JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 98.159.36.134

98.159.36.134 was found in our database!

This IP was reported 74 times. Confidence of Abuse is 60%: ?

60%

ISP	LogicWeb Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	logicweb.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 98.159.36.134

Whois 98.159.36.134

IP Abuse Reports for 98.159.36.134:

This IP address has been reported a total of 74 times from 38 distinct sources. 98.159.36.134 was first reported on January 5th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ghostwarriors	2026-06-08 12:50:32 (1 week ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇩🇪 Tha_14	2026-06-08 12:45:37 (1 week ago)	Jun 8 14:45:34 hosting sshd[2963712]: Invalid user root from 98.159.36.134 port 58002 Jun 8 14:45 ... show more Jun 8 14:45:34 hosting sshd[2963712]: Invalid user root from 98.159.36.134 port 58002 Jun 8 14:45:34 hosting sshd[2963712]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.159.36.134 Jun 8 14:45:36 hosting sshd[2963712]: Failed password for invalid user root from 98.159.36.134 port 58002 ssh2 show less	SSH Brute-Force
🇫🇮 diego021	2026-06-08 12:44:32 (1 week ago)	2026-06-08T07:25:30.751131-05:00 debian-hel1 sshd[667607]: pam_unix(sshd:auth): authentication failu ... show more 2026-06-08T07:25:30.751131-05:00 debian-hel1 sshd[667607]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.159.36.134 2026-06-08T07:25:33.427288-05:00 debian-hel1 sshd[667607]: Failed password for invalid user root from 98.159.36.134 port 21918 ssh2 2026-06-08T07:44:31.869087-05:00 debian-hel1 sshd[667739]: Invalid user root from 98.159.36.134 port 49071 ... show less	Brute-Force SSH
🇩🇪 Viveronese	2026-06-08 12:39:13 (1 week ago)	SSH brute force attacks	Brute-Force SSH
🇫🇮 FlamingMojo	2026-06-08 12:37:30 (1 week ago)	Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "root " at 2026-06-08T12:37:30Z	Brute-Force SSH
🇩🇪 NetWatch	2026-06-08 12:36:31 (1 week ago)	The IP 98.159.36.134 tried multiple SSH_BRUTE_FORCE logins	Brute-Force
🇩🇪 tentwentyfour	2026-06-08 12:33:30 (1 week ago)	Blocked for probing SSH accounts	Brute-Force SSH
🇫🇮 Voluna	2026-06-08 12:30:48 (1 week ago)	2026-06-08T12:30:44.873394+00:00 MailServer-Slave sshd[859191]: pam_unix(sshd:auth): authentication ... show more 2026-06-08T12:30:44.873394+00:00 MailServer-Slave sshd[859191]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.159.36.134 2026-06-08T12:30:46.988527+00:00 MailServer-Slave sshd[859191]: Failed password for invalid user root from 98.159.36.134 port 18160 ssh2 ... show less	Brute-Force SSH
🇩🇪 Tha_14	2026-06-08 12:26:16 (1 week ago)	Jun 8 14:26:12 hosting sshd[2959986]: Invalid user root from 98.159.36.134 port 56297 Jun 8 14:26 ... show more Jun 8 14:26:12 hosting sshd[2959986]: Invalid user root from 98.159.36.134 port 56297 Jun 8 14:26:13 hosting sshd[2959986]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.159.36.134 Jun 8 14:26:14 hosting sshd[2959986]: Failed password for invalid user root from 98.159.36.134 port 56297 ssh2 show less	SSH Brute-Force
🇫🇮 Kotiacat_one	2026-06-08 12:25:16 (1 week ago)	2026-06-08T15:25:16.299989+03:00 Debian-1303-trixie-amd64-base sshd-session[100985]: Invalid user ro ... show more 2026-06-08T15:25:16.299989+03:00 Debian-1303-trixie-amd64-base sshd-session[100985]: Invalid user root from 98.159.36.134 port 24202 ... show less	Brute-Force SSH
🇺🇸 xmission.com	2026-05-29 07:49:19 (3 weeks ago)	Blocked by UFW (TCP on 1) Source port: 28490 TTL: 53 Packet length: 60 TOS: 0x00 This report (for 9 ... show more Blocked by UFW (TCP on 1) Source port: 28490 TTL: 53 Packet length: 60 TOS: 0x00 This report (for 98.159.36.134) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-28 03:11:19 (3 weeks ago)	Blocked by UFW (TCP on 1) Source port: 51410 TTL: 53 Packet length: 60 TOS: 0x00 This report (for 9 ... show more Blocked by UFW (TCP on 1) Source port: 51410 TTL: 53 Packet length: 60 TOS: 0x00 This report (for 98.159.36.134) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-26 13:03:59 (3 weeks ago)	Blocked by UFW (TCP on 1) Source port: 52486 TTL: 53 Packet length: 60 TOS: 0x00 This report (for 9 ... show more Blocked by UFW (TCP on 1) Source port: 52486 TTL: 53 Packet length: 60 TOS: 0x00 This report (for 98.159.36.134) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇿 vitex	2026-05-26 04:00:00 (3 weeks ago)	Automated distributed scraping of Forgejo git server (git.vitexsoftware.com). Bots systematically cr ... show more Automated distributed scraping of Forgejo git server (git.vitexsoftware.com). Bots systematically crawled git blame endpoints (/*/blame/commit/<hash>/file) across all commits of public repositories, causing server load of 17+ (normal: <2). Over 71,000 unique IPs involved. Attack window: 2026-05-26 03:30-06:37 UTC. Primary target: PureHTML/purezencart (9933 commits, 5065 files). Each blame request triggers expensive git operations; 30,000+ slow requests per hour. show less	DDoS Attack Bad Web Bot
🇺🇸 xmission.com	2026-05-25 17:01:19 (3 weeks ago)	Blocked by UFW (TCP on 1) Source port: 47705 TTL: 53 Packet length: 60 TOS: 0x00 This report (for 9 ... show more Blocked by UFW (TCP on 1) Source port: 47705 TTL: 53 Packet length: 60 TOS: 0x00 This report (for 98.159.36.134) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 74 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇴 151.242.191.232

🇺🇸 100.54.245.139

🇺🇸 91.230.168.147

🇱🇹 91.224.92.17

🇧🇾 46.216.199.36

🇩🇪 5.253.246.158

🇹🇼 198.235.24.73

🇵🇱 195.116.145.127

🇸🇪 81.227.175.61

🇺🇸 44.198.218.110

🇺🇸 44.86.145.193

🇳🇱 213.177.179.12

🇳🇱 176.65.139.105

🇨🇦 85.217.149.41

🇯🇵 64.176.53.246

🇱🇹 45.227.254.170

🇺🇸 44.170.4.104

🇺🇸 172.178.16.179

🇧🇷 152.67.46.203

🇺🇸 128.203.200.182