JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 194.21.40.159

194.21.40.159 was found in our database!

This IP was reported 54 times. Confidence of Abuse is 100%: ?

100%

ISP	Retelit Digital Services S.p.A.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS3302
Domain Name	retelit.it
Country	🇮🇹 Italy
City	Milan, Lombardy

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 194.21.40.159

Whois 194.21.40.159

IP Abuse Reports for 194.21.40.159:

This IP address has been reported a total of 54 times from 46 distinct sources. 194.21.40.159 was first reported on August 27th 2026, and the most recent report was 12 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Markus Ackerl	2026-08-28 23:34:48 (12 hours ago)	Aug 28 19:39:27 mx sshd[1158314]: Failed password for root from 194.21.40.159 port 49416 ssh2 Aug 28 ... show more Aug 28 19:39:27 mx sshd[1158314]: Failed password for root from 194.21.40.159 port 49416 ssh2 Aug 28 23:34:46 mx sshd[1161649]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.21.40.159 user=root Aug 28 23:34:48 mx sshd[1161649]: Failed password for root from 194.21.40.159 port 56374 ssh2 ... show less	Brute-Force
🇺🇸 Floofie	2026-08-28 14:16:51 (21 hours ago)	2026-08-28T06:40:49.582910-04:00 site sshd-session[118532]: User root from 194.21.40.159 not allowed ... show more 2026-08-28T06:40:49.582910-04:00 site sshd-session[118532]: User root from 194.21.40.159 not allowed because not listed in AllowUsers 2026-08-28T07:59:51.384705-04:00 site sshd-session[122291]: User root from 194.21.40.159 not allowed because not listed in AllowUsers 2026-08-28T10:16:49.946053-04:00 site sshd-session[123196]: User root from 194.21.40.159 not allowed because not listed in AllowUsers ... show less	SSH
🇪🇸 elcruzado.es	2026-08-28 13:51:28 (22 hours ago)	194.21.40.159 (IT/Italy/-), 8 distributed sshd attacks on account [redacted]	Brute-Force SSH
🇺🇸 MSchienle	2026-08-28 13:44:10 (22 hours ago)	2026-08-28 08:38:34.136162-0500 localhost sshd-session[78159]: Failed password for root from 194.21 ... show more 2026-08-28 08:38:34.136162-0500 localhost sshd-session[78159]: Failed password for root from 194.21.40.159 port 37122 ssh2 show less	Brute-Force
🇺🇸 Saber1	2026-08-28 09:38:01 (1 day ago)	Successful SSH login observed on Cowrie honeypot. Targeted username: root. Observed at: 2026-08-28T0 ... show more Successful SSH login observed on Cowrie honeypot. Targeted username: root. Observed at: 2026-08-28T09:37:13.945142Z. Session: 35278f40a848. show less	Brute-Force SSH
🇬🇧 sverre26	2026-08-28 09:07:44 (1 day ago)	Bruteforce detected by fail2ban	Brute-Force SSH
🇫🇷 EvoX	2026-08-28 06:02:57 (1 day ago)	🛡️ Honeypot [bsts-tpot-sensor]: Brute-force attack detected on 22/SSH • Credential used: root:$bitco ... show more 🛡️ Honeypot [bsts-tpot-sensor]: Brute-force attack detected on 22/SSH • Credential used: root:$bitcoin@ • Number of login attempts: 1 • Client: SSH-2.0-Go show less	SSH
🇩🇪 SiyCah	2026-08-28 06:00:09 (1 day ago)	194.21.40.159 fell into Endlessh tarpit; 0/7 total connections are currently still open. Total time ... show more 194.21.40.159 fell into Endlessh tarpit; 0/7 total connections are currently still open. Total time wasted: 25s. Total bytes sent by tarpit: 2.00KiB. Report generated by Endlessh Report Generator v1.2.3 show less	Brute-Force Port Scan SSH Hacking
🇫🇷 aza SilaS	2026-08-28 03:27:38 (1 day ago)	Aug 28 05:27:38 vmi1858823 sshd[3552093]: Invalid user python from 194.21.40.159 port 60556 ...	Brute-Force SSH
🇬🇧 Globe2	2026-08-28 02:10:33 (1 day ago)	SSH Brute Force Attempt [server: OJ1]	SSH
🇫🇷 aza SilaS	2026-08-28 01:24:01 (1 day ago)	Aug 28 03:23:58 vmi1858823 sshd[3548754]: pam_unix(sshd:auth): authentication failure; logname= uid= ... show more Aug 28 03:23:58 vmi1858823 sshd[3548754]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.21.40.159 user=root Aug 28 03:24:00 vmi1858823 sshd[3548754]: Failed password for root from 194.21.40.159 port 34016 ssh2 ... show less	Brute-Force SSH
🇫🇷 Coco Bongo	2026-08-27 16:24:23 (1 day ago)	Aug 27 18:24:20 [redacted] sshd[1518187]: pam_unix(sshd:auth): authentication failure; logname= uid= ... show more Aug 27 18:24:20 [redacted] sshd[1518187]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.21.40.159 Aug 27 18:24:22 [redacted] sshd[1518187]: Failed password ... show less	Brute-Force SSH
🇫🇷 EvoX	2026-08-27 16:03:20 (1 day ago)	🛡️ Honeypot [bsts-tpot-hive]: Brute-force attack detected on 22/SSH • Credential used: fax:Password1 ... show more 🛡️ Honeypot [bsts-tpot-hive]: Brute-force attack detected on 22/SSH • Credential used: fax:Password12026 • Number of login attempts: 1 • Client: SSH-2.0-Go show less	SSH
Anonymous	2026-08-27 14:42:54 (1 day ago)	Invalid user testuser from 194.21.40.159 port 34324	Brute-Force SSH
Anonymous	2026-08-27 14:42:54 (1 day ago)	Invalid user testuser from 194.21.40.159 port 34324	Brute-Force SSH

Showing 1 to 15 of 54 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇾 178.120.6.236

🇺🇸 172.234.25.243

🇫🇮 147.185.133.217

🇮🇳 103.239.138.30

🇮🇳 45.248.163.54

🇦🇷 45.172.142.108

🇨🇦 20.104.81.161

🇺🇸 20.46.235.72

🇬🇧 9.246.33.102

🇦🇷 201.190.184.4

🇨🇳 182.114.50.165

🇵🇾 181.123.136.11

🇺🇸 170.187.165.242

🇨🇳 114.216.108.40

🇬🇧 95.214.187.212

🇳🇱 91.92.47.53

🇫🇷 85.69.240.210

🇸🇬 84.75.155.23

🇺🇸 66.228.52.221

🇬🇧 62.60.130.253