JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

98.98.66.71

Neutral Activity

Abuse confidence score ?

0% Low Risk

67 reports

31 reporters · latest 2 months ago

ISP	Zenlayer Inc
Usage Type	Data Center/Web Hosting/Transit
ASN	AS21859
Domain Name	zenlayer.com
Country	🇺🇸 United States of America
City	New York City, New York

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

98.98.66.71 has been reported 67 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 98.98.66.71

Export CSV

This IP address has been reported a total of 67 times from 31 distinct sources. 98.98.66.71 was first reported on October 29th 2025, and the most recent report was 2 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 James Walker	2026-07-26 15:09:00 (2 months ago)	SIP scan attack	Brute-Force Fraud VoIP
🇮🇹 Francesco Ippoliti	2026-07-26 06:40:00 (2 months ago)	[Jul 26 08:39:59] NOTICE[185816] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:check_ ... show more [Jul 26 08:39:59] NOTICE[185816] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '98.98.66.71:59983' (callid: 470035990-1190618676-1881427385) - No matching endpoint found [Jul 26 08:39:59] NOTICE[185816] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '98.98.66.71:59983' (callid: 470035990-1190618676-1881427385) - No matching endpoint found ... show less	Brute-Force Port Scan
🇮🇹 Francesco Ippoliti	2026-07-26 05:31:35 (2 months ago)	[Jul 26 07:31:34] NOTICE[185816] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:check_ ... show more [Jul 26 07:31:34] NOTICE[185816] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '98.98.66.71:54941' (callid: 1050487053-172683413-1127091794) - No matching endpoint found [Jul 26 07:31:35] NOTICE[182036] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '98.98.66.71:54941' (callid: 1050487053-172683413-1127091794) - No matching endpoint found ... show less	Brute-Force Port Scan
🇩🇪 chwxr	2026-07-26 05:24:27 (2 months ago)	Detected by CrowdSec on chxr network infra. - contact [email protected]: crowdsec ... show more Detected by CrowdSec on chxr network infra. - contact [email protected]: crowdsecurity/asterisk_bf show less	Fraud VoIP Port Scan Brute-Force SSH
🇫🇷 Provost-info	2026-07-26 05:13:55 (2 months ago)	Attack attempt on SIP server	Brute-Force Fraud VoIP
🇩🇪 defkev	2026-07-26 05:11:20 (2 months ago)		Fraud VoIP
🇺🇸 NetGuard	2026-07-26 04:10:13 (2 months ago)	#honeypot #netguard247 #sentrypeer Captured by NetGuard 24/7 T-Pot honeypot (netguard24-7.com). Time ... show more #honeypot #netguard247 #sentrypeer Captured by NetGuard 24/7 T-Pot honeypot (netguard24-7.com). Timestamp: 2026-07-26T04:10:13.49+00:00 Attacker IP: 98.98.66.71 \| Port: 5060 \| Country: United States Honeypot: sentrypeer \| Attack: unknown Source: NetGuard 24/7 (netguard24-7.com) \| PhantomGrid Defense show less	Web App Attack
🇩🇪 scolastico	2026-07-26 03:57:50 (2 months ago)	[automated] IP failed to authenticate or send unauthenticated INVITE requests	Brute-Force Fraud VoIP
🇺🇸 TPI-Abuse	2026-05-29 23:08:35 (4 months ago)	(mod_security) mod_security (id:240335) triggered by 98.98.66.71 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:240335) triggered by 98.98.66.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 29 19:08:29.554873 2026] [security2:error] [pid 31946:tid 31946] [client 98.98.66.71:54795] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 98.98.66.71 (+1 hits since last alert)\|thesalonx.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "thesalonx.com"] [uri "/xmlrpc.php"] [unique_id "ahocbebb6FD3eU88VbdxFwAAACo"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Mangelot Hosting	2026-04-28 19:06:32 (5 months ago)	(wp_login_try) srv103 WP Login Attempt 98.98.66.71 (US/United States/-): 10 in the last 3600 secs; P ... show more (wp_login_try) srv103 WP Login Attempt 98.98.66.71 (US/United States/-): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇺🇸 mnsf	2026-04-28 19:05:19 (5 months ago)	Login Too Frequent (9)	Brute-Force Web App Attack
🇫🇷 SpaceHost-Server	2026-04-28 19:04:36 (5 months ago)	98.98.66.71 - - [28/Apr/2026:21:04:36 +0200] "POST /wp-login.php HTTP/1.1" 200 11390 "-" "Mozilla/5. ... show more 98.98.66.71 - - [28/Apr/2026:21:04:36 +0200] "POST /wp-login.php HTTP/1.1" 200 11390 "-" "Mozilla/5.0" 98.98.66.71 - - [28/Apr/2026:21:04:36 +0200] "POST /wp-login.php HTTP/1.1" 200 11386 "-" "Mozilla/5.0" 98.98.66.71 - - [28/Apr/2026:21:04:36 +0200] "POST /wp-login.php HTTP/1.1" 200 11376 "-" "Mozilla/5.0" show less	Hacking Web App Attack
🇩🇪 stinpriza	2026-04-28 18:57:15 (5 months ago)	Web App Attack	Web App Attack
🇫🇷 SpaceHost-Server	2026-04-28 18:35:20 (5 months ago)	98.98.66.71 - - [28/Apr/2026:20:35:19 +0200] "POST /wp-login.php HTTP/1.1" 200 11386 "-" "Mozilla/5. ... show more 98.98.66.71 - - [28/Apr/2026:20:35:19 +0200] "POST /wp-login.php HTTP/1.1" 200 11386 "-" "Mozilla/5.0" 98.98.66.71 - - [28/Apr/2026:20:35:19 +0200] "POST /wp-login.php HTTP/1.1" 200 11390 "-" "Mozilla/5.0" 98.98.66.71 - - [28/Apr/2026:20:35:19 +0200] "POST /wp-login.php HTTP/1.1" 200 11376 "-" "Mozilla/5.0" show less	Hacking Web App Attack
🇦🇺 screwlooseit.com.au	2026-04-28 18:19:13 (5 months ago)	Blocked by CSF 13 firewall - Rule: WPLOGIN US/United States/-	Web App Attack

Showing 1 to 15 of 67 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 190.89.55.250

🇸🇦 167.86.155.52

🇷🇺 77.244.64.60

🇺🇦 217.196.161.184

🇷🇺 194.154.92.163

🇦🇷 186.22.253.110

🇨🇿 185.68.68.57

🇳🇱 86.54.31.36

🇳🇱 77.239.124.154

🇱🇹 62.60.130.238

🇹🇼 34.80.90.61

🇷🇴 2.57.122.168

🇺🇸 206.189.225.181

🇵🇱 176.53.159.198

🇺🇸 165.227.84.14

🇩🇪 134.209.234.129

🇨🇳 117.50.51.198

🇳🇱 109.160.32.152

🇩🇪 51.195.40.26

🇸🇬 47.128.52.221