JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 198.13.159.15

198.13.159.15 was found in our database!

This IP was reported 50 times. Confidence of Abuse is 65%: ?

65%

ISP	BL Networks
Usage Type	Data Center/Web Hosting/Transit
ASN	AS399629
Domain Name	blnwx.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 198.13.159.15

Whois 198.13.159.15

IP Abuse Reports for 198.13.159.15:

This IP address has been reported a total of 50 times from 30 distinct sources. 198.13.159.15 was first reported on March 15th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 phil2k	2026-09-27 15:47:59 (2 days ago)	portscan on multiple TCP ports : Firewall: Within 2026-09-26 20:50:56 - 2026-09-26 23:06:14 CEST(+02 ... show more portscan on multiple TCP ports : Firewall: Within 2026-09-26 20:50:56 - 2026-09-26 23:06:14 CEST(+0200) identified: port scan from 198.13.159.15/32 on uncommon port/s: 9090(tcp:9090),8000(tcp:8000),8888(tcp:8888) (3 trials) Fail2ban: Within 2026-09-26 20:50:56 - 2026-09-26 23:06:14 CEST(+0200) banned: 5 times by fail2ban[firewall]; 5 times by fail2ban[recidive] show less	Port Scan
🇳🇱 Tsumugi Kotobuki	2026-09-27 03:21:56 (3 days ago)	Port Scan on Honeypot \| Ports: 80/HTTP \| Proto: TCP(1) \| Flags: all SYN \| TTL: 245 \| Len: 40B \| Win: ... show more Port Scan on Honeypot \| Ports: 80/HTTP \| Proto: TCP(1) \| Flags: all SYN \| TTL: 245 \| Len: 40B \| Win: 1024(1) \| F2B/ufw-honeypot@2026-09-27T03:21:56Z show less	Port Scan Hacking
🇫🇷 JPPO	2026-09-27 01:53:06 (3 days ago)	Multiport scan 5 ports : 2375 8000 8080 8090 8888	Port Scan
🇱🇹 NotACaptcha	2026-09-27 00:54:14 (3 days ago)	Unauthorised access (Sep 27 03:54) SRC=198.13.159.15 LEN=40 TTL=244 ID=50112 TCP DPT=8080 WINDOW=102 ... show more Unauthorised access (Sep 27 03:54) SRC=198.13.159.15 LEN=40 TTL=244 ID=50112 TCP DPT=8080 WINDOW=1024 SYN show less	Port Scan
🇳🇱 ByeByte API	2026-09-27 00:03:45 (3 days ago)	byebyte.space auth: TCP packet to port 9200 (Elasticsearch) at 2026-09-27T00:03:45Z. Source port 443 ... show more byebyte.space auth: TCP packet to port 9200 (Elasticsearch) at 2026-09-27T00:03:45Z. Source port 44371. TCP flags: SYN. Packet: 40B, TTL 243, window 1024, IP id 30212. Single packet, dropped at firewall. p0f: 12 hops. show less	Port Scan
🇳🇱 ByeByte API	2026-09-27 00:03:45 (3 days ago)	Port scan from this IP. Firewall dropped every packet. Targeted TCP ports: 9200. Single burst at 202 ... show more Port scan from this IP. Firewall dropped every packet. Targeted TCP ports: 9200. Single burst at 2026-09-27 00:03 UTC. show less	Port Scan
🇳🇱 Tsumugi Kotobuki	2026-09-26 23:51:38 (3 days ago)	Port Scan on Honeypot \| Ports: 80/HTTP \| Proto: TCP(1) \| Flags: all SYN \| TTL: 246 \| Len: 44B \| Win: ... show more Port Scan on Honeypot \| Ports: 80/HTTP \| Proto: TCP(1) \| Flags: all SYN \| TTL: 246 \| Len: 44B \| Win: 1024(1) \| F2B/ufw-honeypot@2026-09-26T23:51:38Z show less	Port Scan Hacking
🇳🇱 VMHeaven.io	2026-09-26 23:17:36 (3 days ago)	Blocked by UFW [8443/tcp] Source port: 44371 TTL: 244 Packet length: 40	Port Scan
🇩🇪 phil2k	2026-09-26 21:06:16 (3 days ago)	fail2ban:firewall:2026-09-26T23:03:04.758320+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> ... show more fail2ban:firewall:2026-09-26T23:03:04.758320+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=198.13.159.15 DST=<ANONYMIZED_IP> LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=57840 PROTO=TCP SPT=47586 DPT=8000 WINDOW=1024 RES=0x00 SYN URGP=0 2026-09-26T23:06:14.309826+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=198.13.159.15 DST=<ANONYMIZED_IP> LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=42065 PROTO=TCP SPT=47586 DPT=8888 WINDOW=1024 RES=0x00 SYN URGP=0 show less	DDoS Attack Port Scan
🇦🇺 MAGIC	2026-09-14 00:03:25 (2 weeks ago)	VM5 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇩🇪 HandyTreff.de	2026-09-12 23:10:37 (2 weeks ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -37.043 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -37.043 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17. show less	Web App Attack Bad Web Bot
🇩🇪 jasperedv.de	2026-09-12 09:48:32 (2 weeks ago)	Apache Login - Brutforcing	Web App Attack Brute-Force
🇬🇧 Interceptor_HQ	2026-09-09 17:02:00 (2 weeks ago)	request_uri: / -- automatic report --	Brute-Force Hacking
🇩🇰 RhQM	2026-09-09 07:08:32 (3 weeks ago)		Bad Web Bot Exploited Host Web App Attack
🇺🇸 LotPhantom	2026-09-04 15:03:48 (3 weeks ago)	2026/09/04 15:03:47 [error] 1453720#1453720: 39615 connect() failed (111: Connection refused) while ... show more 2026/09/04 15:03:47 [error] 1453720#1453720: 39615 connect() failed (111: Connection refused) while connecting to upstream, client: 198.13.159.15, server: wynnesmiles.bridginggaps.tech, request: "GET / HTTP/1.1", upstream: "http://127.0.0.1:4000/", host: "wynnesmiles.bridginggaps.tech" ... show less	Web App Attack

Showing 1 to 15 of 50 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇰 2400:adc1:441:c800:ec5d:21fc:7393:255f

🇦🇷 186.122.10.212

🇳🇬 152.32.140.20

🇳🇱 109.160.32.43

🇱🇧 94.187.15.149

🇳🇱 77.239.124.72

🇳🇱 51.159.91.169

🇷🇴 193.46.255.86

🇺🇸 172.236.112.138

🇸🇬 145.223.147.118

🇺🇸 129.121.140.118

🇵🇰 110.39.156.171

🇭🇰 103.229.125.106

🇳🇱 94.154.43.15

🇵🇱 45.138.12.27

🇦🇺 20.213.164.196

🇺🇸 4.148.17.157

🇭🇰 220.246.66.209

🇨🇳 218.21.241.50

🇳🇱 204.76.203.43