167.71.3.104

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
183 reports
109 reporters · latest 1 month ago
ISP
DigitalOcean, LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14061
Domain Name
digitalocean.com
Country
🇳🇱 Netherlands
City
Amsterdam, North Holland
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
183 from 109 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 3
Most common categories SSH 3 Brute-Force 3
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇳🇱 rrn4444
$f2bV_matches
Brute-Force SSH
🇨🇿 plzenskypruvodce.cz
2026-02-11T22:07:46.256691+01:00 eproxy sshd[330430]: User root not allowed because account is locked 2026-02-11T22:07:46.401257+01:00 eproxy sshd[330430]: Connection closed by invalid user root 167.71.3.104 port 55372 [preauth] ...
Web App Attack
🇫🇷 framfram
Banned by Fail2ban (Jail: sshd) - Source: 167.71.3.104
Brute-Force SSH
🇳🇱 applemooz
Brute-Force SSH
🇩🇪 drops
Brute-Force SSH
🇩🇪 Viveronese
SSH brute force attacks
Brute-Force SSH
🇩🇪 HoneyPot-FrPri
2026-02-11T22:06:36.226210+01:00 [redacted] sshd[1569522]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.3.104 user=root 2026-02-11T22:06:38.335835+01:00 ...
Brute-Force SSH
🇬🇧 yvoictra
Feb 11 22:06:30 medusa sshd[105363]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.3.104 user=root Feb 11 22:06:33 medusa sshd[105363]: Failed password for root from 167.71.3.104 port 38260 ssh2 ...
Brute-Force SSH
🇵🇱 swiszczu
Fail2Ban automatic report: SSH multiple root login attempts: Feb 11 22:06:24 serw sshd[3275353]: Connection closed by authenticating user root 167.71.3.104 port 55946 [preauth]
Brute-Force SSH
Anonymous
Brute-Force SSH
🇸🇰 GOVCERT
Sweep Scan
Port Scan
🇧🇪 sid3windr
SSH port scan (Tarpitted for 20s, wasted 13B)
Port Scan SSH
🇫🇷 oonux.net
RouterOS: Scanning detected TCP 167.71.3.104:55056 > x.x.x.x:22
Port Scan
🇩🇪 Admins@FBN
FW-PortScan: Traffic Blocked srcport=36633 dstport=22
Port Scan Hacking SSH
🇸🇪 Abu Bakr
endlessh-go tarpit accepted connection
Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 66.132.195.49
🇦🇿 62.217.145.253
🇪🇸 46.39.212.113
🇸🇬 35.187.231.181
🇺🇸 20.112.236.72
🇺🇾 186.55.10.37
🇸🇬 185.200.116.77
🇳🇱 185.136.15.16
🇨🇴 181.79.159.2
🇨🇳 120.219.180.124
🇳🇱 109.160.32.131
🇺🇸 66.132.186.238
🇳🇱 45.148.10.194
🇸🇬 43.163.80.168
🇨🇦 34.19.253.215
🇺🇸 3.85.167.23
🇲🇾 202.165.25.43
🇲🇳 202.9.46.235
🇳🇱 185.223.235.2
🇺🇸 147.185.132.200
feedback