JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 40.89.242.193

40.89.242.193 was found in our database!

This IP was reported 35 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Des Moines, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 40.89.242.193

Whois 40.89.242.193

IP Abuse Reports for 40.89.242.193:

This IP address has been reported a total of 35 times from 33 distinct sources. 40.89.242.193 was first reported on March 31st 2026, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇱 spd.co.il	2026-04-04 00:03:00 (2 months ago)	Unauthorized access attempts on ports: 22	Brute-Force SSH
🇦🇹 urnilxfgbez	2026-04-02 22:45:00 (2 months ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇺🇸 yzfdude1	2026-04-02 11:02:33 (2 months ago)	Apr 2 05:02:25 kelvin sshd[329029]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eui ... show more Apr 2 05:02:25 kelvin sshd[329029]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.89.242.193 user=root Apr 2 05:02:28 kelvin sshd[329029]: Failed password for invalid user root from 40.89.242.193 port 59158 ssh2 Apr 2 05:02:32 kelvin sshd[329034]: User root from 40.89.242.193 not allowed because none of user's groups are listed in AllowGroups ... show less	Brute-Force SSH
🇹🇷 Threat.live	2026-04-02 07:45:12 (2 months ago)	Brute Force, tcp/22	Brute-Force
🇩🇪 ghostwarriors	2026-04-02 06:20:34 (2 months ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇺🇸 SecondBanana	2026-04-02 06:15:50 (2 months ago)	2026-04-02T06:15:49.349068+00:00 thecount sshd[1554123]: Connection closed by authenticating user ro ... show more 2026-04-02T06:15:49.349068+00:00 thecount sshd[1554123]: Connection closed by authenticating user root 40.89.242.193 port 40982 [preauth] ... show less	Brute-Force SSH
🇵🇱 Wepted	2026-04-02 05:45:12 (2 months ago)	2026-04-02T07:45:05.963389+02:00 axisverse sshd-session[965464]: Invalid user user from 40.89.242.19 ... show more 2026-04-02T07:45:05.963389+02:00 axisverse sshd-session[965464]: Invalid user user from 40.89.242.193 port 46468 2026-04-02T07:45:10.362529+02:00 axisverse sshd-session[965558]: Invalid user user from 40.89.242.193 port 47470 2026-04-02T07:45:11.668295+02:00 axisverse sshd-session[965616]: Invalid user user from 40.89.242.193 port 47476 ... show less	Brute-Force SSH
🇬🇧 Smish	2026-04-02 05:42:23 (2 months ago)	(sshd) Failed SSH login from 40.89.242.193 (US/United States/-): 5 in the last 3600 secs; Ports: ; ... show more (sshd) Failed SSH login from 40.89.242.193 (US/United States/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SSHD; Logs: Apr 2 06:41:38 webhosting2 sshd[10586]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.89.242.193 user=root Apr 2 06:41:40 webhosting2 sshd[10586]: Failed password for root from 40.89.242.193 port 49918 ssh2 Apr 2 06:41:41 webhosting2 sshd[10591]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.89.242.193 user=root Apr 2 06:41:43 webhosting2 sshd[10591]: Failed password for root from 40.89.242.193 port 49928 ssh2 Apr 2 06:41:44 webhosting2 sshd[10597]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.89.242.193 user=root show less	Brute-Force
🇩🇪 Admins@FBN	2026-04-02 03:01:46 (2 months ago)	FW-PortScan: Traffic Blocked srcport=35346 dstport=22	Port Scan Hacking SSH
🇨🇳 ThreatBook.io	2026-04-02 00:36:48 (2 months ago)	ThreatBook Intelligence: Spam,Info more details on https://threatbook.io/ip/40.89.242.193	SSH
🇹🇷 rtbh.com.tr	2026-04-02 00:12:21 (2 months ago)	list.rtbh.com.tr report: tcp/22	Brute-Force
🇦🇹 centurion	2026-04-02 00:06:11 (2 months ago)	Unauthorized attempt on cendev [22/tcp] Source port: 35198 TTL: 40 Packet length: 60 TOS: 0x00 https ... show more Unauthorized attempt on cendev [22/tcp] Source port: 35198 TTL: 40 Packet length: 60 TOS: 0x00 https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan SSH Brute-Force
🇦🇹 urnilxfgbez	2026-04-01 22:45:00 (2 months ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇳🇱 knock	2026-04-01 22:41:27 (2 months ago)	Knock-Knock honeypot brute-force: SSH (4 total hits)	Brute-Force SSH
🇫🇮 tcivie	2026-04-01 15:52:11 (2 months ago)	SSH brute-force detected on jail:sshd. Seen on 1 server(s).	Brute-Force SSH

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 186.251.71.202

🇻🇳 27.79.2.165

🇺🇸 216.180.246.238

🇺🇸 216.180.246.229

🇺🇸 216.180.246.218

🇧🇪 198.235.24.253

🇺🇸 147.185.132.255

🇫🇷 85.217.140.3

🇸🇪 85.203.44.107

🇫🇷 75.119.142.9

🇺🇸 64.236.160.17

🇳🇱 45.148.10.141

🇦🇺 3.106.239.82

🇷🇴 2.57.122.177

🇻🇳 1.53.36.245

🇺🇸 216.180.246.201

🇺🇸 216.180.246.183

🇰🇿 176.124.88.29

🇺🇸 174.54.165.94

🇺🇸 146.19.78.172