198.58.100.99
Classification: Malicious
198.58.100.99 is a malicious IP address. Reported by 4 threat sources, last seen 2026-08-23. Network: AS63949 Linode.
Current activity
- Known attacker — Seen launching attacks over the Internet.
- Known scanner — Seen scanning hosts over the Internet.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Malicious Host | CIArmy | 2024-07-06 20:05:58 | 2026-08-23 20:02:50 | attacker malicious-activity | |
| ET CINS Active Threat Intelligence Poor Reputation IP UDP | Emerging Threats | 2026-05-19 03:26:47 | 2026-08-22 09:17:40 | attacker malicious-activity | |
| ET CINS Active Threat Intelligence Poor Reputation IP TCP | Emerging Threats | 2026-05-19 03:26:45 | 2026-08-22 09:17:38 | attacker malicious-activity | |
| SSH Attacker | Blocklist.de | 2024-08-01 11:03:15 | 2026-08-20 14:00:51 | attacker malicious-activity | |
| HTTP Attacker | AbuseIPDB | 2024-07-17 00:18:54 | 2026-08-11 17:57:57 | attacker malicious-activity | |
| Hacking | AbuseIPDB | 2024-07-14 03:43:16 | 2026-08-11 17:57:57 | attacker malicious-activity | |
| Phishing | AbuseIPDB | 2026-07-14 05:11:13 | 2026-08-11 15:23:04 | malicious-activity phishing | |
| Bruteforce | AbuseIPDB | 2024-07-19 16:13:52 | 2026-08-11 15:23:04 | attacker malicious-activity | |
| HTTP Scrapper | AbuseIPDB | 2024-07-29 17:30:05 | 2026-08-11 15:22:22 | anomalous-activity attacker malicious-activity | |
| Port Scanner | AbuseIPDB | 2024-07-12 02:05:08 | 2026-08-11 09:47:13 | anomalous-activity attacker malicious-activity reconnaissance | |
| Malicious Host | AbuseIPDB | 2024-07-11 22:04:10 | 2026-08-08 09:44:18 | attacker compromised malicious-activity | |
| SIP Attacker | AbuseIPDB | 2026-08-08 05:49:16 | 2026-08-08 05:49:16 | attacker malicious-activity | |
| Mail Spammer | AbuseIPDB | 2024-08-01 12:52:10 | 2026-08-02 00:23:17 | attacker malicious-activity | |
| SSH Attacker | AbuseIPDB | 2024-08-01 02:01:51 | 2026-08-01 01:17:16 | attacker malicious-activity | |
| SQL Injection | AbuseIPDB | 2026-07-24 20:42:48 | 2026-07-24 20:42:48 | attacker malicious-activity | |
| IMAP Attacker | AbuseIPDB | 2026-07-14 05:11:13 | 2026-07-20 06:55:01 | attacker malicious-activity | |
| DDoS Attacker | AbuseIPDB | 2026-05-23 10:07:06 | 2026-05-23 10:07:06 | attacker malicious-activity | |
| IoT Attacker | AbuseIPDB | 2026-05-23 10:07:06 | 2026-05-23 10:07:06 | malicious-activity | |
| Suspicious Host | AbuseIPDB | 2024-07-11 09:20:49 | 2026-05-16 22:49:19 | anomalous-activity | |
| Mail Spammer | Blocklist.de | 2024-07-05 10:59:15 | 2024-11-21 09:34:42 | malicious-activity | |
| DDoS attack | AbuseIPDB | 2024-07-12 03:18:43 | 2024-10-06 09:16:11 | malicious-activity | |
| HTTP Attacker | Blocklist.de | 2024-08-10 08:43:44 | 2024-08-11 07:18:56 | malicious-activity |
Tags
mail spam ssh bruteforce bot apache ddos rfi attackerWhois information
- AS name
- AS63949 Linode
- AS registry
- arin
- AS date
- 2012-08-10 00:00:00
- AS CIDR
- 198.58.96.0/19
- CIDR
- 198.58.96.0/19
- Registrant
- Linode
- Address
- 145 Broadway
- City
- Plano
- State
- TX
- Postal code
- 75082
- Country
- US — United States 🇺🇸
- Contact email
- [email protected], [email protected], [email protected], [email protected]
- First indexed
- 2024-07-05 10:59:15
- Last updated
- 2026-08-23 20:02:51