JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 98.159.43.37

98.159.43.37 was found in our database!

This IP was reported 130 times. Confidence of Abuse is 45%: ?

45%

ISP	F.N.S. HOLDINGS LIMITED
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	fns-holdings.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 98.159.43.37

Whois 98.159.43.37

IP Abuse Reports for 98.159.43.37:

This IP address has been reported a total of 130 times from 59 distinct sources. 98.159.43.37 was first reported on March 26th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 dynamix	2026-07-09 07:51:10 (1 day ago)	Multiple WAF Violations	Web App Attack
🇬🇧 consul.to	2026-07-08 03:46:39 (2 days ago)	Web attack/malicious scanning detected	Web App Attack
🇬🇧 consul.to	2026-07-03 20:01:07 (6 days ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇷 Octopuce	2026-07-03 06:52:17 (1 week ago)	Aggressive web search of vulnerable pages: /bless.php /O-Simple.php /lock360.php /zwso.php /chosen.p ... show more Aggressive web search of vulnerable pages: /bless.php /O-Simple.php /lock360.php /zwso.php /chosen.php /about.php /admin.php /mah.php /.wp/wso. ... show less	Web App Attack
🇳🇿 Antinson	2026-07-01 17:36:12 (1 week ago)	Scraping with a high error ratio and request rate	Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-28 16:40:25 (1 week ago)	(mod_security) mod_security (id:240000) triggered by 98.159.43.37 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240000) triggered by 98.159.43.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 12:40:19.934458 2026] [security2:error] [pid 31015:tid 31015] [client 98.159.43.37:36079] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|nwarchitect.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "nwarchitect.com"] [uri "/images/stories/themes.php"] [unique_id "akFOcxZv62Vq477z8nmvdwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-06-24 07:45:20 (2 weeks ago)	Web attack/malicious scanning detected	Web App Attack
🇬🇧 consul.to	2026-06-23 07:20:17 (2 weeks ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 TPI-Abuse	2026-06-15 07:03:33 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 98.159.43.37 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 98.159.43.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 03:02:42.415503 2026] [security2:error] [pid 13936:tid 13936] [client 98.159.43.37:21865] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.mympizzas.com.mx"] [uri "/wp-config.php.bak"] [unique_id "ai-jkicrCgUCpEVSvjsP0wAAAEk"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 BlueWire Hosting	2026-06-06 14:01:00 (1 month ago)	Bad bot ignoring robot.txt	Bad Web Bot
🇩🇪 Lino Project	2026-06-06 13:28:27 (1 month ago)	98.159.43.37 - - [06/Jun/2026:15:28:24 +0200] "GET /admin/controller/extension/extension/daDTLv3YPn6 ... show more 98.159.43.37 - - [06/Jun/2026:15:28:24 +0200] "GET /admin/controller/extension/extension/daDTLv3YPn6.php HTTP/2.0" 301 108 "http://tobaco.it//admin/controller/extension/extension/daDTLv3YPn6.php" "Go-http-client/2.0" ... show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-06 04:32:45 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 98.159.43.37 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 98.159.43.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 00:32:35.667634 2026] [security2:error] [pid 30657:tid 30657] [client 98.159.43.37:34393] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|mail.animatuevento.com.mx\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.animatuevento.com.mx"] [uri "/spamlog.log"] [unique_id "aiOi45NyMMUTwQIRkqmAKQAAAF0"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-05 17:41:23 (1 month ago)	Ports: *; Direction: 0; Trigger: CT_LIMIT	Brute-Force SSH
Anonymous	2026-06-05 16:32:51 (1 month ago)	(mod_security) mod_security triggered on hostname [redacted] 98.159.43.37 (TH/Thailand/-)	SQL Injection
🇮🇹 LTM	2026-05-17 06:20:02 (1 month ago)	WebServer - Attempts to exploit	Hacking Brute-Force Web App Attack

Showing 1 to 15 of 130 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇱 176.53.159.198

🇦🇷 201.179.44.191

🇳🇱 195.178.110.227

🇺🇸 172.217.36.86

🇻🇳 165.154.187.159

🇺🇸 162.216.150.208

🇺🇸 138.197.204.198

🇨🇳 116.114.84.246

🇨🇳 106.75.214.209

🇧🇬 79.124.40.138

🇺🇸 74.7.228.11

🇮🇳 52.172.177.191

🇸🇦 34.166.34.218

🇻🇳 27.79.46.149

🇨🇱 195.86.38.56

🇮🇩 163.7.8.79

🇺🇸 5.252.52.124

🇷🇺 5.188.89.111

🇩🇪 213.209.159.11

🇹🇼 211.20.14.156