This IP address has been reported a total of
1,026
times from
156 distinct
sources.
89.38.96.216 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-05-29T06:03:30.923414+09:00 no5 sshd[1125137]: Disconnected from authenticating user root 89.38 ...
show more2026-05-29T06:03:30.923414+09:00 no5 sshd[1125137]: Disconnected from authenticating user root 89.38.96.216 port 53974 [preauth]
...
show less
2026-05-28T22:35:21.569391+02:00 server sshd-session[15570]: Disconnected from authenticating user r ...
show more2026-05-28T22:35:21.569391+02:00 server sshd-session[15570]: Disconnected from authenticating user root 89.38.96.216 port 46848 [preauth]
...
show less
2026-05-28T08:22:28.698667+00:00 fleur.lavnet.net sshd[2591762]: error: maximum authentication attem ...
show more2026-05-28T08:22:28.698667+00:00 fleur.lavnet.net sshd[2591762]: error: maximum authentication attempts exceeded for root from 89.38.96.216 port 36826 ssh2 [preauth]
2026-05-28T12:48:14.012341+00:00 fleur.lavnet.net sshd[2610478]: error: maximum authentication attempts exceeded for root from 89.38.96.216 port 34912 ssh2 [preauth]
2026-05-28T20:07:43.042303+00:00 fleur.lavnet.net sshd[2640521]: error: maximum authentication attempts exceeded for root from 89.38.96.216 port 36614 ssh2 [preauth]
...
show less
May 28 19:36:44 uptime-kuma sshd[58388]: Disconnected from authenticating user root 89.38.96.216 por ...
show moreMay 28 19:36:44 uptime-kuma sshd[58388]: Disconnected from authenticating user root 89.38.96.216 port 51138 [preauth]
...
show less
This IP address carried out 20 port scanning attempts on 28-05-2026. For more information or to repo ...
show moreThis IP address carried out 20 port scanning attempts on 28-05-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
2026-05-28T18:33:48.701346+00:00 instance-20241105-1951 sshd[1929113]: Disconnected from authenticat ...
show more2026-05-28T18:33:48.701346+00:00 instance-20241105-1951 sshd[1929113]: Disconnected from authenticating user root 89.38.96.216 port 47514 [preauth]
...
show less
2026-05-29T03:05:48.256490+09:00 no3 sshd[2014054]: Disconnected from authenticating user root 89.38 ...
show more2026-05-29T03:05:48.256490+09:00 no3 sshd[2014054]: Disconnected from authenticating user root 89.38.96.216 port 33340 [preauth]
...
show less
May 27 04:24:58 tau sshd[261535]: User root from 89.38.96.216 not allowed because none of user's gro ...
show moreMay 27 04:24:58 tau sshd[261535]: User root from 89.38.96.216 not allowed because none of user's groups are listed in AllowGroups
May 27 13:40:05 tau sshd[270224]: User root from 89.38.96.216 not allowed because none of user's groups are listed in AllowGroups
May 28 12:03:37 tau sshd[291423]: User root from 89.38.96.216 not allowed because none of user's groups are listed in AllowGroups
...
show less
Honeypot hit: Brute-force attack detected on 22/SSH
• Credential used: root:undefined
• Number of lo ...
show moreHoneypot hit: Brute-force attack detected on 22/SSH
• Credential used: root:undefined
• Number of login attempts: 1
• Client: SSH-2.0-libssh2_1.11.0
• SSH key fingerprints: 47:55:64:67:62:04:e4:a8:58:10:f4:07:bd:54:2a:7c
show less