JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 98.88.19.20

98.88.19.20 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 100%: ?

100%

ISP	Amazon Data Services Northern Virginia
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-98-88-19-20.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 98.88.19.20

Whois 98.88.19.20

IP Abuse Reports for 98.88.19.20:

This IP address has been reported a total of 32 times from 28 distinct sources. 98.88.19.20 was first reported on June 17th 2026, and the most recent report was 16 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 2000cn.com.au	2026-06-17 21:51:59 (16 minutes ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇬🇧 Apache	2026-06-17 21:37:55 (30 minutes ago)	(mod_security) mod_security (id:210492) triggered by 98.88.19.20 (US/United States/ec2-98-88-19-20.c ... show more (mod_security) mod_security (id:210492) triggered by 98.88.19.20 (US/United States/ec2-98-88-19-20.compute-1.amazonaws.com): 5 in the last 300 secs (CF_ENABLE) show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-17 21:31:23 (36 minutes ago)	(mod_security) mod_security (id:210492) triggered by 98.88.19.20 (ec2-98-88-19-20.compute-1.amazonaw ... show more (mod_security) mod_security (id:210492) triggered by 98.88.19.20 (ec2-98-88-19-20.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 17:31:19.015851 2026] [security2:error] [pid 11639:tid 11639] [client 98.88.19.20:38260] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.121"] [uri "/.git/HEAD"] [unique_id "ajMSJ5ybSE8J-MOAxHC_twAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Starburst SysOp Team	2026-06-17 21:22:59 (45 minutes ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-mnz6-1)	Hacking Bad Web Bot
🇳🇱 tpjg	2026-06-17 20:57:45 (1 hour ago)	Automated: 15 requests with error status in 120s window from 98.88.19.20. Evidence: /.env_production ... show more Automated: 15 requests with error status in 120s window from 98.88.19.20. Evidence: /.env_production:301,/.env.docker:301,/.env.bak:301,/.env.old:301,/.env.prod:301,/.env.save:301,/.env.backup:301,/.env.production:301,/.env.local:301,/.env:301,/.git/index:301,/.git/refs/heads/main:301,/.git/refs/heads/master:301,/.git/logs/HEAD:301,/.git/HEAD:301 show less	Web App Attack
🇩🇪 Teufel100	2026-06-17 20:34:08 (1 hour ago)	ModSecurity rejected a query	Brute-Force Hacking Web App Attack
🇫🇷 Coco Bongo	2026-06-17 20:31:10 (1 hour ago)	98.88.19.20 [redacted] (14618-AMAZON-AES United States Ashburn) - - [17/Jun/2026:22:30:54 +0200] "GE ... show more 98.88.19.20 [redacted] (14618-AMAZON-AES United States Ashburn) - - [17/Jun/2026:22:30:54 +0200] "GET /.git/HEAD HTTP/1.1" 404 118 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:125.0) Gecko/20100101 Fir ... show less	Bad Web Bot Web App Attack
🇫🇷 evvsk	2026-06-17 20:00:17 (2 hours ago)	2086/tcp	Port Scan
🇺🇸 theblocker	2026-06-17 19:44:21 (2 hours ago)	Hacking Attempts	Brute-Force Hacking
🇺🇸 kelliwic.net	2026-06-17 19:09:09 (2 hours ago)	Port scan detected (F2B)	Port Scan
🇩🇪 SwinT	2026-06-17 19:00:05 (3 hours ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
🇺🇸 TPI-Abuse	2026-06-17 18:45:00 (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 98.88.19.20 (ec2-98-88-19-20.compute-1.amazonaw ... show more (mod_security) mod_security (id:210492) triggered by 98.88.19.20 (ec2-98-88-19-20.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 14:44:56.092315 2026] [security2:error] [pid 17897:tid 17897] [client 98.88.19.20:36828] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.151.17"] [uri "/.git/config"] [unique_id "ajLrKECAc9MJcAAoCn02agAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 edena	2026-06-17 18:42:52 (3 hours ago)	98.88.19.20 - - [17/Jun/2026:20:42:51 +0200] "GET /.env HTTP/1.1" 403 322 "-" "Mozilla/5.0 (Linux; A ... show more 98.88.19.20 - - [17/Jun/2026:20:42:51 +0200] "GET /.env HTTP/1.1" 403 322 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Mobile Safari/537.36" 98.88.19.20 - - [17/Jun/2026:20:42:51 +0200] "GET /.env.local HTTP/1.1" 403 322 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 98.88.19.20 - - [17/Jun/2026:20:42:51 +0200] "GET /.env.production HTTP/1.1" 403 322 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.4; rv:125.0) Gecko/20100101 Firefox/125.0" ... show less	Web App Attack Bad Web Bot
🇲🇳 Public CSIRT/CC of Mongolia	2026-06-17 18:09:37 (3 hours ago)	Honeypot hit: Empty payload (likely service probe); 2078 [1], 2096 [1], 2083 [1], 2086 [1], 2077 [1] ... show more Honeypot hit: Empty payload (likely service probe); 2078 [1], 2096 [1], 2083 [1], 2086 [1], 2077 [1], 2082 [1] TCP show less	Port Scan
🇦🇱 router.al	2026-06-17 18:05:04 (4 hours ago)	06/17/2026-18:05:04.297364 98.88.19.20 Protocol: 6 ET WEB_SERVER WEB-PHP phpinfo access	Port Scan

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 200.68.161.186

🇳🇱 109.236.86.20

🇺🇸 91.230.168.176

🇮🇪 80.233.42.252

🇷🇴 2.57.121.112

🇺🇸 205.210.31.104

🇳🇱 176.65.148.215

🇺🇸 163.192.126.214

🇮🇷 37.255.70.0

🇯🇵 8.216.80.160

🇮🇳 217.217.248.93

🇺🇸 205.210.31.71

🇧🇷 191.210.72.37

🇮🇳 182.95.232.66

🇲🇾 149.118.135.252

🇺🇸 74.82.47.3

🇫🇮 65.108.99.42

🇱🇹 45.227.254.170

🇳🇱 45.148.10.230

🇸🇬 43.173.160.177