This IP address has been reported a total of
38
times from
34 distinct
sources.
159.89.13.98 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 8
reports;
France
with 7
reports;
United States of America
with 3
reports.
The most common categories in these recent reports were:
Port Scan
14
times;
Web App Attack
8
times;
Brute-Force
8
times;
Hacking
6
times;
Email Spam
4
times;
Other
8
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Client sent invalid (non-HTTP) message to honeypot web server:
159.89.13.98 - - [19/Oct/2026:17:08:4 ...
show moreClient sent invalid (non-HTTP) message to honeypot web server:
159.89.13.98 - - [19/Oct/2026:17:08:40 -0500] "GET /solr/admin/info/system HTTP/1.1" 400 264 "-" "Go-http-client/1.1" "-" ""
show less
Request Missing a Host Header. Operator EQ matched 0 at REQUEST_HEADERS. (920280-mnz6-1)
Hacking
Anonymous
2026-10-19T20:09:12.867151+02:00 host postfix/smtpd[879687]: lost connection after STARTTLS from unk ...
show more2026-10-19T20:09:12.867151+02:00 host postfix/smtpd[879687]: lost connection after STARTTLS from unknown[159.89.13.98]
2026-10-19T20:09:14.476818+02:00 host postfix/smtpd[879684]: improper command pipelining after CONNECT from unknown[159.89.13.98]: \026\003\003\001\250\001\000\001\244\003\003\033\034\261\275\303\247\337l+\322\260\310f}\035T<\326s\003\334o:\332\331\200w3\212T\227M \017\216\370\205T\231Mc\251\306\245f\b\036\201\304^\351\241\351\353\204\307&\202\313,mQ\207\3370\000\212\000\026\0003\000g\300\236\300\242\000\236\0009\000k\300\237\300\243\000\237
2026-10-19T20:09:14.482343+02:00 host postfix/smtpd[879687]: improper command pipelining after CONNECT from unknown[159.89.13.98]: \026\003\003\001\250\001\000\001\244\003\003\376q\037[\277\226\377\3278\307\311\234\027\243\251m\004\347)\241t\267\001\036\364\300\222\320JE\277; \306\256[!t\342[\200d\331B\365\255Fk\341\330\205\245\204\266\005*\301\206\303\227\n\350\251\037\254\000\212\000\005\000\004\000\a\000\300\000\204\000\272\000A
...
show less
Honeypot Finding: repeated TCP service probing on TCP/8086 (service); 2 application-level events acr ...
show moreHoneypot Finding: repeated TCP service probing on TCP/8086 (service); 2 application-level events across 2 source port(s). Sensor(s): Honeytrap.
show less
Honeypot hit: Unauthorized traffic on 21/ftpd
Reported by: https://github.com/sefinek/T-Pot-To-Abuse ...
show moreHoneypot hit: Unauthorized traffic on 21/ftpd
Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less
Honeypot detection: port scan / service probe. 2 events observed. Reported automatically from a hone ...
show moreHoneypot detection: port scan / service probe. 2 events observed. Reported automatically from a honeypot sensor.
show less
2026-10-19T18:34:00.357828+02:00 REDACTED postfix/submissions/smtpd[1048566]: NOQUEUE: lost connecti ...
show more2026-10-19T18:34:00.357828+02:00 REDACTED postfix/submissions/smtpd[1048566]: NOQUEUE: lost connection after CONNECT from unknown[159.89.13.98]
...
show less
