Log in to view charts and search reports for this IP.
Log In
Top Reporter Countries (Last 60 Days)
Example preview
Report Categories (Last 60 Days)
Example preview
Reports Activity
Example preview
Account required for the enhanced features
Log inSign up
IP Abuse Reports for 206.189.1.91:
This IP address has been reported a total of
78
times from
71 distinct
sources.
206.189.1.91 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 9
reports;
United States of America
with 6
reports;
France
with 4
reports.
The most common categories in these recent reports were:
Port Scan
17
times;
Brute-Force
16
times;
SSH
14
times;
Hacking
2
times;
Web App Attack
2
times;
Other
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Port Scan on Honeypot | Ports: 2222/SSH-alt | Proto: TCP(1) | Flags: all SYN | TTL: 243 | Len: 40B | ...
show morePort Scan on Honeypot | Ports: 2222/SSH-alt | Proto: TCP(1) | Flags: all SYN | TTL: 243 | Len: 40B | Win: 65535(1) | F2B/ufw-honeypot@2026-09-09T15:44:56Z
show less
Attacked NCSR.CN production server: SSH brute-force / web scanning / honeypot trips. fail2ban banned ...
show moreAttacked NCSR.CN production server: SSH brute-force / web scanning / honeypot trips. fail2ban banned. Evidence in server logs.
show less
Blocked by UFW (TCP on 2222)
Source port: 50565
TTL: 237
Packet length: 40
TOS: 0x08
This report (f ...
show moreBlocked by UFW (TCP on 2222)
Source port: 50565
TTL: 237
Packet length: 40
TOS: 0x08
This report (for 206.189.1.91) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
2026-09-09T17:28:39.319856+02:00 coffeelake sshd[1315487]: Invalid user admin from 206.189.1.91 port ...
show more2026-09-09T17:28:39.319856+02:00 coffeelake sshd[1315487]: Invalid user admin from 206.189.1.91 port 52060
2026-09-09T17:28:58.091340+02:00 coffeelake sshd[1315804]: Invalid user admin from 206.189.1.91 port 33898
2026-09-09T17:29:16.502048+02:00 coffeelake sshd[1316096]: Invalid user admin from 206.189.1.91 port 51040
2026-09-09T17:29:33.548845+02:00 coffeelake sshd[1316342]: Invalid user admin from 206.189.1.91 port 37308
2026-09-09T17:29:50.604367+02:00 coffeelake sshd[1316737]: Invalid user admin from 206.189.1.91 port 45064
...
show less
Fail2ban ban on jail 'sshd'. Repeated failed authentication attempts against a monitored host. Detec ...
show moreFail2ban ban on jail 'sshd'. Repeated failed authentication attempts against a monitored host. Detected and correlated by Wazuh SIEM (rule 100110, level 10). Reported automatically.
show less
2026-09-09T17:28:27.402722+02:00 **** sshd-session[26440]: Failed password for invalid user **** fro ...
show more2026-09-09T17:28:27.402722+02:00 **** sshd-session[26440]: Failed password for invalid user **** from 206.189.1.91 port 58982 ssh2
2026-09-09T17:28:43.844638+02:00 **** sshd-session[26486]: Invalid user **** from 206.189.1.91 port 40050
2026-09-09T17:28:43.864542+02:00 **** sshd-session[26486]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.1.91
2026-09-09T17:28:45.567530+02:00 **** sshd-session[26486]: Failed password for invalid user **** from 206.189.1.91 port 40050 ssh2
2026-09-09T17:29:02.854212+02:00 **** sshd-session[27965]: Invalid user **** from 206.189.1.91 port 36064
show less
