AbuseIPDB » 98.98.9.60
98.98.9.60
This IP was reported 9 times. Confidence of
Abuse
is 22% : ?
ISP
Zenlayer Inc
Usage Type
Data Center/Web Hosting/Transit
ASN
AS21859
Domain Name
zenlayer.com
Country
๐จ๐ฑ
Chile
City
Santiago, Santiago Metropolitan
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 98.98.9.60 :
This IP address has been reported a total of
9
times from
7 distinct
sources.
98.98.9.60 was first reported on
July 17th 2025 , and the most recent report was
2 weeks ago
Old Reports:
The most recent abuse report for this IP address is from
2 weeks ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
๐บ๐ธ
TPI-Abuse
2026-06-29 16:58:38
(2 weeks ago)
(mod_security) mod_security (id:240335) triggered by 98.98.9.60 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:240335) triggered by 98.98.9.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 12:58:30.834860 2026] [security2:error] [pid 21412:tid 21412] [client 98.98.9.60:50661] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 98.98.9.60 (+1 hits since last alert)|thesalonx.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "thesalonx.com"] [uri "/xmlrpc.php"] [unique_id "akKkNo0rjbkS-QqlL7KxLwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ธ๐ช
peterh
2026-06-29 04:51:00
(2 weeks ago)
Bad Web Bot
Phishing
Hacking
๐บ๐ธ
TPI-Abuse
2026-06-28 23:31:13
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 98.98.9.60 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 98.98.9.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 19:31:08.892941 2026] [security2:error] [pid 5747:tid 5956] [client 98.98.9.60:56680] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.83"] [uri "/.env"] [unique_id "akGuvIY-r_O5ZeXQVElQjwAAAU0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
MPL
2026-06-28 22:48:52
(2 weeks ago)
tcp/80
Port Scan
2026-06-28 20:33:52
(2 weeks ago)
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host
๐บ๐ธ
TPI-Abuse
2026-06-09 22:47:14
(1 month ago)
(mod_security) mod_security (id:240335) triggered by 98.98.9.60 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:240335) triggered by 98.98.9.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 18:47:09.621855 2026] [security2:error] [pid 6590:tid 6590] [client 98.98.9.60:57620] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 98.98.9.60 (+1 hits since last alert)|thesalonx.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "thesalonx.com"] [uri "/xmlrpc.php"] [unique_id "aiiX7a6tWZKtOCIoHAm4wwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-11-12 03:18:14
(8 months ago)
(smtpauth) Failed SMTP AUTH login from 98.98.9.60 (CL/Chile/-)
Brute-Force
๐ซ๐ท
แดสแด
2025-07-28 02:18:27
(11 months ago)
Triggered Cloudflare WAF (l7ddos) from CL.
ASN: 21859 (ZEN-ECN)
Protocol: HTTP/2 (GET method)
UA: Mo ...
show more
Triggered Cloudflare WAF (l7ddos) from CL.
ASN: 21859 (ZEN-ECN)
Protocol: HTTP/2 (GET method)
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
DDoS Attack
Bad Web Bot
๐จ๐ณ
ThreatBook.io
2025-07-17 23:01:28
(1 year ago)
2025-07-17 11:20:41 http://gfs302n101.userstorage.mega.co.nz/dl/BNApMkoemj2F1wKhYha9lApffa-1KvTzMwA7 ...
show more
2025-07-17 11:20:41 http://gfs302n101.userstorage.mega.co.nz/dl/BNApMkoemj2F1wKhYha9lApffa-1KvTzMwA7-1hKNxaqi7HTit7MvZoK5XxN3AzbhuhCMENwU7FZEgUmAerrAeSA9K7vCY0pR7iR2oeyUsLqcesCXdTe1w/393216-786431
show less
Web App Attack
Showing 1 to
9
of 9 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ
Recently Reported IPs: