167.99.92.158

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
21 reports
20 reporters · latest 10 hours ago
ISP
DigitalOcean, LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14061
Domain Name
digitalocean.com
Country
🇬🇧 United Kingdom of Great Britain and Northern Ireland
City
London, England
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
21 from 20 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 3 🇺🇸 United States of America 3 🇮🇪 Ireland 2
Most common categories Port Scan 15 Brute-Force 6 Hacking 5 Web App Attack 4 Bad Web Bot 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇧🇷 ICS Labs
ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-11-13 UTC.
Brute-Force
🇮🇪 RoboSOC
SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found
Port Scan
🇩🇪 CK_beats
Blocked by os-abuseipdb on OPNsense firewall KN-FW01; 5 hits, proto=tcp, ports=995
Port Scan Brute-Force
🇷🇸 Smel
MH/MP Probe, Scan, Hack -
Port Scan Hacking
🇺🇸 xmission.com
Blocked by UFW (TCP on 995) Source port: 58114 TTL: 50 Packet length: 60 TOS: 0x08 This report (for 167.99.92.158) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇯🇵 VXG-NET
port=995, indicator_type=scan
Port Scan
🇹🇷 Domainhizmetleri.com
Source: DH Hunter (Honeypot) | Reason: TLS Handshake Probe (995/tcp) [non-standard port]
Port Scan Hacking
🇨🇿 lp
anomaly: tcp_port_scan, 501 > threshold 500, repeats 7149 times
Port Scan
🇯🇵 S.O.B.A. Dev.
Persistent port scanning or vulnerability scanning
Port Scan
🇨🇦 DRI
Unsolicited TCP traffic on Honeypot, srcport=36644 dstport=995
Port Scan Hacking
🇮🇱 Ilop
[v4-00] Blocked by os-abuseipdb; 5 hits, proto=tcp, ports=995, src_ip=167.99.92.158
Port Scan Hacking
🇮🇪 wiredalter
Blocked by UFW on vhVPS [995/tcp] Source Port: 48558 TTL: 48 Packet Length: 60 TOS: 0x00 Analyzed by https://ip.wiredalter.com
Port Scan Brute-Force
🇮🇩 helouism
Fail2Ban: Blocked by UFW for port scanning.
Port Scan DDoS Attack
Anonymous
Drop from IP address 167.99.92.158 to tcp-port 995
Port Scan
🇺🇸 cwytech
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/pf-geofence-high.
Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 200.138.46.36
🇷🇺 31.40.203.75
🇺🇸 193.202.81.178
🇷🇺 188.130.218.144
🇷🇺 188.130.137.246
🇺🇦 176.104.184.114
🇩🇴 154.88.171.0
🇩🇪 128.0.101.204
🇨🇳 122.51.248.133
🇰🇷 121.157.181.162
🇷🇴 92.118.39.181
🇬🇧 92.31.12.160
🇬🇧 90.218.74.230
🇺🇦 31.129.79.185
🇺🇸 17.166.21.78
🇫🇷 5.196.138.44
🇺🇸 199.165.159.157
🇷🇺 188.130.128.180
🇪🇨 181.175.91.131
🇲🇽 143.105.28.104
feedback