JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 98.159.37.185

98.159.37.185 was found in our database!

This IP was reported 319 times. Confidence of Abuse is 29%: ?

29%

ISP	LogicWeb Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS62240
Domain Name	logicweb.com
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 98.159.37.185

Whois 98.159.37.185

IP Abuse Reports for 98.159.37.185:

This IP address has been reported a total of 319 times from 141 distinct sources. 98.159.37.185 was first reported on March 17th 2023, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 Origon	2026-08-16 11:42:57 (4 days ago)	http-probing - IP: 98.159.37.185 - time="2026-08-16T13:42:57+02:00" level=info msg="(555f66b4f6a745 ... show more http-probing - IP: 98.159.37.185 - time="2026-08-16T13:42:57+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 98.159.37.185 (US/62240) : 4h ban on Ip 98.159.37.185" module=db show less	Web App Attack
🇺🇸 xmission.com	2026-08-05 04:40:53 (2 weeks ago)	Blocked by UFW (TCP on 60973) Source port: 6065 TTL: 50 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 60973) Source port: 6065 TTL: 50 Packet length: 60 TOS: 0x08 This report (for 98.159.37.185) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-06-30 15:56:31 (1 month ago)	[ns3.backorder.gr] httpd-login-spray-site: sites=debug-gosolar.gr; logs=/var/log/httpd/domains/debug ... show more [ns3.backorder.gr] httpd-login-spray-site: sites=debug-gosolar.gr; logs=/var/log/httpd/domains/debug-gosolar.gr.log; samples=site_wide=true \| distinct_ips=9 \| /wp-login.php show less	Hacking Web App Attack
Anonymous	2026-06-30 06:18:46 (1 month ago)	path attack /wp-login.php	Web App Attack
🇧🇷 Francisco Carlos	2026-06-30 05:52:24 (1 month ago)	Honeypot captured 1 automated attack/scan requests (JR Save Tech). Types: credential, shell-upload, ... show more Honeypot captured 1 automated attack/scan requests (JR Save Tech). Types: credential, shell-upload, wordpress. Sample: GET /wp-login.php show less	Hacking Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-26 22:37:55 (1 month ago)	(mod_security) mod_security (id:234930) triggered by 98.159.37.185 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:234930) triggered by 98.159.37.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 18:37:47.736966 2026] [security2:error] [pid 18408:tid 18408] [client 98.159.37.185:26509] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\/lib\\\\/php\\\\/connector\\\\.minimal\\\\.php$" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/27_Apps_WPPlugin.conf"] [line "6778"] [id "234930"] [rev "2"] [msg "COMODO WAF: File upload vulnerability in the file manager plugin before 6.9 for WordPress (CVE-2020-25213)\|\|www.321q.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "www.321q.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "aj7_O8lXqsaPl8i3g6X1gAAAAAw"], referer: http://321q.com/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Ba-Yu	2026-06-26 16:48:30 (1 month ago)	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇩🇪 FeG Deutschland	2026-06-26 14:41:44 (1 month ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 127	Exploited Host Web App Attack
🇫🇷 Octopuce	2026-06-26 09:17:30 (1 month ago)	Aggressive web search of vulnerable pages: /wp-includes/assets/k.php /wp-content/themes/twentytwenty ... show more Aggressive web search of vulnerable pages: /wp-includes/assets/k.php /wp-content/themes/twentytwentyfour/patterns/file.php /a.php /admin/functi ... show less	Web App Attack
🇷🇺 sms.ru	2026-06-08 06:57:25 (2 months ago)	/wp-admin/maint/index.php	Web App Attack
🇬🇧 consul.to	2026-06-07 19:21:54 (2 months ago)	Web attack/malicious scanning detected	Web App Attack
🇵🇱 strefapi_com	2026-06-06 13:29:38 (2 months ago)	Brute-force, web ...	Hacking Brute-Force Web App Attack
🇩🇪 LRob	2026-06-05 13:15:06 (2 months ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot
Anonymous	2026-06-05 01:57:47 (2 months ago)	[server.tmg.gr] httpd-suspicious-path: sites=eumedline.com,eumedline.eu; logs=/var/log/httpd/domains ... show more [server.tmg.gr] httpd-suspicious-path: sites=eumedline.com,eumedline.eu; logs=/var/log/httpd/domains/eumedline.com.log,/var/log/httpd/domains/eumedline.eu.log; samples=/wp-content/chosen.php \| /wp-admin/css/admin.php \| /wp-content/zsdhb.php show less	Hacking Web App Attack
🇨🇭 backslash	2026-06-04 22:42:03 (2 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot

Showing 1 to 15 of 319 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.122

🇺🇸 212.87.218.98

🇧🇷 205.210.31.221

🇭🇰 118.193.33.216

🇫🇷 104.23.225.135

🇫🇷 85.217.140.47

🇺🇸 82.26.208.74

🇸🇬 47.79.200.147

🇯🇵 43.130.249.176

🇺🇸 2800:1e0:2000:104:9999::245

🇨🇳 182.43.76.81

🇨🇳 116.27.148.208

🇺🇸 104.152.52.107

🇫🇷 104.23.225.134

🇫🇷 85.217.140.10

🇺🇸 82.26.208.73

🇹🇼 60.199.224.55

🇺🇸 52.44.229.124

🇺🇸 45.194.67.30

🇺🇸 34.44.221.77