138.94.89.27
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- NETWORK DIGITAL LTDA
- Usage Type
- Fixed Line ISP
- ASN
- AS264152
- Hostname(s)
- 138-94-89-27.dynamic.networkdigital.inf.br
- Domain Name
- networkdigital.net.br
- Country
- 🇧🇷 Brazil
- City
- Otacilio Costa, Santa Catarina
Abuse Reports
Total reports
14 from
14 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 LSPCCU |
TSEC Honeypot Network report. Threat score: 63/100. Categories: Port Scan, Hacking, Brute-Force, Web App Attack, SSH. Honeypot: cowrie. Context: 138.94.89.27 classified as botnet node participating in coordinated attack campaigns (high confidence).
|
Port Scan Hacking Brute-Force Web App Attack SSH | |
| 🇺🇸 MPL |
tcp ports: 22,23 (6 or more attempts)
|
Port Scan | |
| 🇺🇸 copyyy |
sshd[191984]: Connection attempt from 138.94.89.27 port 36682 ssh2; SSH honeypot on TCP/22.
|
Brute-Force SSH | |
| 🇹🇭 Sawasdee |
SSH break in attempt
...
|
SSH | |
| Anonymous |
Port scan and brute force attack
|
Port Scan Brute-Force | |
| 🇨🇿 Countryman |
repeated unauthorized connection attempts, host sweep, port 22
|
Hacking Brute-Force | |
| Anonymous |
PORT & IP Scan.
|
Port Scan Brute-Force | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:43002 dst:23
|
Port Scan | |
| 🇺🇸 RAP |
2026-10-04 04:56:02 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| Anonymous |
Unauthorized connection to SSH port 22
|
Port Scan SSH | |
| 🇵🇱 mkey |
Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_MULTIPORT | PORTS=22,23 | HITS=2 | IPSET=ADD | FIRST=2026-10-02 22:31:58 | LAST=2026-10-02 22:31:58. Last seen 2026-10-02 22:31:58.
|
Port Scan | |
| 🇺🇸 ne1for23 |
Unauthorized access to SSH at 2/Oct/2026:18:03:01 +0000.
|
Port Scan SSH | |
| Anonymous |
denied traffic to a honeypot network. destination port 23.
|
Port Scan Hacking | |
| Anonymous |
scanning http requests from known botnet
|
Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown