167.99.56.4

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
32% Elevated
22 reports
16 reporters ยท latest 2 weeks ago
ISP
DigitalOcean, LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14061
Domain Name
digitalocean.com
Country
๐Ÿ‡บ๐Ÿ‡ธ United States of America
City
Clifton, New Jersey
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
22 from 16 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations ๐Ÿ‡บ๐Ÿ‡ธ United States of America 6 ๐Ÿ‡ฉ๐Ÿ‡ช Germany 4 ๐Ÿ‡ฎ๐Ÿ‡ณ India 1
Most common categories Port Scan 9 Hacking 4 Web App Attack 3 Exploited Host 2 Bad Web Bot 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
MikroTik Enterprise Honeypot
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ xmission.com
Blocked by UFW (TCP on 8046) Source port: 61001 TTL: 240 Packet length: 44 TOS: 0x00 This report (for 167.99.56.4) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
๐Ÿ‡ฉ๐Ÿ‡ช Admins@Storch
IPS:drop <match> dstport=9876
Brute-Force Exploited Host
Anonymous
denied traffic to a honeypot network. destination port 3232.
Port Scan Hacking
๐Ÿ‡บ๐Ÿ‡ธ xmission.com
Blocked by UFW (TCP on 8880) Source port: 61008 TTL: 242 Packet length: 44 TOS: 0x00 This report (for 167.99.56.4) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ MPL
tcp/11000
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ sumnone
Port probing on unauthorized port 8881
Port Scan Hacking Exploited Host
๐Ÿ‡บ๐Ÿ‡ธ MPL
tcp ports: 8090,11000 (3 or more attempts)
Port Scan
๐Ÿ‡น๐Ÿ‡ท Domainhizmetleri.com
Source: DH Hunter (Honeypot) | Reason: HTTP Probe (7173/tcp) [non-standard port]
Web App Attack
๐Ÿ‡บ๐Ÿ‡ธ MPL
tcp/8090
Port Scan
Anonymous
denied SMB access attempt. destination port 445.
Port Scan Hacking
๐Ÿ‡ณ๐Ÿ‡ฑ homeshowdomain.nl
Auto-ban: >3000 req/min op 2026-09-01
Web App Attack SSH Hacking
๐Ÿ‡ฉ๐Ÿ‡ช EGP Abuse Dept
Scanning for web/db/file exploits on josvissersmeubelenmill.tafelconfigurator.nl
SQL Injection Bad Web Bot Web App Attack
๐Ÿ‡ซ๐Ÿ‡ท MeduzaCTI
Indicator Report Indicator: 167.99.56.4 Reporter: HeatherM Description: Sliver C2 infrastructure Shodan Tags: Sliver,C2 Source: MeduzaCTI Platform Reference: https://meduzacti.com
Hacking
๐Ÿ‡ณ๐Ÿ‡ฑ DonAtari
DShield firewall scan - TCP to port 8888
Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

๐Ÿ‡จ๐Ÿ‡ญ 209.99.187.155
๐Ÿ‡ฆ๐Ÿ‡บ 202.177.219.254
๐Ÿ‡บ๐Ÿ‡ฆ 185.157.121.160
๐Ÿ‡ซ๐Ÿ‡ฎ 65.108.103.50
๐Ÿ‡ธ๐Ÿ‡ช 46.59.122.78
๐Ÿ‡จ๐Ÿ‡ณ 221.229.106.252
๐Ÿ‡ช๐Ÿ‡น 196.191.116.213
๐Ÿ‡ธ๐Ÿ‡ฆ 188.54.103.158
๐Ÿ‡ฆ๐Ÿ‡ท 186.158.120.84
๐Ÿ‡ป๐Ÿ‡ณ 171.237.176.209
๐Ÿ‡ฉ๐Ÿ‡ช 167.94.146.36
๐Ÿ‡จ๐Ÿ‡ณ 139.199.80.137
๐Ÿ‡บ๐Ÿ‡ธ 132.196.86.77
๐Ÿ‡บ๐Ÿ‡ธ 129.121.101.28
๐Ÿ‡ฉ๐Ÿ‡ช 109.160.32.174
๐Ÿ‡ต๐Ÿ‡ฐ 103.196.163.109
๐Ÿ‡ณ๐Ÿ‡ฑ 91.148.244.131
๐Ÿ‡ณ๐Ÿ‡ฑ 91.92.40.12
๐Ÿ‡ณ๐Ÿ‡ฑ 87.210.233.226
๐Ÿ‡ฐ๐Ÿ‡ท 59.11.202.38