13:26:59.074347+00:00 netbox sshd-session[183841]: Failed password for root from 189.222.154.159 port 55910 ssh2 ... show less	Brute-Force SSH
🇨🇭 C.Ferris	2026-11-11 08:49:48 UTC · (4 days ago)	Fail2Ban SSHD Brute-force SSH server ...	Brute-Force SSH
🇩🇪 marcel-knorr.de	2026-11-11 07:18:46 UTC · (4 days ago)	[staging] SSH login failed	Brute-Force SSH
🇺🇸 CowGL	2026-11-11 06:02:42 UTC · (4 days ago)	2026-11-11T06:02:22.035040maoyue-lax1 sshd[2221918]: error: maximum authentication attempts exceeded for root from 189.222.154.159 port 36106 ssh2 [preauth] 2026-11-11T06:02:29.351803maoyue-lax1 sshd[2221934]: error: maximum authentication attempts e ... show more 2026-11-11T06:02:22.035040maoyue-lax1 sshd[2221918]: error: maximum authentication attempts exceeded for root from 189.222.154.159 port 36106 ssh2 [preauth] 2026-11-11T06:02:29.351803maoyue-lax1 sshd[2221934]: error: maximum authentication attempts exceeded for root from 189.222.154.159 port 36364 ssh2 [preauth] 2026-11-11T06:02:35.366106maoyue-lax1 sshd[2221951]: error: maximum authentication attempts exceeded for root from 189.222.154.159 port 36644 ssh2 [preauth] 2026-11-11T06:02:41.327851maoyue-lax1 sshd[2221953]: Disconnected from authenticating user root 189.222.154.159 port 36870 [preauth] show less	Brute-Force SSH
🇰🇷 hanb.jp	2026-11-11 05:19:16 UTC · (4 days ago)	Nov 11 05:19:10 v4bgp sshd[463458]: Failed password for root from 189.222.154.159 port 34530 ssh2 Nov 11 05:19:13 v4bgp sshd[463458]: Failed password for root from 189.222.154.159 port 34530 ssh2 Nov 11 05:19:16 v4bgp sshd[463458]: Failed password fo ... show more Nov 11 05:19:10 v4bgp sshd[463458]: Failed password for root from 189.222.154.159 port 34530 ssh2 Nov 11 05:19:13 v4bgp sshd[463458]: Failed password for root from 189.222.154.159 port 34530 ssh2 Nov 11 05:19:16 v4bgp sshd[463458]: Failed password for root from 189.222.154.159 port 34530 ssh2 ... show less	Brute-Force SSH
🇵🇱 webadmin	2026-11-11 03:04:37 UTC · (4 days ago)	Failed password for root from 189.222.154.159 port 41406 ssh2	SSH

Showing 1 to 15 of 74 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇦🇿 85.132.9.234

🇺🇸 66.132.186.178

🇧🇪 35.210.110.209

🇳🇱 200.138.46.96

🇫🇮 185.94.34.161

🇪🇪 165.231.183.15

🇻🇺 138.226.239.233

🇲🇽 134.82.72.93

🇳🇱 77.239.124.61

🇺🇸 66.132.195.99

🇺🇸 212.102.40.218

🇳🇱 206.245.152.232

🇺🇸 205.210.31.80

🇺🇸 205.210.31.41

🇲🇽 189.194.140.170

🇹🇼 61.60.216.34

🇺🇸 2604:a880:400:d1:0:5:6dbe:a001

🇵🇱 176.53.159.197

🇸🇬 159.223.51.116

🇬🇧 35.203.210.122