This IP address has been reported a total of
131
times from
74 distinct
sources.
198.211.98.122 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Web app scan: 11 requests in 1 s across 2 domains (301/404). Paths: /.env, /_profiler/phpinfo, /en/_ ...
show moreWeb app scan: 11 requests in 1 s across 2 domains (301/404). Paths: /.env, /_profiler/phpinfo, /en/_profiler/phpinfo (+2 more). Sample: 2026-10-22T15:21:03Z "GET /.env" 301
show less
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show moreAutomated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: keycloak.goblinpot.tech | URI: /.env | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 | BODY: [Empty / GET Request] | HEADERS: {"X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"US","Cf-Connecting-Ip":"198.211.98.122","Cdn-Loop":"cloudflare; loops=1","Connection":"Keep-Alive","Cf-Ray":"a4e7c0fffac35f55-EWR","Accept-Encoding":"gzip, br","Accept":"text\/html,application\/xhtml+xml,application
show less
Bad Web Bot
Web App Attack
Anonymous
Web probing (12 hits in 24h) on default-vhost,www.kerkconcertenhouthem.nl: sensitive-path scans and/ ...
show moreWeb probing (12 hits in 24h) on default-vhost,www.kerkconcertenhouthem.nl: sensitive-path scans and/or 404 bursts. Reported by CRMON.
show less
[22/Oct/2026:06:30:08 +0300] -- 198.211.98.122 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.en ...
show more[22/Oct/2026:06:30:08 +0300] -- 198.211.98.122 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.env HTTP/1.1
show less