167.148.201.84
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- MillenialHost Limited
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS135392
- Domain Name
- mlnl.host
- Country
- ๐บ๐ธ United States of America
- City
- Liberty Lake, Washington
No reports in the last 60 days
167.148.201.84 has been reported 81 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
81 from
45 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| ๐ซ๐ฎ diego021 |
|
Web App Attack | |
| ๐บ๐ธ donarev419 |
Connection to port 9999 with data transfer.
Data preview: ๏ฟฝ
|
Port Scan Hacking | |
| ๐ฌ๐ง gbzret4d |
Honeypot [uk-production01]: Large payload (1453 bytes); 4443 [5] TCP
|
Bad Web Bot | |
| ๐บ๐ธ sandra361 |
Port scan detected: 9 attempts across 1 port (9999). | Evidence: GHOST_SCAN: IN=enp1s0 SRC=167.148.201.84 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=29498 DF PROTO=TCP SPT=18548 DPT=9999 WINDOW=64240 RES=0x00 SYN URGP=0
|
Port Scan | |
| ๐ฌ๐ง andypiper |
CrowdSec ban for AbuseIPDB Top List
|
Brute-Force Web App Attack | |
| ๐ณ๐ฑ donarev419 |
Connection to port 443 with data transfer.
Data preview: ๏ฟฝ
|
Port Scan Hacking | |
| Anonymous |
|
Web App Attack | |
| ๐ต๐ฑ Niko's Stuff |
Triggered crowdsecurity/http-open-proxy. More information at: https://app.crowdsec.net/cti/167.148.201.84
|
Web App Attack | |
| ๐บ๐ธ kuj |
|
Port Scan Brute-Force | |
| ๐ต๐พ armandosaucedo.me |
Threat Intelligence via ARMTI, Web Attack: CONNECT /CSCOSSLC/tunnel
|
Web App Attack | |
| ๐บ๐ธ kosada.com |
Web vulnerability probing: /global-protect/prelogin.esp (bogus vhost/SNI)
|
Web App Attack | |
| ๐ฌ๐ง sandra361 |
Port scan detected: 9 attempts across 1 port (9443). | Evidence: GHOST_SCAN: IN=enp1s0f0 SRC=167.148.201.84 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=23350 DF PROTO=TCP SPT=23580 DPT=9443 WINDOW=64240 RES=0x00 SYN URGP=0
|
Port Scan | |
| ๐ง๐ช webbie |
|
Brute-Force Web App Attack | |
| ๐ฉ๐ช LRob |
CrowdSec: crowdsecurity/http-open-proxy | req: /CSCOSSLC/tunnel | UA: -
|
Hacking | |
| ๐ฉ๐ช Progetto1 |
Detected via HAProxyScanner at 2026-07-14 20:28:02 UTC on destination port WEB (80/443). Repeated scan / connection.
|
Port Scan Hacking Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown