JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

198.211.117.198

Neutral Activity

Abuse confidence score ?

0% Low Risk

190 reports

93 reporters · latest 4 months ago

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	North Bergen, New Jersey

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

198.211.117.198 has been reported 190 times. The most recent report is from 4 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 198.211.117.198

Export CSV

This IP address has been reported a total of 190 times from 93 distinct sources. 198.211.117.198 was first reported on April 4th 2025, and the most recent report was 4 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 donarev419	2026-05-27 01:39:03 (4 months ago)	Connection to port 3128 with data transfer. Data preview: GET / HTTP/1.1 Host: 107.175.212.44:3128 ... show more Connection to port 3128 with data transfer. Data preview: GET / HTTP/1.1 Host: 107.175.212.44:3128 User-Agent: Mozilla/5.0 zgrab/0.x Accept: / Accept-En show less	Port Scan Hacking
🇧🇷 somosbr	2026-05-27 01:35:56 (4 months ago)	[2026-05-27T01:35:56Z] Unsolicited scan from 198.211.117.198 to port 3128/tcp	Port Scan
🇩🇪 femboy.cat	2026-05-27 00:46:59 (4 months ago)	Port scan to tcp/3128 from 198.211.117.198	Brute-Force
🇩🇪 dispaisyenterprises	2026-05-27 00:10:48 (4 months ago)	Honeypot [fra-de-honeypot]: HTTP/1.1 request on 3128 GET / User-Agent: Mozilla/5.0 zgrab/0.x Accept ... show more Honeypot [fra-de-honeypot]: HTTP/1.1 request on 3128 GET / User-Agent: Mozilla/5.0 zgrab/0.x Accept: / Accept-Encoding: gzip; 3128 [1] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇵🇱 sefinek.net	2026-05-27 00:09:35 (4 months ago)	Honeypot hit: HTTP/1.1 request on 3128 GET / User-Agent: Mozilla/5.0 zgrab/0.x Accept: / Accept-E ... show more Honeypot hit: HTTP/1.1 request on 3128 GET / User-Agent: Mozilla/5.0 zgrab/0.x Accept: / Accept-Encoding: gzip; 3128 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇲🇹 neilcaruana	2026-05-27 00:05:22 (4 months ago)	Sentinel detected an attack on port [3128]	Hacking
🇵🇱 nfsec.pl	2026-05-27 00:05:21 (4 months ago)	Detected: TCP scan on port: 3128 with flags: SYN	Port Scan
🇬🇧 gbzret4d	2026-05-26 23:46:05 (4 months ago)	Honeypot [uk-production01]: HTTP/1.1 request on 3128 GET / User-Agent: Mozilla/5.0 zgrab/0.x Accept ... show more Honeypot [uk-production01]: HTTP/1.1 request on 3128 GET / User-Agent: Mozilla/5.0 zgrab/0.x Accept: / Accept-Encoding: gzip; 3128 [1] TCP show less	Hacking Bad Web Bot
🇯🇵 mkaraki	2026-05-26 23:33:08 (4 months ago)	1779838387 # Service_probe # SIGNATURE_SEND # source_ip:198.211.117.198 # dst_port:3128 ...	Port Scan
🇩🇪 anycast_ac	2026-05-26 23:12:11 (4 months ago)	[mirai-detector honeypot] Inbound attack against our honeypot on tcp/3128 (generic). Commands captur ... show more [mirai-detector honeypot] Inbound attack against our honeypot on tcp/3128 (generic). Commands captured: $ GET / HTTP/1.1 show less	DDoS Attack IoT Targeted Brute-Force
🇦🇺 LiftUp Hosting	2026-05-26 22:51:58 (4 months ago)	Honeypot hit: HTTP/1.1 request on 3128 GET / User-Agent: Mozilla/5.0 zgrab/0.x Accept: / Accept-E ... show more Honeypot hit: HTTP/1.1 request on 3128 GET / User-Agent: Mozilla/5.0 zgrab/0.x Accept: / Accept-Encoding: gzip; 3128 [1] TCP show less	Hacking Bad Web Bot
🇺🇸 LSPCCU	2026-05-26 22:38:37 (4 months ago)	TSEC Honeypot Network report. Threat score: 81/100. Categories: DDoS Attack, Port Scan, Hacking, Bru ... show more TSEC Honeypot Network report. Threat score: 81/100. Categories: DDoS Attack, Port Scan, Hacking, Brute-Force, Web App Attack, SSH. Honeypot: ssh-telnet, cowrie. Context: 198. show less	DDoS Attack Port Scan Hacking Brute-Force Web App Attack SSH
🇨🇦 Slackin' Jack	2026-05-26 22:37:12 (4 months ago)	Triggered honeypot on port 3128. (198.211.117.198)	Port Scan
🇲🇳 Public CSIRT/CC of Mongolia	2026-05-26 22:10:12 (4 months ago)	Honeypot hit: Empty payload (likely service probe); 3128 [1] TCP	Port Scan
🇩🇪 Justin F. \| AS204464	2026-05-26 22:04:34 (4 months ago)	Honeypot [nx-infrastructure]: HTTP/1.1 request on 3128 GET / User-Agent: Mozilla/5.0 zgrab/0.x Acce ... show more Honeypot [nx-infrastructure]: HTTP/1.1 request on 3128 GET / User-Agent: Mozilla/5.0 zgrab/0.x Accept: / Accept-Encoding: gzip; 3128 [1] TCP Reported by: Justin F. show less	Hacking Bad Web Bot

Showing 1 to 15 of 190 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 222.134.173.157

🇺🇸 216.218.206.73

🇧🇪 207.175.41.99

🇩🇪 172.71.148.158

🇺🇸 172.59.216.44

🇧🇷 170.233.33.188

🇸🇦 159.0.237.228

🇩🇿 105.109.33.172

🇫🇷 91.231.89.195

🇧🇷 45.231.201.94

🇺🇸 35.219.138.36

🇺🇸 20.12.244.43

🇲🇽 201.173.66.61

🇺🇸 195.184.76.237

🇮🇩 172.232.231.4

🇺🇸 172.56.179.81

🇹🇭 171.6.242.136

🇮🇳 165.22.209.157

🇺🇸 162.216.150.7

🇫🇮 147.185.133.136