JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

189.98.166.216

Recent Activity

Abuse Confidence Score

100% Critical

228 reports

183 reporters · latest 1 day ago

ISP: TELEFÔNICA BRASIL S.A
Usage Type: Fixed Line ISP
ASN: AS26599
Hostname(s): ip-189-98-166-216.user.vivozap.com.br
Domain Name: telefonica.com.br
Country: 🇧🇷 Brazil
City: Santa Barbara d'Oeste, Sao Paulo

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

228 from 183 distinct reporters

First reported

October 29th 2026

Most recent report

1 day ago

Last 60 days

Top reporter locations 🇩🇪 Germany 60 🇺🇸 United States of America 43 🇳🇱 Netherlands 17

Most common categories SSH 212 Brute-Force 211 Port Scan 10 Hacking 6 Web App Attack 2

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 xavier-momain.eu	2026-11-07 23:30:31 UTC · (1 day ago)	CrowdSec ban — scenario: xavier/ssh-attempt \| report #2	Brute-Force SSH
🇪🇸 raiolanetworks.com	2026-11-01 17:42:21 UTC · (1 week ago)	Honeypot detection: SSH/Telnet brute-force. 5 events observed. 5 login attempts. Reported automatically from a honeypot sensor.	Brute-Force SSH
🇧🇬 dc67.bid	2026-11-01 15:55:11 UTC · (1 week ago)	Automated report: 6 events (honeypot=6), Wazuh	Brute-Force SSH
🇳🇱 Marcus Ripkens	2026-11-01 14:47:10 UTC · (1 week ago)	$f2bV_matches	Brute-Force SSH
🇩🇪 xavier-momain.eu	2026-11-01 10:19:59 UTC · (1 week ago)	CrowdSec ban — scenario: xavier/fakessh-attempt \| users: tom	Brute-Force SSH
🇺🇸 paradoxnetworks	2026-11-01 09:00:05 UTC · (1 week ago)	Nov 1 08:49:40 mtrtools sshd[4081601]: Invalid user test from 189.98.166.216 port 55770 Nov 1 08:54:56 mtrtools sshd[4082988]: Invalid user appldev from 189.98.166.216 port 49366 Nov 1 09:00:04 mtrtools sshd[4084294]: Invalid user mpiuser from 189 ... show more Nov 1 08:49:40 mtrtools sshd[4081601]: Invalid user test from 189.98.166.216 port 55770 Nov 1 08:54:56 mtrtools sshd[4082988]: Invalid user appldev from 189.98.166.216 port 49366 Nov 1 09:00:04 mtrtools sshd[4084294]: Invalid user mpiuser from 189.98.166.216 port 42964 ... show less	Brute-Force SSH
🇫🇮 beatsnet.com	2026-11-01 08:30:09 UTC · (1 week ago)	2026-11-01T09:28:18.378519+01:00 frenzy sshd-session[16141]: Failed password for root from 189.98.166.216 port 54722 ssh2 2026-11-01T09:30:05.703524+01:00 frenzy sshd-session[16152]: Invalid user online from 189.98.166.216 port 44564 2026-11-01T09:30 ... show more 2026-11-01T09:28:18.378519+01:00 frenzy sshd-session[16141]: Failed password for root from 189.98.166.216 port 54722 ssh2 2026-11-01T09:30:05.703524+01:00 frenzy sshd-session[16152]: Invalid user online from 189.98.166.216 port 44564 2026-11-01T09:30:05.707509+01:00 frenzy sshd-session[16152]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.98.166.216 2026-11-01T09:30:07.811939+01:00 frenzy sshd-session[16152]: Failed password for invalid user online from 189.98.166.216 port 44564 ssh2 ... show less	Brute-Force SSH
🇩🇪 DiBu	2026-11-01 07:25:01 UTC · (1 week ago)	2026-11-01T09:24:58.260923+02:00 buhr.cloud sshd-session[2025247]: Invalid user cherry from 189.98.166.216 port 38462 2026-11-01T09:24:58.265173+02:00 buhr.cloud sshd-session[2025247]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ... show more 2026-11-01T09:24:58.260923+02:00 buhr.cloud sshd-session[2025247]: Invalid user cherry from 189.98.166.216 port 38462 2026-11-01T09:24:58.265173+02:00 buhr.cloud sshd-session[2025247]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.98.166.216 2026-11-01T09:25:00.558541+02:00 buhr.cloud sshd-session[2025247]: Failed password for invalid user cherry from 189.98.166.216 port 38462 ssh2 ... show less	Brute-Force
🇩🇪 demonsword	2026-11-01 07:21:24 UTC · (1 week ago)	SSH brute-force detected: 7 failed login attempts in the last 1 hour.	Brute-Force SSH
🇩🇪 YumXac	2026-11-01 06:51:13 UTC · (1 week ago)	2026-11-01T07:40:20.333122+01:00 pve-osd-101 sshd[1989483]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.98.166.216 user=ctf 2026-11-01T07:40:21.973123+01:00 pve-osd-101 sshd[1989483]: Failed password for ... show more 2026-11-01T07:40:20.333122+01:00 pve-osd-101 sshd[1989483]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.98.166.216 user=ctf 2026-11-01T07:40:21.973123+01:00 pve-osd-101 sshd[1989483]: Failed password for invalid user ctf from 189.98.166.216 port 33350 ssh2 2026-11-01T07:40:22.574337+01:00 pve-osd-101 sshd[1989483]: Disconnected from invalid user ctf 189.98.166.216 port 33350 [preauth] 2026-11-01T07:51:07.809837+01:00 pve-osd-101 sshd[1994259]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.98.166.216 user=root 2026-11-01T07:51:10.271995+01:00 pve-osd-101 sshd[1994259]: Failed password for root from 189.98.166.216 port 42452 ssh2 2026-11-01T07:51:12.559370+01:00 pve-osd-101 sshd[1994259]: Disconnected from authenticating user root 189.98.166.216 port 42452 [preauth] ... show less	Brute-Force SSH
🇩🇪 noteng.no	2026-11-01 05:57:43 UTC · (1 week ago)	2026-11-01T05:49:46.432890+00:00 debian-4gb-nbg1-1 sshd-session[38745]: Invalid user test from 189.98.166.216 port 51732 2026-11-01T05:53:44.833191+00:00 debian-4gb-nbg1-1 sshd-session[38819]: Invalid user lea from 189.98.166.216 port 46264 2026-11-0 ... show more 2026-11-01T05:49:46.432890+00:00 debian-4gb-nbg1-1 sshd-session[38745]: Invalid user test from 189.98.166.216 port 51732 2026-11-01T05:53:44.833191+00:00 debian-4gb-nbg1-1 sshd-session[38819]: Invalid user lea from 189.98.166.216 port 46264 2026-11-01T05:57:42.534684+00:00 debian-4gb-nbg1-1 sshd-session[38895]: Invalid user ubuntu from 189.98.166.216 port 40800 ... show less	Brute-Force SSH
🇫🇮 brmpicasmile	2026-11-01 05:05:50 UTC · (1 week ago)	SSH honeypot: 5 login attempt(s) (2 accepted) in 5 session(s). Users: root, prova, vms, dennis. Client: SSH-2.0-libssh_0.9.6. Behaviour: SSH key persistence. Created file(s): /root/.ssh/authorized_keys. Commands (2): cd ~; chattr -ia .ssh; lockr -ia ... show more SSH honeypot: 5 login attempt(s) (2 accepted) in 5 session(s). Users: root, prova, vms, dennis. Client: SSH-2.0-libssh_0.9.6. Behaviour: SSH key persistence. Created file(s): /root/.ssh/authorized_keys. Commands (2): cd ~; chattr -ia .ssh; lockr -ia .ssh ; cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAA…. Script sha256=cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f. show less	Brute-Force SSH Hacking
🇩🇪 uira.live	2026-11-01 05:05:11 UTC · (1 week ago)	Nov 1 05:02:56 vps-e2493e92 sshd[3360864]: Failed password for invalid user dennis from 189.98.166.216 port 39488 ssh2 Nov 1 05:05:09 vps-e2493e92 sshd[3458389]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhos ... show more Nov 1 05:02:56 vps-e2493e92 sshd[3360864]: Failed password for invalid user dennis from 189.98.166.216 port 39488 ssh2 Nov 1 05:05:09 vps-e2493e92 sshd[3458389]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.98.166.216 user=root Nov 1 05:05:11 vps-e2493e92 sshd[3458389]: Failed password for root from 189.98.166.216 port 38100 ssh2 ... show less	Brute-Force SSH
🇺🇸 dchu096	2026-11-01 05:03:52 UTC · (1 week ago)	2026-11-01T04:59:21.949330+00:00 bot1.dchu096.me sshd-session[666851]: Failed password for invalid user vms from 189.98.166.216 port 60874 ssh2 2026-11-01T05:03:49.992858+00:00 bot1.dchu096.me sshd-session[667249]: pam_unix(sshd:auth): authentication ... show more 2026-11-01T04:59:21.949330+00:00 bot1.dchu096.me sshd-session[666851]: Failed password for invalid user vms from 189.98.166.216 port 60874 ssh2 2026-11-01T05:03:49.992858+00:00 bot1.dchu096.me sshd-session[667249]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.98.166.216 user=root 2026-11-01T05:03:51.862467+00:00 bot1.dchu096.me sshd-session[667249]: Failed password for root from 189.98.166.216 port 58312 ssh2 ... show less	Brute-Force SSH
🇩🇪 sebi	2026-11-01 04:29:47 UTC · (1 week ago)	2026-11-01T05:16:13.404513+01:00 Pi.sebi.org sshd-session[76149]: Invalid user david from 189.98.166.216 port 50986 2026-11-01T05:21:37.779671+01:00 Pi.sebi.org sshd-session[76198]: Invalid user mongo from 189.98.166.216 port 40776 2026-11-01T05:23:4 ... show more 2026-11-01T05:16:13.404513+01:00 Pi.sebi.org sshd-session[76149]: Invalid user david from 189.98.166.216 port 50986 2026-11-01T05:21:37.779671+01:00 Pi.sebi.org sshd-session[76198]: Invalid user mongo from 189.98.166.216 port 40776 2026-11-01T05:23:40.872882+01:00 Pi.sebi.org sshd-session[76251]: Invalid user mhd from 189.98.166.216 port 39954 2026-11-01T05:27:51.426598+01:00 Pi.sebi.org sshd-session[76367]: Invalid user san from 189.98.166.216 port 38268 2026-11-01T05:29:47.136707+01:00 Pi.sebi.org sshd-session[76386]: Invalid user abas from 189.98.166.216 port 37434 show less	Brute-Force SSH

Showing 1 to 15 of 228 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 195.178.110.218

🇺🇦 213.5.193.228

🇮🇩 202.169.44.105

🇳🇱 195.178.110.217

🇫🇮 147.185.133.88

🇩🇪 109.160.32.31

🇺🇸 98.174.45.120

🇬🇧 92.207.4.157

🇳🇱 77.239.124.130

🇳🇱 45.148.10.21

🇵🇱 45.138.12.180

🇹🇭 223.204.238.12

🇨🇳 220.161.52.149

🇰🇷 218.159.144.187

🇮🇳 203.192.247.84

🇳🇱 195.178.110.30

🇬🇧 193.163.125.86

🇻🇪 190.153.6.160

🇩🇪 151.243.11.230

🇨🇦 144.217.61.131