This IP address has been reported a total of
30
times from
27 distinct
sources.
167.99.137.96 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 5
reports;
France
with 5
reports;
Brazil
with 3
reports.
The most common categories in these recent reports were:
Port Scan
16
times;
Hacking
11
times;
Brute-Force
9
times;
Web App Attack
7
times;
Bad Web Bot
2
times;
Other
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Honeypot Finding: active TCP application payload captured by Honeytrap; 13 payload-bearing connectio ...
show moreHoneypot Finding: active TCP application payload captured by Honeytrap; 13 payload-bearing connection/event(s), 866 payload byte(s) total, maximum payload 223 byte(s). Target port(s): 8500.
show less
2026-10-23 14:45:21.080 [131389] no MAIL in SMTP connection from [167.99.137.96]:13965 I=[193.108.18 ...
show more2026-10-23 14:45:21.080 [131389] no MAIL in SMTP connection from [167.99.137.96]:13965 I=[193.108.181.150]:25 Ci=131389 D=13s C=EHLO
2026-10-23 14:45:28.592 [131390] no MAIL in SMTP connection from [167.99.137.96]:25001 I=[193.108.181.150]:25 Ci=131390 D=7s C=HELP
...
show less
[probe-44-49] 2026-10-22 17:54:16, Client: 167.99.137.96, Protocol: 6, Unauthorized activity to HTTP ...
show more[probe-44-49] 2026-10-22 17:54:16, Client: 167.99.137.96, Protocol: 6, Unauthorized activity to HTTP: GET /
show less
Ip 167.99.137.96 performed 'crowdsecurity/http-probing' (11 events over 5.554845938s) at 2026-10-22 ...
show moreIp 167.99.137.96 performed 'crowdsecurity/http-probing' (11 events over 5.554845938s) at 2026-10-22 09:39:10.546062589 +0000 UTC
show less
2026-10-22T04:12:21.070469+02:00 mail postfix/smtpd[113047]: lost connection after EHLO from unknown ...
show more2026-10-22T04:12:21.070469+02:00 mail postfix/smtpd[113047]: lost connection after EHLO from unknown[167.99.137.96]
2026-10-22T04:12:28.578702+02:00 mail postfix/smtpd[113047]: lost connection after UNKNOWN from unknown[167.99.137.96]
...
show less
Honeypot Finding: active TCP application payload captured by Honeytrap; 17 payload-bearing connectio ...
show moreHoneypot Finding: active TCP application payload captured by Honeytrap; 17 payload-bearing connection/event(s), 812 payload byte(s) total, maximum payload 168 byte(s). Target port(s): 9042.
show less
