This IP address has been reported a total of
59
times from
49 distinct
sources.
167.99.130.26 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
France
with 13
reports;
United States of America
with 12
reports;
Germany
with 11
reports.
The most common categories in these recent reports were:
Port Scan
23
times;
Web App Attack
17
times;
Brute-Force
16
times;
Hacking
15
times;
Bad Web Bot
7
times;
Other
8
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Honeypot Finding: repeated TCP service probing on TCP/1911 (service); 4 application-level events acr ...
show moreHoneypot Finding: repeated TCP service probing on TCP/1911 (service); 4 application-level events across 4 source port(s). Sensor(s): Honeytrap.
show less
Connection to port 1911 with data transfer.
Data preview: fox a 1 -1 fox hello
{
fox.version=s:1.0
i ...
show moreConnection to port 1911 with data transfer.
Data preview: fox a 1 -1 fox hello
{
fox.version=s:1.0
id=i:1
hostName=s:xpvm-0omdc01xmy
hostAddress=s:192.168.1.1
show less
Honeypot Finding: repeated TCP service probing on TCP/11434 (service); 5 application-level events ac ...
show moreHoneypot Finding: repeated TCP service probing on TCP/11434 (service); 5 application-level events across 5 source port(s). Sensor(s): Honeytrap.
show less
Oct 5 01:20:29 [snip] postfix/smtpd[21119]: lost connection after STARTTLS from unknown[167.99.130. ...
show moreOct 5 01:20:29 [snip] postfix/smtpd[21119]: lost connection after STARTTLS from unknown[167.99.130.26]
Oct 5 01:20:30 [snip] postfix/smtpd[21115]: lost connection after UNKNOWN from unknown[167.99.130.26]
Oct 5 01:20:30 [snip] postfix/smtpd[21119]: lost connection after UNKNOWN from unknown[167.99.130.26]
Oct 5 01:20:30 [snip] postfix/smtpd[21115]: lost connection after UNKNOWN from unknown[167.99.130.26][...]
show less
Oct 5 01:07:00 [redacted] dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, ...
show moreOct 5 01:07:00 [redacted] dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=167.99.130.26, lip=[redacted], TLS, session=<FqKi0gtdcuenY4Ia>
...
show less
Unsolicited TCP connection from 167.99.130.26 to port 0 at 2026-10-04T22:47:16Z. Source IP completed ...
show moreUnsolicited TCP connection from 167.99.130.26 to port 0 at 2026-10-04T22:47:16Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring.
show less
