This IP address has been reported a total of
26
times from
21 distinct
sources.
159.89.163.44 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 5
reports;
France
with 4
reports;
United States of America
with 3
reports.
The most common categories in these recent reports were:
Web App Attack
18
times;
Hacking
7
times;
Port Scan
6
times;
Brute-Force
5
times;
Exploited Host
4
times;
Other
3
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-10-15T07:43:05.447338 socky.stom66.co.uk webmin[1614300]: Non-existent login as admin from 159. ...
show more2026-10-15T07:43:05.447338 socky.stom66.co.uk webmin[1614300]: Non-existent login as admin from 159.89.163.44
...
show less
Honeypot Finding: active TCP application payload captured by Honeytrap; 4 payload-bearing connection ...
show moreHoneypot Finding: active TCP application payload captured by Honeytrap; 4 payload-bearing connection/event(s), 956 payload byte(s) total, maximum payload 239 byte(s). Target port(s): 8999.
show less
Honeypot Finding: repeated TCP service probing on TCP/80 (HTTP); 2 application-level events across 2 ...
show moreHoneypot Finding: repeated TCP service probing on TCP/80 (HTTP); 2 application-level events across 2 source port(s). Sensor(s): Tanner.
show less
Request path: /owa/auth/x.js
User host address: 159.89.163.44
User:
Is authen ...
show more Request path: /owa/auth/x.js
User host address: 159.89.163.44
User:
Is authenticated: False
show less
Brute-Force
Exploited Host
Web App Attack
Port Scan
Automated Apache detection on Windows host. 5 suspicious HTTP requests within 300 seconds. Examples: ...
show moreAutomated Apache detection on Windows host. 5 suspicious HTTP requests within 300 seconds. Examples: GET /icons/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/etc/passwd -> 403 UA=""; GET /icons/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/etc/passwd -> 403 UA=""; GET /icons/.%%32%65/.%%32%65/.%%32%65/.%%32%65/.%%32%65/.%%32%65/.%%32%65/etc/passwd -> 403 UA=""; GET /icons/.%%32%65/.%%32%65/.%%32%65/.%%32%65/.%%32%65/.%%32%65/.%%32%65/etc/passwd -> 403 UA=""; POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh -> 403 UA=""
show less
