JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

167.71.34.145

Activity Trending Down

Abuse confidence score ?

24% Elevated

93 reports

63 reporters · latest 1 month ago

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 167.71.34.145

Export CSV

This IP address has been reported a total of 93 times from 63 distinct sources. 167.71.34.145 was first reported on May 25th 2026, and the most recent report was 1 month ago. In the last 60 days, the top reporter locations were: Netherlands with 3 reports; Luxembourg with 2 reports; Germany with 1 report. The most common categories in these recent reports were: Brute-Force 9 times; Exploited Host 5 times; Hacking 2 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 manuelisus	2026-05-27 00:58:26 (4 months ago)	Honeypot FTP: +10: honeypot_connection, +15: short_automated_session, +15: ftp_connection, +10: host ... show more Honeypot FTP: +10: honeypot_connection, +15: short_automated_session, +15: ftp_connection, +10: hosting_provider_digital, +15: cloud_provider_DigitalOcean show less	Brute-Force FTP Brute-Force
🇳🇱 i-turnradio.nl	2026-05-26 18:30:10 (4 months ago)	2026-05-26 @ 20:30:09 (CET) ~ Blocked for trying to access: /sdk	Web App Attack
🇹🇷 0xi	2026-05-26 16:00:36 (4 months ago)	Malicious scanning and attack activity detected (123 attempts). Targeted ports: 6000. Triggered sens ... show more Malicious scanning and attack activity detected (123 attempts). Targeted ports: 6000. Triggered sensors: P0f, Suricata, Honeytrap. Observed via distributed honeypot network. show less	Port Scan
🇬🇧 PeravixGroup	2026-05-26 15:14:34 (4 months ago)	Honeypot detection: SIP / VoIP scanning or unauthorized registration attempt on port 5060. Severity: ... show more Honeypot detection: SIP / VoIP scanning or unauthorized registration attempt on port 5060. Severity: LOW. Aaran.cloud show less	Port Scan
🇳🇱 DrLex0	2026-05-26 12:00:03 (4 months ago)	Probing for various exploits 167.71.34.145 443 - [26/May/2026:12:00:03 +0000] "GET / HTTP/1.0" 200 ... show more Probing for various exploits 167.71.34.145 443 - [26/May/2026:12:00:03 +0000] "GET / HTTP/1.0" 200 13261 "-" "-" 167.71.34.145 443 - [26/May/2026:12:00:03 +0000] "GET /odinhttpcall1779796803 HTTP/1.1" 404 5981 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" 167.71.34.145 443 - [26/May/2026:12:00:03 +0000] "POST /sdk HTTP/1.1" 400 3922 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" 167.71.34.145 443 - [26/May/2026:12:00:03 +0000] "GET /evox/about HTTP/1.1" 404 5981 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" 167.71.34.145 443 - [26/May/2026:12:00:03 +0000] "GET /HNAP1 HTTP/1.1" 404 5981 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" 167.71.34.145 443 - [26/May/2026:12:00:03 +0000] "GET / HTTP/1.0" 200 7195 "-" "-" 167.71.34.145 443 - [26/May/2026:12:00:03 +0000] "GET / HTTP/1.1" 200 7176 "-" "-" show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 PeravixGroup	2026-05-26 08:27:30 (4 months ago)	Honeypot detection: SIP/VoIP unauthorized registration / call routing abuse attempt on port 25. Seve ... show more Honeypot detection: SIP/VoIP unauthorized registration / call routing abuse attempt on port 25. Severity: HIGH. Aaran.cloud show less	Hacking Brute-Force
🇺🇸 chronos	2026-05-26 07:26:52 (4 months ago)	[AUTORAVALT][[26/05/2026 - 04:26:52 -03:00 UTC] Attack from [DigitalOcean, LLC] [167.71.34.145] Acti ... show more [AUTORAVALT][[26/05/2026 - 04:26:52 -03:00 UTC] Attack from [DigitalOcean, LLC] [167.71.34.145] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sender spoofing. Brute-Force -> Credential brute-force a] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking
🇺🇸 gu-alvareza	2026-05-26 07:05:08 (4 months ago)	Nmap.Script.Scanner	Port Scan
🇺🇸 Hobby Bob	2026-05-26 06:44:24 (4 months ago)	May 26 06:44:23 server dovecot: imap-login: Disconnected: Connection closed (no auth attempts in 0 s ... show more May 26 06:44:23 server dovecot: imap-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=, rip=167.71.34.145, lip=X.X.X.X session= show less	Port Scan Hacking
🇬🇧 PeravixGroup	2026-05-26 03:36:05 (4 months ago)	Honeypot detection: SIP/VoIP unauthorized registration / call routing abuse attempt on port 6443. Se ... show more Honeypot detection: SIP/VoIP unauthorized registration / call routing abuse attempt on port 6443. Severity: HIGH. Aaran.cloud show less	Hacking Brute-Force
🇦🇺 Telemetry2U.com	2026-05-26 02:49:00 (4 months ago)	Unauthorized connection attempt to port 8080	Hacking
🇺🇸 SuperCores Hosting	2026-05-26 01:22:03 (4 months ago)	[2026-05-26 01:22:03.063027] SSH/22 Unautorized connection. Suspicious SSH Brute-force.	SSH Exploited Host Brute-Force Hacking Port Scan
🇺🇸 TPI-Abuse	2026-05-25 22:41:29 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 167.71.34.145 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 167.71.34.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 25 18:41:24.795358 2026] [security2:error] [pid 10811:tid 10811] [client 167.71.34.145:29531] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|\|F\|2"] [data ".txt.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bikinily.lowrisebikinis.com"] [uri "/nice ports,/Trinity.txt.bak"] [unique_id "ahTQFGbk_CM-LjJTTWT5fwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 strefapi_com	2026-05-25 22:39:03 (4 months ago)	Brute-force or trying open relay ...	Brute-Force Web App Attack
🇵🇱 nfsec.pl	2026-05-25 18:44:11 (4 months ago)	167.71.34.145 - - [25/May/2026:18:42:37 +0000] "GET / HTTP/1.0" 403 3894 "-" "-" 167.71.34.145 - - [ ... show more 167.71.34.145 - - [25/May/2026:18:42:37 +0000] "GET / HTTP/1.0" 403 3894 "-" "-" 167.71.34.145 - - [25/May/2026:18:42:38 +0000] "GET /nice%20ports%2C/Tri%6Eity.txt%2ebak HTTP/1.0" 403 3894 "-" "-" 167.71.34.145 - - [25/May/2026:18:44:10 +0000] "POST /sdk HTTP/1.1" 403 4032 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" 167.71.34.145 - - [25/May/2026:18:44:10 +0000] "GET /odinhttpcall1779734650 HTTP/1.1" 403 4032 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" 167.71.34.145 - - [25/May/2026:18:44:10 +0000] "GET /HNAP1 HTTP/1.1" 403 4032 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" ... show less	Web App Attack Exploited Host

Showing 76 to 90 of 93 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 202.101.144.44

🇷🇴 193.46.255.86

🇺🇸 192.161.49.2

🇸🇪 155.4.199.210

🇺🇸 147.185.132.227

🇳🇱 95.85.226.199

🇬🇧 51.195.149.120

🇺🇸 47.251.142.22

🇸🇬 47.84.102.38

🇬🇧 35.203.211.19

🇺🇸 184.186.73.71

🇨🇻 154.203.238.43

🇵🇰 154.192.215.205

🇺🇸 147.182.233.232

🇺🇸 146.190.155.55

🇨🇳 139.155.126.16

🇨🇳 124.223.192.147

🇮🇳 103.216.170.48

🇧🇩 103.186.52.30

🇷🇺 95.165.84.70