This IP address has been reported a total of
72
times from
30 distinct
sources.
159.89.98.12 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 32
reports;
Germany
with 15
reports;
Netherlands
with 8
reports.
The most common categories in these recent reports were:
Web App Attack
67
times;
Bad Web Bot
45
times;
Brute-Force
37
times;
Hacking
14
times;
Port Scan
4
times;
Other
3
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Blocked by https://aegis.hr — Web Scanner - (MITRE T1595.001), 16 attempts, Period: 2026-10-05 07:22 ...
show moreBlocked by https://aegis.hr — Web Scanner - (MITRE T1595.001), 16 attempts, Period: 2026-10-05 07:22:04 to 2026-10-05 07:22:05
show less
[SunOct0423:48:49.7411322026][security2:error][pid1423702:tid1423814][client159.89.98.12:0]ModSecuri ...
show more[SunOct0423:48:49.7411322026][security2:error][pid1423702:tid1423814][client159.89.98.12:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"creazione-siti-web-ticino.ch\"][uri\"/.git/config\"][unique_id\"asLJwbj8Bkr8_FtY5Q7xSgAAAEU\"]
show less
[05/Oct/2026:00:16:34 +0300] -- 159.89.98.12 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git/ ...
show more[05/Oct/2026:00:16:34 +0300] -- 159.89.98.12 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git/config HTTP/1.1
show less
Automated honeypot detection. blocked ip against a Next.js application. Paths: /.git/config. Blocked ...
show moreAutomated honeypot detection. blocked ip against a Next.js application. Paths: /.git/config. Blocked at the edge.
show less
CrowdSec detected Web application reconnaissance. Scenario: local/framework-recon. Automatic ban tri ...
show moreCrowdSec detected Web application reconnaissance. Scenario: local/framework-recon. Automatic ban triggered. Detection time (UTC): 2026-10-04T06:16:26.597434124Z. Context: http_status=404
show less
[SunOct0401:16:32.6920082026][security2:error][pid156920:tid156975][client159.89.98.12:0]ModSecurity ...
show more[SunOct0401:16:32.6920082026][security2:error][pid156920:tid156975][client159.89.98.12:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"creazione-siti-web-ticino.ch\"][uri\"/.git/config\"][unique_id\"asGM0DR77pmoouF90fLqUgAAAE4\"]
show less
[03/Oct/2026:23:23:58 +0300] -- 159.89.98.12 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git/ ...
show more[03/Oct/2026:23:23:58 +0300] -- 159.89.98.12 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git/config HTTP/1.1
show less
