This IP address has been reported a total of
12
times from
11 distinct
sources.
99.37.211.215 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 11
reports;
France
with 1
report.
The most common categories in these recent reports were:
Port Scan
8
times;
Brute-Force
6
times;
Hacking
2
times;
SSH
2
times;
IoT Targeted
1
time.
Old Reports
The most recent abuse report for this IP address is from
. It is possible that this IP is no
longer involved in abusive activities.
Honeypot trap triggered: unsolicited TCP connection(s) to unused port(s) 3389 on a host running no s ...
show moreHoneypot trap triggered: unsolicited TCP connection(s) to unused port(s) 3389 on a host running no such service. There is no legitimate reason to connect to these ports.
Observed 1 connection(s) from 2026-10-12T08:50:17Z to 2026-10-12T08:50:17Z UTC.
2026-10-12T08:50:17Z tcp/3389 data: \x03\x00\x00\x13\x0e\xfd\x00\x00\x00\x00\x00\x01\x00\x08\x00\x03\x00\x00\x00 (non-printable bytes hex-escaped)
Connection was blocked automatically at the firewall. Reported by an automated honeypot.
show less
RDP brute-force / credential stuffing: 3 failed Windows logons (Event ID 4625) against 3 of our serv ...
show moreRDP brute-force / credential stuffing: 3 failed Windows logons (Event ID 4625) against 3 of our servers (NL), first seen 2026-10-12 09:01 UTC. Blocked automatically.
show less
Unsolicited TCP connection from 99.37.211.215 to port 0 at 2026-10-12T08:51:35Z. Source IP completed ...
show moreUnsolicited TCP connection from 99.37.211.215 to port 0 at 2026-10-12T08:51:35Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring.
show less
Port scan: unsolicited TCP connection (handshake completed) to a decoy port with no production servi ...
show morePort scan: unsolicited TCP connection (handshake completed) to a decoy port with no production service at 2026-10-12 08:50:55 UTC. Destination port probed: tcp/3389 (RDP). Source blocked. - Lumerux Defense (lumerux.com), automated report. Contact: [email protected]show less
Honeypot Finding: repeated TCP service probing on TCP/3389 (RDP); 14 application-level events across ...
show moreHoneypot Finding: repeated TCP service probing on TCP/3389 (RDP); 14 application-level events across 7 source port(s). Sensor(s): RDPHoneypot.
show less
Port Scan
Showing 1 to
12
of 12 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
