JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 98.89.110.216

98.89.110.216 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 46%: ?

46%

ISP	Amazon Data Services Northern Virginia
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-98-89-110-216.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 98.89.110.216

Whois 98.89.110.216

IP Abuse Reports for 98.89.110.216:

This IP address has been reported a total of 32 times from 19 distinct sources. 98.89.110.216 was first reported on January 9th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 barbarella	2026-08-27 07:54:16 (1 day ago)	Login attempt to Wordpress Blog (GET /wp-login.php?redirect_to=https://blog.gabriella-schmidt.de/tag ... show more Login attempt to Wordpress Blog (GET /wp-login.php?redirect_to=https://blog.gabriella-schmidt.de/tag/nachtlichter/) show less	Hacking Web App Attack
🇩🇪 HandyTreff.de	2026-08-21 18:16:38 (1 week ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -138.874 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -138.874 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amzn-SearchBot/0.1) Chrome/119.0.6045 show less	Web App Attack Bad Web Bot
🇨🇦 Anytech	2026-08-18 16:57:29 (1 week ago)	Blocked by Conn-Monitor: Automated bot activity	Bad Web Bot Web App Attack
Anonymous	2026-08-17 18:32:58 (1 week ago)	Web application attack detected.	Web App Attack
🇩🇪 maxpower	2026-08-09 19:58:17 (2 weeks ago)	(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 98.89.110.216 (US/United States/ec2-98-89-110- ... show more (wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 98.89.110.216 (US/United States/ec2-98-89-110-216.compute-1.amazonaws.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 98.89.110.216 - - [09/Aug/2026:21:58:11 +0200] "GET /wp-json/wp/v2/users/5 HTTP/1.1" 200 604 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amzn-SearchBot/0.1) Chrome/119.0.6045.214 Safari/537.36" "-" host=orem.it show less	Port Scan
🇺🇸 SX Communications	2026-08-08 18:34:00 (2 weeks ago)	Blocked abusive HTTP application-layer DoS / botnet traffic from 98.89.110.216: traffic from this ad ... show more Blocked abusive HTTP application-layer DoS / botnet traffic from 98.89.110.216: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇵🇱 Budyn	2026-08-06 16:27:08 (3 weeks ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: teddypot.website \| URI: /actuator/env \| UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amzn-SearchBot/0.1) Chrome/119.0.6045.214 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-08-04 18:46:00 (3 weeks ago)	IPBlock protected site ID [4055-d][s=02]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
🇺🇸 SX Communications	2026-08-04 18:45:51 (3 weeks ago)	Blocked abusive HTTP application-layer DoS / botnet traffic from 98.89.110.216: traffic from this ad ... show more Blocked abusive HTTP application-layer DoS / botnet traffic from 98.89.110.216: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇺🇸 SX Communications	2026-07-29 19:02:33 (4 weeks ago)	Blocked abusive HTTP application-layer DoS / botnet traffic from 98.89.110.216: traffic from this ad ... show more Blocked abusive HTTP application-layer DoS / botnet traffic from 98.89.110.216: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇩🇪 batmanbeyond	2026-07-13 13:34:00 (1 month ago)	Intento de inclusión remota de archivos Agente de usuario Mozilla/5.0 AppleWebKit/537.36 (KHTML, li ... show more Intento de inclusión remota de archivos Agente de usuario Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amzn-SearchBot/0.1) Chrome/119.0.6045.214 Safari/537.36 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 webgobe	2026-07-10 05:12:36 (1 month ago)	jow-Joomla User : try to access forms...	Hacking
🇩🇪 HandyTreff.de	2026-07-08 12:21:28 (1 month ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -138.874 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -138.874 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amzn-SearchBot/0.1) Chrome/119.0.6045 show less	Web App Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-03 10:35:57 (1 month ago)	(mod_security) mod_security (id:211190) triggered by 98.89.110.216 (ec2-98-89-110-216.compute-1.amaz ... show more (mod_security) mod_security (id:211190) triggered by 98.89.110.216 (ec2-98-89-110-216.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 06:35:50.127519 2026] [security2:error] [pid 17126:tid 17126] [client 98.89.110.216:0] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt\|\|autodiscover.tellusafe.com\|F\|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /?file=../../../../etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.tellusafe.com"] [uri "/"] [unique_id "akeQhoz_vNgeJDEfmYoB_gAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Gwyneth Llewelyn	2026-07-01 09:47:16 (1 month ago)	98.89.110.216 - - [01/Jul/2026:10:47:15 +0100] "GET /roundcube/wp-login.php&quot HTTP/2.0" 404 994 " ... show more 98.89.110.216 - - [01/Jul/2026:10:47:15 +0100] "GET /roundcube/wp-login.php&quot HTTP/2.0" 404 994 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amzn-SearchBot/0.1) Chrome/119.0.6045.214 Safari/537.36" show less	Bad Web Bot

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 220.85.210.200

🇺🇸 205.210.31.41

🇳🇱 193.47.62.69

🇦🇷 186.22.62.67

🇵🇰 182.177.137.231

🇰🇷 150.109.254.122

🇺🇸 147.185.132.129

🇰🇷 121.131.220.133

🇺🇸 104.152.52.212

🇫🇷 91.231.89.50

🇳🇱 45.156.128.51

🇧🇬 213.155.30.87

🇬🇧 193.8.186.31

🇳🇱 185.223.235.26

🇨🇱 181.160.133.156

🇹🇭 180.183.248.152

🇺🇸 64.62.156.212

🇺🇸 64.62.156.39

🇹🇼 49.216.127.3

🇮🇩 38.253.224.41