This IP address has been reported a total of
37
times from
33 distinct
sources.
159.75.21.42 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 9
reports;
United States of America
with 7
reports;
Brazil
with 3
reports.
The most common categories in these recent reports were:
Brute-Force
34
times;
SSH
34
times;
Port Scan
3
times;
Hacking
1
time;
Web App Attack
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
This IP address carried out 119 port scanning attempts on 19-10-2026. For more information or to rep ...
show moreThis IP address carried out 119 port scanning attempts on 19-10-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
This IP address carried out 10 SSH credential attack (attempts) on 19-10-2026. For more information ...
show moreThis IP address carried out 10 SSH credential attack (attempts) on 19-10-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
2026-10-20T08:18:06.532547+02:00 serengeti sshd-session[3101259]: Invalid user nftp from 159.75.21.4 ...
show more2026-10-20T08:18:06.532547+02:00 serengeti sshd-session[3101259]: Invalid user nftp from 159.75.21.42 port 38216
2026-10-20T08:18:06.534217+02:00 serengeti sshd-session[3101259]: Failed password for invalid user nftp from 159.75.21.42 port 38216 ssh2
2026-10-20T08:20:48.666170+02:00 serengeti sshd-session[3101792]: Invalid user mike from 159.75.21.42 port 56118
2026-10-20T08:20:48.667780+02:00 serengeti sshd-session[3101792]: Failed password for invalid user mike from 159.75.21.42 port 56118 ssh2
2026-10-20T08:22:11.905453+02:00 serengeti sshd-session[3101986]: Failed password for git from 159.75.21.42 port 42956 ssh2
...
show less
2026-10-20T05:38:53.260094+02:00 h3013167 sshd[3037480]: Invalid user ghkim from 159.75.21.42 port 3 ...
show more2026-10-20T05:38:53.260094+02:00 h3013167 sshd[3037480]: Invalid user ghkim from 159.75.21.42 port 39658
...
show less
2026-10-20T02:53:45.057428+00:00 ks6.hofud.com sshd[576551]: Invalid user vncuser from 159.75.21.42 ...
show more2026-10-20T02:53:45.057428+00:00 ks6.hofud.com sshd[576551]: Invalid user vncuser from 159.75.21.42 port 39502
2026-10-20T02:53:45.330381+00:00 ks6.hofud.com sshd[576551]: Disconnected from invalid user vncuser 159.75.21.42 port 39502 [preauth]
2026-10-20T03:02:19.425709+00:00 ks6.hofud.com sshd[577114]: Invalid user ads from 159.75.21.42 port 46346
2026-10-20T03:02:19.691999+00:00 ks6.hofud.com sshd[577114]: Disconnected from invalid user ads 159.75.21.42 port 46346 [preauth]
2026-10-20T03:03:21.004553+00:00 ks6.hofud.com sshd[577203]: Connection closed by 159.75.21.42 port 43944 [preauth]
...
show less
Brute-Force
SSH
Anonymous
Oct 20 04:40:31 fi7 sshd[1810355]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ...
show moreOct 20 04:40:31 fi7 sshd[1810355]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.75.21.42
Oct 20 04:40:34 fi7 sshd[1810355]: Failed password for invalid user svnadmin from 159.75.21.42 port 55308 ssh2
Oct 20 04:49:15 fi7 sshd[1810479]: Invalid user test from 159.75.21.42 port 54744
...
show less
Oct 19 23:44:58 159.75.21.42 TCP SPT=35730 DPT=2222 SYN
Oct 19 23:44:59 159.75.21.42 TCP SPT=35730 D ...
show moreOct 19 23:44:58 159.75.21.42 TCP SPT=35730 DPT=2222 SYN
Oct 19 23:44:59 159.75.21.42 TCP SPT=35730 DPT=2222 SYN
...
show less
