JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.172.158.6

172.172.158.6 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 47%: ?

47%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Washington, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 172.172.158.6

Whois 172.172.158.6

IP Abuse Reports for 172.172.158.6:

This IP address has been reported a total of 13 times from 13 distinct sources. 172.172.158.6 was first reported on August 7th 2025, and the most recent report was 10 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 Inartis	2026-06-07 17:21:32 (10 minutes ago)	172.172.158.6 - - [07/Jun/2026:19:21:28 +0200] "GET /.git/config HTTP/1.1" 302 462 "-" "Mozilla/5.0 ... show more 172.172.158.6 - - [07/Jun/2026:19:21:28 +0200] "GET /.git/config HTTP/1.1" 302 462 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 172.172.158.6 - - [07/Jun/2026:19:21:29 +0200] "GET /.env HTTP/1.1" 302 448 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15" 172.172.158.6 - - [07/Jun/2026:19:21:31 +0200] "GET /.env.local HTTP/1.1" 302 460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 pearbright	2026-06-07 15:38:27 (1 hour ago)	2026-06-07T15:38:07.353119+00:00 srv740043 kernel: [1584276.319168] [UFW BLOCK] IN=eth0 OUT= MAC=bc: ... show more 2026-06-07T15:38:07.353119+00:00 srv740043 kernel: [1584276.319168] [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:11:cc:aa:85:44:38:39:ff:ff:41:08:00 SRC=172.172.158.6 DST=147.93.84.193 LEN=60 TOS=0x00 PREC=0x00 TTL=42 ID=59966 DF PROTO=TCP SPT=51165 DPT=2087 WINDOW=64240 RES=0x00 SYN URGP=0 2026-06-07T15:38:07.353333+00:00 srv740043 kernel: [1584276.320426] [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:11:cc:aa:85:44:38:39:ff:ff:41:08:00 SRC=172.172.158.6 DST=147.93.84.193 LEN=60 TOS=0x00 PREC=0x00 TTL=38 ID=13756 DF PROTO=TCP SPT=51140 DPT=8080 WINDOW=64240 RES=0x00 SYN URGP=0 2026-06-07T15:38:07.353362+00:00 srv740043 kernel: [1584276.321018] [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:11:cc:aa:85:44:38:39:ff:ff:41:08:00 SRC=172.172.158.6 DST=147.93.84.193 LEN=60 TOS=0x00 PREC=0x00 TTL=42 ID=61584 DF PROTO=TCP SPT=49947 DPT=2083 WINDOW=64240 RES=0x00 SYN URGP=0 2026-06-07T15:38:07.353384+00:00 srv740043 kernel: [1584276.321527] [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:11:cc:aa:85:44:38:39:ff:ff:41:08:00 SRC=172.172. ... show less	Port Scan
Anonymous	2026-06-07 15:23:21 (2 hours ago)	GET /.git/HEAD HTTP/1.1 GET /.git/config HTTP/1.1 GET /.env HTTP/1.1	Bad Web Bot Web App Attack
🇸🇰 EVISION	2026-06-07 15:10:16 (2 hours ago)	Automatic report from EV firewall log. https://github.com/Ragnarocek/Windows_FW_AbuseIPDB_Reporti ... show more Automatic report from EV firewall log. https://github.com/Ragnarocek/Windows_FW_AbuseIPDB_Reporting ID: fIwIb5x3kndxb5qD9h3yqW5oRWnrfsm6 show less	Port Scan Hacking Brute-Force
🇺🇸 RAP	2026-06-07 14:46:24 (2 hours ago)	2026-06-07 14:46:24 UTC Unauthorized activity to TCP port 8080. Web App	Port Scan Web App Attack
🇫🇷 bellovacorp	2026-06-07 14:36:36 (2 hours ago)	Automated abuse detection (CrowdSec) - scenario: http-sensitive-files	Web App Attack
🇧🇾 lns.bz	2026-06-07 14:34:33 (2 hours ago)	Too many 404 requests [BY]	Web App Attack
🇯🇵 demonsword	2026-05-14 06:24:38 (3 weeks ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: fapi.binance.com:443 show less	Open Proxy Port Scan
🇩🇪 2048	2026-03-17 02:37:04 (2 months ago)	2026-03-17T03:37:01.277996+01:00 machodeer kernel: [1971840.024106] [UFW BLOCK] IN=ens3 OUT= MAC=RED ... show more 2026-03-17T03:37:01.277996+01:00 machodeer kernel: [1971840.024106] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=172.172.158.6 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=44 ID=33477 DF PROTO=TCP SPT=32736 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-03-17T03:37:02.296716+01:00 machodeer kernel: [1971841.043225] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=172.172.158.6 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=44 ID=33478 DF PROTO=TCP SPT=32736 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-03-17T03:37:03.321023+01:00 machodeer kernel: [1971842.067116] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=172.172.158.6 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=44 ID=33479 DF PROTO=TCP SPT=32736 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 show less	Port Scan
🇦🇷 Bruno	2025-11-30 04:07:20 (6 months ago)	Port Scanner: 172.172.158.6	Port Scan
🇨🇳 ThreatBook.io	2025-09-12 23:29:18 (8 months ago)	ThreatBook Intelligence: Spam more details on http://threatbook.io/ip/172.172.158.6	Web App Attack
🇺🇸 Rayulcifer	2025-09-12 06:22:24 (8 months ago)	172.172.158.6 - - [12/Sep/2025:01:22:23 -0500] "CONNECT speed.hetzner.de:443 HTTP/1.1" 502 587 "-" " ... show more 172.172.158.6 - - [12/Sep/2025:01:22:23 -0500] "CONNECT speed.hetzner.de:443 HTTP/1.1" 502 587 "-" "-" 172.172.158.6 - - [12/Sep/2025:01:22:23 -0500] "CONNECT speed.cloudflare.com:443 HTTP/1.1" 502 591 "-" "-" ... show less	Open Proxy Port Scan Hacking Web App Attack SSH
🇯🇵 Short-legs-Spider	2025-08-07 14:15:16 (10 months ago)	Disregard of robots.txt -- [07/Aug/2025:23:15:16 +0900] "GET / HTTP/1.1" 403 212 "-" "Python/3.9 a ... show more Disregard of robots.txt -- [07/Aug/2025:23:15:16 +0900] "GET / HTTP/1.1" 403 212 "-" "Python/3.9 aiohttp/3.10.6" show less	Bad Web Bot

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 31.97.152.87

🇷🇺 95.167.225.76

🇧🇬 78.128.114.58

🇺🇸 162.216.150.174

🇩🇪 141.11.250.239

🇺🇸 107.150.96.185

🇬🇧 2a00:1450:4009:c00::12d

🇧🇷 200.196.50.91

🇸🇬 152.32.218.149

🇮🇩 103.214.112.253

🇺🇸 99.92.204.98

🇺🇸 40.124.86.76

🇨🇴 190.108.77.124

🇧🇷 189.89.214.161

🇲🇽 187.174.238.116

🇹🇼 110.25.112.151

🇮🇩 103.191.14.210

🇵🇭 103.186.139.149

🇷🇴 92.118.39.236

🇫🇷 84.247.166.72