98.171.138.140
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Cox Communications Inc.
- Usage Type
- Fixed Line ISP
- ASN
- AS22773
- Hostname(s)
- wsip-98-171-138-140.dc.dc.cox.net
- Domain Name
- cox.com
- Country
- 🇺🇸 United States of America
- City
- Fairfax, Virginia
Abuse Reports
Total reports
22 from
19 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 SX Communications |
HTTP application-layer DoS / botnet traffic from 98.171.138.140: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host.
|
DDoS Attack Bad Web Bot Exploited Host | |
| 🇩🇪 NetWatch |
NetWatch sensor network: The IP 98.171.138.140 executed unauthorized SSH login attempts.
|
Brute-Force SSH | |
| 🇳🇱 IPCollective Intelligence |
Mobile Proxy - IPCollective Intelligence
|
Open Proxy | |
| 🇧🇷 ICS Labs |
ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-11-09 UTC.
|
Brute-Force | |
| 🇫🇷 vtchost.com |
attempting login on honeypot ssh
...
|
Brute-Force SSH | |
| 🇩🇪 ghostwarriors |
Unauthorized connection attempt detected, SSH Brute-Force
|
Brute-Force Port Scan SSH | |
| Anonymous |
Fail2Ban - NGINX Honeypot - Botnet
|
Bad Web Bot | |
| 🇷🇸 Smel |
SIP/5060 Probe, Scan, BF, Hack -
|
Fraud VoIP Port Scan Hacking Brute-Force | |
| 🇷🇸 Smel |
Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -
|
Email Spam Hacking Brute-Force | |
| 🇳🇱 wlt-blocker |
Attempts to login to mail server with wrong username and/or password
|
Brute-Force | |
| 🇩🇪 nyuuzyou |
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-11-03T10:50:32Z.
|
Bad Web Bot | |
| Anonymous |
|
Brute-Force | |
| 🇲🇽 ulfhednar76 |
Automated attacks against WordPress/WooCommerce web applications (login brute-force and probing for exposed files and vulnerable endpoints). Blocked at the web server via deny rules.
|
Web App Attack | |
| 🇵🇱 Budyn |
|
Bad Web Bot Web App Attack | |
| Anonymous |
| Multiple SQL injection attempts from same source ip.(multiple servers)
|
Web App Attack Hacking SQL Injection |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown