189.89.9.212 is an IP address with 2 abuse reports from 2 distinct reporters, submitted between 10/25/2026 and 10/26/2026. The AbuseTrack community rates it as Medium risk, with a score of 48/100. The most frequently reported threat categories are Brute Force.
Back to the database
ip
189.89.9.212
Medium · 482 reports
BrazilInstant verdict
SUSPICIOUS
48/100
Community risk score
2
Reports
2
Reporters
10/25/2026
First seen
10/26/2026
Last seen
Threat type
Is this your address and is it listed wrongly? Request removal →
Intelligence
Country
Brazil (BR)
WHOIS (RDAP)
- Country
- Brazil
- Location
- Imperatriz, Maranhão
Reverse DNS
- PTR
- 189-89-9-212.jupiterprovedor.com.br
Report history (2)
Brute Force10/26/2026, 01:00 AM · NextServ Group
2026-10-26T00:59:03.141257+00:00 voltius sshd-session[796846]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.89.9.212 user=root 2026-10-26T00:59:05.581362+00:00 voltius sshd-session[796846]: Failed password for root from 189.89.9.212 port 56554 ssh2 2026-10-26T01:00:55.397226+00:00 voltius sshd-session[798402]: Invalid user pakchoi from 189.89.9.212 port 59940 2026-10-26T01:00:55.398600+00:00 voltius sshd-session[798402]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.89.9.212 2026-10-26T01:00:57.654463+00:00 voltius sshd-session[798402]: Failed password for invalid user pakchoi from 189.89.9.212 port 59940 ssh2
Brute Force10/25/2026, 08:52 PM · Enjyn Gruppe
fail2ban: SSH (sshd) brute-force — 3 failed attempts (jail: sshd)