JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

98.159.43.69

Neutral Activity

Abuse Confidence Score

0% Low Risk

123 reports

62 reporters · latest 3 months ago

ISP: F.N.S. HOLDINGS LIMITED
Usage Type: Data Center/Web Hosting/Transit
ASN: AS206092
Domain Name: fns-holdings.com
Country: 🇸🇬 Singapore
City: Singapore

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

98.159.43.69 has been reported 123 times. The most recent report is from 3 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

123 from 62 distinct reporters

First reported

March 27th 2024

Most recent report

3 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 neron	2026-08-02 20:52:55 UTC · (3 months ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
🇹🇷 neron	2026-07-31 19:06:19 UTC · (3 months ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
🇹🇷 neron	2026-07-30 13:06:18 UTC · (3 months ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-29 19:35:12 UTC · (3 months ago)	(mod_security) mod_security (id:240000) triggered by 98.159.43.69 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 29 15:35:06.081692 2026] [security2:error] [pid 189512:tid 189512] [client 98.159.43.69:0] ModSe ... show more (mod_security) mod_security (id:240000) triggered by 98.159.43.69 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 29 15:35:06.081692 2026] [security2:error] [pid 189512:tid 189512] [client 98.159.43.69:0] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|uwsvita.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "uwsvita.org"] [uri "/images/stories/themes.php"] [unique_id "ampV6haqd2w_a-Lls0GrtQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇹🇷 neron	2026-07-29 02:19:38 UTC · (3 months ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
🇹🇷 neron	2026-07-27 08:19:38 UTC · (3 months ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
🇺🇸 IndigoRidge	2026-07-26 20:46:06 UTC · (3 months ago)	98.159.43.69 - - [26/Jul/2026:16:45:28 -0400] "GET /.wp/wso.php HTTP/1.1" 404 1256 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.69 - - [26/Jul/2026:16:45:42 - ... show more 98.159.43.69 - - [26/Jul/2026:16:45:28 -0400] "GET /.wp/wso.php HTTP/1.1" 404 1256 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.69 - - [26/Jul/2026:16:45:42 -0400] "GET /tinyfilemanager.php HTTP/1.1" 404 200 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 98.159.43.69 - - [26/Jul/2026:16:46:06 -0400] "GET /wp-includes/assets/info.php HTTP/1.1" 404 1256 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" ... show less	Web App Attack
Anonymous	2026-07-25 00:44:42 UTC · (3 months ago)	Attack detected: 98.159.43.69 [2026-07-25] Categories: 21 --- webshell/admin probe (4 hits) --- 98.159.43.69 - - [20/Jul/2026:09:45:21 +0000] "GET /wp-includes/certificates/wp-conflg.php HTTP/1.1" 404 72822 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x6 ... show more Attack detected: 98.159.43.69 [2026-07-25] Categories: 21 --- webshell/admin probe (4 hits) --- 98.159.43.69 - - [20/Jul/2026:09:45:21 +0000] "GET /wp-includes/certificates/wp-conflg.php HTTP/1.1" 404 72822 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 98.159.43.69 - - [20/Jul/2026:09:46:06 +0000] "GET /wp-content/uploads/system_cache.php HTTP/1.1" 404 72816 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 98.159.43.69 - - [20/Jul/2026:09:46:31 +0000] "GET /uploads/xsec.php HTTP/1.1" 404 72785 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.69 - - [20/Jul/2026:09:46:41 +0000] "GET /wp-content/uploads/fileman.php HTTP/1.1" 404 72806 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" show less	Web App Attack
🇹🇷 neron	2026-07-24 15:30:03 UTC · (3 months ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
🇫🇷 dynamix	2026-07-24 08:09:45 UTC · (3 months ago)	Multiple WAF Violations	Web App Attack
🇫🇷 Octopuce	2026-07-22 16:29:20 UTC · (3 months ago)	Aggressive web search of vulnerable pages: /wp-includes/pomo/admin.php /wp-includes/IXR/security.php /wp-content/plugins/phpadmin/as.php /wp-in ...	Web App Attack
Anonymous	2026-07-21 21:15:50 UTC · (3 months ago)	Multiple, malicious web requests detected	Port Scan Hacking
🇫🇷 dynamix	2026-07-19 21:39:47 UTC · (3 months ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-07-12 06:29:14 UTC · (3 months ago)	(mod_security) mod_security (id:240000) triggered by 98.159.43.69 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 12 02:29:07.965268 2026] [security2:error] [pid 15063:tid 15063] [client 98.159.43.69:25797] Mod ... show more (mod_security) mod_security (id:240000) triggered by 98.159.43.69 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 12 02:29:07.965268 2026] [security2:error] [pid 15063:tid 15063] [client 98.159.43.69:25797] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|whore-cams.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "whore-cams.com"] [uri "/images/stories/themes.php"] [unique_id "alM0M6WFcqU9LsZAf62ppwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-07-12 04:01:58 UTC · (3 months ago)	Multiple WAF Violations	Web App Attack

Showing 1 to 15 of 123 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇪🇨 190.154.134.48

🇵🇱 172.64.198.76

🇮🇩 163.7.4.109

🇨🇳 119.39.153.131

🇨🇳 101.96.214.116

🇩🇪 49.12.232.161

🇺🇸 45.156.129.176

🇳🇱 195.178.110.30

🇺🇸 193.202.8.24

🇵🇱 172.64.200.177

🇵🇱 172.64.200.27

🇺🇸 172.59.170.138

🇸🇬 161.118.226.106

🇲🇽 148.244.85.7

🇫🇮 144.31.126.69

🇧🇷 103.88.232.57

🇳🇱 77.67.26.248

🇺🇸 66.132.224.15

🇺🇸 40.124.186.145

🇺🇸 3.131.24.55