167.172.105.48
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- DigitalOcean, LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14061
- Domain Name
- digitalocean.com
- Country
- 🇩🇪 Germany
- City
- Frankfurt am Main, Hesse
Abuse Reports
Total reports
37 from
32 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 HamSammich |
Automated sensor: 2 SSH connection/probe attempts over the last 24h (latest 2026-11-06T12:21Z).
|
Port Scan SSH | |
| 🇧🇬 MazenHost |
1793951873 - 11/06/2026 09:57:53 Host: 167.172.105.48/167.172.105.48 Port: 143 TCP Blocked
...
|
Port Scan | |
| 🇫🇷 uthul |
T-Pot honeypot: 106 hits on ports [995] (automated)
|
Port Scan | |
| 🇧🇷 ICS Labs |
ICS Labs threat intelligence (ICS Feeds): Hacking. Last observed 2026-11-05 UTC.
|
Hacking | |
| 🇫🇷 Kejult |
Honeypot Finding: verified TCP multi-port scan/probing; 27 application-level events across 2 target ports and 27 source port(s). Ports: 1234/service, 445/SMB. Sensors: Honeytrap, Dionaea.
|
Port Scan | |
| 🇫🇷 Kejult |
Honeypot Finding: SMB activity on TCP/445; 13 Dionaea events.
|
Port Scan | |
| 🇵🇱 Kitki30.com |
Entered Telnet Tarpit (endlessh, server 1).
Log: 2026-11-05T07:20:45.598Z ACCEPT host=::ffff:167.172.105.48 port=20027 fd=26 n=73/4096
|
IoT Targeted Port Scan Brute-Force | |
| 🇦🇪 abusiveIntelligence |
RDP connect attempt: Nmap Scanner
|
Brute-Force | |
| 🇮🇪 AutosOnShow |
blocked for webapp attack | path requested: / | seen at 2026-11-05 00:19:28.281 |
|
Web App Attack | |
| 🇺🇸 Phil Schuyler |
Repeated probing against public honeypot services: 2 observed events targeting exposed network services.
|
Port Scan | |
| 🇮🇹 CoreTech srl |
[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact,ndpi_tcp_issues,ndpi_probing_attempt
|
Hacking | |
| 🇺🇸 HamSammich |
Automated sensor: 4 HTTP connection/probe attempts over the last 24h (latest 2026-11-04T19:01Z).
|
Port Scan Web App Attack | |
| 🇫🇷 pm33 |
Unsolicited connection attempts or aggressive port scan.
|
Port Scan | |
| 🇫🇷 Kejult |
Honeypot Finding: active TCP application payload captured by Honeytrap; 3 payload-bearing connection/event(s), 44 payload byte(s) total, maximum payload 22 byte(s). Target port(s): 4891.
|
Port Scan Hacking | |
| 🇩🇪 Marc |
|
Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown