JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 5.189.126.139

5.189.126.139 was found in our database!

This IP was reported 31 times. Confidence of Abuse is 81%: ?

81%

ISP	LLC KomTehCentr
Usage Type	Fixed Line ISP
ASN	AS12668
Hostname(s)	5.189.126.139-FTTB.planeta.tc
Domain Name	itmh.ru
Country	🇷🇺 Russian Federation
City	Yekaterinburg, Sverdlovsk Oblast

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 5.189.126.139

Whois 5.189.126.139

IP Abuse Reports for 5.189.126.139:

This IP address has been reported a total of 31 times from 27 distinct sources. 5.189.126.139 was first reported on May 31st 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇹 urnilxfgbez	2026-06-06 22:45:00 (2 weeks ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇫🇷 MisterXBest	2026-06-06 07:34:14 (2 weeks ago)	[BloumeGen Security] IP Access: 5.189.126.139. SSH brute-force login attempt. Target: Unknown. Paths ... show more [BloumeGen Security] IP Access: 5.189.126.139. SSH brute-force login attempt. Target: Unknown. Paths: Multiple probes. Hits: 5 show less	Brute-Force SSH
🇹🇭 Sawasdee	2026-06-06 06:18:06 (2 weeks ago)	SSH break in attempt ...	SSH
🇺🇸 arc21	2026-06-06 05:28:21 (2 weeks ago)	2026-06-06T06:27:46.190047+01:00 NYC-MC-2 sshd-session[1690841]: error: maximum authentication attem ... show more 2026-06-06T06:27:46.190047+01:00 NYC-MC-2 sshd-session[1690841]: error: maximum authentication attempts exceeded for root from 5.189.126.139 port 54532 ssh2 [preauth] 2026-06-06T06:27:55.114807+01:00 NYC-MC-2 sshd-session[1693723]: error: maximum authentication attempts exceeded for root from 5.189.126.139 port 54658 ssh2 [preauth] 2026-06-06T06:28:04.409925+01:00 NYC-MC-2 sshd-session[1696593]: error: maximum authentication attempts exceeded for root from 5.189.126.139 port 54772 ssh2 [preauth] 2026-06-06T06:28:20.217664+01:00 NYC-MC-2 sshd-session[1702466]: Invalid user admin from 5.189.126.139 port 54954 2026-06-06T06:28:21.047603+01:00 NYC-MC-2 sshd-session[1702466]: error: maximum authentication attempts exceeded for invalid user admin from 5.189.126.139 port 54954 ssh2 [preauth] ... show less	Brute-Force SSH
🇱🇺 SiteXL	2026-06-06 03:36:01 (2 weeks ago)	{"event":{"DateTime":"2026-06-06T03:27:25Z","RemoteAddr":"5.189.126.139:38284","Protocol":"SSH","Com ... show more {"event":{"DateTime":"2026-06-06T03:27:25Z","RemoteAddr":"5.189.126.139:38284","Protocol":"SSH","Command":"","CommandOutput":"","Status":"Stateless","Msg":"New SSH Login Attempt","ID":"fa82ce6b-b5ac-4f5b-b87d-c1b88b91ed90","Environ":"","User":"root","Password":"root","Client":"SSH-2.0-libssh2_1.11.1","Headers":"","HeadersMap":null,"Cookies":"","UserAgent":"","HostHTTPRequest":"","Body":"","HTTPMethod":"","RequestURI":"","Description":"SSH interactive","SourceIp":"5.189.126.139","SourcePort":"38284","TLSServerName":"","Handler":""},"level":"info","msg":"New Event","status":"Stateless"} {"event":{"DateTime":"2026-06-06T03:27:25Z","RemoteAddr":"5.189.126.139:38284","Protocol":"SSH","Command":"/ip cloud print","CommandOutput":"enabled: yes\npublic-address: 203.0.113.1\nupdate-time: 2025-04-23 15:45:12\nstatus: connected\nlast-update: 2025-04-23 14:12:30\nipv6-enabled: no\nddns-enabled: yes\nhostname: mikrotik-router\n","Status":"Start","Msg":"SSH Raw Command","ID":"4af2041e-b145-4af4-9f42-5ad55c9221ba","Environ": show less	Hacking Port Scan Brute-Force SSH
🇺🇸 ezscale	2026-06-06 02:20:16 (2 weeks ago)	SSH brute force on atl-02.node.vps.ezscale.tech (3 failures). Detected by fail2ban.	Brute-Force SSH
Anonymous	2026-06-06 00:33:40 (2 weeks ago)	2026-06-06T00:33:38.003352+00:00 xmr sshd[9912]: pam_unix(sshd:auth): authentication failure; lognam ... show more 2026-06-06T00:33:38.003352+00:00 xmr sshd[9912]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.189.126.139 user=root 2026-06-06T00:33:39.832570+00:00 xmr sshd[9912]: Failed password for root from 5.189.126.139 port 51084 ssh2 ... show less	Brute-Force SSH
🇬🇧 lumi	2026-06-05 22:32:24 (2 weeks ago)	2026-06-05T22:32:18.412170+00:00 habibi.infra.lumis.moe sshd-session[2490781]: Failed password for r ... show more 2026-06-05T22:32:18.412170+00:00 habibi.infra.lumis.moe sshd-session[2490781]: Failed password for root from 5.189.126.139 port 39102 ssh2 2026-06-05T22:32:20.508304+00:00 habibi.infra.lumis.moe sshd-session[2490781]: Failed password for root from 5.189.126.139 port 39102 ssh2 2026-06-05T22:32:23.719099+00:00 habibi.infra.lumis.moe sshd-session[2490781]: Failed password for root from 5.189.126.139 port 39102 ssh2 ... show less	Brute-Force SSH
🇺🇸 amit177	2026-06-05 19:57:38 (2 weeks ago)		Brute-Force SSH
🇬🇧 djboddington	2026-06-05 17:45:55 (2 weeks ago)	This IP was detected by CrowdSec triggering crowdsecurity/ssh-bf	SSH Brute-Force
🇺🇸 Tect.host	2026-06-05 09:51:51 (2 weeks ago)	Brute-force SSH server detected by Fail2ban	Brute-Force SSH
🇪🇸 gnom4ik	2026-06-05 09:22:12 (2 weeks ago)	ban-reviewer auto report; ip=5.189.126.139; scenario=crowdsecurity/ssh-slow-bf; verdict=valid_ban; c ... show more ban-reviewer auto report; ip=5.189.126.139; scenario=crowdsecurity/ssh-slow-bf; verdict=valid_ban; confidence=0.92; categories=14,15,18,22; active_decisions=2; lookback_decisions=2; nginx_requests=0; appsec_matches=0; auth_events=32; kernel_events=0; signals=ip_decision_count_high; auth_events_high show less	Port Scan Hacking Brute-Force SSH
🇵🇱 skillhost.pl	2026-06-05 08:36:16 (2 weeks ago)	Automated SSH brute-force attack detected. The IP repeatedly attempted to authenticate to port 22 us ... show more Automated SSH brute-force attack detected. The IP repeatedly attempted to authenticate to port 22 using multiple usernames and password guesses within a short timeframe. show less	Brute-Force SSH
🇺🇸 msparrow	2026-06-05 07:24:44 (2 weeks ago)	2026-06-05T07:24:29.198143+00:00 web3.mattps.com sshd[3414370]: Failed password for root from 5.189. ... show more 2026-06-05T07:24:29.198143+00:00 web3.mattps.com sshd[3414370]: Failed password for root from 5.189.126.139 port 40974 ssh2 2026-06-05T07:24:33.319761+00:00 web3.mattps.com sshd[3414370]: Failed password for root from 5.189.126.139 port 40974 ssh2 2026-06-05T07:24:36.226631+00:00 web3.mattps.com sshd[3414370]: Failed password for root from 5.189.126.139 port 40974 ssh2 2026-06-05T07:24:40.006483+00:00 web3.mattps.com sshd[3414370]: Failed password for root from 5.189.126.139 port 40974 ssh2 2026-06-05T07:24:42.929369+00:00 web3.mattps.com sshd[3414370]: Failed password for root from 5.189.126.139 port 40974 ssh2 show less	Brute-Force SSH
🇩🇪 herz-der-gamer.de	2026-06-05 06:12:53 (2 weeks ago)	2026-06-05T08:12:43.545962+02:00 Webserver sshd[4052309]: Failed password for root from 5.189.126.13 ... show more 2026-06-05T08:12:43.545962+02:00 Webserver sshd[4052309]: Failed password for root from 5.189.126.139 port 39904 ssh2 2026-06-05T08:12:45.881858+02:00 Webserver sshd[4052309]: Failed password for root from 5.189.126.139 port 39904 ssh2 2026-06-05T08:12:48.020107+02:00 Webserver sshd[4052309]: Failed password for root from 5.189.126.139 port 39904 ssh2 2026-06-05T08:12:50.376824+02:00 Webserver sshd[4052309]: Failed password for root from 5.189.126.139 port 39904 ssh2 2026-06-05T08:12:53.236431+02:00 Webserver sshd[4052309]: Failed password for root from 5.189.126.139 port 39904 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 168.197.106.193

🇺🇸 162.216.150.99

🇺🇸 107.167.34.125

🇺🇸 34.56.174.206

🇺🇸 20.85.246.45

🇨🇳 218.0.63.25

🇲🇽 187.190.35.163

🇸🇬 185.172.21.7

🇩🇪 185.30.32.114

🇨🇳 154.8.200.232

🇮🇳 121.200.49.212

🇨🇳 116.179.32.223

🇳🇱 45.148.10.120

🇸🇬 15.235.181.73

🇩🇪 213.209.159.231

🇬🇧 198.244.200.214

🇺🇸 172.202.118.16

🇮🇳 135.235.138.43

🇫🇷 85.217.140.48

🇫🇷 85.204.70.104