167.71.28.252

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
48% Elevated
15 reports
12 reporters · latest 1 day ago
ISP
DigitalOcean, LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14061
Domain Name
digitalocean.com
Country
🇺🇸 United States of America
City
North Bergen, New Jersey
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
15 from 12 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 5 🇩🇪 Germany 2 🇫🇮 Finland 1
Most common categories Port Scan 7 Hacking 2 Bad Web Bot 1 Exploited Host 1 Web App Attack 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 sumnone
Port probing on unauthorized port 8444
Port Scan Hacking Exploited Host
🇺🇸 RAP
2026-11-08 15:17:55 UTC Unauthorized activity to TCP port 8088. Web App
Port Scan Web App Attack
🇺🇸 MPL
tcp/8044
Port Scan
🇩🇪 wlt-blocker
Illegal port scans
Port Scan
🇫🇮 6kilowatti
Port Scan
🇩🇪 dpsbs
url scanning on multiple public ips detected
Bad Web Bot
🇺🇸 donarev419
Connection to port 445 with data transfer. Data preview: GET / HTTP/1.1 Host: 67.215.244.172 Connection: keep-alive sec-ch-ua: "Chromium";v="153", "Not:A-
Port Scan Hacking
🇺🇸 xmission.com
Blocked by UFW (TCP on 27017) Source port: 61004 TTL: 241 Packet length: 44 TOS: 0x08 This report (for 167.71.28.252) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇺🇸 MPL
tcp/22 (2 or more attempts)
Port Scan
🇺🇸 MPL
tcp/22
Port Scan
🇧🇷 somosbr
[2026-09-01T17:17:01Z] Unsolicited scan from 167.71.28.252 to port 3232/tcp
Port Scan
🇦🇺 LiftUp Hosting
Hacking Bad Web Bot
🇷🇸 Smel
MH/MP Probe, Scan, Hack -
Port Scan Hacking
🇰🇷 forgeban
Honeypot hit: HTTP/1.1 request on 4444 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36 Accept: */* Accept-Encoding: gzip; 4444 [1] TCP
Hacking Bad Web Bot
🇺🇸 MPL
tcp/4444 (4 or more attempts)
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 184.73.35.182
🇺🇸 66.132.186.202
🇳🇱 20.229.185.186
🇨🇳 1.194.185.98
🇸🇬 203.123.48.24
🇳🇱 200.138.46.198
🇵🇰 175.107.237.148
🇧🇷 167.250.155.14
🇵🇰 139.135.41.134
🇧🇩 103.159.2.113
🇮🇩 103.126.9.102
🇷🇴 92.118.39.181
🇺🇸 69.71.1.144
🇨🇳 14.29.181.34
🇲🇿 197.158.58.163
🇵🇰 153.117.67.208
🇸🇬 47.79.207.26
🇧🇪 35.210.76.225
🇬🇧 35.203.210.186
🇨🇳 221.13.86.84
feedback