AbuseIPDB » 129.159.15.98

129.159.15.98 was found in our database!

This IP was reported 912 times. Confidence of Abuse is 100%: ?

100%

ISP	Oracle Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS31898
Domain Name	oracle.com
Country	Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 129.159.15.98

Whois 129.159.15.98

IP Abuse Reports for 129.159.15.98:

This IP address has been reported a total of 912 times from 448 distinct sources. 129.159.15.98 was first reported on June 17th 2025, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Porter	2025-07-15 11:32:40 (4 days ago)	Automated report: IP triggered Fail2Ban after multiple intrusion attempts (e.g. SSH brute-force or p ... show moreAutomated report: IP triggered Fail2Ban after multiple intrusion attempts (e.g. SSH brute-force or port scanning). Logged by iptables and correlated with TARPIT and PSAD on a hardened Linux server. Offense verified through pattern detection and repeated abuse behavior. show less	SSH
Porter	2025-07-02 20:01:50 (2 weeks ago)	Automated report: IP triggered Fail2Ban after multiple intrusion attempts (e.g. SSH brute-force or p ... show moreAutomated report: IP triggered Fail2Ban after multiple intrusion attempts (e.g. SSH brute-force or port scanning). Logged by iptables and correlated with TARPIT and PSAD on a hardened Linux server. Offense verified through pattern detection and repeated abuse behavior. show less	SSH
rtbh.com.tr	2025-06-25 20:07:21 (3 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
rtbh.com.tr	2025-06-24 20:07:20 (3 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
zwh	2025-06-24 17:53:13 (3 weeks ago)	SSH Brute-Force	Brute-Force SSH
ThreatBook.io	2025-06-24 00:14:05 (3 weeks ago)	ThreatBook Intelligence: Zombie,Brute Force more details on https://threatbook.io/ip/129.159.15.98<b ... show moreThreatBook Intelligence: Zombie,Brute Force more details on https://threatbook.io/ip/129.159.15.98 2025-06-23 12:02:35 ["/ip cloud print","ifconfig","uname -a","cat /proc/cpuinfo","ps | grep '[Mm]iner'","ps -ef | grep '[Mm]iner'","ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*","locate D877F783D5D3EF8Cs","echo Hi | cat -n"] 2025-06-23 02:35:13 ["/ip cloud print","ifconfig","uname -a","cat /proc/cpuinfo","ps | grep '[Mm]iner'","ps -ef | grep '[Mm]iner'","ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*","locate D877F783D5D3EF8Cs","echo Hi | cat -n"] show less	Brute-Force
urnilxfgbez	2025-06-23 22:45:00 (3 weeks ago)	Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)	Port Scan
rtbh.com.tr	2025-06-23 20:07:18 (3 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Lian	2025-06-23 17:30:02 (3 weeks ago)	Reported by Fail2Ban: 2025-06-23 07:23:05,693 fail2ban.filter [776]: INFO [sshd] Found 12 ... show moreReported by Fail2Ban: 2025-06-23 07:23:05,693 fail2ban.filter [776]: INFO [sshd] Found 129.159.15.98 - 2025-06-23 07:23:05 show less	Brute-Force SSH
rtbh.com.tr	2025-06-23 16:07:18 (3 weeks ago)	list.rtbh.com.tr report: tcp/22	Brute-Force
ps-center	2025-06-23 15:03:02 (3 weeks ago)	ABV-W: TCP-Scanner. Port: 22	Port Scan
Pingger Shikkoken	2025-06-23 14:49:10 (3 weeks ago)	2025-06-23T14:49:10+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6 ... show more2025-06-23T14:49:10+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=129.159.15.98 DST=152.53.50.28 LEN=44 TOS=0x00 PREC=0x00 TTL=30 ID=28453 PROTO=TCP SPT=35231 DPT=22 WINDOW=1024 RES=0x00 SYN URGP=0 show less	Hacking Brute-Force SSH
tutosfaciles48	2025-06-23 14:37:36 (3 weeks ago)	2025-06-23T14:37:34.683834+00:00 frhb72991flex sshd[439623]: error: maximum authentication attempts ... show more2025-06-23T14:37:34.683834+00:00 frhb72991flex sshd[439623]: error: maximum authentication attempts exceeded for root from 129.159.15.98 port 55090 ssh2 [preauth] 2025-06-23T14:37:35.240550+00:00 frhb72991flex sshd[439625]: error: maximum authentication attempts exceeded for root from 129.159.15.98 port 55092 ssh2 [preauth] ... show less	Brute-Force SSH
formality	2025-06-23 14:30:38 (3 weeks ago)	Invalid user admin from 129.159.15.98 port 41684	Brute-Force SSH
CGT Software Webmaster	2025-06-23 14:28:27 (3 weeks ago)	2025-06-23T14:28:19.142375+00:00 debian-s-2vcpu-2gb-sfo3-01 sshd[3785140]: Failed password for root ... show more2025-06-23T14:28:19.142375+00:00 debian-s-2vcpu-2gb-sfo3-01 sshd[3785140]: Failed password for root from 129.159.15.98 port 39788 ssh2 2025-06-23T14:28:21.676866+00:00 debian-s-2vcpu-2gb-sfo3-01 sshd[3785140]: Failed password for root from 129.159.15.98 port 39788 ssh2 2025-06-23T14:28:26.139832+00:00 debian-s-2vcpu-2gb-sfo3-01 sshd[3785140]: Failed password for root from 129.159.15.98 port 39788 ssh2 ... show less	Port Scan Brute-Force

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩