AbuseIPDB » 167.172.172.2
IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.
Top Reporter Countries (Last 60 Days)
Example previewReport Categories (Last 60 Days)
Example previewIP Abuse Reports for 167.172.172.2:
This IP address has been reported a total of 16 times from 16 distinct sources. 167.172.172.2 was first reported on , and the most recent report was . In the last 60 days, the top reporter locations were: Russian Federation with 2 reports; United States of America with 2 reports; United Arab Emirates with 1 report. The most common categories in these recent reports were: Port Scan 6 times; Brute-Force 6 times; Hacking 2 times; Web App Attack 2 times; FTP Brute-Force 1 time; Other 1 time.
| Reporter | IoA Timestamp (UTC) | Comment | Categories | |
|---|---|---|---|---|
| 🇬🇧 Interceptor_HQ |
request_uri: /sdk -- automatic report --
|
Brute-Force Hacking | ||
| 🇨🇦 alexbfr |
Fail2Ban report from custom-honeypot; automated Telnet honeypot detection.
|
Brute-Force IoT Targeted | ||
| 🇺🇸 HamSammich |
Automated sensor: 1 FTP connection/probe attempts over the last 24h (latest 2026-09-06T10:27Z).
|
FTP Brute-Force Brute-Force | ||
| 🇷🇺 DZBOT |
DZBOT: [MTA] NO LOGIN / auth failed
|
Port Scan Brute-Force | ||
| 🇦🇺 LiftUp Hosting |
Honeypot hit: Unauthorized traffic (4 bytes of payload); 8000 [16] TCP
|
Port Scan | ||
| 🇺🇸 gu-alvareza |
Nmap.Script.Scanner
|
Port Scan | ||
| 🇸🇰 KlinikaMD |
Automatic report from KMD firewall log.
|
Port Scan Hacking Brute-Force | ||
| 🇸🇪 sweplox.se |
|
Web App Attack | ||
| Anonymous |
631/tcp (1 or more attempts)
|
Port Scan | ||
| 🇷🇺 genokrad |
Website scan TCP 80/443 "/" "-"
|
Port Scan Web App Attack | ||
| 🇦🇪 abusiveIntelligence |
RDP connect attempt: Nmap Scanner
|
Brute-Force | ||
| Anonymous |
Malicious activity detected
|
Hacking Web App Attack | ||
| 🇺🇸 sumnone |
Port probing on unauthorized port 1000
|
Port Scan Hacking Exploited Host | ||
| 🇨🇳 ThreatBook.io |
|
Web App Attack | ||
| 🇧🇷 somosbr |
[2026-01-11T15:46:41Z] Unsolicited scan from 167.172.172.2 to port 995/tcp
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩