IP address

Passive DNS

Tags:

IP blacklists

CI Army

98.91.96.229 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2025-12-14 03:50:01.107000
Was present on blacklist at: 2025-11-14 03:50, 2025-11-15 03:50, 2025-11-16 03:50, 2025-11-17 03:50, 2025-11-18 03:50, 2025-12-09 03:50, 2025-12-11 03:50, 2025-12-12 03:50, 2025-12-13 03:50, 2025-12-14 03:50

DataPlane VNC RFB

98.91.96.229 is listed on the DataPlane VNC RFB blacklist.

Description: DataPlane.org is a community-powered Internet data, feeds,<br>and measurement resource for operators, by operators. IPs initiating<br>an unsolicited VNC remote frame buffer (RFB) session to a remote host.
Type of feed: primary (feed detail page)

Last checked at: 2025-12-08 07:10:01.246000
Was present on blacklist at: 2025-11-17 15:10, 2025-11-17 19:10, 2025-11-18 03:10, 2025-11-18 07:10, 2025-11-18 15:10, 2025-11-18 19:10, 2025-11-19 03:10, 2025-11-19 07:10, 2025-11-19 15:10, 2025-11-19 19:10, 2025-11-20 03:10, 2025-11-20 07:10, 2025-11-20 19:10, 2025-11-21 03:10, 2025-11-21 07:10, 2025-11-21 15:10, 2025-11-21 19:10, 2025-11-22 03:10, 2025-11-22 07:10, 2025-11-22 15:10, 2025-11-22 19:10, 2025-11-23 03:10, 2025-11-23 07:10, 2025-11-23 15:10, 2025-11-23 19:10, 2025-11-24 03:10, 2025-11-24 07:10, 2025-12-01 15:10, 2025-12-01 19:10, 2025-12-02 03:10, 2025-12-02 07:10, 2025-12-02 15:10, 2025-12-02 19:10, 2025-12-03 03:10, 2025-12-03 07:10, 2025-12-03 15:10, 2025-12-03 19:10, 2025-12-04 03:10, 2025-12-04 07:10, 2025-12-04 15:10, 2025-12-04 19:10, 2025-12-05 03:10, 2025-12-05 07:10, 2025-12-05 15:10, 2025-12-05 19:10, 2025-12-06 03:10, 2025-12-06 07:10, 2025-12-06 15:10, 2025-12-06 19:10, 2025-12-07 03:10, 2025-12-07 07:10, 2025-12-07 15:10, 2025-12-07 19:10, 2025-12-08 03:10, 2025-12-08 07:10

Spamhaus XBL CBL

98.91.96.229 is listed on the Spamhaus XBL CBL blacklist.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2025-12-12 03:54:01.480000
Was present on blacklist at: 2025-12-12 03:54

DShield reports (IP summary, reports)

2025-11-13: Number of reports: 14; Distinct targets: 5
2025-11-14: Number of reports: 111; Distinct targets: 62
2025-11-15: Number of reports: 71; Distinct targets: 42
2025-11-16: Number of reports: 71; Distinct targets: 42
2025-11-17: Number of reports: 17; Distinct targets: 9
2025-11-18: Number of reports: 17; Distinct targets: 9
2025-11-24: Number of reports: 17; Distinct targets: 12
2025-11-25: Number of reports: 17; Distinct targets: 12
2025-11-28: Number of reports: 21; Distinct targets: 11
2025-11-29: Number of reports: 21; Distinct targets: 11
2025-12-01: Number of reports: 22; Distinct targets: 13
2025-12-02: Number of reports: 22; Distinct targets: 13
2025-12-08: Number of reports: 15; Distinct targets: 8
2025-12-13: Number of reports: 17; Distinct targets: 9

Origin AS: AS14618 - AMAZON-AES
BGP Prefix: 98.88.0.0/13
geo: United States, Ashburn; 🕑 America/New_York
hostname: prod-boron-us-east-1-1.awp.binaryedge.ninja
Address block ('inetnum' or 'NetRange' in whois database): 98.80.0.0 - 98.95.255.255
reserved_range: 0
ts_added: 2025-11-14 03:53:55.584000
ts_last_update: 2025-12-15 03:54:03.021000

Warden event timeline

DShield event timeline

Presence on blacklists