167.99.61.49

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
34% Elevated
10 reports
9 reporters · latest 3 weeks ago
ISP
DigitalOcean, LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14061
Domain Name
digitalocean.com
Country
🇺🇸 United States of America
City
Clifton, New Jersey
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
10 from 9 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 3 🇫🇷 France 3 🇺🇸 United States of America 2
Most common categories Hacking 6 Port Scan 6 Exploited Host 1 Brute-Force 1 Web App Attack 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 donarev419
Connection to port 5918 with data transfer. Data preview: GET / HTTP/1.1 Host: 5.230.173.215 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/201
Port Scan Hacking
🇳🇱 Tsumugi Kotobuki
Port Scan on Honeypot | Ports: 8080/HTTP-proxy | Proto: TCP(1) | Flags: all SYN | TTL: 239 | Len: 44B | Win: 1025(1) | F2B/ufw-honeypot@2026-10-22T04:05:22Z
Port Scan Hacking
🇹🇷 Domainhizmetleri.com
Source: DH Hunter (Honeypot) | Reason: HTTP Probe (8000/tcp)
Web App Attack
🇫🇷 masterguru
(eximnoptr) Exim: repeated no-PTR probing from 167.99.61.49 (US/United States/-): 10 in the last 3600 secs (0-131)
Hacking
🇩🇪 Admins@FBN
FW-PortScan: Traffic Blocked srcport=61007 dstport=3790
Port Scan
🇩🇪 Admins@FBN
FW-PortScan: Traffic Blocked srcport=61004 dstport=18789
Port Scan
🇫🇷 Kejult
Honeypot Finding: repeated TCP service probing on TCP/8086 (service); 2 application-level events across 2 source port(s). Sensor(s): Honeytrap.
Port Scan
🇺🇸 etu brutus
167.99.61.49 Blocked by [Attack Vector List] ...
Hacking Brute-Force Exploited Host
🇫🇷 Entalpi.net
Known exploit / shellcode injection attempt / network protocol violation, may be port scanning false positive
Hacking
Anonymous
denied traffic to a honeypot network. destination port 6688.
Port Scan Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇪 198.235.24.138
🇧🇷 186.200.104.66
🇺🇸 172.191.74.151
🇺🇸 98.83.72.38
🇳🇱 77.239.124.149
🇺🇸 70.184.72.177
🇺🇸 66.132.195.25
🇮🇹 195.32.111.35
🇬🇧 188.240.59.9
🇺🇸 172.70.176.62
🇨🇳 118.145.107.219
🇳🇱 34.1.238.41
🇳🇱 204.76.203.221
🇺🇸 172.208.106.174
🇸🇬 165.22.60.26
🇦🇷 149.107.222.2
🇬🇧 104.248.173.42
🇳🇱 89.248.168.227
🇬🇧 84.32.41.86
🇺🇸 66.132.172.149
feedback