198.89.96.125
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- Internet Utilities NA LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS397423
- Domain Name
- iana.org
- Country
- 🇺🇸 United States of America
- City
- Dallas, Texas
No reports in the last 60 days
198.89.96.125 has been reported 12 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
12 from
9 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 Vexedly |
SSH brute-force against an SSH honeypot: 1 credential attempt(s) across 1 logged events. Automated report from a Cowrie sensor.
|
Brute-Force SSH | |
| 🇺🇸 TPI-Abuse |
|
Brute-Force Bad Web Bot Web App Attack | |
| Anonymous |
198.89.96.125 patrz.eu - [09/Sep/2026:00:46:24 +0200] "GET /.env HTTP/2.0" 418 705 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
|
Hacking Web App Attack | |
| 🇺🇸 TPI-Abuse |
|
Brute-Force Bad Web Bot Web App Attack | |
| 🇳🇱 MyGlobalFlowers |
Multiple WAF Violations
|
Web App Attack | |
| 🇩🇪 kkw |
[REDACTED] 198.89.96.125 - - [09/Sep/2026:00:11:58 +0200] "GET /.env HTTP/2.0" 302 569 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
... (mode: searching http-sensitive-files)
|
Bad Web Bot Web App Attack | |
| 🇳🇴 jad-abuse |
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: env_probe. Observed by 1 sensor(s); 1 hits.
|
Web App Attack | |
| 🇳🇱 homeshowdomain.nl |
Auto-ban: >3000 req/min op 2026-09-08
|
Web App Attack SSH Hacking | |
| 🇫🇷 Baking333 |
|
Bad Web Bot Web App Attack | |
| 🇺🇸 TPI-Abuse |
|
Brute-Force Bad Web Bot Web App Attack | |
| 🇺🇸 Cyber Crusader |
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
|
Port Scan Hacking Brute-Force | |
| 🇺🇸 Vexedly |
SSH brute-force against an SSH honeypot: 1 credential attempt(s) across 1 logged events. Automated report from a Cowrie sensor.
|
Brute-Force SSH |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown