This IP address has been reported a total of
104
times from
38 distinct
sources.
185.209.198.213 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Czechia
with 16
reports;
Sweden
with 10
reports;
Germany
with 9
reports.
The most common categories in these recent reports were:
Brute-Force
37
times;
Web App Attack
27
times;
Hacking
17
times;
SSH
15
times;
Port Scan
14
times;
Other
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-10-18T07:18:17.133164+00:00 nbg01-02-mail postfix/smtps/smtpd[61296]: lost connection after CON ...
show more2026-10-18T07:18:17.133164+00:00 nbg01-02-mail postfix/smtps/smtpd[61296]: lost connection after CONNECT from unknown[185.209.198.213]
2026-10-18T07:18:19.035266+00:00 nbg01-02-mail postfix/smtps/smtpd[61296]: lost connection after CONNECT from unknown[185.209.198.213]
2026-10-18T07:18:23.136264+00:00 nbg01-02-mail postfix/smtps/smtpd[61296]: lost connection after CONNECT from unknown[185.209.198.213]
...
show less
2026-10-18T08:12:43.052830+02:00 srv02 postfix/submission/smtpd[1422962]: lost connection after STAR ...
show more2026-10-18T08:12:43.052830+02:00 srv02 postfix/submission/smtpd[1422962]: lost connection after STARTTLS from unknown[185.209.198.213]
2026-10-18T08:12:47.212632+02:00 srv02 postfix/submission/smtpd[1422962]: lost connection after STARTTLS from unknown[185.209.198.213]
2026-10-18T08:12:47.536064+02:00 srv02 postfix/submission/smtpd[1423670]: lost connection after STARTTLS from unknown[185.209.198.213]
...
show less
Repeated SSH brute force and user enumeration attempts against a secured web server. Multiple failed ...
show moreRepeated SSH brute force and user enumeration attempts against a secured web server. Multiple failed authentication attempts from this IP across an extended period.
show less
Firewall: Within 2026-10-04 18:19:52 - 2026-10-05 13:58:56 CEST(+0200) identified: unallowed access ...
show moreFirewall: Within 2026-10-04 18:19:52 - 2026-10-05 13:58:56 CEST(+0200) identified: unallowed access from 185.209.198.213 on uncommon port/s: 7443(tcp:7443),22(ssh) (2 trials)
Fail2ban: Within 2026-10-04 18:19:52 - 2026-10-05 13:58:57 CEST(+0200) banned: 5 times by fail2ban[firewall]; 5 times by fail2ban[recidive]
show less
Port Scan
Brute-Force
SSH
Anonymous
Repeated SSH brute force and user enumeration attempts against a secured web server. Multiple failed ...
show moreRepeated SSH brute force and user enumeration attempts against a secured web server. Multiple failed authentication attempts from this IP across an extended period.
show less
Automated sensor: 6 SSH connection/probe attempts over the last 24h (latest 2026-10-05T11:19Z).
Brute-Force
SSH
Anonymous
SSH Brute-Force Attack
Brute-Force
SSH
Anonymous
Repeated SSH brute force and user enumeration attempts against a secured web server. Multiple failed ...
show moreRepeated SSH brute force and user enumeration attempts against a secured web server. Multiple failed authentication attempts from this IP across an extended period.
show less
2026-10-05T02:31:51.743852+00:00 sg-jumphost-server sshd[3161889]: Connection closed by 185.209.198. ...
show more2026-10-05T02:31:51.743852+00:00 sg-jumphost-server sshd[3161889]: Connection closed by 185.209.198.213 port 36494 [preauth]
2026-10-05T02:31:52.810674+00:00 sg-jumphost-server sshd[3161892]: Connection closed by 185.209.198.213 port 36506 [preauth]
...
show less
2026-10-05T02:12:30.432399+00:00 sg-jumphost-server sshd[3161418]: Connection closed by 185.209.198. ...
show more2026-10-05T02:12:30.432399+00:00 sg-jumphost-server sshd[3161418]: Connection closed by 185.209.198.213 port 53896 [preauth]
2026-10-05T02:12:31.364999+00:00 sg-jumphost-server sshd[3161420]: Connection closed by 185.209.198.213 port 53912 [preauth]
2026-10-05T02:12:32.286537+00:00 sg-jumphost-server sshd[3161422]: Connection closed by 185.209.198.213 port 53922 [preauth]
...
show less
Fail2Ban - [SSH]Brute-force login attempts on sshd ... [ice01,ice02,mx02,wa01,wa02]
Brute-Force
SSH
Anonymous
Repeated SSH brute force and user enumeration attempts against a secured server. Multiple failed aut ...
show moreRepeated SSH brute force and user enumeration attempts against a secured server. Multiple failed authentication attempts from this IP across an extended period.
show less
