This IP address has been reported a total of
123
times from
91 distinct
sources.
206.189.193.48 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
Invalid user deploy from 206.189.193.48 port 53742
(sshd) Failed SSH login from 206.189.193.48 (US/United States/-): 5 in the last 3600 secs; Ports: *; ...
show more(sshd) Failed SSH login from 206.189.193.48 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jul 3 17:01:42 15145 sshd[14567]: Invalid user discountfinder from 206.189.193.48 port 47544
Jul 3 17:01:44 15145 sshd[14567]: Failed password for invalid user discountfinder from 206.189.193.48 port 47544 ssh2
Jul 3 17:08:46 15145 sshd[17944]: Invalid user crash from 206.189.193.48 port 35284
Jul 3 17:08:47 15145 sshd[17944]: Failed password for invalid user crash from 206.189.193.48 port 35284 ssh2
Jul 3 17:10:48 15145 sshd[18903]: Invalid user ukraine from 206.189.193.48 port 56094
show less
2026-07-04T05:13:35.130764+08:00 435849353960 sshd[3202586]: Failed password for root from 206.189.1 ...
show more2026-07-04T05:13:35.130764+08:00 435849353960 sshd[3202586]: Failed password for root from 206.189.193.48 port 34810 ssh2
2026-07-04T05:26:39.831616+08:00 435849353960 sshd[3202631]: Failed password for root from 206.189.193.48 port 51640 ssh2
2026-07-04T05:28:12.566695+08:00 435849353960 sshd[3202641]: Invalid user ftpuser from 206.189.193.48 port 57196
2026-07-04T05:28:12.590025+08:00 435849353960 sshd[3202641]: Failed password for invalid user ftpuser from 206.189.193.48 port 57196 ssh2
2026-07-04T05:29:45.261971+08:00 435849353960 sshd[3202656]: Failed password for root from 206.189.193.48 port 55534 ssh2
...
show less
2026-07-03T20:36:10.829599+00:00 edge-con-sjc01.int.pdx.net.uk sshd[2191562]: pam_unix(sshd:auth): a ...
show more2026-07-03T20:36:10.829599+00:00 edge-con-sjc01.int.pdx.net.uk sshd[2191562]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.193.48
2026-07-03T20:36:13.151387+00:00 edge-con-sjc01.int.pdx.net.uk sshd[2191562]: Failed password for invalid user wow from 206.189.193.48 port 33096 ssh2
2026-07-03T20:39:41.035136+00:00 edge-con-sjc01.int.pdx.net.uk sshd[2191824]: Invalid user goto from 206.189.193.48 port 40400
...
show less
2026-07-03T20:34:19.652597+00:00 thelemmy.club sshd-session[1298658]: Invalid user wow from 206.189. ...
show more2026-07-03T20:34:19.652597+00:00 thelemmy.club sshd-session[1298658]: Invalid user wow from 206.189.193.48 port 43468
2026-07-03T20:34:19.673967+00:00 thelemmy.club sshd-session[1298658]: Disconnected from invalid user wow 206.189.193.48 port 43468 [preauth]
...
show less
2026-07-03T22:06:20.191455+02:00 main sshd[3540907]: pam_unix(sshd:auth): authentication failure; lo ...
show more2026-07-03T22:06:20.191455+02:00 main sshd[3540907]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.193.48 user=root
2026-07-03T22:06:21.776020+02:00 main sshd[3540907]: Failed password for root from 206.189.193.48 port 51658 ssh2
2026-07-03T22:07:55.038041+02:00 main sshd[3543965]: Invalid user sftptest from 206.189.193.48 port 58098
2026-07-03T22:07:55.040298+02:00 main sshd[3543965]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.193.48
2026-07-03T22:07:57.669042+02:00 main sshd[3543965]: Failed password for invalid user sftptest from 206.189.193.48 port 58098 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 123 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩