98.93.209.120
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Amazon Data Services Northern Virginia
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14618
- Hostname(s)
- ec2-98-93-209-120.compute-1.amazonaws.com
- Domain Name
- amazon.com
- Country
- 🇺🇸 United States of America
- City
- Ashburn, Virginia
Abuse Reports
Total reports
44 from
40 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇩🇪 wlt-blocker |
Illegal port scans
|
Port Scan | |
| 🇹🇷 mixnet |
Port scan: SYN-only probes to 1,022 hosts / 1 port (8000) in 10 minutes. Detected by Mixnet network flow monitoring.
|
Port Scan | |
| 🇩🇪 _ArminS_ |
SP-Scan 12336:8080 detected 2026.11.07 22:43:15
blocked until 2026.12.27 15:46:02
|
Port Scan | |
| 🇸🇪 NordhTech |
Multiple malicious connection attempts detected, trying port(s) 8443/tcp, then blocked by firewall.
|
Port Scan Hacking | |
| Anonymous |
Drop from IP address 98.93.209.120 to tcp-port 56001
|
Port Scan | |
| 🇧🇾 lns.bz |
SSH bruteforce [BY]
|
SSH | |
| 🇫🇷 Kejult |
Honeypot Finding: repeated TCP service probing on TCP/12443 (service); 2 application-level events across 2 source port(s). Sensor(s): Honeytrap.
|
Port Scan | |
| 🇳🇱 VMHeaven.io |
Blocked by UFW [1224/tcp]
Source port: 59040
TTL: 110
Packet length: 60
|
Port Scan | |
| 🇺🇸 donarev419 |
Connection to port 3232 with data transfer.
Data preview:
|
Port Scan Hacking | |
| 🇨🇿 kronos |
IDS: FlowIntel scan-like source | SID:9900001 | session_sigs:1600 | alerts5m:1600
|
Port Scan | |
| 🇳🇱 Tsumugi Kotobuki |
Port Scan on Honeypot | Ports: 8443/HTTPS-alt | Proto: TCP(1) | Flags: all SYN | TTL: 109 | Len: 60B | Win: 62727(1) | rDNS: ec2-98-93-209-120.compute-1.amazonaws.com | F2B/ufw-honeypot@2026-11-07T02:51:45Z
|
Port Scan Hacking | |
| 🇦🇺 LiftUp Hosting |
Honeypot hit: Unauthorized traffic (243 bytes of payload); 8000 [1] TCP
|
Port Scan | |
| 🇯🇵 jsys |
Automated report (nfacl NetFlow analysis, 300s window): host sweep (1024 distinct dst hosts); SYN-flood-like small-packet flows (1024 small-packet flows)
|
DDoS Attack Port Scan | |
| 🇭🇰 PingMeMaybe |
Blocked by UFW on hk [3232/tcp]
Source port: 35220
TTL: 115
Packet length: 60
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇹🇷 teklasbt |
Auto-blocked by Seczar SecureOps — High-Risk Port Probe (admin-managed entries) — Elasticsearch (12 events in 10min) at 2026-11-06 21:25
|
Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown