167.99.12.237
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- DigitalOcean, LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14061
- Domain Name
- digitalocean.com
- Country
- 🇺🇸 United States of America
- City
- North Bergen, New Jersey
Abuse Reports
Total reports
42 from
26 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇳🇱 Tsumugi Kotobuki |
Port Scan on Honeypot | Ports: 8443/HTTPS-alt | Proto: TCP(1) | Flags: all SYN | TTL: 48 | Len: 64B | Win: 65535(1) | F2B/ufw-honeypot@2026-11-11T13:35:16Z
|
Port Scan Hacking | |
| 🇦🇷 Bruno |
Port Scanner: 167.99.12.237
|
Port Scan | |
| 🇺🇸 donarev419 |
Connection to port 80 with data transfer.
Data preview: GET /squid-internal-mgr/cachemgr.cgi HTTP/1.1
Host: 198.23.188.201
User-Agent: Mozilla/5.0 zgrab/0
|
Port Scan Hacking | |
| 🇺🇸 knock |
Knock-Knock honeypot brute-force: HTTP (1 total hits)
|
Web App Attack | |
| 🇺🇸 drewf.ink |
[07:24] Probed an open proxy (direct request to the proxy port)
|
Open Proxy | |
| 🇺🇸 donarev419 |
Connection to port 3128 with data transfer.
Data preview: GET /squid-internal-mgr/cachemgr.cgi HTTP/1.1
Host: 198.23.188.201:3128
User-Agent: Mozilla/5.0 zg
|
Port Scan Hacking | |
| 🇺🇸 distorx |
2026-11-10 05:08:43,258 fail2ban.actions [50165]: NOTICE [npm-scanners] Ban 167.99.12.237
2026-11-10 05:52:17,343 fail2ban.actions [50165]: NOTICE [ufw] Ban 167.99.12.237
...
|
Brute-Force | |
| 🇺🇸 donarev419 |
Connection to port 8800 with data transfer.
Data preview: GET /squid-internal-mgr/cachemgr.cgi HTTP/1.1
Host: 198.23.188.201:8800
User-Agent: Mozilla/5.0 zg
|
Port Scan Hacking | |
| 🇺🇸 distorx |
[10/Nov/2026:05:08:43 +0000] 404 - GET http 209.141.57.83 "/squid-internal-mgr/cachemgr.cgi" [Client 167.99.12.237] [Length 122] [Gzip 1.35] "Mozilla/5.0 zgrab/0.x" "-"
...
|
Port Scan Bad Web Bot | |
| 🇫🇷 Kejult |
|
Port Scan | |
| 🇫🇷 cityhunter_rhone |
Connection attempts on sensitive port(s) 8080 (4) of a private server (ports closed to the public, firewall log). Mercurius-Guide automated detection.
|
Port Scan Hacking | |
| 🇩🇪 iNetWorker |
trying to access non-authorized port
|
Port Scan | |
| 🇫🇷 Kejult |
|
Port Scan | |
| 🇫🇷 uthul |
T-Pot honeypot: 20 hits on ports [3389, 3390] (automated)
|
Port Scan Brute-Force | |
| 🇬🇧 thetomtaylor.co.uk |
Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [ice01,ice02,wa01,wa02]
|
Hacking Brute-Force Bad Web Bot Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown