5.189.136.65

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
52 reports
35 reporters ยท latest 9 hours ago
ISP
Contabo GmbH
Usage Type
Data Center/Web Hosting/Transit
ASN
AS51167
Hostname(s)
www.unityplan.one
Domain Name
contabo.com
Country
๐Ÿ‡ซ๐Ÿ‡ท France
City
Lauterbourg, Grand Est
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
52 from 35 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations ๐Ÿ‡ซ๐Ÿ‡ท France 10 ๐Ÿ‡บ๐Ÿ‡ธ United States of America 9 ๐Ÿ‡ซ๐Ÿ‡ฎ Finland 6
Most common categories Port Scan 41 Hacking 11 Brute-Force 3 Exploited Host 2 DDoS Attack 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡ซ๐Ÿ‡ฎ anycast_ac
Blocked by UFW on legacypanel [8983/tcp] | SPT: 57546 | TTL: 241 | LEN: 40 | TOS: 0x00 โ€ข Reported by: FemboyHolding LTD
Port Scan
๐Ÿ‡ซ๐Ÿ‡ท agroman93
T-Pot honeypot: 25 hits on ports [5672, 6066, 6379, 6380, 8088, 16379, 26379] (automated)
Port Scan
๐Ÿ‡ฉ๐Ÿ‡ช DasDuo
Attempt on port 6379 (Redis) - potential unauthorized database access attempt. Blocked by firewall (unsolicited inbound, no prior outbound connection).
Port Scan Hacking Exploited Host
๐Ÿ‡จ๐Ÿ‡ฆ Blinker73
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ Andreas76
Port scan: connection attempt to an unused trap port. Reported by bantower.
Port Scan
๐Ÿ‡ซ๐Ÿ‡ท cityhunter_rhone
Connection attempts on sensitive port(s) 6379 (1) of a private server (ports closed to the public, firewall log). Mercurius-Guide automated detection.
Port Scan Hacking
๐Ÿ‡ซ๐Ÿ‡ท wiredalter
Blocked by fail2ban on o2VPS [6380/tcp] Source Port: 49112 TTL: 239 Packet Length: 40 TOS: 0x00 Analyzed by https://ip.wiredalter.com
Brute-Force SSH
๐Ÿ‡ซ๐Ÿ‡ฎ iamxorum
Port Scan
๐Ÿ‡ณ๐Ÿ‡ฑ Tsumugi Kotobuki
Port Scan on Honeypot | Ports: 6379/Redis | Proto: TCP(1) | Flags: all SYN | TTL: 240 | Len: 40B | Win: 1024(1) | rDNS: www.unityplan.one | F2B/ufw-honeypot@2026-10-28T09:58:55Z
Port Scan Hacking
๐Ÿ‡บ๐Ÿ‡ธ xmission.com
Blocked by UFW (TCP on 5672) Source port: 57546 TTL: 242 Packet length: 40 TOS: 0x00 This report (for 5.189.136.65) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
Anonymous
Repeated suspicious activity detected by Fail2ban
Port Scan
๐Ÿ‡ฉ๐Ÿ‡ช sojan
UFW: Portscan on PROTO=TCP. Targeted ports: DPT=6380 DPT=26379 DPT=27017
Port Scan
๐Ÿ‡ฉ๐Ÿ‡ช iNetWorker
trying to access non-authorized port
Port Scan
๐Ÿ‡ฎ๐Ÿ‡ฉ helouism
Fail2Ban: Blocked by UFW for port scanning.
Port Scan DDoS Attack
๐Ÿ‡ณ๐Ÿ‡ต radheykrishna.com.np
Oct 28 15:04:11 kernel: [2084350.015262] [UFW BLOCK] IN=ens160 OUT= SRC=5.189.136.65 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=47373 PROTO=TCP SPT=49112 DPT=26379 WINDOW=1024 RES=0x00 SYN URGP=0 ...
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

๐Ÿ‡ณ๐Ÿ‡ฑ 217.100.184.50
๐Ÿ‡ฉ๐Ÿ‡ช 213.209.159.231
๐Ÿ‡ช๐Ÿ‡จ 181.188.237.213
๐Ÿ‡ง๐Ÿ‡ท 177.36.214.46
๐Ÿ‡ธ๐Ÿ‡ฌ 168.144.248.98
๐Ÿ‡บ๐Ÿ‡ธ 147.185.132.40
๐Ÿ‡จ๐Ÿ‡ณ 118.113.164.137
๐Ÿ‡ญ๐Ÿ‡ฐ 112.119.28.163
๐Ÿ‡จ๐Ÿ‡ณ 106.227.75.197
๐Ÿ‡ฎ๐Ÿ‡ณ 106.219.174.79
๐Ÿ‡ฎ๐Ÿ‡ฉ 103.187.165.26
๐Ÿ‡ป๐Ÿ‡ณ 103.78.1.160
๐Ÿ‡ณ๐Ÿ‡ฑ 77.239.124.79
๐Ÿ‡ท๐Ÿ‡บ 62.217.186.22
๐Ÿ‡บ๐Ÿ‡ธ 37.140.223.164
๐Ÿ‡ซ๐Ÿ‡ฎ 13.140.93.158
๐Ÿ‡บ๐Ÿ‡ธ 203.168.157.24
๐Ÿ‡ง๐Ÿ‡ฏ 154.72.113.56
๐Ÿ‡บ๐Ÿ‡ธ 129.121.138.193
๐Ÿ‡บ๐Ÿ‡ธ 97.74.236.4