This IP address has been reported a total of
21
times from
14 distinct
sources.
167.104.160.76 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
France
with 8
reports;
United States of America
with 7
reports;
Canada
with 1
report.
The most common categories in these recent reports were:
Hacking
13
times;
Port Scan
10
times;
Web App Attack
8
times;
Bad Web Bot
4
times;
Brute-Force
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Honeypot Finding: active TCP application payload captured by Honeytrap; 8 payload-bearing connection ...
show moreHoneypot Finding: active TCP application payload captured by Honeytrap; 8 payload-bearing connection/event(s), 6761 payload byte(s) total, maximum payload 1548 byte(s). Target port(s): 4000.
show less
Honeypot Finding: repeated TCP service probing on TCP/8317 (service); 2 application-level events acr ...
show moreHoneypot Finding: repeated TCP service probing on TCP/8317 (service); 2 application-level events across 2 source port(s). Sensor(s): Honeytrap.
show less
Honeypot detection: port scan / service probe. 3 events observed. 2 distinct ports targeted. Reporte ...
show moreHoneypot detection: port scan / service probe. 3 events observed. 2 distinct ports targeted. Reported automatically from a honeypot sensor.
show less
Honeypot Finding: active TCP application payload captured by Honeytrap; 8 payload-bearing connection ...
show moreHoneypot Finding: active TCP application payload captured by Honeytrap; 8 payload-bearing connection/event(s), 6763 payload byte(s) total, maximum payload 1548 byte(s). Target port(s): 3001.
show less
Connection to port 11434 with data transfer.
Data preview: GET /v1/models HTTP/1.1
Host: 167.253.66 ...
show moreConnection to port 11434 with data transfer.
Data preview: GET /v1/models HTTP/1.1
Host: 167.253.66.144:11434
Accept: */*
Accept-Encoding: gzip, deflate, zs
show less
[mm-111] Web scan / malformed HTTP requests to public endpoint: 2 event(s) from 167.104.160.76; fail ...
show more[mm-111] Web scan / malformed HTTP requests to public endpoint: 2 event(s) from 167.104.160.76; fail2ban auto-ban. Log sample: 167.104.160.76 - - [06/Oct/2026:21:53:31 +0000] "GET /v1/models HTTP/1.1" 400 255 "-" "Python/3.14 aiohttp/3.14.3" "-"
show less
