JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.172.157.5

172.172.157.5 was found in our database!

This IP was reported 165 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Washington, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 172.172.157.5

Whois 172.172.157.5

IP Abuse Reports for 172.172.157.5:

This IP address has been reported a total of 165 times from 87 distinct sources. 172.172.157.5 was first reported on November 17th 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 demonsword	2026-04-30 02:33:52 (1 month ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: www.google.com:443 show less	Open Proxy Port Scan
🇺🇸 MPL	2026-02-27 16:37:20 (3 months ago)	tcp/25565 (2 or more attempts)	Port Scan
🇩🇪 iNetWorker	2026-02-27 16:03:53 (3 months ago)	trying to access non-authorized port	Port Scan
Anonymous	2026-02-27 13:17:52 (3 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇺🇸 Cyber Crusader	2026-02-27 07:17:48 (3 months ago)	Hundreds of Attempts (at least) to Connect to and Access Firewall Ports	Port Scan Hacking Brute-Force
🇺🇸 Rayulcifer	2026-01-29 08:29:04 (4 months ago)	172.172.157.5 - - [29/Jan/2026:03:29:03 -0500] "CONNECT speed.hetzner.de:443 HTTP/1.1" 502 488 "-" " ... show more 172.172.157.5 - - [29/Jan/2026:03:29:03 -0500] "CONNECT speed.hetzner.de:443 HTTP/1.1" 502 488 "-" "-" 172.172.157.5 - - [29/Jan/2026:03:29:03 -0500] "CONNECT proof.ovh.net:443 HTTP/1.1" 502 488 "-" "-" ... show less	Open Proxy Port Scan Hacking Web App Attack SSH
🇺🇸 pduggusa	2026-01-13 01:59:02 (4 months ago)	Detected attacking dugganusa.com at 2026-01-13T01:59:02.579Z \| Attack: External Remote Services \| So ... show more Detected attacking dugganusa.com at 2026-01-13T01:59:02.579Z \| Attack: External Remote Services \| Source: DugganUSA PreCog auto-block show less	DDoS Attack Hacking SSH
🇺🇸 pduggusa	2026-01-13 01:39:18 (4 months ago)	Detected attacking dugganusa.com at 2026-01-13T01:39:18.852Z \| Attack: External Remote Services \| So ... show more Detected attacking dugganusa.com at 2026-01-13T01:39:18.852Z \| Attack: External Remote Services \| Source: DugganUSA PreCog auto-block show less	DDoS Attack Hacking SSH
🇺🇸 pduggusa	2026-01-13 00:37:38 (4 months ago)	Detected attacking dugganusa.com at 2026-01-13T00:37:38.016Z \| Attack: External Remote Services \| So ... show more Detected attacking dugganusa.com at 2026-01-13T00:37:38.016Z \| Attack: External Remote Services \| Source: DugganUSA PreCog auto-block show less	DDoS Attack Hacking SSH
🇳🇱 Selckie	2026-01-07 00:57:58 (4 months ago)	fail2ban: NGINX unusual impact	Web App Attack
🇩🇪 2048	2026-01-07 00:55:47 (4 months ago)	2026-01-07T01:55:44.078986+01:00 machodeer.aeza.network kernel: [464294.882359] [UFW BLOCK] IN=ens3 ... show more 2026-01-07T01:55:44.078986+01:00 machodeer.aeza.network kernel: [464294.882359] [UFW BLOCK] IN=ens3 OUT= MAC=52:54:00:f1:f1:a2:02:00:00:00:00:01:08:00 SRC=172.172.157.5 DST=92.246.136.99 LEN=60 TOS=0x08 PREC=0x20 TTL=45 ID=45998 DF PROTO=TCP SPT=28552 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-01-07T01:55:45.099924+01:00 machodeer.aeza.network kernel: [464295.903332] [UFW BLOCK] IN=ens3 OUT= MAC=52:54:00:f1:f1:a2:02:00:00:00:00:01:08:00 SRC=172.172.157.5 DST=92.246.136.99 LEN=60 TOS=0x08 PREC=0x20 TTL=45 ID=45999 DF PROTO=TCP SPT=28552 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-01-07T01:55:46.124879+01:00 machodeer.aeza.network kernel: [464296.927356] [UFW BLOCK] IN=ens3 OUT= MAC=52:54:00:f1:f1:a2:02:00:00:00:00:01:08:00 SRC=172.172.157.5 DST=92.246.136.99 LEN=60 TOS=0x08 PREC=0x20 TTL=45 ID=46000 DF PROTO=TCP SPT=28552 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 pduggusa	2026-01-02 04:13:50 (5 months ago)	Detected attacking dugganusa.com at 2026-01-02T04:13:50.607Z \| Attack: External Remote Services \| So ... show more Detected attacking dugganusa.com at 2026-01-02T04:13:50.607Z \| Attack: External Remote Services \| Source: DugganUSA PreCog auto-block show less	DDoS Attack Hacking SSH
🇺🇸 pduggusa	2026-01-02 03:21:00 (5 months ago)	Detected attacking dugganusa.com at 2026-01-02T03:21:00.439Z \| Attack: External Remote Services \| So ... show more Detected attacking dugganusa.com at 2026-01-02T03:21:00.439Z \| Attack: External Remote Services \| Source: DugganUSA PreCog auto-block show less	DDoS Attack Hacking SSH
🇺🇸 pduggusa	2026-01-02 02:30:15 (5 months ago)	Detected attacking dugganusa.com at 2026-01-02T02:30:15.064Z \| Attack: External Remote Services \| So ... show more Detected attacking dugganusa.com at 2026-01-02T02:30:15.064Z \| Attack: External Remote Services \| Source: DugganUSA PreCog auto-block show less	DDoS Attack Hacking SSH
🇺🇸 RAP	2025-12-23 20:39:37 (5 months ago)	2025-12-23 20:39:37 UTC Unauthorized activity to TCP port 22. SSH	SSH

Showing 1 to 15 of 165 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.34

🇮🇳 103.87.106.135

🇷🇺 85.142.100.5

🇨🇭 153.75.80.77

🇺🇸 74.125.17.249

🇺🇸 65.60.61.228

🇫🇷 62.84.177.202

🇺🇸 35.253.197.145

🇺🇸 35.212.204.23

🇫🇷 34.163.44.39

🇺🇸 34.42.16.7

🇺🇸 18.216.141.193

🇷🇴 2.57.122.238

🇦🇪 2.50.172.16

🇺🇸 2a02:4780:75:a1e2::1

🇪🇸 213.165.74.84

🇺🇸 195.184.76.129

🇪🇨 177.53.215.134

🇭🇰 152.32.135.48

🇩🇪 151.243.150.23