159.89.27.136

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
20 reports
16 reporters · latest 2 years ago
ISP
DigitalOcean, LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14061
Hostname(s)
kiss2-prod-fra1-cassandra-9.getkisskiss.com
Domain Name
digitalocean.com
Country
🇩🇪 Germany
City
Frankfurt am Main, Hesse
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

159.89.27.136 has been reported 20 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
20 from 16 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇳🇱 Linuxmalwarehuntingnl
Unauthorized connection attempt
Brute-Force
🇨🇦 Largnet SOC
159.89.27.136 triggered Icarus honeypot on port 139. Check us out on github.
Port Scan Hacking
Anonymous
Brute-Force
🇸🇪 webbfabriken
spam or other hacking activities reported by webbfabriken security servers Attack reported by Webbfabiken Security API - WFSecAPI
Web Spam
🇩🇪 eskilbrun
Brute-Force SSH
🇩🇪 NxtGenIT
159.89.27.136 has been observed attacking Port 3389. Observed Threat: Nmap Aggressive Option Print Detection
Hacking
🇺🇸 drewf.ink
[14:31] Port scanning. Port(s) scanned: TCP/636
Port Scan
🇵🇱 nfsec.pl
Exploited Host Web App Attack
🇺🇸 drewf.ink
[12:23] Port scanning. Port(s) scanned: TCP/636
Port Scan
🇺🇸 LockBlock
2024-06-20 08:36:13: Port scan detected from 159.89.27.136 on port 143 of racknerd-e7e1a9
Port Scan
🇺🇸 gu-alvareza
Nmap.Script.Scanner
Port Scan
🇳🇱 mha.fi
Unauthorized connection attempt detected from IP address 159.89.27.136 to port 1433 (DNS-NL) [q]
Brute-Force Exploited Host
🇺🇸 drewf.ink
[02:12] Port scanning. Port(s) scanned: TCP/514
Port Scan
🇦🇪 abusiveIntelligence
RDP connect attempt: Nmap Scanner
Brute-Force
🇺🇸 Hobby Bob
Jun 19 19:45:53 server dovecot: imap-login: Disconnected (no auth attempts in 6 secs): user=, rip=159.89.27.136, lip=X.X.X.X session=
Port Scan Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇦 201.79.49.69
🇺🇸 20.25.87.141
🇺🇿 213.230.87.197
🇵🇭 210.1.66.154
🇺🇸 178.128.179.23
🇩🇪 172.69.150.54
🇻🇳 171.231.180.38
🇺🇸 162.243.175.250
🇬🇧 89.37.172.148
🇳🇱 85.155.15.23
🇵🇾 38.52.133.62
🇧🇪 34.62.31.226
🇮🇳 14.1.119.12
🇺🇸 205.210.31.104
🇦🇷 191.52.209.36
🇺🇸 172.212.203.117
feedback