JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 98.159.43.7

98.159.43.7 was found in our database!

This IP was reported 108 times. Confidence of Abuse is 43%: ?

43%

ISP	F.N.S. HOLDINGS LIMITED
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	fns-holdings.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 98.159.43.7

Whois 98.159.43.7

IP Abuse Reports for 98.159.43.7:

This IP address has been reported a total of 108 times from 48 distinct sources. 98.159.43.7 was first reported on May 28th 2024, and the most recent report was 22 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-03 17:07:06 (22 hours ago)	(mod_security) mod_security (id:240000) triggered by 98.159.43.7 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:240000) triggered by 98.159.43.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 13:06:57.974509 2026] [security2:error] [pid 12920:tid 12920] [client 98.159.43.7:41025] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|chezlubacov.xyz\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "chezlubacov.xyz"] [uri "/images/stories/themes.php"] [unique_id "akfsMfnOX1y21xDxIfDsjAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Didier Lagaert	2026-07-03 12:03:24 (1 day ago)	lie-17 : Block hidden directories=>/.trash7206/index.php(/)	Hacking
🇫🇷 dynamix	2026-06-30 13:37:27 (4 days ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-06-28 14:12:02 (6 days ago)	(mod_security) mod_security (id:240000) triggered by 98.159.43.7 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:240000) triggered by 98.159.43.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 10:11:58.663620 2026] [security2:error] [pid 26163:tid 26163] [client 98.159.43.7:62313] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|walkingwithghosts.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "walkingwithghosts.com"] [uri "/images/stories/themes.php"] [unique_id "akErriZqq6DQpZu6ujm7mgAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Octopuce	2026-06-25 21:39:24 (1 week ago)	Aggressive web search of vulnerable pages: /setup.php /.bod/.ll/ss.php /.well-known/radio.php /wp-co ... show more Aggressive web search of vulnerable pages: /setup.php /.bod/.ll/ss.php /.well-known/radio.php /wp-content/plugin.php /wp-admin/css/colors/ectop ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-06-15 07:03:30 (2 weeks ago)	(mod_security) mod_security (id:210730) triggered by 98.159.43.7 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210730) triggered by 98.159.43.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 03:02:57.922142 2026] [security2:error] [pid 16109:tid 16109] [client 98.159.43.7:23067] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|mail.mympizzas.com.mx\|F\|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.mympizzas.com.mx"] [uri "/dump.bak"] [unique_id "ai-jobQ41yWQb0NXwh_kxgAAAGc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-06 21:23:45 (3 weeks ago)	(mod_security) mod_security triggered on hostname [redacted] 98.159.43.7 (TH/Thailand/-)	SQL Injection
🇺🇸 TPI-Abuse	2026-06-06 04:33:35 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 98.159.43.7 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 98.159.43.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 00:33:13.680502 2026] [security2:error] [pid 28111:tid 28111] [client 98.159.43.7:64541] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.old" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.animatuevento.com.mx"] [uri "/wp-config.old"] [unique_id "aiOjCRv1t2mduMfnh66nLwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇾 Rizzy	2026-06-05 23:25:07 (4 weeks ago)	Multiple WAF Violations	Brute-Force Web App Attack
Anonymous	2026-06-05 17:41:18 (4 weeks ago)	Ports: *; Direction: 0; Trigger: CT_LIMIT	Brute-Force SSH
Anonymous	2026-06-05 16:33:03 (4 weeks ago)	(mod_security) mod_security triggered on hostname [redacted] 98.159.43.7 (TH/Thailand/-)	SQL Injection
🇫🇷 Octopuce	2026-05-16 22:32:44 (1 month ago)	Aggressive web search of vulnerable pages: //modules/statsforecast/translations/fe.php //modules/ets ... show more Aggressive web search of vulnerable pages: //modules/statsforecast/translations/fe.php //modules/ets_htmlbox/loads.php //modules/myprestaloyalt ... show less	Web App Attack
🇩🇪 ghostwarriors	2026-05-16 21:50:45 (1 month ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇪🇸 masterguru	2026-05-16 14:15:08 (1 month ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-123) show less	Bad Web Bot
Anonymous	2026-05-11 03:50:22 (1 month ago)	"GET /wp-content/plugins/pwnd-2/pwnd.php HTTP/1.1"	Hacking Web App Attack

Showing 1 to 15 of 108 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇺 2400:8280:3:104:9999::245

🇨🇦 206.75.44.8

🇧🇷 177.0.238.190

🇩🇪 134.122.80.112

🇺🇸 132.148.142.226

🇺🇸 130.131.162.82

🇨🇦 85.217.149.5

🇲🇦 81.192.46.49

🇺🇸 3.231.193.38

🇺🇸 216.25.89.154

🇯🇴 212.118.18.121

🇰🇷 211.51.132.104

🇮🇱 176.230.3.70

🇺🇸 172.59.211.55

🇻🇳 171.250.162.200

🇹🇬 102.64.145.149

🇸🇬 47.128.54.89

🇨🇳 36.142.131.193

🇺🇸 155.138.195.167

🇩🇪 141.11.107.4