JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

98.49.39.84

Recent Activity

Abuse Confidence Score

38% Elevated

10 reports

8 reporters · latest 19 hours ago

ISP: Comcast Cable Communications, LLC
Usage Type: Fixed Line ISP
ASN: AS7016
Domain Name: comcast.net
Country: 🇺🇸 United States of America
City: Manchester, Pennsylvania

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

10 from 8 distinct reporters

First reported

September 17th 2026

Most recent report

19 hours ago

Last 60 days

Top reporter locations 🇳🇱 Netherlands 4 🇺🇸 United States of America 4 🇩🇪 Germany 1

Most common categories Brute-Force 4 Bad Web Bot 3 DDoS Attack 2 Email Spam 2 Hacking 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 VSM Networks	2026-11-06 09:34:59 UTC · (19 hours ago)	Credential Stuffing	Brute-Force
🇳🇱 wlt-blocker	2026-11-05 01:06:21 UTC · (2 days ago)	Attempts to login to mail server with wrong username and/or password	Brute-Force
🇳🇱 Mangelot Hosting	2026-10-14 22:18:55 UTC · (3 weeks ago)	98.49.39.84 (US/United States/-), 10 distributed imapd attacks on account [REDACTED] in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_DISTATTACK; Logs: Oct 14 23:22:46 dovecot[542885]: imap-login: Login aborted: Logged out (auth failed, ... show more 98.49.39.84 (US/United States/-), 10 distributed imapd attacks on account [REDACTED] in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_DISTATTACK; Logs: Oct 14 23:22:46 dovecot[542885]: imap-login: Login aborted: Logged out (auth failed, 2 attempts in 8 secs) (auth_failed): user=[USERNAME] method=PLAIN, rip=73.100.79.177, lip=0.0.0.x, TLS, session=<cCGhh9Ndxs1JZE+x> Oct 14 23:52:35 dovecot[542885]: imap-login: Login aborted: Logged out (auth failed, 2 attempts in 8 secs) (auth_failed): user=[USERNAME] method=PLAIN, rip=173.2.40.211, lip=0.0.0.x, TLS, session=<gaBZ8tNd2LStAijT> Oct 14 23:21:01 dovecot[542885]: imap-login: Login aborted: Logged ou show less	DDoS Attack
🇺🇸 SX Communications	2026-10-10 13:51:20 UTC · (3 weeks ago)	HTTP application-layer DoS / botnet traffic from 98.49.39.84: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host.	DDoS Attack Bad Web Bot Exploited Host
🇳🇱 Mangelot Hosting	2026-09-30 09:52:15 UTC · (1 month ago)	(dovecot_invalid_user) srv201 Dovecot login on non-existent account 98.49.39.84 (US/United States/-): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: Sep 30 11:52:05 dovecot[938]: imap-login: Login aborted: Logge ... show more (dovecot_invalid_user) srv201 Dovecot login on non-existent account 98.49.39.84 (US/United States/-): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: Sep 30 11:52:05 dovecot[938]: imap-login: Login aborted: Logged out (auth failed, 2 attempts in 8 secs) (auth_failed): user=[USERNAME] method=PLAIN, rip=98.49.39.84, lip=0.0.0.x, TLS, session=<I4HUP7Bc8tZiMSdU> show less	Web App Attack
🇺🇸 鬼影233	2026-09-24 05:58:44 UTC · (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36	Bad Web Bot
🇩🇪 FeG Deutschland	2026-09-23 11:56:07 UTC · (1 month ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇺🇸 鬼影233	2026-09-21 17:40:06 UTC · (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36	Bad Web Bot
🇮🇩 hermawan	2026-09-21 05:16:20 UTC · (1 month ago)	[Mon Sep 21 12:16:15.905329 2026] [security2:error] [pid 155240:tid 139726115808960] [client 98.49.39.84:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:referer. [file "/etc/modsecurity/coreru ... show more [Mon Sep 21 12:16:15.905329 2026] [security2:error] [pid 155240:tid 139726115808960] [client 98.49.39.84:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:referer: https://www.bmkg.go.id/ request_line = GET /index.php/analisis-iklim/analisis-bulanan/analisis-distribusi-hujan/analisis-distribusi-curah-hujan HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/analisis-iklim/analisis-bulanan/analisis-distribusi-hujan/analisis-distribusi-curah-hujan"] [unique_id "arC9n0sWuF5hkgBgUEXc1QAAANU"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[155288] [iS5xWfe04dI] [arC9n0sWuF5hkgBgUEXc1QAAANU] keep_alive=[0] [2026-09-21 12:16:15.905336] [R:arC9n0sWuF5hkgB ... show less	Email Spam Hacking
🇳🇱 nikki101	2026-09-17 03:24:46 UTC · (1 month ago)	pop/imap unauthorized access attempt, inappropriate conduct	Email Spam Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇷 170.238.37.12

🇺🇸 98.174.59.184

🇺🇸 45.42.141.111

🇺🇿 213.230.87.95

🇺🇸 205.210.31.108

🇧🇷 191.7.159.201

🇨🇳 180.95.152.53

🇺🇸 147.185.132.185

🇵🇭 64.81.72.109

🇺🇸 45.79.109.130

🇺🇸 43.166.215.84

🇵🇰 39.52.28.179

🇲🇾 202.165.25.43

🇺🇸 195.184.76.183

🇩🇪 193.124.20.230

🇨🇳 125.86.25.198

🇨🇳 111.17.199.57

🇳🇱 109.160.32.126

🇺🇸 52.176.211.73

🇺🇸 45.33.70.184