167.99.239.39

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
37% Elevated
22 reports
16 reporters · latest 2 weeks ago
ISP
DigitalOcean, LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14061
Domain Name
digitalocean.com
Country
🇺🇸 United States of America
City
North Bergen, New Jersey
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
22 from 16 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 3 🇩🇪 Germany 2 🇳🇱 Netherlands 2
Most common categories Port Scan 10 Hacking 4 Brute-Force 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇬🇧 essinghigh
IPS Detection: 167.99.239.39 -> DPT: 9080
Port Scan
🇺🇸 xmission.com
Blocked by UFW (TCP on 5173) Source port: 61013 TTL: 241 Packet length: 44 TOS: 0x00 This report (for 167.99.239.39) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇺🇸 Cyber Crusader
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
Port Scan Hacking Brute-Force
🇺🇸 RAP
2026-10-13 10:07:20 UTC Unauthorized activity to TCP port 3306.
Port Scan
🇫🇷 Kejult
Honeypot Finding: repeated TCP service probing on TCP/3333 (service); 2 application-level events across 2 source port(s). Sensor(s): Honeytrap.
Port Scan
🇩🇪 _ArminS_
SP-Scan 61002:8047 detected 2026.10.13 11:32:44 blocked until 2026.12.02 03:35:31
Port Scan
Anonymous
denied traffic to a honeypot network. destination port 3389.
Port Scan Hacking
🇳🇱 EGP Abuse Dept
Unsolicited connection to port 445
Port Scan Hacking
🇳🇱 donarev419
Connection to port 5678 with data transfer. Data preview: GET / HTTP/1.1 Host: 87.229.95.155 Connection: keep-alive sec-ch-ua: "Google Chrome";v="153", "No
Port Scan Hacking
Anonymous
4444/tcp (1 or more attempts)
Port Scan
🇩🇪 Lino Project
CrowdSec abuse IP report (host SRV-2) Scenario: crowdsecurity/postfix-non-smtp-command
Hacking
🇵🇱 sefinek.net
Blocked by UFW on PL02 [3306/tcp] | SPT: 61010 | TTL: 236 | LEN: 44 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan SQL Injection
🇺🇸 xmission.com
Blocked by UFW (TCP on 8088) Source port: 61015 TTL: 241 Packet length: 44 TOS: 0x08 This report (for 167.99.239.39) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇺🇸 RAP
2026-05-24 06:31:51 UTC Unauthorized activity to TCP port 8443. Web App
Port Scan Web App Attack
🇬🇧 PeravixGroup
Honeypot detection: Remote Desktop Protocol (RDP) brute-force attempt on port 3389. Severity: HIGH. Aaran.cloud
Brute-Force Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇷 186.235.186.166
🇳🇱 185.189.182.234
🇸🇬 161.120.187.94
🇲🇺 102.117.73.177
🇫🇷 91.231.89.74
🇨🇦 79.135.129.133
🇺🇸 40.124.116.44
🇳🇱 216.252.238.226
🇺🇸 216.180.246.142
🇺🇸 195.184.76.198
🇬🇧 193.163.125.38
🇧🇷 186.235.186.138
🇬🇧 185.216.145.163
🇦🇷 179.41.190.36
🇩🇪 151.243.11.32
🇨🇳 118.196.114.236
🇧🇩 103.167.17.42
🇷🇴 80.94.92.55
🇮🇳 49.37.219.22
🇧🇪 35.210.197.24
feedback