JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 98.94.22.227

98.94.22.227 was found in our database!

This IP was reported 97 times. Confidence of Abuse is 100%: ?

100%

ISP	Amazon Data Services Northern Virginia
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-98-94-22-227.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 98.94.22.227

Whois 98.94.22.227

IP Abuse Reports for 98.94.22.227:

This IP address has been reported a total of 97 times from 74 distinct sources. 98.94.22.227 was first reported on July 1st 2026, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇴 tmiland	2026-07-11 15:23:50 (4 hours ago)	Suricata Detected 2 attacks from 98.94.22.227.; ET CINS Active Threat Intelligence Poor Reputation I ... show more Suricata Detected 2 attacks from 98.94.22.227.; ET CINS Active Threat Intelligence Poor Reputation IP group 139; IP: 98.94.22.227; Ports: 28638; Direction: to_server; Trigger: CINS; Category: Misc Attack; Severity: 2 show less	Brute-Force
🇨🇦 Arpan Sen	2026-07-11 14:27:03 (5 hours ago)	Network port/address scan: probed 1 distinct port(s) across 64 host(s); 100% of connections received ... show more Network port/address scan: probed 1 distinct port(s) across 64 host(s); 100% of connections received no service (SYN, no reply) -- passive network sensor. show less	Port Scan
🇨🇦 Tanados	2026-07-11 02:26:17 (17 hours ago)	Blocked by UFW [8443/tcp] Source port: 45764 TTL: 115 Packet length: 60 TOS: 0x00 This report was g ... show more Blocked by UFW [8443/tcp] Source port: 45764 TTL: 115 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-07-10 23:20:05 (20 hours ago)	Blocked by os-abuseipdb; 3 hits, proto=tcp, ports=11443	Port Scan Hacking
🇳🇱 DonAtari	2026-07-10 22:00:40 (22 hours ago)	DShield firewall scan - TCP to port 9443	Brute-Force SSH
🇨🇳 さいとうあすか	2026-07-10 11:12:49 (1 day ago)	Jul 10 19:12:47 pbs sshd[762371]: Connection closed by 98.94.22.227 port 64106 [preauth] ...	Brute-Force SSH
🇺🇸 ISPLtd	2026-07-10 09:46:55 (1 day ago)	Jul 10 03:46:51 98.94.22.227 TCP SPT=12982 DPT=8443 SYN Jul 10 03:46:52 98.94.22.227 TCP SPT=12982 D ... show more Jul 10 03:46:51 98.94.22.227 TCP SPT=12982 DPT=8443 SYN Jul 10 03:46:52 98.94.22.227 TCP SPT=12982 DPT=8443 SYN Jul 10 03:46:54 98.94.22.227 TCP SPT=12982 DPT=8443 ... show less	Port Scan
🇩🇪 Fahreddin Ergin	2026-07-10 07:36:09 (1 day ago)	Detected by CrowdSec / Wazuh on Echoserver Hetzner cluster (automated brute-force ban)	Brute-Force SSH Port Scan
🇫🇷 ISPLtd	2026-07-10 06:10:00 (1 day ago)	Jul 10 03:09:56 98.94.22.227 TCP SPT=43236 DPT=11443 SYN Jul 10 03:09:57 98.94.22.227 TCP SPT=43236 ... show more Jul 10 03:09:56 98.94.22.227 TCP SPT=43236 DPT=11443 SYN Jul 10 03:09:57 98.94.22.227 TCP SPT=43236 DPT=11443 SYN Jul 10 03:09:59 98.94.22.227 TCP SPT=43236 DPT=11443 ... show less	Port Scan
🇨🇿 kronos	2026-07-10 03:11:37 (1 day ago)	IDS: FlowIntel scan-like source \| SID:9900001 \| session_sigs:1600 \| alerts5m:1600	Port Scan
🇸🇪 NordhTech	2026-07-09 20:45:11 (1 day ago)	More than 3 malicious connection attempts, trying port(s) 9200/tcp, then blocked from services ...	Port Scan Hacking
🇺🇸 cwytech	2026-07-09 19:12:01 (2 days ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/pf-geofence-high.	Hacking
Anonymous	2026-07-09 19:01:09 (2 days ago)	[Firewall] SSH Brute-Force \| Proto: TCP (NEW) \| Src port: 28114 \| Dst port: 22 (SSH) \| Pkt len: 60 \| ... show more [Firewall] SSH Brute-Force \| Proto: TCP (NEW) \| Src port: 28114 \| Dst port: 22 (SSH) \| Pkt len: 60 \| Attempts logged: 2 \| ISP: Amazon.com \| Origin: Ashburn, United States \| Prior AbuseIPDB score: 100% (83 reports) \| Detected: 2026-07-09 13:55 CST \| Promoted to blacklist after repeated attempts \| Banned: 6d23h55m1s show less	Brute-Force
🇺🇸 MPL	2026-07-09 18:50:28 (2 days ago)	tcp/7443 (3 or more attempts)	Port Scan
🇺🇸 ISPLtd	2026-07-09 09:44:26 (2 days ago)	Jul 9 03:44:22 98.94.22.227 TCP SPT=31014 DPT=31337 SYN Jul 9 03:44:23 98.94.22.227 TCP SPT=31014 ... show more Jul 9 03:44:22 98.94.22.227 TCP SPT=31014 DPT=31337 SYN Jul 9 03:44:23 98.94.22.227 TCP SPT=31014 DPT=31337 SYN Jul 9 03:44:25 98.94.22.227 TCP SPT=31014 DPT=31337 WIND ... show less	Port Scan

Showing 1 to 15 of 97 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.154

🇧🇷 205.210.31.140

🇧🇩 203.26.240.83

🇬🇧 185.216.145.181

🇵🇱 176.53.159.198

🇬🇧 154.16.44.9

🇭🇰 150.5.131.119

🇯🇵 87.249.128.218

🇷🇴 80.94.92.234

🇲🇾 47.250.161.80

🇩🇪 43.228.157.8

🇵🇰 38.100.223.43

🇺🇸 20.38.35.209

🇺🇸 18.222.166.96

🇫🇮 2a01:4f9:6b:4840::2

🇺🇿 213.230.93.76

🇵🇰 210.56.12.205

🇰🇷 203.242.185.32

🇵🇱 176.53.159.197

🇦🇷 168.121.33.129