JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 167.99.142.162

167.99.142.162 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 48%: ?

48%

This address is a Tor exit node. Neither the owner nor the provider are directly behind the offending action.

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Hostname(s)	exit.rajimayur.me
Domain Name	digitalocean.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 167.99.142.162

Whois 167.99.142.162

IP Abuse Reports for 167.99.142.162:

This IP address has been reported a total of 9 times from 8 distinct sources. 167.99.142.162 was first reported on July 7th 2026, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 Origon	2026-07-17 21:00:11 (7 hours ago)	http-bad-user-agent - IP: 167.99.142.162 - time="2026-07-17T23:00:11+02:00" level=info msg="(555f66 ... show more http-bad-user-agent - IP: 167.99.142.162 - time="2026-07-17T23:00:11+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 167.99.142.162 (DE/14061) : 4h ban on Ip 167.99.142.162" module=db show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-17 17:17:10 (11 hours ago)	(mod_security) mod_security (id:210831) triggered by 167.99.142.162 (exit.rajimayur.me): 1 in the la ... show more (mod_security) mod_security (id:210831) triggered by 167.99.142.162 (exit.rajimayur.me): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 13:17:01.079029 2026] [security2:error] [pid 8480:tid 8480] [client 167.99.142.162:51230] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.wanderlust-fineartphotos.com\|F\|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.wanderlust-fineartphotos.com"] [uri "/robots.txt"] [unique_id "alpjjTMrfHKavqyhF3fJIAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 05:09:59 (23 hours ago)	(mod_security) mod_security (id:210831) triggered by 167.99.142.162 (exit.rajimayur.me): 1 in the la ... show more (mod_security) mod_security (id:210831) triggered by 167.99.142.162 (exit.rajimayur.me): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 01:09:52.744831 2026] [security2:error] [pid 400764:tid 400764] [client 167.99.142.162:58874] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.marshdcs.com\|F\|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.marshdcs.com"] [uri "/"] [unique_id "alm5ILXe6RoCBajnGAb51AAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-07-17 00:56:16 (1 day ago)	HTTP flood against /retreat-corp on Apache webserver	Brute-Force
Anonymous	2026-07-16 01:00:22 (2 days ago)	2026-07-15 18:00:36,743 fail2ban.actions [3625835]: NOTICE [tor] Ban 167.99.142.162 2026-07- ... show more 2026-07-15 18:00:36,743 fail2ban.actions [3625835]: NOTICE [tor] Ban 167.99.142.162 2026-07-15 21:00:01,483 fail2ban.actions [3625835]: NOTICE [tor] Ban 167.99.142.162 2026-07-15 23:01:02,541 fail2ban.actions [3625835]: NOTICE [tor] Ban 167.99.142.162 2026-07-16 02:00:06,067 fail2ban.actions [3625835]: NOTICE [tor] Ban 167.99.142.162 2026-07-16 04:00:21,913 fail2ban.actions [3625835]: NOTICE [tor] Ban 167.99.142.162 show less	Brute-Force
🇺🇸 MPL	2026-07-09 04:19:32 (1 week ago)	tcp/6936	Port Scan
🇺🇸 Axel	2026-07-09 03:08:13 (1 week ago)	Blocked by UFW on LAXHH [4000/tcp] \| SPT: 61009 \| TTL: 241 \| LEN: 44 \| TOS: 0x00 • Reported by: gith ... show more Blocked by UFW on LAXHH [4000/tcp] \| SPT: 61009 \| TTL: 241 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-07-07 20:34:59 (1 week ago)	Port scan / connection attempts on ports 6931/TCP, 8883/TCP to unused IP	Port Scan
🇫🇷 Petre 21_ip	2026-07-07 20:07:50 (1 week ago)	2026-07-07T22:07:49.643020+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c ... show more 2026-07-07T22:07:49.643020+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=167.99.142.162 DST=155.133.26.57 LEN=44 TOS=0x00 PREC=0x00 TTL=245 ID=53640 PROTO=TCP SPT=61012 DPT=8883 WINDOW=1025 RES=0x00 SYN URGP=0 ... show less	Port Scan

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 192.169.232.63

🇺🇸 192.169.213.186

🇺🇸 100.53.92.177

🇳🇱 86.54.31.38

🇮🇹 78.134.27.132

🇧🇷 205.210.31.164

🇷🇼 197.243.30.78

🇬🇧 194.50.235.134

🇲🇴 182.93.7.194

🇺🇸 172.203.134.70

🇺🇸 162.216.150.229

🇩🇪 156.236.31.59

🇹🇭 152.32.245.170

🇨🇳 123.60.145.138

🇻🇳 123.18.212.237

🇨🇳 120.52.18.141

🇮🇩 114.7.0.150

🇮🇳 103.58.154.46

🇺🇸 71.6.158.166

🇩🇪 64.89.163.134