98.168.101.166

Classification: Malicious

98.168.101.166 is a malicious IP address in Norfolk, US. 1,411 sightings from AbuseIPDB and Blocklist.de (Bruteforce, Mail Spammer), last seen 2026-11-06.

Current activity

Known attacker — Seen launching attacks over the Internet.
Known scanner — Seen scanning hosts over the Internet.

Blacklist sightings

Description	Source	First seen	Last seen	Labels	MITRE ATT&CK
Mail Spammer	Blocklist.de	2026-05-20 08:05:25	2026-11-06 12:04:22	attacker malicious-activity
IMAP Attacker	Blocklist.de	2026-05-19 07:02:54	2026-11-06 11:03:46	attacker malicious-activity
Bruteforce	AbuseIPDB	2026-07-08 17:55:15	2026-10-06 15:26:15	attacker malicious-activity
Mail Spammer	AbuseIPDB	2026-07-10 16:22:49	2026-10-06 04:45:13	attacker malicious-activity
DDoS Attacker	AbuseIPDB	2026-07-30 17:08:44	2026-10-05 06:36:21	attacker malicious-activity
Hacking	AbuseIPDB	2026-07-10 16:22:49	2026-10-05 04:19:32	attacker malicious-activity
Malicious Host	AbuseIPDB	2026-05-21 17:44:59	2026-10-04 23:38:05	attacker compromised malicious-activity
HTTP Attacker	AbuseIPDB	2026-07-31 07:31:09	2026-10-03 04:09:04	attacker malicious-activity
Port Scanner	AbuseIPDB	2026-07-10 14:35:41	2026-10-02 18:22:18	attacker malicious-activity reconnaissance
HTTP Scrapper	AbuseIPDB	2026-08-29 06:35:30	2026-09-24 22:25:43	attacker malicious-activity
SSH Attacker	AbuseIPDB	2026-07-28 06:03:02	2026-09-22 22:53:00	attacker malicious-activity
IMAP Attacker	AbuseIPDB	2026-07-11 00:25:32	2026-09-19 20:30:19	attacker malicious-activity
Suspicious Host	AbuseIPDB	2026-05-19 00:06:12	2026-05-19 00:06:12	anomalous-activity

Tags

attacker imap pop3 sasl bot mail spam

Whois information

AS name: AS22773 Cox Communications Inc.
Registrant: Cox Communications Inc.
City: Norfolk
State: VA
Postal code: 23514
Country: US — United States 🇺🇸
First indexed: 2026-05-19 01:18:53
Last updated: 2026-11-06 12:04:22