JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 5.255.98.98

5.255.98.98 was found in our database!

This IP was reported 217 times. Confidence of Abuse is 100%: ?

100%

ISP	The Infrastructure Group B.V.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS60404
Domain Name	theinfrastructure.group
Country	🇳🇱 Netherlands
City	Dronten, Flevoland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 5.255.98.98

Whois 5.255.98.98

IP Abuse Reports for 5.255.98.98:

This IP address has been reported a total of 217 times from 130 distinct sources. 5.255.98.98 was first reported on May 10th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-05-10 20:15:30 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 5.255.98.98 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 5.255.98.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 10 16:15:26.298060 2026] [security2:error] [pid 10170:tid 10170] [client 5.255.98.98:46344] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotdamnsam.onlyincanada-eh.com"] [uri "/app/.env"] [unique_id "agDnXqiFyzLjapGOoRhZwwAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-10 19:46:37 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 5.255.98.98 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 5.255.98.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 10 15:46:30.360098 2026] [security2:error] [pid 18695:tid 18792] [client 5.255.98.98:47126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotairwelder.com"] [uri "/.env.development"] [unique_id "agDgln8fjj1wKd-JN-nWzwAAAIw"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 updown.io	2026-05-10 19:37:30 (3 weeks ago)	{"level":"info","ts":1778441800.276116,"logger":"http.log.access.log0","msg":"handled request","requ ... show more {"level":"info","ts":1778441800.276116,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"5.255.98.98","remote_port":"37158","client_ip":"5.255.98.98","proto":"HTTP/1.1","method":"GET","host":"hosu.status.updown.io","uri":"/","headers":{"Accept-Encoding":["gzip"],"User-Agent":["Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"]}},"bytes_read":0,"user_id":"","duration":0.000054003,"size":0,"status":308,"resp_headers":{"Location":["https://hosu.status.updown.io/"],"Content-Type":[],"Server":["Caddy"],"Connection":["close"]}} {"level":"info","ts":1778441803.2286527,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"5.255.98.98","remote_port":"37168","client_ip":"5.255.98.98","proto":"HTTP/1.1","method":"GET","host":"hosu.status.updown.io","uri":"/doc","headers":{"Accept-Encoding":["gzip"],"User-Agent":["Mozilla/5.0 (compatible; SemrushBot/7~bl; +http://www.semrush.com/bot.html)" ... show less	DDoS Attack Web App Attack
🇫🇷 dynamix	2026-05-10 19:35:18 (3 weeks ago)	Multiple WAF Violations	Web App Attack
🇩🇪 Hary74656	2026-05-10 19:31:28 (3 weeks ago)	[Sun May 10 21:31:17.383070 2026] [security2:error] [pid 155308:tid 155443] [client 5.255.98.98:5189 ... show more [Sun May 10 21:31:17.383070 2026] [security2:error] [pid 155308:tid 155443] [client 5.255.98.98:51892] [client 5.255.98.98] ModSecurity: Access denied with code 403 (phase 2). Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/credentials found within REQUEST_FILENAME: /.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "host.weavernet.at"] [uri "/.aws/credentials"] [unique_id "agDdBScQzoh8VfdHewXAUgAABDI"] [Sun May 10 21:31:17.677385 2026] [security2:error] [pid 155035:tid 155147] [client 5.255.98.98:52040] [client 5.255.98.98] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/.env" at RE ... show less	Web App Attack
🇳🇱 e.fierstra	2026-05-10 18:44:22 (3 weeks ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇩🇪 Admins@FBN	2026-05-10 15:59:03 (3 weeks ago)	FW-PortScan: Traffic Blocked srcport=45116 dstport=443	Port Scan

Showing 211 to 217 of 217 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 222.176.200.22

🇵🇦 200.46.87.66

🇳🇱 193.176.31.206

🇳🇱 192.142.24.156

🇩🇪 176.65.132.17

🇩🇪 139.162.173.227

🇧🇷 108.174.147.128

🇺🇸 104.152.58.233

🇮🇳 103.91.246.73

🇷🇴 92.118.39.236

🇬🇭 80.87.83.229

🇺🇸 50.116.106.59

🇳🇱 45.153.34.181

🇸🇬 43.133.61.254

🇨🇳 36.137.249.148

🇭🇰 8.218.142.110

🇭🇰 2406:da1e:4b7:e602:9087:9177:1997:7807

🇮🇳 223.233.82.193

🇧🇷 201.17.146.173

🇵🇦 181.119.125.242