Log in to view charts and search reports for this IP.
Log In
Top Reporter Countries (Last 60 Days)
Example preview
Report Categories (Last 60 Days)
Example preview
Reports Activity
Example preview
Account required for the enhanced features
Log inSign up
IP Abuse Reports for 189.21.40.242:
This IP address has been reported a total of
217
times from
156 distinct
sources.
189.21.40.242 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 60
reports;
United States of America
with 36
reports;
France
with 34
reports.
The most common categories in these recent reports were:
Brute-Force
198
times;
SSH
190
times;
Port Scan
14
times;
Hacking
12
times;
FTP Brute-Force
3
times;
Other
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-09-08T23:09:10.712904+02:00 ns3006402 sshd[2757258]: pam_unix(sshd:auth): authentication failur ...
show more2026-09-08T23:09:10.712904+02:00 ns3006402 sshd[2757258]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.21.40.242
2026-09-08T23:09:12.606439+02:00 ns3006402 sshd[2757258]: Failed password for invalid user wallet from 189.21.40.242 port 16268 ssh2
2026-09-08T23:53:16.465895+02:00 ns3006402 sshd[2766186]: Invalid user wallet from 189.21.40.242 port 40327
...
show less
Failed SSH authentication attempts recorded by a honeypot sensor network.
Threat score: 16/100 (low) ...
show moreFailed SSH authentication attempts recorded by a honeypot sensor network.
Threat score: 16/100 (low) | Phase: reconnaissance (pre-auth probing / scanning)
Failed auth: 8 (0 bad password, 8 invalid user) | 0 success | 12 total SSH log events | seen on 1 sensor(s)
Origin: Brazil (BR) | AS26615 TIM S/A | 189.21.40.0/24
First seen: 2026-09-08 16:32:19 UTC | Last seen: 2026-09-08 21:51:00 UTC
Source: Linux OpenSSH journalctl telemetry, multi-sensor CERT honeypot.
show less
189.21.40.242 (BR/Brazil/-), 7 distributed sshd attacks on account [wallet] in the last 3600 secs; P ...
show more189.21.40.242 (BR/Brazil/-), 7 distributed sshd attacks on account [wallet] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 8 17:24:57 server5 sshd[9698]: Failed password for invalid user wallet from 177.69.6.210 port 3862 ssh2
Sep 8 17:24:54 server5 sshd[9698]: Invalid user wallet from 177.69.6.210
Sep 8 17:25:39 server5 sshd[10616]: Failed password for invalid user wallet from 181.166.15.45 port 38815 ssh2
Sep 8 17:25:29 server5 sshd[10504]: Invalid user wallet from 190.121.2.125
Sep 8 17:25:32 server5 sshd[10504]: Failed password for invalid user wallet from 190.121.2.125 port 53244 ssh2
Sep 8 17:25:36 server5 sshd[10616]: Invalid user wallet from 181.166.15.45
Sep 8 17:26:00 server5 sshd[10700]: Invalid user wallet from 189.21.40.242
IP Addresses Blocked:
177.69.6.210 (BR/Brazil/-)
181.166.15.45 (AR/Argentina/-)
190.121.2.125 (CL/Chile/-)
show less
2026-09-08T22:13:18.044257 webhost1 sshd-session[137132]: Invalid user wallet from 189.21.40.242 por ...
show more2026-09-08T22:13:18.044257 webhost1 sshd-session[137132]: Invalid user wallet from 189.21.40.242 port 28720
2026-09-08T22:13:19.118039 webhost1 sshd-session[137132]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.21.40.242
2026-09-08T22:13:20.861389 webhost1 sshd-session[137132]: Failed password for invalid user wallet from 189.21.40.242 port 28720 ssh2
...
show less
2026-09-08T21:04:49.157045+00:00 vps3363447 sshd[143926]: Failed password for invalid user wallet fr ...
show more2026-09-08T21:04:49.157045+00:00 vps3363447 sshd[143926]: Failed password for invalid user wallet from 189.21.40.242 port 25388 ssh2
show less
2026-09-08T22:55:13.523455+02:00 gXdNODE2 sshd-session[363543]: Invalid user wallet from 189.21.40.2 ...
show more2026-09-08T22:55:13.523455+02:00 gXdNODE2 sshd-session[363543]: Invalid user wallet from 189.21.40.242 port 31229
...
show less
2026-09-08T16:47:16.290872-04:00 debian sshd-session[568142]: Invalid user exchange from 189.21.40.2 ...
show more2026-09-08T16:47:16.290872-04:00 debian sshd-session[568142]: Invalid user exchange from 189.21.40.242 port 31494
2026-09-08T16:47:16.755810-04:00 debian sshd-session[568142]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.21.40.242
2026-09-08T16:47:18.898959-04:00 debian sshd-session[568142]: Failed password for invalid user exchange from 189.21.40.242 port 31494 ssh2
...
show less
