JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 167.71.39.216

167.71.39.216 was found in our database!

This IP was reported 47 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 167.71.39.216

Whois 167.71.39.216

IP Abuse Reports for 167.71.39.216:

This IP address has been reported a total of 47 times from 35 distinct sources. 167.71.39.216 was first reported on August 20th 2024, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 donarev419	2026-05-10 03:38:01 (2 months ago)	Connection to port 14000 with data transfer. Data preview: GET / HTTP/1.1 Host: 67.215.244.172 Con ... show more Connection to port 14000 with data transfer. Data preview: GET / HTTP/1.1 Host: 67.215.244.172 Connection: keep-alive sec-ch-ua: "Google Chrome";v="142", "N show less	Port Scan Hacking
🇺🇸 sumnone	2026-05-10 02:33:17 (2 months ago)	Port probing on unauthorized port 1244	Port Scan Hacking Exploited Host
Anonymous	2026-05-10 02:32:02 (2 months ago)	Fail2Ban triggered	Spoofing Port Scan
Anonymous	2025-07-17 20:55:00 (11 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2025-07-17 16:16:51 (11 months ago)	Ports: 2077,2078,2082,2083,2086,2087,2095,2096; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
🇺🇸 chronos	2024-08-26 21:11:23 (1 year ago)	[AUTORAVALT][[26/08/2024 - 18:11:22 -03:00 UTC] Attack from [DigitalOcean, LLC] [167.71.39.216] Acti ... show more [AUTORAVALT][[26/08/2024 - 18:11:22 -03:00 UTC] Attack from [DigitalOcean, LLC] [167.71.39.216] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sender spoofing. Brute-Force -> Credential brute-force a] ... show less	Phishing Email Spam Hacking Spoofing Brute-Force
🇳🇱 rshict	2024-08-26 16:48:59 (1 year ago)	Hacking, Brute-Force, Web App Attack	Hacking Brute-Force Web App Attack
🇫🇷 geeek	2024-08-24 05:36:25 (1 year ago)	Port scanning: 21 TCP Blocked	Port Scan
🇺🇸 Vasili Sviridov	2024-08-24 04:38:19 (1 year ago)	: Connection closed: read(size=1026) failed: Connection reset by peer (disconnected before auth was ... show more : Connection closed: read(size=1026) failed: Connection reset by peer (disconnected before auth was ready, waited 0 secs) show less	Brute-Force
🇺🇸 drewf.ink	2024-08-24 00:48:07 (1 year ago)	[00:48] Port scanning. Port(s) scanned: TCP/502	Port Scan
Anonymous	2024-08-23 21:24:28 (1 year ago)	Aug 23 23:24:27 ns postfix/submission/smtpd[1269579]: lost connection after CONNECT from unknown[167 ... show more Aug 23 23:24:27 ns postfix/submission/smtpd[1269579]: lost connection after CONNECT from unknown[167.71.39.216] ... show less	Web Spam Email Spam Port Scan Brute-Force
🇺🇸 chronos	2024-08-23 15:39:55 (1 year ago)	[AUTORAVALT][[23/08/2024 - 12:39:55 -03:00 UTC] Attack from [DigitalOcean, LLC] [167.71.39.216] Acti ... show more [AUTORAVALT][[23/08/2024 - 12:39:55 -03:00 UTC] Attack from [DigitalOcean, LLC] [167.71.39.216] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sender spoofing. Brute-Force -> Credential brute-force a] ... show less	Phishing Email Spam Hacking Spoofing Brute-Force
🇩🇪 Lars	2024-08-23 15:24:46 (1 year ago)	Aug 23 17:24:39 h2996638 dovecot: imap-login: Disconnected: Connection closed: read(size=1026) faile ... show more Aug 23 17:24:39 h2996638 dovecot: imap-login: Disconnected: Connection closed: read(size=1026) failed: Connection reset by peer (disconnected before auth was ready, waited 0 secs): user=<>, rip=167.71.39.216, lip=85.214.19.161, TLS handshaking: read(size=1026) failed: Connection reset by peer, session=<6pStX1sg13WnRyfY> Aug 23 17:24:45 h2996638 dovecot: imap-login: Disconnected: Connection closed: SSL_accept() failed: error:1420918C:SSL routines:tls_early_post_process_client_hello:version too low (no auth attempts in 6 secs): user=<>, rip=167.71.39.216, lip=85.214.19.161, TLS handshaking: SSL_accept() failed: error:1420918C:SSL routines:tls_early_post_process_client_hello:version too low, session=<bFUKYFsgYXGnRyfY> Aug 23 17:24:45 h2996638 dovecot: imap-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=167.71.39.216, lip=85.214.19.161, TLS handshaking: Connection closed, session=<HPIKYFsgzw+nRyfY> ... show less	Hacking Brute-Force
🇺🇸 gu-alvareza	2024-08-23 07:05:24 (1 year ago)	Nmap.Script.Scanner	Port Scan
🇩🇪 Honeypot-EU-Fru	2024-08-23 04:39:55 (1 year ago)	Aug 23 06:39:53 [redacted] dovecot: imap-login: Disconnected (disconnected before auth was ready, wa ... show more Aug 23 06:39:53 [redacted] dovecot: imap-login: Disconnected (disconnected before auth was ready, waited 0 secs): user=<>, rip=167.71.39.216, lip=[redacted], TLS handshaking: read(size=1026) failed: Conne ... show less	Email Spam Brute-Force

Showing 1 to 15 of 47 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 218.82.18.8

🇺🇸 167.99.157.151

🇹🇼 111.70.11.152

🇵🇹 79.168.112.28

🇺🇸 71.6.233.2

🇺🇸 71.6.232.28

🇮🇳 61.0.51.150

🇧🇷 191.6.25.239

🇬🇧 80.3.36.87

🇺🇸 35.252.123.164

🇧🇪 35.205.9.180

🇧🇪 35.187.122.20

🇨🇳 218.9.233.74

🇨🇦 178.93.201.239

🇦🇷 170.245.233.97

🇺🇸 147.185.132.38

🇺🇸 71.6.134.235

🇩🇪 64.89.163.68

🇺🇸 64.62.156.211

🇺🇸 47.201.173.69