JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

167.99.212.138

Neutral Activity

Abuse confidence score ?

0% Low Risk

88 reports

61 reporters · latest 1 year ago

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

167.99.212.138 has been reported 88 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 167.99.212.138

Export CSV

This IP address has been reported a total of 88 times from 61 distinct sources. 167.99.212.138 was first reported on January 27th 2021, and the most recent report was 1 year ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 www.Examensfragen.de	2025-06-20 21:21:20 (1 year ago)		Web Spam Bad Web Bot
🇩🇪 FeG Deutschland	2025-06-13 06:05:05 (1 year ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247	Exploited Host Web App Attack
🇿🇦 IrisFlower	2022-10-18 06:50:34 (3 years ago)	Unauthorized connection attempt detected from IP address 167.99.212.138 to port 80 [J]	Port Scan Hacking
🇿🇦 IrisFlower	2022-10-18 06:14:32 (3 years ago)	Unauthorized connection attempt detected from IP address 167.99.212.138 to port 443 [J]	Port Scan Hacking
🇸🇬 Samuel K	2021-01-29 22:30:09 (5 years ago)	Web scan/attack	Port Scan Web App Attack
🇮🇳 Parth Maniar	2021-01-29 13:53:40 (5 years ago)	SSH bruteforce login attempts.	Brute-Force SSH
🇮🇳 Parth Maniar	2021-01-28 13:16:17 (5 years ago)	SSH bruteforce login attempts.	Brute-Force SSH
🇸🇪 andrew.stream	2021-01-28 07:48:43 (5 years ago)	[portscan] tcp/22 [SSH] in blocklist.de:'listed [ssh]' *(RWIN=65535)(01281029)	Port Scan Hacking Brute-Force SSH
🇩🇪 www.blocklist.de	2021-01-27 22:43:46 (5 years ago)	Lines containing failures of 167.99.212.138 Jan 27 12:19:27 kopano sshd[17021]: Did not receive iden ... show more Lines containing failures of 167.99.212.138 Jan 27 12:19:27 kopano sshd[17021]: Did not receive identification string from 167.99.212.138 port 37680 Jan 27 12:19:46 kopano sshd[17045]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.212.138 user=r.r Jan 27 12:19:49 kopano sshd[17045]: Failed password for r.r from 167.99.212.138 port 40788 ssh2 Jan 27 12:19:49 kopano sshd[17045]: Received disconnect from 167.99.212.138 port 40788:11: Normal Shutdown, Thank you for playing [preauth] Jan 27 12:19:49 kopano sshd[17045]: Disconnected from authenticating user r.r 167.99.212.138 port 40788 [preauth] Jan 27 12:20:21 kopano sshd[17076]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.212.138 user=r.r Jan 27 12:20:23 kopano sshd[17076]: Failed password for r.r from 167.99.212.138 port 48416 ssh2 Jan 27 12:20:23 kopano sshd[17076]: Received disconnect from 167.99.212.138 port 48416:11: N........ ------------------------------ show less	FTP Brute-Force Hacking
🇸🇪 www.remote24.se	2021-01-27 22:33:20 (5 years ago)	3389BruteforceStormFW21	Brute-Force
Anonymous	2021-01-27 22:13:40 (5 years ago)		Brute-Force SSH
🇵🇱 ChillScanner	2021-01-27 21:42:10 (5 years ago)	<TELNET, SSH> TCP (SYN) 167.99.212.138:38902 -> port 22, len 40	Port Scan SSH
🇺🇸 ad5gb.com	2021-01-27 21:40:05 (5 years ago)	2021-01-27T20:40:00.576448morrigan.ad5gb.com sshd[35592]: pam_unix(sshd:auth): authentication failur ... show more 2021-01-27T20:40:00.576448morrigan.ad5gb.com sshd[35592]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.212.138 user=root 2021-01-27T20:40:03.038710morrigan.ad5gb.com sshd[35592]: Failed password for root from 167.99.212.138 port 35246 ssh2 show less	Brute-Force
🇩🇪 www.blocklist.de	2021-01-27 21:24:08 (5 years ago)	Lines containing failures of 167.99.212.138 Jan 27 12:19:27 kopano sshd[17021]: Did not receive iden ... show more Lines containing failures of 167.99.212.138 Jan 27 12:19:27 kopano sshd[17021]: Did not receive identification string from 167.99.212.138 port 37680 Jan 27 12:19:46 kopano sshd[17045]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.212.138 user=r.r Jan 27 12:19:49 kopano sshd[17045]: Failed password for r.r from 167.99.212.138 port 40788 ssh2 Jan 27 12:19:49 kopano sshd[17045]: Received disconnect from 167.99.212.138 port 40788:11: Normal Shutdown, Thank you for playing [preauth] Jan 27 12:19:49 kopano sshd[17045]: Disconnected from authenticating user r.r 167.99.212.138 port 40788 [preauth] Jan 27 12:20:21 kopano sshd[17076]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.212.138 user=r.r Jan 27 12:20:23 kopano sshd[17076]: Failed password for r.r from 167.99.212.138 port 48416 ssh2 Jan 27 12:20:23 kopano sshd[17076]: Received disconnect from 167.99.212.138 port 48416:11: N........ ------------------------------ show less	FTP Brute-Force Hacking
🇪🇸 substantiu.com	2021-01-27 21:12:23 (5 years ago)	SSH login attempts with user root.	Brute-Force SSH

Showing 1 to 15 of 88 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.30

🇫🇷 85.217.140.33

🇺🇸 40.119.27.181

🇺🇸 35.229.65.180

🇨🇳 223.109.252.211

🇺🇸 199.165.159.57

🇬🇧 134.209.179.94

🇻🇳 123.27.182.192

🇹🇼 110.25.109.59

🇭🇰 101.79.165.43

🇳🇱 77.91.71.90

🇨🇳 60.19.186.139

🇰🇷 20.194.96.114

🇩🇪 2.28.13.214

🇬🇧 185.216.145.176

🇺🇸 184.105.247.252

🇳🇱 178.16.54.250

🇺🇸 172.212.202.179

🇺🇸 172.67.140.173

🇺🇸 129.121.139.106