JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 167.172.29.41

167.172.29.41 was found in our database!

This IP was reported 61 times. Confidence of Abuse is 14%: ?

14%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Clifton, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 167.172.29.41

Whois 167.172.29.41

IP Abuse Reports for 167.172.29.41:

This IP address has been reported a total of 61 times from 53 distinct sources. 167.172.29.41 was first reported on January 8th 2026, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-10-17 07:13:35 (7 hours ago)	DNS AXFR Attempt	DNS Compromise
🇩🇪 LRob	2026-10-06 03:13:29 (1 week ago)	Not following 301 redirects — wasted requests \| method: GET \| path: /, /favicon.ico \| ua: Mozilla/5. ... show more Not following 301 redirects — wasted requests \| method: GET \| path: /, /favicon.ico \| ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 MPL	2026-08-11 08:07:42 (2 months ago)	tcp/8083 (2 or more attempts)	Port Scan
🇺🇸 RAP	2026-06-07 09:24:46 (4 months ago)	2026-06-07 09:24:46 UTC Unauthorized activity to TCP port 8089. Web App	Port Scan Web App Attack
🇺🇸 xmission.com	2026-06-07 08:36:36 (4 months ago)	Blocked by UFW (TCP on 8443) Source port: 61003 TTL: 241 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 8443) Source port: 61003 TTL: 241 Packet length: 44 TOS: 0x08 This report (for 167.172.29.41) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 _ArminS_	2026-06-02 06:17:22 (4 months ago)	SP-Scan 41040:3389 detected 2026.06.02 08:17:22 blocked until 2026.07.22 01:20:09	Port Scan
🇩🇪 Justin F. \| AS204464	2026-06-01 01:58:29 (4 months ago)	Honeypot [nx-infrastructure]: Unauthorized traffic (122 bytes of payload); 4433 [1], 11443 [1], 6443 ... show more Honeypot [nx-infrastructure]: Unauthorized traffic (122 bytes of payload); 4433 [1], 11443 [1], 6443 [1], 1443 [1], 8000 [1], 20443 [1] TCP Reported by: Justin F. show less	Port Scan
🇹🇷 Squearex	2026-05-31 07:41:08 (4 months ago)	Automated ban by SCUMUnified Shield. Honeypot Trap Triggered (Decoy Port 3389)	Brute-Force SSH
Anonymous	2026-05-31 04:32:20 (4 months ago)	May 31 00:32:18 localhost kernel: [108547259.771160] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more May 31 00:32:18 localhost kernel: [108547259.771160] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=167.172.29.41 DST=[mungedIP2] LEN=64 TOS=0x00 PREC=0x00 TTL=56 ID=0 DF PROTO=TCP SPT=41953 DPT=5555 WINDOW=65535 RES=0x00 SYN URGP=0 May 31 00:32:18 localhost kernel: [108547259.771185] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=167.172.29.41 DST=[mungedIP2] LEN=64 TOS=0x00 PREC=0x00 TTL=56 ID=0 DF PROTO=TCP SPT=41953 DPT=5555 SEQ=852836914 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 OPT (020405B4010303060101080ACE30C7B40000000004020000) May 31 00:32:20 localhost kernel: [108547261.364920] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=167.172.29.41 DST=[mungedIP2] LEN=64 TOS=0x00 PREC=0x00 TTL=56 ID=0 DF PROTO=TCP SPT=41953 DPT=9201 WINDOW=65535 RES=0x00 SYN URGP=0 May 31 00:32:20 localhost kernel: [108547261.364948] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:0 show less	Port Scan
🇺🇸 www.winos.me	2026-05-31 02:04:37 (4 months ago)	Shield: Layer4 Port 9 Trap	Port Scan Hacking
Anonymous	2026-05-31 01:01:34 (4 months ago)	Spraying garbage or empty requests on HTTP/S - [SSTP_DUPLEX_POST /sra_{BA195980-CD49-458b-9E23-C84EE ... show more Spraying garbage or empty requests on HTTP/S - [SSTP_DUPLEX_POST /sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/ HTTP/1.1], obvious automated scanner, botnet or whatever scriptkiddie crap could that be show less	Port Scan Web App Attack
🇱🇹 NotACaptcha	2026-05-27 18:03:02 (4 months ago)	Unauthorised access (May 27 21:03) SRC=167.172.29.41 LEN=64 TTL=49 ID=0 DF TCP DPT=3389 WINDOW=65535 ... show more Unauthorised access (May 27 21:03) SRC=167.172.29.41 LEN=64 TTL=49 ID=0 DF TCP DPT=3389 WINDOW=65535 SYN show less	Port Scan
🇫🇮 6kilowatti	2026-05-25 17:09:19 (4 months ago)	2026-05-25T20:09:19.353700+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18 ... show more 2026-05-25T20:09:19.353700+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18:bd:57:7e:08:00 SRC=167.172.29.41 DST=5.61.88.83 LEN=64 TOS=0x00 PREC=0x00 TTL=49 ID=0 DF PROTO=TCP SPT=48953 DPT=12345 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇦🇺 FEWA	2026-05-25 01:49:36 (4 months ago)	Fail2Ban Ban Triggered	Hacking Brute-Force
🇫🇷 gianluca.demartino75	2026-05-24 17:34:30 (4 months ago)	2026-05-24T19:34:28.016650+02:00 vps-49934a4d endlessh[2177713]: 2026-05-24T17:34:28.015Z ACCEPT hos ... show more 2026-05-24T19:34:28.016650+02:00 vps-49934a4d endlessh[2177713]: 2026-05-24T17:34:28.015Z ACCEPT host=::ffff:167.172.29.41 port=41642 fd=4 n=1/4096 ... show less	Brute-Force SSH

Showing 1 to 15 of 61 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 31.14.254.38

🇭🇰 152.32.189.59

🇧🇩 103.16.25.31

🇬🇧 86.38.187.119

🇳🇱 50.7.177.115

🇺🇸 172.237.137.136

🇻🇳 171.234.13.235

🇪🇪 158.173.75.121

🇳🇱 109.160.32.160

🇮🇳 103.147.248.44

🇺🇸 67.81.82.222

🇺🇸 66.132.186.235

🇨🇳 58.242.64.246

🇳🇱 45.148.10.152

🇻🇳 42.1.112.36

🇨🇳 36.139.11.170

🇷🇴 2.57.122.168

🇨🇱 191.115.111.69

🇹🇼 172.68.87.80

🇩🇪 69.5.169.52