167.71.120.23

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
99 reports
43 reporters · latest 23 minutes ago
ISP
DigitalOcean, LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14061
Hostname(s)
sfo2-199.boron.do.prod.binaryedge.ninja
Domain Name
digitalocean.com
Country
🇺🇸 United States of America
City
Santa Clara, California
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
99 from 43 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 42 🇫🇷 France 18 🇩🇪 Germany 13
Most common categories Port Scan 88 Hacking 19 Web App Attack 4 Brute-Force 4 Email Spam 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 xmission.com
Blocked by UFW (TCP on 2200) Source port: 49672 TTL: 248 Packet length: 44 TOS: 0x00 This report (for 167.71.120.23) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇩🇪 EnthecSolutions
Detected by Enthec Solutions. | Attempts: 39 in 24h | Target port: 1987
Port Scan Hacking
🇺🇸 donarev419
Connection to port 2103 with data transfer. Data preview:
Port Scan Hacking
🇩🇪 Jochen Pretli
connection to honeypot
Email Spam Port Scan
🇺🇸 MPL
tcp/2054 (2 or more attempts)
Port Scan
🇫🇷 EvoX
🛡️ Honeypot [bsts-tpot-hive]: Empty payload (likely service probe); 2049 [39] TCP
Port Scan
🇫🇷 Kejult
Honeypot Finding: active TCP application payload captured by Honeytrap; 27 payload-bearing connection/event(s), 1458 payload byte(s) total, maximum payload 223 byte(s). Target port(s): 2016.
Port Scan Hacking
🇫🇷 uthul
T-Pot honeypot: 264 hits on ports [2000] (automated)
Port Scan
🇸🇪 NordhTech
Multiple malicious connection attempts detected, trying port(s) 1993/tcp, then blocked by firewall.
Port Scan Hacking
🇺🇸 MPL
tcp/1975
Port Scan
🇺🇸 MPL
tcp/1512 (2 or more attempts)
Port Scan
🇫🇷 Kejult
Honeypot Finding: verified TCP multi-port scan/probing; 76 application-level events across 2 target ports and 76 source port(s). Ports: 1235/service, 1291/service. Sensors: Honeytrap.
Port Scan
Anonymous
Blocked by firewall on hugin [1221/tcp] | Rule: UFW | SPT: 40300 | TTL: 238 | LEN: 44 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇫🇷 Little Iguana
trying to access non-authorized port
Port Scan
🇮🇹 Fusty
Unauthorized attempt on (TCP on port 1221). Source port: 40300 TTL: 240 Packet length: 44 Timestamp: 2026-11-09 17:11:16
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇹🇭 202.29.220.106
🇧🇷 186.192.9.72
🇮🇩 163.7.6.114
🇻🇳 124.158.13.141
🇨🇳 121.15.140.235
🇰🇿 104.22.255.130
🇩🇪 69.5.169.14
🇬🇧 5.226.140.27
🇰🇷 220.76.91.28
🇳🇱 185.136.15.16
🇨🇳 183.199.184.196
🇻🇳 160.187.146.126
🇺🇸 147.185.132.252
🇳🇱 109.160.32.143
🇳🇱 103.206.235.107
🇳🇱 86.54.31.36
🇨🇳 219.159.44.190
🇺🇸 206.81.12.118
🇺🇸 195.184.76.152
feedback