This IP address has been reported a total of
58
times from
57 distinct
sources.
159.89.139.177 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 15
reports;
Germany
with 12
reports;
France
with 5
reports.
The most common categories in these recent reports were:
SSH
44
times;
Brute-Force
41
times;
Port Scan
17
times;
Hacking
7
times;
Bad Web Bot
1
time;
Other
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Knock-Knock honeypot brute-force: SSH (1 total hits)
Brute-Force
SSH
Anonymous
Oct 18 02:42:59 sd-55437 sshd[2419767]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ...
show moreOct 18 02:42:59 sd-55437 sshd[2419767]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.139.177 user=root
Oct 18 02:43:01 sd-55437 sshd[2419767]: Failed password for invalid user root from 159.89.139.177 port 59372 ssh2
Oct 18 02:43:02 sd-55437 sshd[2419767]: Connection closed by invalid user root 159.89.139.177 port 59372 [preauth]
...
show less
Automated sensor: 4 SSH brute-force attempts over the last 24h (latest 2026-10-18T00:42Z). Usernames ...
show moreAutomated sensor: 4 SSH brute-force attempts over the last 24h (latest 2026-10-18T00:42Z). Usernames tried: root.
show less
propolis: 159.89.139.177 - 11 event(s) across 1 category since 2026-10-18T00:38:58.707666+00:00, cur ...
show morepropolis: 159.89.139.177 - 11 event(s) across 1 category since 2026-10-18T00:38:58.707666+00:00, current score 41.6
show less
Oct 18 00:41:59 Ubuntu-2204-jammy-amd64-base sshd[3249141]: User root from 159.89.139.177 not allowe ...
show moreOct 18 00:41:59 Ubuntu-2204-jammy-amd64-base sshd[3249141]: User root from 159.89.139.177 not allowed because not listed in AllowUsers
...
show less
