JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

3.98.116.4

Neutral Activity

Abuse Confidence Score

0% Low Risk

5 reports

5 reporters · latest 2 months ago

ISP: Amazon Data Services Canada
Usage Type: Data Center/Web Hosting/Transit
ASN: AS16509
Hostname(s): ec2-3-98-116-4.ca-central-1.compute.amazonaws.com
Domain Name: amazon.com
Country: 🇨🇦 Canada
City: Montreal, Quebec

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

3.98.116.4 has been reported 5 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

5 from 5 distinct reporters

First reported

August 22nd 2026

Most recent report

2 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 🇨🇭 Hosting	2026-08-23 05:10:24 UTC · (2 months ago)	Automated WAF report: 200-300 blocked requests from this IP detected by our WAF.	Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-08-22 23:40:35 UTC · (2 months ago)	Multiple WAF Violations	Web App Attack
🇺🇸 JustMeHere	2026-08-22 16:17:55 UTC · (2 months ago)	[Sat Aug 22 12:17:50.460109 2026] [security2:error] [pid 808:tid 973] [client 3.98.116.4:48884] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_ ... show more [Sat Aug 22 12:17:50.460109 2026] [security2:error] [pid 808:tid 973] [client 3.98.116.4:48884] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 55)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "freepbx.yorknation.com"] [uri "/"] [unique_id "aonLrlFgKnv--fKpWFOp1QAAAFY"] ... show less	Web App Attack
🇩🇪 macrob	2026-08-22 00:54:12 UTC · (2 months ago)	2026/08/22 00:54:10 [error] 2660800#2660800: 506217639 access forbidden by rule, client: 3.98.116.4, server: finami.es, request: "GET /.git/config HTTP/2.0", host: "finami.es" 2026/08/22 00:54:11 [error] 2660802#2660802: 506217643 access forbidden ... show more 2026/08/22 00:54:10 [error] 2660800#2660800: 506217639 access forbidden by rule, client: 3.98.116.4, server: finami.es, request: "GET /.git/config HTTP/2.0", host: "finami.es" 2026/08/22 00:54:11 [error] 2660802#2660802: 506217643 access forbidden by rule, client: 3.98.116.4, server: finami.es, request: "GET /.env HTTP/2.0", host: "finami.es" 2026/08/22 00:54:11 [error] 2660802#2660802: *506217647 access forbidden by rule, client: 3.98.116.4, server: finami.es, request: "GET /.env.local HTTP/2.0", host: "finami.es" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 00:45:13 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 3.98.116.4 (ec2-3-98-116-4.ca-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 20:45:05.859410 2026] [security2:error] [pid 74 ... show more (mod_security) mod_security (id:210492) triggered by 3.98.116.4 (ec2-3-98-116-4.ca-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 20:45:05.859410 2026] [security2:error] [pid 7461:tid 7461] [client 3.98.116.4:59544] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "finaltest.fernfield.com"] [uri "/.git/config"] [unique_id "aojxEUm7GMsPhhyxqt6e7AAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇵🇱 2400:cb00:923:1000:500a:234f:38bc:edd5

🇳🇱 91.226.227.109

🇸🇪 46.249.103.229

🇺🇸 192.132.7.13

🇨🇳 180.106.83.59

🇺🇸 172.68.174.144

🇺🇸 162.216.149.15

🇸🇬 161.118.226.106

🇺🇸 100.28.153.226

🇵🇱 81.162.211.75

🇺🇸 47.254.90.34

🇮🇷 5.122.164.1

🇳🇱 4.231.98.231

🇸🇪 2a05:d016:9d4:5400:476e:80cd:8c29:b21c

🇺🇸 2400:cb00:11:1000:27fb:1248:7a17:b19e

🇵🇾 181.124.213.23

🇧🇩 160.187.191.74

🇳🇱 77.239.124.63

🇲🇾 49.124.152.30

🇳🇱 45.74.28.2