JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 98.159.36.133

98.159.36.133 was found in our database!

This IP was reported 84 times. Confidence of Abuse is 50%: ?

50%

ISP	LogicWeb Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	logicweb.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 98.159.36.133

Whois 98.159.36.133

IP Abuse Reports for 98.159.36.133:

This IP address has been reported a total of 84 times from 44 distinct sources. 98.159.36.133 was first reported on December 13th 2023, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-06-22 23:31:19 (2 hours ago)	Blocked by UFW (TCP on 6835) Source port: 23449 TTL: 117 Packet length: 52 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 6835) Source port: 23449 TTL: 117 Packet length: 52 TOS: 0x00 This report (for 98.159.36.133) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-06-21 15:19:23 (1 day ago)	[redacted] 98.159.36.133 - - [21/Jun/2026:17:18:39 +0200] "POST /xmlrpc.php HTTP/1.1" 200 466 "-" "M ... show more [redacted] 98.159.36.133 - - [21/Jun/2026:17:18:39 +0200] "POST /xmlrpc.php HTTP/1.1" 200 466 "-" "Mozilla/5.0 (Linux; Android 10; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/15.0.0.0 Safari/537.36" [redacted] 98.159.36.133 - - [21/Jun/2026:17:18:46 +0200] "POST /xmlrpc.php HTTP/1.1" 200 466 "-" "Mozilla/5.0 (Windows NT 6.3; x64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/92.0.0.0 Safari/537.36" [redacted] 98.159.36.133 - - [21/Jun/2026:17:18:51 +0200] "POST /xmlrpc.php HTTP/1.1" 200 466 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; x86) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36" [redacted] 98.159.36.133 - - [21/Jun/2026:17:18:56 +0200] "POST /xmlrpc.php HTTP/1.1" 200 466 "-" "Mozilla/5.0 (Windows NT 10.0; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.0.0 Safari/537.36" [redacted] 98.159.36.133 - - [21/Jun/2026:17:19:02 +0200] "POST /xmlrpc.php HTTP/1.1" 200 466 "-" "Mozilla/5.0 (Linux; Androi ... show less	Hacking Web App Attack
Anonymous	2026-06-17 08:35:05 (5 days ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
🇫🇮 FlamingMojo	2026-06-08 13:05:26 (2 weeks ago)	Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "root " at 2026-06-08T13:05:26Z	Brute-Force SSH
🇩🇪 NetWatch	2026-06-08 13:04:41 (2 weeks ago)	The IP 98.159.36.133 tried multiple SSH_BRUTE_FORCE logins	Brute-Force
🇩🇪 tentwentyfour	2026-06-08 12:58:45 (2 weeks ago)	Blocked for probing SSH accounts	Brute-Force SSH
🇫🇮 Voluna	2026-06-08 12:51:54 (2 weeks ago)	2026-06-08T12:51:51.949907+00:00 MailServer-Slave sshd[859229]: pam_unix(sshd:auth): authentication ... show more 2026-06-08T12:51:51.949907+00:00 MailServer-Slave sshd[859229]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.159.36.133 2026-06-08T12:51:54.003601+00:00 MailServer-Slave sshd[859229]: Failed password for invalid user root from 98.159.36.133 port 22744 ssh2 ... show less	Brute-Force SSH
🇸🇮 administrator	2026-06-02 22:18:33 (2 weeks ago)	2026-06-02 00:11:23,663 fail2ban.actions [1162]: NOTICE [ninjafirewall] Ban 98.159.36.133 20 ... show more 2026-06-02 00:11:23,663 fail2ban.actions [1162]: NOTICE [ninjafirewall] Ban 98.159.36.133 2026-06-02 00:11:23,663 fail2ban.actions [1162]: NOTICE [ninjafirewall] Ban 98.159.36.133 ... show less	Bad Web Bot Web Spam Email Spam Blog Spam Port Scan Brute-Force Web App Attack
Anonymous	2026-05-28 08:00:06 (3 weeks ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
🇨🇿 vitex	2026-05-26 04:00:00 (3 weeks ago)	Automated distributed scraping of Forgejo git server (git.vitexsoftware.com). Bots systematically cr ... show more Automated distributed scraping of Forgejo git server (git.vitexsoftware.com). Bots systematically crawled git blame endpoints (/*/blame/commit/<hash>/file) across all commits of public repositories, causing server load of 17+ (normal: <2). Over 71,000 unique IPs involved. Attack window: 2026-05-26 03:30-06:37 UTC. Primary target: PureHTML/purezencart (9933 commits, 5065 files). Each blame request triggers expensive git operations; 30,000+ slow requests per hour. show less	DDoS Attack Bad Web Bot
Anonymous	2026-05-21 13:05:05 (1 month ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
🇬🇧 consul.to	2026-05-07 18:27:00 (1 month ago)	Web attack/malicious scanning detected	Web App Attack
🇧🇪 cmbplf	2026-05-06 02:38:37 (1 month ago)	6 requests with user_agent.original Mozilla/5.0 (iPhone; CPU iPhone OS 15_6_1 like Mac OS X) AppleW ... show more 6 requests with user_agent.original Mozilla/5.0 (iPhone; CPU iPhone OS 15_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/19G82 Instagram 306.0.0.20.118 (iPhone12,1; iOS 15_6_1; en_GB; en; scale=2.00; 828x1792; 529083166) NW/3 show less	Brute-Force Bad Web Bot
🇸🇮 administrator	2026-05-04 17:11:01 (1 month ago)	2026-04-23 05:07:20,491 fail2ban.actions [1180]: NOTICE [ninjafirewall] Ban 98.159.36.133 20 ... show more 2026-04-23 05:07:20,491 fail2ban.actions [1180]: NOTICE [ninjafirewall] Ban 98.159.36.133 2026-04-23 05:07:20,491 fail2ban.actions [1180]: NOTICE [ninjafirewall] Ban 98.159.36.133 2026-04-23 05:07:20,491 fail2ban.actions [1180]: NOTICE [ninjafirewall] Ban 98.159.36.133 ... show less	Bad Web Bot Web Spam Email Spam Blog Spam Port Scan Brute-Force Web App Attack
🇬🇧 consul.to	2026-04-29 03:16:52 (1 month ago)	Web attack/malicious scanning detected	Web App Attack

Showing 1 to 15 of 84 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 192.109.200.78

🇲🇳 192.82.88.93

🇩🇪 164.90.236.107

🇭🇰 156.245.232.27

🇺🇸 44.203.153.47

🇸🇦 5.163.67.102

🇮🇷 2.180.32.104

🇺🇸 2a04:c300:400::18a

🇰🇷 220.80.223.144

🇭🇰 199.45.154.191

🇧🇷 191.123.95.60

🇧🇷 190.111.187.189

🇦🇷 186.122.177.140

🇺🇸 147.185.132.249

🇳🇱 104.28.165.252

🇩🇪 93.240.38.192

🇵🇱 87.251.64.157

🇨🇦 85.217.149.49

🇮🇪 54.229.164.247

🇧🇷 205.210.31.186