JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

198.211.99.213

Activity Trending Down

Abuse Confidence Score

14% Caution

164 reports

71 reporters · latest 1 month ago

ISP: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Domain Name: digitalocean.com
Country: 🇺🇸 United States of America
City: North Bergen, New Jersey

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

164 from 71 distinct reporters

First reported

April 20th 2024

Most recent report

1 month ago

Last 60 days

Top reporter locations 🇩🇪 Germany 2 🇫🇮 Finland 1 🇹🇷 Turkey 1

Most common categories Port Scan 3 Web App Attack 1 Hacking 1

Old reports The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 Maxetow	2026-09-28 03:22:55 UTC · (1 month ago)	Scan port: 4449 \| 1 total \| size=44B	Port Scan
Anonymous	2026-09-28 02:55:37 UTC · (1 month ago)	denied traffic to a honeypot network. destination port 9999.	Port Scan Hacking
🇹🇷 Domainhizmetleri.com	2026-09-28 02:55:00 UTC · (1 month ago)	Source: DH Hunter (Honeypot) \| Reason: HTTP Probe (1177/tcp) [non-standard port]	Web App Attack
🇩🇪 ValtonTahiri	2026-09-28 02:42:46 UTC · (1 month ago)	UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=198.211.99.213; proto=TCP; source_port=61000; targ ... show more UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=198.211.99.213; proto=TCP; source_port=61000; target_port=8047 show less	Port Scan
🇺🇦 mzng	2026-07-28 11:54:57 UTC · (3 months ago)	Cowrie Honeypot: 189 connection attempt(s). 146 failed login attempt(s). 42 successful login(s). 42 command(s) run. Targeted accounts: admin, alex, developer, devops, dmdba...	Brute-Force SSH Hacking Exploited Host
🇫🇷 masterguru	2026-03-29 03:09:43 UTC · (7 months ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 198.211.99.213 (US/United States/-): 2 in the last 3600 secs (0-196)	Hacking
🇺🇸 MPL	2026-03-29 01:41:21 UTC · (7 months ago)	tcp/8090 (2 or more attempts)	Port Scan
🇺🇸 MPL	2026-03-29 01:41:21 UTC · (7 months ago)	tcp/8090	Port Scan
🇫🇷 Selckie	2026-03-29 01:36:14 UTC · (7 months ago)	fail2ban: NGINX unusual impact	Web App Attack
🇰🇷 Woodie	2026-03-17 09:16:30 UTC · (7 months ago)	2026-03-17T04:16:18.747671-05:00 debian sshd[661090]: Failed password for mysql from 198.211.99.213 port 33608 ssh2 2026-03-17T04:16:23.726589-05:00 debian sshd[661092]: Invalid user hadoop from 198.211.99.213 port 36178 2026-03-17T04:16:23.901157-05 ... show more 2026-03-17T04:16:18.747671-05:00 debian sshd[661090]: Failed password for mysql from 198.211.99.213 port 33608 ssh2 2026-03-17T04:16:23.726589-05:00 debian sshd[661092]: Invalid user hadoop from 198.211.99.213 port 36178 2026-03-17T04:16:23.901157-05:00 debian sshd[661092]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.211.99.213 2026-03-17T04:16:25.971439-05:00 debian sshd[661092]: Failed password for invalid user hadoop from 198.211.99.213 port 36178 ssh2 2026-03-17T04:16:30.354796-05:00 debian sshd[661096]: Invalid user yunwei from 198.211.99.213 port 56210 ... show less	Brute-Force SSH
🇩🇪 syndications4radio.de	2026-03-17 09:16:27 UTC · (7 months ago)	2026-03-17T10:16:13.614797+01:00 v2202403218999259734 sshd[1826006]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.211.99.213 2026-03-17T10:16:15.645655+01:00 v2202403218999259734 sshd[1826006]: Failed p ... show more 2026-03-17T10:16:13.614797+01:00 v2202403218999259734 sshd[1826006]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.211.99.213 2026-03-17T10:16:15.645655+01:00 v2202403218999259734 sshd[1826006]: Failed password for invalid user hzx from 198.211.99.213 port 57924 ssh2 2026-03-17T10:16:20.576614+01:00 v2202403218999259734 sshd[1826017]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.211.99.213 user=mysql 2026-03-17T10:16:22.901661+01:00 v2202403218999259734 sshd[1826017]: Failed password for mysql from 198.211.99.213 port 58320 ssh2 2026-03-17T10:16:26.888189+01:00 v2202403218999259734 sshd[1826044]: Invalid user hadoop from 198.211.99.213 port 48402 ... show less	Brute-Force SSH
🇧🇾 lns.bz	2026-03-17 09:16:16 UTC · (7 months ago)	SSH bruteforce [BY]	SSH
Anonymous	2026-03-17 09:16:14 UTC · (7 months ago)	2026-03-17T10:13:04.192223+01:00 vps575891 sshd[527121]: Invalid user hzx from 198.211.99.213 port 59648 2026-03-17T10:13:04.290004+01:00 vps575891 sshd[527121]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost= ... show more 2026-03-17T10:13:04.192223+01:00 vps575891 sshd[527121]: Invalid user hzx from 198.211.99.213 port 59648 2026-03-17T10:13:04.290004+01:00 vps575891 sshd[527121]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.211.99.213 2026-03-17T10:13:06.376171+01:00 vps575891 sshd[527121]: Failed password for invalid user hzx from 198.211.99.213 port 59648 ssh2 ... show less	Brute-Force SSH
🇨🇭 altux	2026-03-17 09:16:13 UTC · (7 months ago)	2026-03-17T10:14:53.908860webmail sshd[3887984]: Invalid user from 198.211.99.213 port 60136 2026-03-17T10:16:09.859054webmail sshd[3889766]: Invalid user hzx from 198.211.99.213 port 50368 2026-03-17T10:16:09.949219webmail sshd[3889766]: pam_unix(s ... show more 2026-03-17T10:14:53.908860webmail sshd[3887984]: Invalid user from 198.211.99.213 port 60136 2026-03-17T10:16:09.859054webmail sshd[3889766]: Invalid user hzx from 198.211.99.213 port 50368 2026-03-17T10:16:09.949219webmail sshd[3889766]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.211.99.213 2026-03-17T10:16:12.431531webmail sshd[3889766]: Failed password for invalid user hzx from 198.211.99.213 port 50368 ssh2 ... show less	Brute-Force SSH
🇫🇷 pr0vieh	2026-03-17 07:31:30 UTC · (7 months ago)	2026-03-17T08:31:07.479731+01:00 Linux02 sshd[50796]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.211.99.213 2026-03-17T08:31:08.801893+01:00 Linux02 sshd[50796]: Failed password for invalid user praka ... show more 2026-03-17T08:31:07.479731+01:00 Linux02 sshd[50796]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.211.99.213 2026-03-17T08:31:08.801893+01:00 Linux02 sshd[50796]: Failed password for invalid user prakash from 198.211.99.213 port 36352 ssh2 2026-03-17T08:31:14.199669+01:00 Linux02 sshd[51053]: Invalid user erp from 198.211.99.213 port 52190 2026-03-17T08:31:14.288393+01:00 Linux02 sshd[51053]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.211.99.213 2026-03-17T08:31:15.907702+01:00 Linux02 sshd[51053]: Failed password for invalid user erp from 198.211.99.213 port 52190 ssh2 2026-03-17T08:31:21.010695+01:00 Linux02 sshd[51299]: Invalid user user6 from 198.211.99.213 port 52206 2026-03-17T08:31:21.106449+01:00 Linux02 sshd[51299]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.211.99.213 2026-03-17T08:31:22.686496+01:00 Linux02 sshd[51299]: Failed p ... show less	Brute-Force SSH

Showing 1 to 15 of 164 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇻🇳 103.78.1.160

🇳🇱 34.178.237.57

🇳🇱 213.209.159.208

🇺🇸 209.85.161.72

🇫🇷 143.244.57.120

🇧🇬 87.227.143.150

🇺🇸 52.41.59.204

🇻🇳 42.96.20.19

🇳🇱 34.91.18.141

🇸🇬 2404:6800:4003:c05::125

🇺🇸 209.141.48.135

🇳🇱 195.178.110.31

🇬🇧 193.163.125.140

🇫🇷 172.71.135.75

🇺🇸 137.184.98.189

🇨🇳 124.225.84.36

🇺🇸 209.87.169.166

🇨🇳 182.242.169.103

🇭🇰 154.92.2.59

🇷🇴 80.94.95.116