AbuseIPDB » 206.189.189.252
IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.
No reports in the last 60 days
206.189.189.252 has been reported 97 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
IP Abuse Reports for 206.189.189.252:
This IP address has been reported a total of 97 times from 45 distinct sources. 206.189.189.252 was first reported on , and the most recent report was .
| Reporter | IoA Timestamp (UTC) | Comment | Categories | |
|---|---|---|---|---|
| π¦πͺ abusiveIntelligence |
RDP connect attempt: Nmap Scanner
|
Brute-Force | ||
| π©πͺ Justin F. | AS204464 |
|
Port Scan | ||
| πΊπΈ LSPCCU |
|
Port Scan Hacking Brute-Force Web App Attack SSH | ||
| π―π΅ mkaraki |
1779752980 # Service_probe # SIGNATURE_SEND # source_ip:206.189.189.252 # dst_port:5671
...
|
Port Scan | ||
| Anonymous |
Heralding honeypot: postgresql on port 5432
|
Brute-Force | ||
| π«π· cityhunter_rhone |
|
Port Scan Hacking Brute-Force | ||
| π©πͺ Justin F. | AS204464 |
|
Port Scan | ||
| π§π· somosbr |
[2026-05-25T12:04:23Z] Unsolicited scan from 206.189.189.252 to port 8983/tcp
|
Port Scan | ||
| π¦πΊ LiftUp Hosting |
Honeypot hit: Empty payload (likely service probe); 9302 [31] TCP
|
Port Scan | ||
| πΊπΈ donarev419 |
Port scan detected on port 15671 (connection without data transfer)
|
Port Scan | ||
| πΊπΈ donarev419 |
Port scan detected on port 5671 (connection without data transfer)
|
Port Scan | ||
| π©πͺ excill |
Honeypot mesh observed 14 attack events in 24h β cowrie/dionaea/heralding/suricata
|
Port Scan Hacking Brute-Force SSH | ||
| π¦πͺ abusiveIntelligence |
RDP connect attempt: Nmap Scanner
|
Brute-Force | ||
| π©πͺ _ArminS_ |
SP-Scan 61003:12000 detected 2026.03.26 14:03:56
blocked until 2026.05.15 08:06:43
|
Port Scan | ||
| πΊπΈ MPL |
tcp/2083 (6 or more attempts)
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown π©