Log in to view charts and search reports for this IP.
Log In
No reports in the last 60 days
167.99.131.227 has been reported 151
times. The most recent report is from
.
The full history is preserved below and remains searchable. A
0% score reflects the absence of recent activity, but
this is not a guarantee that earlier reports were invalid. Abuse confidence score decays,
naturally, over time, when the abusive activity stops.
This IP address has been reported a total of
151
times from
114 distinct
sources.
167.99.131.227 was first reported on
, and the most recent report was
.
Level: (LOW): Known Attacker via CitrixHoneypot IOC Country: Germany 2x -> Target Country: Finnland ...
show moreLevel: (LOW): Known Attacker via CitrixHoneypot IOC Country: Germany 2x -> Target Country: Finnland HTTPS
show less
(postfix_disconnect) lost connection after AUTH from 167.99.131.227 (DE/Germany/-): 1 in the last 36 ...
show more(postfix_disconnect) lost connection after AUTH from 167.99.131.227 (DE/Germany/-): 1 in the last 3600 secs; IP: 167.99.131.227; Ports: *; Direction: inout; Trigger: other; Logs: 2026-07-21T04:35:34.716660+02:00 vps1 postfix/smtpd[2817372]: disconnect from unknown[167.99.131.227] commands=0/0
show less
Detected malicious request: GET /
Detections triggered: Automated user-agent
Access via IP addr (v4 ...
show moreDetected malicious request: GET /
Detections triggered: Automated user-agent
Access via IP addr (v4)
show less
[probe-44-49] 2026-07-21 02:13:02, Client: 167.99.131.227, Protocol: 6, Unauthorized activity to HTT ...
show more[probe-44-49] 2026-07-21 02:13:02, Client: 167.99.131.227, Protocol: 6, Unauthorized activity to HTTP: GET /
show less
🛡️ Honeypot [bsts-tpot-sensor]: HTTP/1.1 request on 8500
GET /solr/admin/info/system
User-Agent: Go ...
show more🛡️ Honeypot [bsts-tpot-sensor]: HTTP/1.1 request on 8500
GET /solr/admin/info/system
User-Agent: Go-http-client/1.1; 8500 [6] TCP
show less
Jul 21 01:09:23 server postfix/smtpd[1205243]: improper command pipelining after CONNECT from unknow ...
show moreJul 21 01:09:23 server postfix/smtpd[1205243]: improper command pipelining after CONNECT from unknown[167.99.131.227]: \026\003\003\001\250\001\000\001\244\003\003\315\nKd\323X\321S\246\344\254\372\340'\n\252_-V\354^\020{\242\004\303!\376\371\357\004\033 \304\002\353\254\020DM\036\356//;\356\245r\023\323\300"\316R!\300`%\302\t\355\272\245\002u\000\212\000\026\0003\000g\300\236\300\242\000\236\0009\000k\300\237\300\243\000\237
...
show less
Automated abuse blocked by fail2ban (jails: nginx-scanner) on a public web/SSH host. Reported by Ome ...
show moreAutomated abuse blocked by fail2ban (jails: nginx-scanner) on a public web/SSH host. Reported by OmegaNet automated defense.
show less