198.211.97.170

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
31% Elevated
27 reports
20 reporters · latest 2 weeks ago
ISP
DigitalOcean, LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14061
Domain Name
digitalocean.com
Country
🇺🇸 United States of America
City
North Bergen, New Jersey
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
27 from 20 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇫🇷 France 3 🇩🇪 Germany 2 🇧🇷 Brazil 1
Most common categories Port Scan 7 Hacking 3 Email Spam 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 Jochen Pretli
connection to honeypot
Email Spam Port Scan
🇫🇷 security.rdmc.fr
Port Scan Attack proto:TCP src:61008 dst:3306
Port Scan
🇷🇸 Scan
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan Hacking
🇧🇷 ICS Labs
ICS Labs threat intelligence (ICS Feeds): Hacking. Last observed 2026-10-15 UTC.
Hacking
🇫🇷 Kejult
Honeypot Finding: repeated TCP service probing on TCP/5443 (service); 2 application-level events across 2 source port(s). Sensor(s): Honeytrap.
Port Scan
🇺🇸 krss.llc
Repeat portscan: 12346,12546,12646,12846,12946
Port Scan
🇫🇷 Kejult
Honeypot Finding: repeated TCP service probing on TCP/6666 (service); 2 application-level events across 2 source port(s). Sensor(s): Honeytrap.
Port Scan
Anonymous
denied traffic to a honeypot network. destination port 15000.
Port Scan Hacking
🇮🇱 spd.co.il
Web application attack detected
Hacking Web App Attack
🇲🇳 Public CSIRT/CC of Mongolia
Honeypot hit: Empty payload (likely service probe); 2095 [1] TCP
Port Scan
🇬🇧 essinghigh
IPS Detection: 198.211.97.170 -> DPT: 2095
Port Scan
🇵🇱 sefinek.net
Honeypot hit: HTTP/1.1 request on 2095 GET / User-Agent: Mozilla/5.0 zgrab/0.x Accept: */* Accept-Encoding: gzip; 2095 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
Hacking Bad Web Bot
🇳🇱 donarev419
Connection to port 2095 with data transfer. Data preview: GET / HTTP/1.1 Host: 109.110.170.76:2095 User-Agent: Mozilla/5.0 zgrab/0.x Accept: */* Accept-En
Port Scan Hacking
🇺🇸 donarev419
Connection to port 2095 with data transfer. Data preview: GET / HTTP/1.1 Host: 67.215.244.172:2095 User-Agent: Mozilla/5.0 zgrab/0.x Accept: */* Accept-En
Port Scan Hacking
🇩🇪 dispaisyenterprises
Honeypot [fra-de-honeypot]: HTTP/1.1 request on 2095 GET / User-Agent: Mozilla/5.0 zgrab/0.x Accept: */* Accept-Encoding: gzip; 2095 [1] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB
Hacking Bad Web Bot

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇫🇷 91.196.152.231
🇧🇪 35.210.4.79
🇬🇧 193.32.209.226
🇦🇷 190.189.214.123
🇨🇦 167.99.179.244
🇺🇸 140.235.3.69
🇧🇩 103.126.218.216
🇨🇮 102.138.56.19
🇳🇱 77.91.71.36
🇳🇱 45.148.10.152
🇳🇱 45.148.10.141
🇳🇱 45.141.235.46
🇧🇪 35.206.177.227
🇺🇸 185.180.141.32
🇸🇬 43.173.175.33
🇬🇧 35.203.210.146
🇺🇸 20.65.171.40
🇺🇸 170.168.242.73
🇺🇸 152.32.183.163
🇺🇿 109.94.174.203
feedback