JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

167.99.138.129

Neutral Activity

Abuse Confidence Score

0% Low Risk

250 reports

194 reporters · latest 3 months ago

ISP: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Hostname(s): pgc-mongodb-wl33-23432b29.mongo.ondigitalocean.com
Domain Name: digitalocean.com
Country: 🇩🇪 Germany
City: Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

167.99.138.129 has been reported 250 times. The most recent report is from 3 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

250 from 194 distinct reporters

First reported

January 8th 2023

Most recent report

3 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Bigbear3	2026-07-20 00:10:39 UTC · (3 months ago)	Report-by-bigbear3	Brute-Force SSH
🇺🇸 rafled	2026-07-20 00:10:33 UTC · (3 months ago)	Jul 20 00:10:32 instance-20221219-1303 sshd[1297755]: Invalid user hummingbot from 167.99.138.129 port 60666 ...	Brute-Force SSH
🇺🇸 yzfdude1	2026-07-20 00:09:39 UTC · (3 months ago)	Jul 19 16:55:00 scania sshd[355775]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.138.129 Jul 19 16:55:02 scania sshd[355775]: Failed password for invalid user hummingbot from 167.99.138.129 port 473 ... show more Jul 19 16:55:00 scania sshd[355775]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.138.129 Jul 19 16:55:02 scania sshd[355775]: Failed password for invalid user hummingbot from 167.99.138.129 port 47364 ssh2 Jul 19 18:09:37 scania sshd[366767]: Invalid user hummingbot from 167.99.138.129 port 56142 ... show less	Brute-Force SSH
🇮🇹 NukeDuke	2026-07-20 00:09:07 UTC · (3 months ago)	167.99.138.129 abuse ...	SSH Brute-Force
🇷🇺 GoXLd	2026-07-20 00:08:49 UTC · (3 months ago)	2026-07-20T02:08:49.157867+02:00 gXdNODE2 sshd-session[553826]: Invalid user hummingbot from 167.99.138.129 port 42704 ...	Brute-Force SSH
🇺🇸 m2jest1c	2026-07-20 00:08:13 UTC · (3 months ago)	2026-07-19T20:08:12.589419 rhel-20gb-ash-1 sshd[1105569]: error: kex_exchange_identification: Connection closed by remote host 2026-07-19T20:08:12.589465 rhel-20gb-ash-1 sshd[1105569]: Connection closed by 167.99.138.129 port 58708 ...	Brute-Force SSH
🇯🇵 mkaraki	2026-07-20 00:07:18 UTC · (3 months ago)	1784506037 # Service_probe # SIGNATURE_SEND # source_ip:167.99.138.129 # dst_port:22 ...	Port Scan
🇺🇸 MatCat	2026-07-20 00:05:05 UTC · (3 months ago)	Banned by fail2ban: sshd	Brute-Force SSH
🇨🇿 Countryman	2026-07-20 00:04:28 UTC · (3 months ago)	repeated unauthorized connection attempts, host sweep, port 22	Hacking Brute-Force
🇺🇸 MPL	2026-07-20 00:04:25 UTC · (3 months ago)	tcp/22 (12 or more attempts)	Port Scan
🇺🇸 xmission.com	2026-07-20 00:02:37 UTC · (3 months ago)	Blocked by UFW (TCP on 22) Source port: 58917 TTL: 236 Packet length: 40 TOS: 0x08 This report (for 167.99.138.129) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan SSH Brute-Force
🇨🇳 SA19999	2026-07-20 00:02:13 UTC · (3 months ago)	Auto-report: brute_force \| sources=["peer-sync"] \| Fox honeypot cluster	Web App Attack
🇧🇷 noconex	2026-07-20 00:00:47 UTC · (3 months ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 167.99.138.129	Port Scan Brute-Force SSH
🇺🇸 hl.admin	2026-07-19 23:59:49 UTC · (3 months ago)	Fail2ban automatic: sshd, 2 attempts in 24h, Likely: Bruteforce, Logs: 2026-07-19T23:59:47.790433+00:00 HephaestusLabs sshd[1960058]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.138.129 2026-07-19T2 ... show more Fail2ban automatic: sshd, 2 attempts in 24h, Likely: Bruteforce, Logs: 2026-07-19T23:59:47.790433+00:00 HephaestusLabs sshd[1960058]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.138.129 2026-07-19T23:59:49.736171+00:00 HephaestusLabs sshd[1960058]: Failed password for invalid user hummingbot from 167.99.138.129 port 52030 ssh2 ... show less	Brute-Force SSH
Anonymous	2026-07-19 23:59:18 UTC · (3 months ago)	2026-07-20T01:59:15.306310 localhost.localdomain sshd-session[137197]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.138.129 2026-07-20T01:59:17.528539 localhost.localdomain sshd-session[137197]: Faile ... show more 2026-07-20T01:59:15.306310 localhost.localdomain sshd-session[137197]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.138.129 2026-07-20T01:59:17.528539 localhost.localdomain sshd-session[137197]: Failed password for invalid user hummingbot from 167.99.138.129 port 52232 ssh2 ... show less	Brute-Force SSH

Showing 91 to 105 of 250 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 209.250.4.137

🇳🇱 193.47.62.69

🇫🇷 185.193.66.196

🇨🇳 116.179.32.212

🇫🇷 109.199.124.138

🇳🇱 45.148.10.121

🇩🇪 45.135.193.198

🇫🇷 37.60.228.0

🇬🇧 2a06:4880:8000::a1

🇺🇸 172.208.52.141

🇺🇸 157.22.127.76

🇳🇵 157.10.100.12

🇺🇸 140.235.171.27

🇮🇳 103.16.71.181

🇱🇹 62.60.134.212

🇩🇪 46.244.254.96

🇭🇰 43.132.136.79

🇰🇷 220.123.222.114

🇺🇸 216.25.89.134

🇷🇴 193.32.162.15