89.39.107.137 Threat Intelligence and Host Information

Sep 05, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 89.39.107.137 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Potentially Malicious Host 🟡 48/100

Host and Network Information

Tags: cisco, cowrie, dionaea, email, heralding, honeytrap, LAMP, mailoney, malicious, sentrypeer, sftp, sip, ssh, tanner
View other sources: Spamhaus VirusTotal

Country: Netherlands
Network:
Noticed: 4 times
Protocols Attacked: Anonymous Proxy

Open Ports Detected

10050 11027 11101 11110 11112 11210 11211 11288 11300 11371 11434 11602 11688 12000 12001 12019 12056 12084 12101 12104 12105 12108 12117 12118 12119 12123 12126 12132 12134 12137 12140 12141 12155 12161 12169 12170 12174 12181 12185 12188 12191 12193 12201 12204 12214 12219 12220 12225 12233 12239 12240 12249 12257 12258 12260 12268 12280 12281 12283 12293 12295 12296 12302 12305 12308 12314 12330 12339 12340 12343 12344 12345 12346 12347 12349 12352 12357 12358 12364 12365 12366 12371 12374 12389 12392 12393 12394 12401 12403 12415 12416 12423 12427 12429 12430 12431 12433 12435 12442 12443 12445 12446 12460 12463 12466 12473 12487 12490 12491 12496 12503 12504 12505 12506 12511 12514 12515 12520 12521 12529 12530 12532 12535 12541 12543 12547 12560 12564 12568 12579 12580 12615 12980 13000 13082 13579 14024 14130 14147 14265 14330 14344 14400 14401 14402 14406 14443 14523 14524 14873 14894 14895 14896 14905 15000 15042 15443 15504 161 22 4150 80 91

CVEs Detected

CVE-2007-2768 CVE-2008-3844 CVE-2016-20012 CVE-2018-16845 CVE-2019-16905 CVE-2019-20372 CVE-2019-9511 CVE-2019-9513 CVE-2019-9516 CVE-2020-14145 CVE-2020-15778 CVE-2021-23017 CVE-2021-3618 CVE-2021-36368 CVE-2021-41617 CVE-2023-38408 CVE-2023-44487 CVE-2023-48795 CVE-2023-51385 CVE-2023-51767 CVE-2025-26465 CVE-2025-32728

Map

Whois Information

inetnum: 89.39.107.0 - 89.39.107.255
netname: WORLDSTREAM
country: NL
admin-c: WS1670-RIPE
tech-c: WS1670-RIPE
status: ASSIGNED PA
mnt-by: MNT-WORLDSTREAM
mnt-domains: MNT-WORLDSTREAM
mnt-routes: MNT-WORLDSTREAM
created: 2018-12-18T10:26:32Z
last-modified: 2018-12-18T10:26:32Z
role: WORLDSTREAM DBM
address: Industriestraat 24
address: 2671CT NAALDWIJK
address: The Netherlands
phone: +31174712117
abuse-mailbox: abuse@worldstream.nl
admin-c: DV1495-RIPE
tech-c: DV1495-RIPE
nic-hdl: WS1670-RIPE
mnt-by: MNT-WORLDSTREAM
created: 2008-05-15T09:52:38Z
last-modified: 2013-08-20T11:17:59Z
route: 89.39.107.0/24
origin: AS49981
mnt-by: MNT-WORLDSTREAM
created: 2022-11-18T15:18:11Z
last-modified: 2022-11-18T15:18:11Z

Links to attack logs

Share on: