This IP address has been reported a total of
536
times from
247 distinct
sources.
89.253.254.13 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-10-16T12:46:01.548836+00:00 kansas1 sshd[4122683]: Invalid user ubuntu from 89.253.254.13 port ...
show more2026-10-16T12:46:01.548836+00:00 kansas1 sshd[4122683]: Invalid user ubuntu from 89.253.254.13 port 49064
2026-10-16T12:46:01.709220+00:00 kansas1 sshd[4122683]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.253.254.13
2026-10-16T12:46:04.022457+00:00 kansas1 sshd[4122683]: Failed password for invalid user ubuntu from 89.253.254.13 port 49064 ssh2
...
show less
Oct 16 14:42:45 web1 sshd[2987949]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid ...
show moreOct 16 14:42:45 web1 sshd[2987949]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.253.254.13
Oct 16 14:42:48 web1 sshd[2987949]: Failed password for invalid user ubuntu from 89.253.254.13 port 51334 ssh2
Oct 16 14:42:48 web1 sshd[2987986]: Invalid user morchi from 89.253.254.13 port 51342
Oct 16 14:42:49 web1 sshd[2987986]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.253.254.13
Oct 16 14:42:50 web1 sshd[2987986]: Failed password for invalid user morchi from 89.253.254.13 port 51342 ssh2
...
show less
2026-10-16T12:40:05.711142+00:00 mailcow sshd[1268317]: Invalid user ubuntu from 89.253.254.13 port ...
show more2026-10-16T12:40:05.711142+00:00 mailcow sshd[1268317]: Invalid user ubuntu from 89.253.254.13 port 42300
2026-10-16T12:40:05.763317+00:00 mailcow sshd[1268317]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.253.254.13
2026-10-16T12:40:07.539769+00:00 mailcow sshd[1268317]: Failed password for invalid user ubuntu from 89.253.254.13 port 42300 ssh2
2026-10-16T12:40:08.376774+00:00 mailcow sshd[1268333]: Invalid user inkompetentler from 89.253.254.13 port 42312
...
show less
Oct 16 14:35:56 odin sshd[26744]: Failed password for root from 89.253.254.13 port 55866 ssh2
Oct 16 ...
show moreOct 16 14:35:56 odin sshd[26744]: Failed password for root from 89.253.254.13 port 55866 ssh2
Oct 16 14:35:57 odin sshd[26755]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.253.254.13
Oct 16 14:35:59 odin sshd[26755]: Failed password for invalid user ubuntu from 89.253.254.13 port 55876 ssh2
show less
Oct 16 14:23:44 CyberGecko sshd[3133787]: Invalid user ubuntu from 89.253.254.13 port 57900
Oct 16 1 ...
show moreOct 16 14:23:44 CyberGecko sshd[3133787]: Invalid user ubuntu from 89.253.254.13 port 57900
Oct 16 14:23:44 CyberGecko sshd[3133787]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.253.254.13
Oct 16 14:23:46 CyberGecko sshd[3133787]: Failed password for invalid user ubuntu from 89.253.254.13 port 57900 ssh2
Oct 16 14:23:47 CyberGecko sshd[3133791]: Invalid user igelportal from 89.253.254.13 port 57904
...
show less
(sshd) Failed SSH login from 89.253.254.13 (RU/Russia/metko.ru): 5 in the last 3600 secs; Ports: *; ...
show more(sshd) Failed SSH login from 89.253.254.13 (RU/Russia/metko.ru): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 16 13:18:34 webhosting2 sshd[22649]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.253.254.13 user=root
Oct 16 13:18:36 webhosting2 sshd[22649]: Failed password for root from 89.253.254.13 port 56488 ssh2
Oct 16 13:18:37 webhosting2 sshd[22654]: Invalid user ubuntu from 89.253.254.13 port 56502
Oct 16 13:18:38 webhosting2 sshd[22654]: Failed password for invalid user ubuntu from 89.253.254.13 port 56502 ssh2
Oct 16 13:18:39 webhosting2 sshd[22659]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.253.254.13 user=adamgoodenough
show less
Oct 16 14:11:42 odin sshd[18102]: Failed password for root from 89.253.254.13 port 60146 ssh2
Oct 16 ...
show moreOct 16 14:11:42 odin sshd[18102]: Failed password for root from 89.253.254.13 port 60146 ssh2
Oct 16 14:11:43 odin sshd[18110]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.253.254.13
Oct 16 14:11:45 odin sshd[18110]: Failed password for invalid user propaangasfles from 89.253.254.13 port 55630 ssh2
show less
2026-10-16T05:09:07.713815-07:00 lain sshd-session[689373]: pam_unix(sshd:auth): authentication fail ...
show more2026-10-16T05:09:07.713815-07:00 lain sshd-session[689373]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.253.254.13
2026-10-16T05:09:10.074065-07:00 lain sshd-session[689373]: Failed password for invalid user ubuntu from 89.253.254.13 port 60260 ssh2
2026-10-16T05:09:10.570298-07:00 lain sshd-session[689375]: Invalid user cunicul from 89.253.254.13 port 60272
2026-10-16T05:09:10.763121-07:00 lain sshd-session[689375]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.253.254.13
2026-10-16T05:09:12.766551-07:00 lain sshd-session[689375]: Failed password for invalid user cunicul from 89.253.254.13 port 60272 ssh2
...
show less
2026-10-16T14:05:44.415100+02:00 serengeti sshd-session[2246932]: Failed password for root from 89.2 ...
show more2026-10-16T14:05:44.415100+02:00 serengeti sshd-session[2246932]: Failed password for root from 89.253.254.13 port 34708 ssh2
2026-10-16T14:05:44.735302+02:00 serengeti sshd-session[2246934]: Invalid user ubuntu from 89.253.254.13 port 34724
2026-10-16T14:05:44.788398+02:00 serengeti sshd-session[2246934]: Failed password for invalid user ubuntu from 89.253.254.13 port 34724 ssh2
2026-10-16T14:05:45.071304+02:00 serengeti sshd-session[2246937]: Invalid user sprakteknologi from 89.253.254.13 port 34734
2026-10-16T14:05:45.119561+02:00 serengeti sshd-session[2246937]: Failed password for invalid user sprakteknologi from 89.253.254.13 port 34734 ssh2
...
show less
Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: fail2ban_ban. So ...
show moreDetected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: fail2ban_ban. Sources: fail2ban. First seen: 2026-10-16. Risk score: 40/100.
show less
Cowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2026-10-16T11:58:25Z and 2026-10-1 ...
show moreCowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2026-10-16T11:58:25Z and 2026-10-16T11:58:27Z
show less