AbuseIPDB » 198.211.108.20
IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.
Top Reporter Countries (Last 60 Days)
Example previewReport Categories (Last 60 Days)
Example previewIP Abuse Reports for 198.211.108.20:
This IP address has been reported a total of 149 times from 73 distinct sources. 198.211.108.20 was first reported on , and the most recent report was . In the last 60 days, the top reporter locations were: United States of America with 3 reports; Switzerland with 1 report; Germany with 1 report. The most common categories in these recent reports were: Port Scan 6 times; Hacking 2 times; Exploited Host 1 time; Web App Attack 1 time.
| Reporter | IoA Timestamp (UTC) | Comment | Categories | |
|---|---|---|---|---|
| 🇺🇸 MPL |
tcp/9200 (2 or more attempts)
|
Port Scan | ||
| 🇳🇱 donarev419 |
|
Port Scan Hacking | ||
| 🇺🇸 MPL |
tcp/9200
|
Port Scan | ||
| 🇹🇷 SeczarSecureOps |
|
Web App Attack | ||
| 🇨🇭 dirtronin |
|
Port Scan Hacking Exploited Host | ||
| 🇺🇸 RAP |
2026-08-12 06:32:04 UTC Unauthorized activity to TCP port 9200.
|
Port Scan | ||
| 🇩🇪 ValtonTahiri |
|
Port Scan | ||
| 🇳🇱 donarev419 |
|
Port Scan Hacking | ||
| 🇺🇸 MPL |
tcp/5552
|
Port Scan | ||
| 🇸🇬 drewf.ink |
[10:27] Port scanning. Port(s) scanned: TCP/2181
|
Port Scan | ||
| 🇫🇷 GoodOldTOS |
Connection to mysql honeypot
|
Hacking | ||
| 🇩🇪 Mailguard-FRD |
1774242275 - 03/23/2026 06:04:35 Host: 198.211.108.20/198.211.108.20 Port: 1433 TCP Blocked
...
|
Port Scan | ||
| 🇩🇪 Moritz |
Honeypot hit: Empty payload (likely service probe); 2181 [15] TCP
|
Port Scan | ||
| 🇦🇪 abusiveIntelligence |
RDP connect attempt: Nmap Scanner
|
Brute-Force | ||
| 🇨🇿 SeMPaI |
SSH honeypot login attempt
|
Brute-Force SSH |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩