JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 167.99.142.124

167.99.142.124 was found in our database!

This IP was reported 103 times. Confidence of Abuse is 89%: ?

89%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 167.99.142.124

Whois 167.99.142.124

IP Abuse Reports for 167.99.142.124:

This IP address has been reported a total of 103 times from 83 distinct sources. 167.99.142.124 was first reported on August 28th 2021, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 zulzeen	2026-08-06 05:24:38 (3 weeks ago)	[incypit-web] Blocked by SysWarden Firewall [BLOCK] (Database/Cache Attack)	Hacking Brute-Force
🇺🇸 donarev419	2026-08-06 04:52:50 (3 weeks ago)	Connection to port 1912 with data transfer. Data preview: GET / HTTP/1.1 Host: 167.253.66.144 Conn ... show more Connection to port 1912 with data transfer. Data preview: GET / HTTP/1.1 Host: 167.253.66.144 Connection: keep-alive sec-ch-ua: "Google Chrome";v="142", "N show less	Port Scan Hacking
🇨🇭 foobar	2026-08-05 08:32:03 (3 weeks ago)	SMTP nagging	Email Spam Brute-Force
🇺🇸 gu-alvareza	2026-08-05 05:05:26 (3 weeks ago)	Nmap.Script.Scanner	Port Scan
Anonymous	2026-08-04 22:07:03 (3 weeks ago)	IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-probing; Action=ban; Events=11; Ho ... show more IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-probing; Action=ban; Events=11; Hosts=_; Paths=HELP,OPTIONS / RTSP/1.0,\x00\x00\x00qj\x81n0\x81k\xA1\x03\x02\x01\x05\xA2\x03\x02\x01,\x00\x0C\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x1E\x00\x06\x01\x00\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03,\x03\x00\x00*%\xE0\x00\x00\x00\x00\x00Cookie: mstshash=nmap,\x16\x03\x00\x00S\x01\x00\x00O\x03\x00?G\xD7\xF7\xBA,\xEE\xEA\xB2`~\xF3\x00\xFD\x82{\xB9\xD5\x96\xC8w\x9B\xE6\xC4\xDB<=\xDBo\xEF\x10n\x00\x00(\x00\x16\x00\x13\x00,\x16\x03\x00\x00i\x01\x00\x00e\x03\x03U\x1C\xA7\xE4random1random2random3random4\x00\x00\x0C\x00/\x00; Country=DE; ASN=14061 DIGITALOCEAN-ASN show less	Port Scan Web App Attack
🇭🇰 sandra361	2026-08-04 15:43:16 (3 weeks ago)	Brute-force detected: 14 attempts across 1 port (22). \| Evidence: GHOST_SCAN: IN=eth0 SRC=167.99.142 ... show more Brute-force detected: 14 attempts across 1 port (22). \| Evidence: GHOST_SCAN: IN=eth0 SRC=167.99.142.124 LEN=60 TOS=0x14 PREC=0x00 TTL=50 ID=35888 DF PROTO=TCP SPT=17501 DPT=22 WINDOW=64240 RES=0x00 SYN URGP=0 show less	Brute-Force
🇺🇸 donarev419	2026-08-04 09:46:07 (3 weeks ago)	Port scan detected on port 18789 (connection without data transfer)	Port Scan
🇺🇸 gu-alvareza	2026-08-04 05:05:28 (3 weeks ago)	Nmap.Script.Scanner	Port Scan
🇫🇮 pixiekat	2026-08-04 04:10:28 (3 weeks ago)	[Tue Aug 04 05:10:27.946228 2026] [authz_core:error] [pid 973772:tid 973882] [client 167.99.142.124: ... show more [Tue Aug 04 05:10:27.946228 2026] [authz_core:error] [pid 973772:tid 973882] [client 167.99.142.124:14739] AH01630: client denied by server configuration: /var/www/html/ [Tue Aug 04 05:10:28.034928 2026] [authz_core:error] [pid 973771:tid 973860] [client 167.99.142.124:15595] AH01630: client denied by server configuration: /var/www/html/sdk [Tue Aug 04 05:10:28.040187 2026] [authz_core:error] [pid 973772:tid 973883] [client 167.99.142.124:7891] AH01630: client denied by server configuration: /var/www/html/ [Tue Aug 04 05:10:28.040272 2026] [authz_core:error] [pid 973772:tid 973880] [client 167.99.142.124:14547] AH01630: client denied by server configuration: /var/www/html/odinhttpcall1785816627 [Tue Aug 04 05:10:28.122520 2026] [authz_core:error] [pid 973772:tid 973888] [client 167.99.142.124:18791] AH01630: client denied by server configuration: /var/www/html/evox ... show less	Brute-Force
🇳🇱 EGP Abuse Dept	2026-08-04 02:01:36 (3 weeks ago)	Unauthorized connection to SSH port 22	Port Scan Hacking SSH
🇦🇺 LiftUp Hosting	2026-08-03 20:45:58 (3 weeks ago)	Honeypot hit: Unauthorized traffic (4 bytes of payload); 4891 [13] TCP	Port Scan
🇺🇸 legionMCCXV	2026-08-03 14:43:17 (3 weeks ago)	Non-HTTP protocol data (e.g. MQTT/TLS handshake bytes) sent to HTTP(S) port.	Port Scan Hacking
🇬🇧 Apache	2026-08-03 12:10:19 (3 weeks ago)	(mod_security) mod_security (id:920350) triggered by 167.99.142.124 (DE/Germany/-): 5 in the last 30 ... show more (mod_security) mod_security (id:920350) triggered by 167.99.142.124 (DE/Germany/-): 5 in the last 300 secs (CF_ENABLE) show less	Brute-Force Web App Attack
🇺🇸 gu-alvareza	2026-08-03 05:05:18 (3 weeks ago)	Nmap.Script.Scanner	Port Scan
🇺🇸 Bankbook8585	2026-08-03 03:17:51 (3 weeks ago)	T-Pot honeypot \| Cowrie SSH/Telnet honeypot: cowrie.login.failed user= \| Cowrie SSH/Telnet honeypot: ... show more T-Pot honeypot \| Cowrie SSH/Telnet honeypot: cowrie.login.failed user= \| Cowrie SSH/Telnet honeypot: cowrie.login.failed user=OPTIONS / HTTP/1.0 \| Cowrie SSH/Telnet honeypot: cowrie.login.success user=GET / HTTP/1.0 show less	Brute-Force SSH

Showing 1 to 15 of 103 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇪 193.24.126.228

🇸🇬 157.245.144.157

🇱🇺 46.151.182.130

🇱🇹 213.176.26.52

🇺🇦 193.93.217.179

🇰🇷 121.188.228.118

🇨🇭 104.244.73.193

🇹🇷 78.163.115.61

🇸🇬 43.134.49.202

🇧🇷 16.5.0.133

🇳🇱 217.60.195.30

🇪🇹 196.189.184.213

🇺🇦 194.44.160.119

🇬🇧 193.176.29.3

🇩🇪 193.124.20.250

🇺🇸 192.169.197.123

🇲🇽 189.158.152.202

🇵🇰 139.135.42.11

🇮🇳 122.177.247.38

🇭🇰 121.202.206.119