167.172.40.253
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- DigitalOcean, LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14061
- Domain Name
- digitalocean.com
- Country
- 🇳🇱 Netherlands
- City
- Amsterdam, North Holland
No reports in the last 60 days
167.172.40.253 has been reported 54 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
54 from
52 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇫🇷 SiyCah |
167.172.40.253 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time wasted: 3s. Total bytes sent by tarpit: 263B. Report generated by Endlessh Report Generator v1.2.3
|
Brute-Force Port Scan SSH Hacking | |
| 🇳🇱 homeshowdomain.nl |
Auto-ban: >3000 req/min op 2026-02-24
|
Web App Attack SSH Hacking | |
| 🇳🇱 oisecnet |
Automated report: Unauthorized vulnerability scanning detected on 2026-02-24. 21 requests from this IP.
|
Brute-Force Web App Attack SSH | |
| Anonymous |
"GET /.git/config HTTP/1.1"
|
Hacking Web App Attack | |
| 🇫🇮 notalunar |
Massivepot | Log: 2026-02-24 20:14:35 | IP:167.172.40.253 | PORT:80 | CAT:web_admin | DATA:474554202f2e6769742f636f6e66696720485454502f312e310d0a486f73743a2038372e3132312e38322e3131380d0a557365722d6167656e743a204d6f7a69
|
Port Scan | |
| 🇷🇺 Mga Admin |
|
Web App Attack | |
| 🇳🇱 debestelapp |
|
Web App Attack | |
| 🇨🇭 GAS |
Bad Bot.
167.172.40.253 - - [24/Feb/2026:21:04:01 +0100] "GET /.git/config HTTP/1.1" 402 2755 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "REDACTED" ""
...
|
Bad Web Bot Web App Attack | |
| 🇳🇱 i-turnradio.nl |
2026-02-24 21:01:00 (CET) ~ Blocked by abusescan risk assessment
|
Web App Attack | |
| 🇬🇧 essinghigh |
IPS Detection: 167.172.40.253 -> DPT: 80
|
Port Scan | |
| 🇳🇱 alexbfr |
|
Bad Web Bot Web App Attack | |
| 🇬🇷 ggb_st |
[2026-02-24 19:33:56] 167.172.40.253 triggered a honeypot. Requested on port 80. URI: /.git/config, UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
...
|
Bad Web Bot Brute-Force Web App Attack Hacking SQL Injection | |
| 🇩🇪 HoneyPotFRI |
167.172.40.253 - - [24/Feb/2026:20:31:14 +0100] "GET /.git/config HTTP/1.1" 404 188 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
167.
...
|
Bad Web Bot Web App Attack | |
| 🇫🇷 breubit |
167.172.40.253 - - [24/Feb/2026:20:23:54 +0100] "GET /.git/config HTTP/1.1" 404 492 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
...
|
Web App Attack | |
| 🇩🇪 entspannt |
Detected empty referer, indicating web scraping / abusive scanning with UA: "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" and uri: "/.git/config"
|
IoT Targeted |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown