Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Rio de Janeiro

Region: Rio de Janeiro

Country: Brazil

Internet Service Provider: TIM

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
% IP Client: 124.223.158.242
 % Copyright (c) Nic.br - Use of this data is governed by the Use and
% Privacy Policy at https://registro.br/upp . Distribution,
% commercialization, reproduction, and use for advertising or similar
% purposes are expressly prohibited.
% 2026-03-21T22:09:10-03:00 - 124.223.158.242

inetnum:     189.21.115.192/26
aut-num:     AS17379
abuse-c:     TISOC3
owner:       Bluephone Solucoes Tecnologicas Ltda
ownerid:     03.723.916/0001-68
responsible: Am�rico Jose Fernandes
owner-c:     BSL34
tech-c:      BSL34
created:     20090119
changed:     20090119
inetnum-up:  189.21.0.0/16

nic-hdl-br:  BSL34
person:      Bluephone Solucoes Tecnologias Ltda
created:     20000410
changed:     20250115

nic-hdl-br:  TISOC3
person:      TIM SOC
created:     20090826
changed:     20250520

% Security and mail abuse issues should also be addressed to cert.br,
% respectivelly to cert@cert.br and mail-abuse@cert.br
%
% whois.registro.br only accepts exact match queries for domains,
% registrants, contacts, tickets, providers, IPs, and ASNs.
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 189.21.115.200
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44527
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;189.21.115.200.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026032101 1800 900 604800 86400

;; Query time: 6 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Mar 22 09:09:10 CST 2026
;; MSG SIZE  rcvd: 107
Host info
200.115.21.189.in-addr.arpa domain name pointer 189-21-115-200.ded.intelignet.com.br.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
200.115.21.189.in-addr.arpa	name = 189-21-115-200.ded.intelignet.com.br.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
139.99.221.61 attack
Aug 16 03:25:28 hpm sshd\[8635\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.221.61  user=root
Aug 16 03:25:30 hpm sshd\[8635\]: Failed password for root from 139.99.221.61 port 48181 ssh2
Aug 16 03:31:05 hpm sshd\[9131\]: Invalid user elasticsearch from 139.99.221.61
Aug 16 03:31:05 hpm sshd\[9131\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.221.61
Aug 16 03:31:06 hpm sshd\[9131\]: Failed password for invalid user elasticsearch from 139.99.221.61 port 43223 ssh2
2019-08-16 21:56:35
41.140.208.251 attackbots
SSH bruteforce
2019-08-16 22:51:16
203.81.99.194 attackbotsspam
Aug 15 22:56:27 php1 sshd\[5288\]: Invalid user clark from 203.81.99.194
Aug 15 22:56:27 php1 sshd\[5288\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.81.99.194
Aug 15 22:56:29 php1 sshd\[5288\]: Failed password for invalid user clark from 203.81.99.194 port 33170 ssh2
Aug 15 23:03:32 php1 sshd\[5870\]: Invalid user test from 203.81.99.194
Aug 15 23:03:32 php1 sshd\[5870\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.81.99.194
2019-08-16 23:02:48
168.61.165.178 attackspambots
Aug 16 08:14:40 XXX sshd[60087]: Invalid user postgres from 168.61.165.178 port 47100
2019-08-16 23:10:23
36.73.91.212 attackspam
Aug 16 15:18:49 v22018076622670303 sshd\[2602\]: Invalid user hariman from 36.73.91.212 port 44690
Aug 16 15:18:49 v22018076622670303 sshd\[2602\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.73.91.212
Aug 16 15:18:52 v22018076622670303 sshd\[2602\]: Failed password for invalid user hariman from 36.73.91.212 port 44690 ssh2
...
2019-08-16 23:08:16
203.129.241.87 attack
$f2bV_matches
2019-08-16 22:16:03
58.21.251.9 attack
5500/tcp
[2019-08-16]1pkt
2019-08-16 23:15:44
70.29.106.63 attack
Invalid user pyej from 70.29.106.63 port 44612
2019-08-16 21:59:36
177.204.205.188 attackbotsspam
Automatic report - Port Scan Attack
2019-08-16 23:01:13
36.237.106.8 attack
23/tcp
[2019-08-16]1pkt
2019-08-16 22:48:48
120.52.152.17 attack
16.08.2019 14:24:50 Connection to port 16010 blocked by firewall
2019-08-16 22:58:27
3.16.218.64 attack
Automatic report - SSH Brute-Force Attack
2019-08-16 22:26:14
114.108.177.104 attack
2019-08-16 00:15:21 H=(littleblackdress.it) [114.108.177.104]:57504 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/query/ip/114.108.177.104)
2019-08-16 00:15:23 H=(littleblackdress.it) [114.108.177.104]:57504 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS)
2019-08-16 00:15:23 H=(littleblackdress.it) [114.108.177.104]:57504 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS)
...
2019-08-16 23:08:38
187.162.51.132 attackspam
Automatic report - Port Scan Attack
2019-08-16 22:31:32
45.32.157.156 attackbots
2019-08-16T15:09:46.657606abusebot-7.cloudsearch.cf sshd\[25774\]: Invalid user guest from 45.32.157.156 port 43026
2019-08-16 23:14:08

Recently Reported IPs

109.162.246.148 124.160.74.170 10.241.35.38 155.43.88.203
206.41.66.232 66.132.186.172 46.62.255.193 2606:4700:10::6816:960
2606:4700:10::6814:5714 2606:4700:10::6814:9538 2606:4700:10::6814:9233 2606:4700:10::6814:6064
2606:4700:10::6814:8308 164.155.74.66 223.76.208.145 168.174.183.90
221.13.92.3 10.4.188.1 2606:4700:10::6816:4377 2606:4700:10::6816:1374