JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 98.159.43.29

98.159.43.29 was found in our database!

This IP was reported 110 times. Confidence of Abuse is 49%: ?

49%

ISP	F.N.S. HOLDINGS LIMITED
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	fns-holdings.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 98.159.43.29

Whois 98.159.43.29

IP Abuse Reports for 98.159.43.29:

This IP address has been reported a total of 110 times from 48 distinct sources. 98.159.43.29 was first reported on June 28th 2024, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 dynamix	2026-06-30 13:37:06 (3 days ago)	Multiple WAF Violations	Web App Attack
🇫🇷 Octopuce	2026-06-25 21:40:23 (1 week ago)	Aggressive web search of vulnerable pages: /wp-includes/fonts/autoload_classmap.php /css/slider.php ... show more Aggressive web search of vulnerable pages: /wp-includes/fonts/autoload_classmap.php /css/slider.php /dir.php /wp-includes/css/atomlib.php /wp-c ... show less	Web App Attack
🇬🇧 consul.to	2026-06-24 18:48:42 (1 week ago)	Web attack/malicious scanning detected	Web App Attack
🇬🇧 consul.to	2026-06-23 04:48:36 (1 week ago)	Web attack/malicious scanning detected	Web App Attack
🇳🇱 Site.eu	2026-06-22 14:46:49 (1 week ago)	Excessive 404/403 errors	Brute-Force
🇺🇸 TPI-Abuse	2026-06-21 23:11:22 (1 week ago)	(mod_security) mod_security (id:240000) triggered by 98.159.43.29 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240000) triggered by 98.159.43.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 19:11:14.326954 2026] [security2:error] [pid 6352:tid 6352] [client 98.159.43.29:23701] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|lordcain.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "lordcain.net"] [uri "/images/stories/themes.php"] [unique_id "ajhvkqAvylVCgKWT8S7r6wAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-06-21 15:19:01 (1 week ago)	Web attack/malicious scanning detected	Web App Attack
🇳🇱 Site.eu	2026-06-21 06:04:03 (1 week ago)	Excessive 404/403 errors	Brute-Force
🇫🇷 masterguru	2026-06-19 15:34:31 (2 weeks ago)	Too much 404 requests in 1 minute. Operator GE matched 10 at IP:block_script. (46020-195)	Hacking
🇺🇸 TPI-Abuse	2026-06-15 07:03:20 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 98.159.43.29 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 98.159.43.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 03:02:52.155351 2026] [security2:error] [pid 17263:tid 17263] [client 98.159.43.29:31233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.mympizzas.com.mx"] [uri "/wp-config.php.original"] [unique_id "ai-jnE03uThvRIVldW5Z1gAAAFM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-06 04:31:55 (3 weeks ago)	(mod_security) mod_security (id:210730) triggered by 98.159.43.29 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 98.159.43.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 00:31:42.508716 2026] [security2:error] [pid 28491:tid 28491] [client 98.159.43.29:33515] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|mail.animatuevento.com.mx\|F\|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.animatuevento.com.mx"] [uri "/_vti_bin/_vti_adm/admin.dll"] [unique_id "aiOirq4ufZpybDzcjMFtpQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-05 17:41:20 (4 weeks ago)	Ports: *; Direction: 0; Trigger: CT_LIMIT	Brute-Force SSH
Anonymous	2026-06-05 16:32:34 (4 weeks ago)	(mod_security) mod_security triggered on hostname [redacted] 98.159.43.29 (TH/Thailand/-)	SQL Injection
🇧🇷 chronos	2026-06-04 01:54:48 (4 weeks ago)	Generic malicious activity: Tentativa de varredura de porta TCP... \| Port: 59601 \| Proto: TCP \| Loca ... show more Generic malicious activity: Tentativa de varredura de porta TCP... \| Port: 59601 \| Proto: TCP \| Location: Thailand, N/A show less	Port Scan Hacking
🇪🇸 masterguru	2026-05-25 07:58:29 (1 month ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-122) show less	Bad Web Bot

Showing 1 to 15 of 110 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 201.17.133.138

🇵🇱 176.53.159.198

🇺🇸 157.245.131.149

🇯🇵 155.2.216.4

🇫🇮 147.185.133.194

🇨🇳 122.97.209.182

🇺🇸 68.206.250.86

🇨🇳 8.134.124.8

🇺🇸 3.143.162.210

🇺🇸 107.175.213.192

🇮🇶 65.20.141.202

🇳🇱 45.148.10.147

🇺🇸 45.3.50.5

🇲🇦 41.248.108.78

🇫🇷 31.37.232.113

🇦🇺 27.33.247.46

🇺🇸 3.138.151.158

🇷🇴 2.57.122.238

🇰🇷 112.160.57.196

🇻🇳 103.172.78.123