JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 98.98.9.42

98.98.9.42 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 14%: ?

14%

ISP	Zenlayer Inc
Usage Type	Data Center/Web Hosting/Transit
ASN	AS21859
Domain Name	zenlayer.com
Country	🇨🇱 Chile
City	Santiago, Santiago Metropolitan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 98.98.9.42

Whois 98.98.9.42

IP Abuse Reports for 98.98.9.42:

This IP address has been reported a total of 11 times from 8 distinct sources. 98.98.9.42 was first reported on November 11th 2025, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 threatintelligence_bvc	2026-06-05 03:17:13 (7 hours ago)		Brute-Force
🇺🇸 TPI-Abuse	2026-06-01 10:32:04 (4 days ago)	(mod_security) mod_security (id:240335) triggered by 98.98.9.42 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:240335) triggered by 98.98.9.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 06:31:56.417325 2026] [security2:error] [pid 12094:tid 12094] [client 98.98.9.42:63816] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 98.98.9.42 (+1 hits since last alert)\|odysseydogasporlari.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "odysseydogasporlari.com"] [uri "/xmlrpc.php"] [unique_id "ah1fnHR_Jtg3UiK0od5DOgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-16 18:55:22 (2 weeks ago)	(mod_security) mod_security (id:240335) triggered by 98.98.9.42 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:240335) triggered by 98.98.9.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 16 14:55:15.482228 2026] [security2:error] [pid 15587:tid 15587] [client 98.98.9.42:62351] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 98.98.9.42 (+1 hits since last alert)\|thesalonx.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "thesalonx.com"] [uri "/xmlrpc.php"] [unique_id "agi9k2UzdcMhNGFfWoxONwAAACg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-30 13:21:22 (4 months ago)	(mod_security) mod_security (id:240335) triggered by 98.98.9.42 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:240335) triggered by 98.98.9.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 30 08:21:19.262226 2026] [security2:error] [pid 17035:tid 17035] [client 98.98.9.42:58303] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 98.98.9.42 (+1 hits since last alert)\|www.goddesskink.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.goddesskink.com"] [uri "/new/xmlrpc.php"] [unique_id "aXywTzg_eLtfix8dcKme1wAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 Kencang.ID	2025-12-12 16:21:30 (5 months ago)	Failed Login Attempt 2025-12-12 16:21:30 \| 98.98.9.42 \| Desktop \| Google Chrome \| Santiago, Santiago ... show more Failed Login Attempt 2025-12-12 16:21:30 \| 98.98.9.42 \| Desktop \| Google Chrome \| Santiago, Santiago Metropolitan, Chile \| Zenlayer Inc \| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 show less	FTP Brute-Force Brute-Force
🇩🇪 neverdown.eu	2025-11-11 08:31:08 (6 months ago)	(smtpauth) Failed SMTP AUTH login from 98.98.9.42 (CL/Chile/-): 5 in the last 60 secs; Ports: ; Dir ... show more (smtpauth) Failed SMTP AUTH login from 98.98.9.42 (CL/Chile/-): 5 in the last 60 secs; Ports: ; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2025-11-11 10:30:59 dovecot_plain authenticator failed for ([10.0.5.180]) [98.98.9.42]:51078: 535 Incorrect authentication data ([email protected]) 2025-11-11 10:30:59 dovecot_plain authenticator failed for ([10.0.5.180]) [98.98.9.42]:51077: 535 Incorrect authentication data ([email protected]) 2025-11-11 10:30:59 dovecot_plain authenticator failed for ([10.0.5.180]) [98.98.9.42]:51076: 535 Incorrect authentication data ([email protected]) 2025-11-11 10:30:59 dovecot_plain authenticator failed for ([10.0.5.180]) [98.98.9.42]:51079: 535 Incorrect authentication data ([email protected]) 2025-11-11 10:31:06 dovecot_login authenticator failed for ([10.0.5.180]) [98.98.9.42]:51078: 535 Incorrect authentication data ([email protected]) show less	Port Scan
Anonymous	2025-11-11 07:55:49 (6 months ago)	(smtpauth) Failed SMTP AUTH login from 98.98.9.42 (CL/Chile/Santiago Metropolitan/Santiago/-/[redact ... show more (smtpauth) Failed SMTP AUTH login from 98.98.9.42 (CL/Chile/Santiago Metropolitan/Santiago/-/[redacted]) show less	Brute-Force
🇩🇪 zumbo.net	2025-11-11 07:49:10 (6 months ago)	Nov 11 10:49:03 auth: Info: passwd-file([email protected],98.98.9.42): Password mismatch Nov 11 ... show more Nov 11 10:49:03 auth: Info: passwd-file([email protected],98.98.9.42): Password mismatch Nov 11 10:49:09 auth: Info: passwd-file([email protected],98.98.9.42): Password mismatch ... show less	Brute-Force
Anonymous	2025-11-11 06:41:03 (6 months ago)	BruteForce IMAP/POP3/SMTP	Brute-Force
Anonymous	2025-11-11 06:13:48 (6 months ago)	(smtpauth) Failed SMTP AUTH login from 98.98.9.42 (CL/Chile/-)	Brute-Force
Anonymous	2025-11-11 06:04:39 (6 months ago)	Ports: 25,2525,110,143,993,995; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 220.202.112.170

🇺🇸 173.69.54.176

🇨🇳 116.178.131.3

🇷🇴 92.118.39.236

🇺🇸 52.176.211.73

🇳🇱 45.148.10.152

🇸🇬 8.222.135.53

🇷🇴 2.57.121.112

🇧🇷 187.33.251.218

🇨🇳 183.36.126.68

🇺🇸 172.93.121.126

🇭🇰 152.32.213.86

🇻🇳 113.161.222.150

🇪🇸 92.177.133.53

🇺🇦 79.143.41.66

🇧🇬 78.128.114.58

🇵🇰 39.49.117.190

🇺🇸 20.38.37.110

🇷🇴 2.57.122.177

🇨🇭 209.99.184.143