JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 213.108.199.97

213.108.199.97 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 18%: ?

18%

ISP	GTELCOM LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS58061
Hostname(s)	vm258798.hosted-by-robovps.com
Domain Name	robomail.biz
Country	🇳🇱 Netherlands
City	Haarlem, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 213.108.199.97

Whois 213.108.199.97

IP Abuse Reports for 213.108.199.97:

This IP address has been reported a total of 32 times from 22 distinct sources. 213.108.199.97 was first reported on April 16th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 WeCloudit-Anti-Abuse	2026-07-18 07:02:44 (1 day ago)	HTTP flood against /retreat-corp on Apache webserver	Brute-Force
🇳🇱 WeCloudit-Anti-Abuse	2026-07-15 08:32:17 (4 days ago)	HTTP flood against /retreat-corp on Apache webserver	Brute-Force
🇫🇷 MatStef132	2026-07-13 13:02:47 (5 days ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
🇫🇷 MatStef132	2026-07-11 18:59:41 (1 week ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
🇩🇪 updown.io	2026-05-26 10:14:45 (1 month ago)	{"level":"info","ts":1779790476.1147056,"logger":"http.log.access.log1","msg":"handled request","req ... show more {"level":"info","ts":1779790476.1147056,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"213.108.199.97","remote_port":"52724","client_ip":"213.108.199.97","proto":"HTTP/2.0","method":"GET","host":"up.bots.business","uri":"/","headers":{"Sec-Fetch-Site":["none"],"Sec-Fetch-User":["?1"],"Sec-Ch-Ua-Platform":["\\\"Android\\\""],"Accept-Language":["pt-BR,pt;q=0.9,en-US;q=0.8,en;q=0.7"],"User-Agent":["Mozilla/5.0 (Linux; Android 12; SM-S908B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Mobile Safari/537.36"],"Sec-Ch-Ua":["\\\"Chromium\\\";v=\\\"103\\\", \\\"Google Chrome\\\";v=\\\"103\\\", \\\"Not.A/Brand\\\";v=\\\"99\\\""],"Accept-Encoding":["gzip, deflate, br, zstd"],"Sec-Ch-Ua-Mobile":["?1"],"Upgrade-Insecure-Requests":["1"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7"],"Sec-Fetch-Mode":["navigate"],"Sec-Fetch-Dest":["document"]},"tls":{"resum ... show less	DDoS Attack Web App Attack
🇫🇷 MatStef132	2026-05-24 20:58:23 (1 month ago)	MatShield L7: blocked on mathost.eu (path-flood-burst)	DDoS Attack
🇫🇷 MatStef132	2026-05-23 15:48:41 (1 month ago)	MatShield L7: blocked on mathost.eu (path-flood-burst)	DDoS Attack
🇹🇷 rtbh.com.tr	2025-04-18 20:06:10 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-04-18 00:06:09 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-04-17 20:06:10 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇯🇵 MU-star.net	2025-04-17 17:46:51 (1 year ago)	Invalid user user from 213.108.199.97 port 50454	Port Scan Brute-Force SSH
🇯🇵 MU-star.net	2025-04-17 17:46:51 (1 year ago)	Invalid user user from 213.108.199.97 port 50454	Port Scan Brute-Force SSH
🇪🇸 paradoxnetworks	2025-04-17 17:42:10 (1 year ago)	2025-04-17T17:42:00.994494+00:00 edge-con-mad01.int.pdx.net.uk sshd[571698]: Failed password for roo ... show more 2025-04-17T17:42:00.994494+00:00 edge-con-mad01.int.pdx.net.uk sshd[571698]: Failed password for root from 213.108.199.97 port 59558 ssh2 2025-04-17T17:42:08.123147+00:00 edge-con-mad01.int.pdx.net.uk sshd[571750]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.108.199.97 user=root 2025-04-17T17:42:10.018398+00:00 edge-con-mad01.int.pdx.net.uk sshd[571750]: Failed password for root from 213.108.199.97 port 38276 ssh2 ... show less	Brute-Force SSH
🇯🇵 MU-star.net	2025-04-17 17:15:11 (1 year ago)	2025-04-18T02:14:51.351419 mustar-kr-flex sshd[2657486]: Invalid user user from 213.108.199.97 port ... show more 2025-04-18T02:14:51.351419 mustar-kr-flex sshd[2657486]: Invalid user user from 213.108.199.97 port 50454 2025-04-18T02:14:55.153615 mustar-kr-flex sshd[2657488]: Invalid user user from 213.108.199.97 port 36500 2025-04-18T02:14:58.508781 mustar-kr-flex sshd[2657490]: Invalid user user from 213.108.199.97 port 36508 2025-04-18T02:15:04.974779 mustar-kr-flex sshd[2657492]: Invalid user user from 213.108.199.97 port 36522 2025-04-18T02:15:10.503385 mustar-kr-flex sshd[2657494]: Invalid user user from 213.108.199.97 port 59884 ... show less	Hacking Brute-Force SSH
🇺🇸 lat	2025-04-17 15:32:19 (1 year ago)	SSH brute force detected (3 attempts)	Brute-Force SSH

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 194.163.145.41

🇺🇸 147.185.132.62

🇨🇳 120.86.117.250

🇫🇷 94.23.188.223

🇳🇱 91.92.42.64

🇨🇦 85.217.149.32

🇺🇸 71.235.225.181

🇺🇸 66.132.195.73

🇺🇸 47.251.185.187

🇲🇾 47.250.38.64

🇷🇺 46.161.50.108

🇬🇧 35.203.211.185

🇬🇧 35.203.210.88

🇺🇸 20.80.104.232

🇮🇳 2401:4900:1c0b:6355:e5cc:8c19:a154:6ab0

🇨🇴 206.62.161.166

🇮🇳 182.60.128.241

🇺🇸 162.243.147.237

🇮🇳 152.59.187.113

🇨🇳 144.7.108.131