This IP address has been reported a total of
90
times from
61 distinct
sources.
167.99.213.64 was first reported on
, and the most recent report was
.
In the last 60 days, the only reporter location was:
Canada
with 2
reports.
The most common categories in these recent reports were:
SSH
2
times;
Brute-Force
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
FFM Dec 26 11:24:36 websrv01 sshd[1807813]: Failed password for root from 167.99.213.64 port 56092 s ...
show moreFFM Dec 26 11:24:36 websrv01 sshd[1807813]: Failed password for root from 167.99.213.64 port 56092 ssh2
Dec 26 11:25:09 websrv01 sshd[1808322]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.213.64 user=root
Dec 26 11:25:11 websrv01 sshd[1808322]: Failed password for root from 167.99.213.64 port 40746 ssh2
Dec 26 11:25:44 websrv01 sshd[1808325]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.213.64 user=root
Dec 26 11:25:45 websrv01 sshd[1808325]: Failed password for root from 167.99.213.64 port 41164 ssh2
show less
2025-12-26T11:15:25.298196+01:00 router01.ib-heddier.de sshd[3953891]: Connection closed by 167.99.2 ...
show more2025-12-26T11:15:25.298196+01:00 router01.ib-heddier.de sshd[3953891]: Connection closed by 167.99.213.64 port 34354
2025-12-26T11:16:25.755286+01:00 router01.ib-heddier.de sshd[3954027]: Connection closed by authenticating user root 167.99.213.64 port 45008 [preauth]
2025-12-26T11:17:05.298361+01:00 router01.ib-heddier.de sshd[3954137]: Connection closed by authenticating user root 167.99.213.64 port 56502 [preauth]
2025-12-26T11:17:42.836874+01:00 router01.ib-heddier.de sshd[3954164]: Connection closed by authenticating user root 167.99.213.64 port 35906 [preauth]
2025-12-26T11:18:21.523119+01:00 router01.ib-heddier.de sshd[3954289]: Connection closed by authenticating user root 167.99.213.64 port 60022 [preauth]
show less