This IP address has been reported a total of
150
times from
86 distinct
sources.
206.189.138.147 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Jul 20 04:48:31 cti1.cti.srvfarm.net sshd[751324]: Invalid user odoo from 206.189.138.147 port 48604 ...
show moreJul 20 04:48:31 cti1.cti.srvfarm.net sshd[751324]: Invalid user odoo from 206.189.138.147 port 48604
Jul 20 04:48:31 cti1.cti.srvfarm.net sshd[751324]: Disconnected from invalid user odoo 206.189.138.147 port 48604 [preauth]
Jul 20 04:54:02 cti1.cti.srvfarm.net sshd[752691]: Disconnected from authenticating user root 206.189.138.147 port 38276 [preauth]
Jul 20 04:56:40 cti1.cti.srvfarm.net sshd[792563]: Invalid user ardi from 206.189.138.147 port 35400
Jul 20 04:56:40 cti1.cti.srvfarm.net sshd[792563]: Disconnected from invalid user ardi 206.189.138.147 port 35400 [preauth]
show less
Brute-Force
Anonymous
2026-07-19T23:50:24.025541-03:00 web sshd[612074]: pam_unix(sshd:auth): authentication failure; logn ...
show more2026-07-19T23:50:24.025541-03:00 web sshd[612074]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.138.147
2026-07-19T23:50:26.001319-03:00 web sshd[612074]: Failed password for invalid user odoo from 206.189.138.147 port 41312 ssh2
2026-07-19T23:50:28.021541-03:00 web sshd[612074]: Disconnected from invalid user odoo 206.189.138.147 port 41312 [preauth]
...
show less
Automatic scan for malicious IPs: 206.189.138.147 (SSH brute-force attempt)
SSH
Anonymous
2026-07-20T01:41:48.239965+00:00 de-fra2-mpio1 sshd[1828587]: Invalid user linuxbrew from 206.189.13 ...
show more2026-07-20T01:41:48.239965+00:00 de-fra2-mpio1 sshd[1828587]: Invalid user linuxbrew from 206.189.138.147 port 53756
2026-07-20T01:44:20.545303+00:00 de-fra2-mpio1 sshd[1828668]: Invalid user sgd from 206.189.138.147 port 35184
2026-07-20T01:57:27.962015+00:00 de-fra2-mpio1 sshd[1829293]: Invalid user administrator from 206.189.138.147 port 36724
...
show less
Brute-Force
SSH
Anonymous
Jul 20 03:41:48 sd-55437 sshd[1874627]: Invalid user linuxbrew from 206.189.138.147 port 55694
...
Brute-Force
SSH
Anonymous
Jul 20 03:01:20 sd-55437 sshd[1830654]: User root from 206.189.138.147 not allowed because not liste ...
show moreJul 20 03:01:20 sd-55437 sshd[1830654]: User root from 206.189.138.147 not allowed because not listed in AllowUsers
...
show less
2026-07-20T00:29:39.901825+00:00 de-fra2-mpio1 sshd[1825122]: Invalid user ict from 206.189.138.147 ...
show more2026-07-20T00:29:39.901825+00:00 de-fra2-mpio1 sshd[1825122]: Invalid user ict from 206.189.138.147 port 58716
2026-07-20T00:35:24.188308+00:00 de-fra2-mpio1 sshd[1825545]: Invalid user hh from 206.189.138.147 port 48420
2026-07-20T00:37:57.626297+00:00 de-fra2-mpio1 sshd[1825619]: Invalid user vladimir from 206.189.138.147 port 38300
...
show less
Brute-Force
SSH
Anonymous
Jul 20 02:29:40 sd-55437 sshd[1796014]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ...
show moreJul 20 02:29:40 sd-55437 sshd[1796014]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.138.147
Jul 20 02:29:43 sd-55437 sshd[1796014]: Failed password for invalid user ict from 206.189.138.147 port 59360 ssh2
Jul 20 02:29:45 sd-55437 sshd[1796014]: Disconnected from invalid user ict 206.189.138.147 port 59360 [preauth]
...
show less
Jul 20 00:14:13 proxy sshd[1181064]: Invalid user matin from 206.189.138.147 port 55782
Jul 20 00:18 ...
show moreJul 20 00:14:13 proxy sshd[1181064]: Invalid user matin from 206.189.138.147 port 55782
Jul 20 00:18:45 proxy sshd[1181075]: User root from 206.189.138.147 not allowed because not listed in AllowUsers
Jul 20 00:21:21 proxy sshd[1181091]: Invalid user neos from 206.189.138.147 port 60818
...
show less
Report 2562741 with IP 3608092 for SSH brute-force attack by source 3604966 via ssh-honeypot/0.2.0+h ...
show moreReport 2562741 with IP 3608092 for SSH brute-force attack by source 3604966 via ssh-honeypot/0.2.0+http
show less