High Risk
IP 189.149.254.122 rated at threat level 8/10 based on 22 security reports.
Pattern analysis reveals concerning activity. Confidence: 99%.
More threatening than 90% of monitored IPs
IP Address
189.149.254.122
IPv4
Public
MX
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
Mexico
Location
Triara.com S.A. de C.V.
ASN 19373
22
Reports
Mixed
Data Source
Threat Categories
SSH
22
Brute-Force
18
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 1 week indicates persistent threat actor operations.
First Observed
23. September 2026
Last Activity
4. October 2026
Recent (7 days)
15 incidents
Reputable Network
This IP is hosted on a network (ASN 19373) with generally good reputation. The ISP Triara.com S.A. de C.V. maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Monitor closely and consider blocking. Escalation potential detected.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
8/10
High
Confidence Score
99%
Verified
Confidence History
23. Sep 2026 - 4. Oct 2026
99%
Current
Stable
Trend
Security Reports (22)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | Brute-Force SSH | Honeypot | 75% |
| New | Brute-Force SSH | Honeypot | 75% |
| New | Brute-Force SSH | Honeypot | 75% |
| New | SSH Brute-Force | Community | 75% |
| New | SSH Brute-Force | Community | 75% |
| SSH Brute-Force | Community | 75% | |
| SSH Brute-Force | Community | 75% | |
| SSH Brute-Force | Community | 75% | |
| SSH Brute-Force | Community | 75% | |
| SSH Brute-Force | Community | 75% | |
| SSH Brute-Force | Community | 75% | |
| SSH Brute-Force | Community | 75% | |
| SSH Brute-Force | Community | 75% | |
| SSH Brute-Force | Community | 75% | |
| SSH Brute-Force | Community | 75% | |
| SSH Brute-Force | Community | 75% | |
| SSH Brute-Force | Community | 75% | |
| SSH | Honeypot | 75% | |
| SSH Brute-Force | Community | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 189.149.254.122
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
MX
- ASN
- AS19373
- ISP
- Triara.com S.A. de C.V.
DNS Information
- Reverse DNS
- dsl-122-254-149-189-dynamic.prod-infinitum.com.mx
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 22
- First Reported
- 23 Sep 2026
- Last Reported
- 4 Oct 2026, 08:19
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS19373
Triara.com S.A. de C.V.
MX
Network Threat Assessment
0/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
1
Total IPs Monitored
7
Total Reports
7
Reports per IP
Network Context
This IP address belongs to Triara.com S.A. de C.V. (AS19373), which manages 1 IP addresses in our monitoring system. Out of these, 7 have been reported for suspicious activities, resulting in a network-wide threat level of 0/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
90
%
Global Threat Ranking
This IP is more threatening than 90% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 820,233 reported IPs worldwide
Threat Level
8/10
avg: 6.3
+
Total Reports
22
avg: 9
++
Network Comparison
Compared against 2 IPs in ASN 19373
Threat Level
8/10
network avg: 7.5
=
Total Reports
22
network avg: 12
++
Network Triara.com S.A. de C.V. has overall threat level 0/10
Geographic Comparison
Compared against 11,823 IPs in MX
Threat Level
8/10
country avg: 5.4
+
Total Reports
22
country avg: 5
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
29 Sep 2026
4 reports
Daily Average
0.7
reports/day
Most Active
Sunday
7 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
22
Brute-Force
18
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 08:00 with 3 reports
Weekly Activity
Geographic Threat Distribution
745,603 threat incidents tracked globally • Last 24h: 26,877 Logs
FEED
Top Threat Sources
-
01
United States145,955 19.6% -
02
Brazil111,328 14.9%
-
03
India84,542 11.3%
-
04
China45,507 6.1%
-
05
SC29,246 3.9%
-
06
Germany17,935 2.4%
-
07
Netherlands17,683 2.4%
-
08
Pakistan17,264 2.3%
-
09
Argentina16,234 2.2%
-
10
Colombia15,156 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
1
Related IPs
7/10
Avg Threat
0%
Avg Confidence
1
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
9.6/10
Avg Threat
95%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
189.190.143.229
10/10
Confidence
98%
Reports
20
ISP
UNINET
189.162.100.193
8/10
Confidence
97%
Reports
12
ISP
UNINET
148.245.1.106
10/10
Confidence
96%
Reports
52
ISP
Axtel, S.A.B. d...
187.62.120.7
8/10
Confidence
96%
Reports
31
ISP
Bicentel SA de CV
187.216.224.85
8/10
Confidence
96%
Reports
29
ISP
UNINET
201.137.50.192
10/10
Confidence
96%
Reports
12
ISP
UNINET
201.108.10.210
10/10
Confidence
94%
Reports
437
ISP
UNINET
201.141.30.18
10/10
Confidence
94%
Reports
273
ISP
Cablevision, S....
189.151.193.107
10/10
Confidence
94%
Reports
273
ISP
UNINET
187.149.52.229
10/10
Confidence
94%
Reports
266
ISP
UNINET
187.232.185.127
10/10
Confidence
94%
Reports
262
ISP
UNINET
187.190.254.178
10/10
Confidence
94%
Reports
261
ISP
TOTAL PLAY TELE...
189.254.200.132
10/10
Confidence
94%
Reports
55
ISP
UNINET
187.210.87.133
10/10
Confidence
94%
Reports
34
ISP
UNINET
177.227.198.163
10/10
Confidence
94%
Reports
26
ISP
Mega Cable, S.A...
IPs with similar threat level and confidence scores.
15
Related IPs
9.7/10
Avg Threat
99%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
195.178.110.227
10/10
Confidence
99%
Reports
409
Location
BG
BG
195.178.110.26
10/10
Confidence
99%
Reports
89
Location
BG
BG
36.64.131.68
10/10
Confidence
99%
Reports
73
Location
ID
ID
136.67.210.104
10/10
Confidence
99%
Reports
55
Location
US
US
182.48.80.240
10/10
Confidence
99%
Reports
51
Location
BD
BD
172.191.94.172
10/10
Confidence
99%
Reports
50
Location
US
US
136.67.214.14
10/10
Confidence
99%
Reports
50
Location
US
US
118.194.249.186
8/10
Confidence
99%
Reports
46
Location
KR
KR
136.67.197.65
10/10
Confidence
99%
Reports
35
Location
US
US
136.65.39.93
10/10
Confidence
99%
Reports
35
Location
US
US
136.65.228.12
10/10
Confidence
99%
Reports
31
Location
US
US
102.130.193.150
8/10
Confidence
99%
Reports
30
Location
AO
AO
136.67.98.83
10/10
Confidence
99%
Reports
29
Location
US
US
136.66.219.69
10/10
Confidence
99%
Reports
26
Location
US
US
34.14.77.138
10/10
Confidence
99%
Reports
25
Location
BE
BE