This IP address has been reported a total of
35
times from
33 distinct
sources.
189.196.21.138 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
2026-04-08T10:06:26.916273+00:00 localhost sshd[276559]: pam_unix(sshd:auth): authentication failure ...
show more2026-04-08T10:06:26.916273+00:00 localhost sshd[276559]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.196.21.138
2026-04-08T10:06:28.980273+00:00 localhost sshd[276559]: Failed password for invalid user admin from 189.196.21.138 port 62696 ssh2
2026-04-08T10:06:29.871359+00:00 localhost sshd[276563]: Invalid user admin from 189.196.21.138 port 62768
...
show less
2026-02-12T10:23:17.574620+00:00 ubuntu-s-1vcpu-1gb-fra1-01 sshd[663642]: Invalid user admin from 18 ...
show more2026-02-12T10:23:17.574620+00:00 ubuntu-s-1vcpu-1gb-fra1-01 sshd[663642]: Invalid user admin from 189.196.21.138 port 50291
2026-02-12T10:23:19.904549+00:00 ubuntu-s-1vcpu-1gb-fra1-01 sshd[663646]: Invalid user admin from 189.196.21.138 port 50420
2026-02-12T10:23:21.099312+00:00 ubuntu-s-1vcpu-1gb-fra1-01 sshd[663648]: Invalid user user from 189.196.21.138 port 50482
2026-02-12T10:23:22.314683+00:00 ubuntu-s-1vcpu-1gb-fra1-01 sshd[663650]: Invalid user user2 from 189.196.21.138 port 50545
2026-02-12T10:23:24.718242+00:00 ubuntu-s-1vcpu-1gb-fra1-01 sshd[663654]: Invalid user admin from 189.196.21.138 port 50678
...
show less
2026-02-07T08:31:26.858381+01:00 srv03 sshd-session[2995249]: pam_unix(sshd:auth): authentication fa ...
show more2026-02-07T08:31:26.858381+01:00 srv03 sshd-session[2995249]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.196.21.138
2026-02-07T08:31:28.611408+01:00 srv03 sshd-session[2995249]: Failed password for invalid user admin from 189.196.21.138 port 60187 ssh2
2026-02-07T08:31:29.910778+01:00 srv03 sshd-session[2995294]: Invalid user admin from 189.196.21.138 port 60205
...
show less
2026-01-28T01:14:50.172667+08:00 bird sshd[649452]: Invalid user admin from 189.196.21.138 port 5803 ...
show more2026-01-28T01:14:50.172667+08:00 bird sshd[649452]: Invalid user admin from 189.196.21.138 port 58036
2026-01-28T01:14:48.346647+08:00 bird sshd[649450]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.196.21.138 user=root
2026-01-28T01:14:50.902254+08:00 bird sshd[649450]: Failed password for root from 189.196.21.138 port 58023 ssh2
2026-01-28T01:14:50.182352+08:00 bird sshd[649452]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.196.21.138
2026-01-28T01:14:52.677401+08:00 bird sshd[649452]: Failed password for invalid user admin from 189.196.21.138 port 58036 ssh2
...
show less
2026-01-12T14:07:26.669680+11:00 ubuntuserver sshd[244907]: Invalid user admin from 189.196.21.138 p ...
show more2026-01-12T14:07:26.669680+11:00 ubuntuserver sshd[244907]: Invalid user admin from 189.196.21.138 port 57756
2026-01-12T14:07:27.856163+11:00 ubuntuserver sshd[244911]: Invalid user admin from 189.196.21.138 port 57775
2026-01-12T14:07:28.471927+11:00 ubuntuserver sshd[244913]: Invalid user user from 189.196.21.138 port 57784
...
show less
Brute-Force
SSH
Anonymous
2025-11-24T15:06:34.154339 EUR sshd[25589]: Invalid user admin from 189.196.21.138 port 55972
2025-1 ...
show more2025-11-24T15:06:34.154339 EUR sshd[25589]: Invalid user admin from 189.196.21.138 port 55972
2025-11-24T15:06:35.291311 EUR sshd[25593]: Invalid user admin from 189.196.21.138 port 56100
2025-11-24T15:06:35.854559 EUR sshd[25595]: Invalid user user from 189.196.21.138 port 56154
...
show less
2025-11-24T14:00:07.294276+00:00 tkhaldi-remote-droplet sshd-session[1364073]: Invalid user admin fr ...
show more2025-11-24T14:00:07.294276+00:00 tkhaldi-remote-droplet sshd-session[1364073]: Invalid user admin from 189.196.21.138 port 59035
2025-11-24T14:00:09.477436+00:00 tkhaldi-remote-droplet sshd-session[1364077]: Invalid user admin from 189.196.21.138 port 59300
2025-11-24T14:00:10.589649+00:00 tkhaldi-remote-droplet sshd-session[1364079]: Invalid user user from 189.196.21.138 port 59449
...
show less
Brute-Force
SSH
Showing 1 to
15
of 35 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩