JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 98.80.4.26

98.80.4.26 was found in our database!

This IP was reported 326 times. Confidence of Abuse is 87%: ?

87%

ISP	Amazon Data Services Northern Virginia
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	scanner-98-80-4-26.reposify.net
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 98.80.4.26

Whois 98.80.4.26

IP Abuse Reports for 98.80.4.26:

This IP address has been reported a total of 326 times from 139 distinct sources. 98.80.4.26 was first reported on July 21st 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇭🇰 sandra361	2026-08-11 20:09:17 (1 day ago)	Port scan detected: 31 attempts across 1 port (8181). \| Evidence: REAPER_TARPIT: IN=eth0 SRC=98.80.4 ... show more Port scan detected: 31 attempts across 1 port (8181). \| Evidence: REAPER_TARPIT: IN=eth0 SRC=98.80.4.26 LEN=45 TOS=0x14 PREC=0x00 TTL=50 ID=14686 DF PROTO=TCP SPT=38006 DPT=8181 WINDOW=64240 RES=0x00 ACK PSH URGP=0 show less	Port Scan
🇹🇼 taiwanfrp.me	2026-08-10 12:13:05 (2 days ago)	taiwanfrp NewUserConn auto-ban: reason=ip_over_target_scan_limit_60s1, conn10s=1, targets10m=1, targ ... show more taiwanfrp NewUserConn auto-ban: reason=ip_over_target_scan_limit_60s1, conn10s=1, targets10m=1, target=proxy:kiwicanary.MinecraftJavaj7z\|port:- show less	Port Scan Hacking
🇵🇱 sefinek.net	2026-08-08 20:57:39 (4 days ago)	Honeypot hit: HTTP/1.1 request on 6001 GET / User-Agent: Mozilla/5.0 (Windows NT 6.2;en-US) AppleWe ... show more Honeypot hit: HTTP/1.1 request on 6001 GET / User-Agent: Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/54.0.3106.99 Safari/537.32 Accept: / Accept-Encoding: gzip, deflate; 6001 [7] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇺🇸 donarev419	2026-08-08 10:15:04 (4 days ago)	Connection to port 8010 with data transfer. Data preview: GET / HTTP/1.1 Host: 107.175.212.44:8010 ... show more Connection to port 8010 with data transfer. Data preview: GET / HTTP/1.1 Host: 107.175.212.44:8010 User-Agent: Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKi show less	Port Scan Hacking
🇫🇷 Coco Bongo	2026-08-06 04:09:33 (1 week ago)	1785989372 - 08/06/2026 06:09:32 Host: 98.80.4.26/98.80.4.26 Port: 445 TCP Blocked ...	Port Scan
Anonymous	2026-08-05 15:16:33 (1 week ago)	SSH tarpit (endlessh) connection from 98.80.4.26	Brute-Force SSH
🇩🇪 dispaisyenterprises	2026-08-04 23:09:51 (1 week ago)	Honeypot [fra-de-honeypot]: Large payload (1560 bytes); 50470 [8] TCP Reported by DisPaisy Enterpris ... show more Honeypot [fra-de-honeypot]: Large payload (1560 bytes); 50470 [8] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 EvoX	2026-08-04 22:30:03 (1 week ago)	🛡️ Honeypot [bsts-tpot-hive]: Large payload (1560 bytes); 7001 [7] TCP	Bad Web Bot
🇵🇱 sefinek.net	2026-08-04 18:29:07 (1 week ago)	Honeypot hit: MSSQL traffic (on 1433) without login credentials Reported by: https://github.com/sefi ... show more Honeypot hit: MSSQL traffic (on 1433) without login credentials Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇩🇪 Mailguard-FRD	2026-08-04 06:54:17 (1 week ago)	Aug 4 08:54:17 [redacted] postfix/smtps/smtpd[338729]: lost connection after CONNECT from scanner-9 ... show more Aug 4 08:54:17 [redacted] postfix/smtps/smtpd[338729]: lost connection after CONNECT from scanner-98-80-4-26.reposify.net[98.80.4.26] ... show less	Email Spam Brute-Force
🇷🇴 gtheo99	2026-08-03 03:18:39 (1 week ago)	(CT) IP 98.80.4.26 (US/United States/scanner-98-80-4-26.reposify.net) found to have 323 connections	Port Scan
🇩🇪 karger	2026-07-30 04:23:20 (2 weeks ago)	SSH auth-attack	Brute-Force SSH
🇲🇳 Public CSIRT/CC of Mongolia	2026-07-29 17:30:54 (2 weeks ago)	Honeypot hit: Suspicious payload (possible command injection); 6666 [5] TCP	Hacking
🇬🇧 sandra361	2026-07-27 19:33:34 (2 weeks ago)	Port scan detected: 31 attempts across 1 port (88). \| Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=98.80 ... show more Port scan detected: 31 attempts across 1 port (88). \| Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=98.80.4.26 LEN=42 TOS=0x00 PREC=0x00 TTL=51 ID=50162 DF PROTO=TCP SPT=37532 DPT=88 WINDOW=64240 RES=0x00 ACK PSH URGP=0 show less	Port Scan
🇧🇷 diego	2026-07-27 12:26:29 (2 weeks ago)	[probe-168-134] 2026-07-27 12:08:36, Client: 98.80.4.26, Protocol: 6, Unauthorized activity to HTTP: ... show more [probe-168-134] 2026-07-27 12:08:36, Client: 98.80.4.26, Protocol: 6, Unauthorized activity to HTTP: GET / show less	Web App Attack

Showing 1 to 15 of 326 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 112.122.220.130

🇯🇵 47.245.54.58

🇩🇪 213.209.159.231

🇮🇩 210.79.142.230

🇧🇷 186.235.63.105

🇦🇷 181.165.37.49

🇸🇦 178.73.109.84

🇩🇿 154.242.50.181

🇷🇺 109.106.141.181

🇺🇸 73.59.149.225

🇩🇪 69.5.169.6

🇨🇳 61.183.86.2

🇲🇽 45.137.12.39

🇺🇸 45.33.109.8

🇬🇧 35.203.211.246

🇬🇧 35.203.210.190

🇧🇪 34.52.200.5

🇻🇳 27.79.41.176

🇺🇸 20.237.251.56

🇦🇴 193.163.125.251