JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

189.89.138.34

Recent Activity

Abuse confidence score ?

100% Critical

36 reports

30 reporters · latest 4 days ago

ISP	ITS TELECOMUNICACOES LTDA
Usage Type	Fixed Line ISP
ASN	AS28186
Domain Name	itsweb.com.br
Country	🇧🇷 Brazil
City	Salvador, Bahia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 189.89.138.34

Export CSV

This IP address has been reported a total of 36 times from 30 distinct sources. 189.89.138.34 was first reported on October 5th 2026, and the most recent report was 4 days ago. In the last 60 days, the top reporter locations were: Germany with 7 reports; United States of America with 5 reports; Canada with 3 reports. The most common categories in these recent reports were: Brute-Force 31 times; SSH 31 times; Port Scan 6 times; Hacking 4 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 Apache	2026-10-06 19:54:43 (4 days ago)	(sshd) Failed SSH login from 189.89.138.34 (BR/Brazil/189-89-138-34.STATIC.itsweb.com.br): 5 in the ... show more (sshd) Failed SSH login from 189.89.138.34 (BR/Brazil/189-89-138-34.STATIC.itsweb.com.br): 5 in the last 300 secs show less	Brute-Force SSH
🇺🇸 yzfdude1	2026-10-06 18:21:20 (4 days ago)	2026-10-06T12:21:14.830203-06:00 b146-50 sshd[1634187]: pam_unix(sshd:auth): authentication failure; ... show more 2026-10-06T12:21:14.830203-06:00 b146-50 sshd[1634187]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.89.138.34 user=root 2026-10-06T12:21:16.825282-06:00 b146-50 sshd[1634187]: Failed password for invalid user root from 189.89.138.34 port 17766 ssh2 2026-10-06T12:21:19.233304-06:00 b146-50 sshd[1634190]: User root from 189.89.138.34 not allowed because none of user's groups are listed in AllowGroups ... show less	Brute-Force SSH
🇨🇦 Psycho Solutions LLC	2026-10-06 15:48:33 (4 days ago)	Active SSH brute-force detected. Logs: 2026-10-06T21:18:23.629474+05:30 Va1kVirginia sshd-session[27 ... show more Active SSH brute-force detected. Logs: 2026-10-06T21:18:23.629474+05:30 Va1kVirginia sshd-session[2797754]: Failed password for root from 189.89.138.34 port 17658 ssh2 2026-10-06T21:18:25.960621+05:30 Va1kVirginia sshd-session[2797847]: pam_unix(sshd:a... show less	SSH Brute-Force
🇨🇦 Psycho Solutions LLC	2026-10-06 15:07:40 (4 days ago)	Active SSH brute-force detected. Logs: 2026-10-06T20:37:32.405813+05:30 Va1kVirginia sshd-session[27 ... show more Active SSH brute-force detected. Logs: 2026-10-06T20:37:32.405813+05:30 Va1kVirginia sshd-session[2761516]: Failed password for root from 189.89.138.34 port 10427 ssh2 2026-10-06T20:37:33.218383+05:30 Va1kVirginia sshd-session[2761558]: pam_unix(sshd:a... show less	SSH Brute-Force
🇳🇱 EGP Abuse Dept	2026-10-06 10:28:44 (4 days ago)	Unauthorized connection to SSH port 22	Port Scan Hacking SSH
🇫🇷 NikkoCasa34	2026-10-06 09:39:12 (4 days ago)	Fail2ban jail sshd: 3 tentatives. Dernier log: $f2bV_matches	Brute-Force SSH
🇸🇬 tommygod.ddns.net	2026-10-06 05:09:04 (5 days ago)	2026-10-06T05:08:52.437908+00:00 mailtommygod sshd[2401188]: Failed password for root from 189.89.13 ... show more 2026-10-06T05:08:52.437908+00:00 mailtommygod sshd[2401188]: Failed password for root from 189.89.138.34 port 8799 ssh2 2026-10-06T05:08:56.097641+00:00 mailtommygod sshd[2401191]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.89.138.34 user=root 2026-10-06T05:08:57.616957+00:00 mailtommygod sshd[2401191]: Failed password for root from 189.89.138.34 port 2548 ssh2 2026-10-06T05:09:01.335456+00:00 mailtommygod sshd[2401212]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.89.138.34 user=root 2026-10-06T05:09:03.543140+00:00 mailtommygod sshd[2401212]: Failed password for root from 189.89.138.34 port 9218 ssh2 show less	Brute-Force SSH
🇬🇧 ByteGuard Security Systems	2026-10-06 03:50:02 (5 days ago)	Automated SSH intrusion attempt matched fail2ban's sshd jail: 3 failed password attempt(s) out of 9 ... show more Automated SSH intrusion attempt matched fail2ban's sshd jail: 3 failed password attempt(s) out of 9 connection event(s), starting 2026-10-06T06:50:02+03:00. Usernames tried: root. show less	Brute-Force SSH
🇭🇺 kisbogdan	2026-10-06 03:05:02 (5 days ago)	endlessh: 151 connections ended in last one hour, totaling 0:40:44, average 0:00:16 per connection	Brute-Force SSH
🇧🇷 cibersecoptidata	2026-10-06 02:54:08 (5 days ago)	Port scan / Unsolicited traffic.	Port Scan
Anonymous	2026-10-06 02:46:52 (5 days ago)	SSH brute force attack on port <port>	Brute-Force SSH
🇭🇺 kisbogdan	2026-10-06 02:05:01 (5 days ago)	endlessh: 190 connections ended in last one hour, totaling 0:51:11, average 0:00:16 per connection	Brute-Force SSH
🇭🇺 kisbogdan	2026-10-06 01:05:06 (5 days ago)	endlessh: 62 connections ended in last one hour, totaling 0:17:10, average 0:00:16 per connection	Brute-Force SSH
🇫🇷 jk jk	2026-10-06 00:54:23 (5 days ago)	GoPot Honeypot	Port Scan Hacking
🇩🇪 enjoyably	2026-10-05 23:27:53 (5 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/ssh-bf	SSH Brute-Force

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇱 179.60.83.196

🇲🇽 45.168.239.202

🇺🇸 3.130.168.2

🇺🇸 217.181.65.86

🇧🇪 198.235.24.197

🇪🇨 181.199.63.15

🇧🇷 172.69.138.140

🇺🇦 159.224.231.198

🇭🇰 150.5.169.176

🇵🇰 124.29.251.85

🇰🇷 112.220.250.20

🇮🇳 110.235.229.124

🇳🇱 104.23.170.117

🇸🇬 101.47.158.56

🇳🇱 94.154.43.56

🇺🇦 91.211.134.204

🇳🇱 86.54.31.38

🇬🇧 64.205.72.48

🇱🇹 62.60.130.201

🇧🇷 45.238.88.56