189.223.161.109 is an IP address with 2 abuse reports from 2 distinct reporters, submitted between 10/27/2026 and 10/28/2026. The AbuseTrack community rates it as Medium risk, with a score of 48/100. The most frequently reported threat categories are Brute Force.
Back to the database
ip
189.223.161.109
Medium · 482 reports
MexicoInstant verdict
SUSPICIOUS
48/100
Community risk score
2
Reports
2
Reporters
10/27/2026
First seen
10/28/2026
Last seen
Threat type
Is this your address and is it listed wrongly? Request removal →
Intelligence
Country
Mexico (MX)
WHOIS (RDAP)
- Country
- Mexico
- Location
- Mexicali, Baja California
Reverse DNS
- PTR
- 189.223.161.109.dsl.dyn.telnor.net
Report history (2)
Brute Force10/28/2026, 01:54 AM · Enjyn Gruppe
fail2ban: SSH (sshd) brute-force — 3 failed attempts (jail: sshd)
Brute Force10/27/2026, 07:09 PM · NextServ Group
2026-10-27T19:08:53.012535+00:00 IPAM sshd-session[77360]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.223.161.109 2026-10-27T19:08:55.114233+00:00 IPAM sshd-session[77360]: Failed password for invalid user admin from 189.223.161.109 port 43174 ssh2 2026-10-27T19:08:57.751220+00:00 IPAM sshd-session[77360]: Failed password for invalid user admin from 189.223.161.109 port 43174 ssh2 2026-10-27T19:09:02.128124+00:00 IPAM sshd-session[77360]: Failed password for invalid user admin from 189.223.161.109 port 43174 ssh2 2026-10-27T19:09:06.492209+00:00 IPAM sshd-session[77360]: Failed password for invalid user admin from 189.223.161.109 port 43174 ssh2