5.173.16.52

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
37% Elevated
17 reports
10 reporters · latest 1 week ago
ISP
PLAY MBB
Usage Type
Mobile ISP
ASN
AS39603
Hostname(s)
user-5-173-16-52.play-internet.pl
Domain Name
play.pl
Country
🇵🇱 Poland
City
Warsaw, Mazovia
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
17 from 10 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇧🇷 Brazil 3 🇮🇹 Italy 3 🇩🇪 Germany 2
Most common categories Brute-Force 6 Port Scan 5 Hacking 4 Web App Attack 3 FTP Brute-Force 2
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 NxtGenIT
Sentrypeer Honeypot hit, SIP Method: OPTIONS, User Agent: NOT_FOUND
FTP Brute-Force
🇺🇸 NetGuard
Web App Attack
🇧🇷 ICS Labs
ICS Labs threat intelligence (ICS Feeds): Brute-Force, Exploited Host. Last observed 2026-10-27 UTC.
Brute-Force Exploited Host
🇧🇷 Host One
T-Pot Honeypot alert: 2 malicious events (exploit_attempt, sip_bruteforce) detected.
Hacking Brute-Force Web App Attack
🇮🇹 Francesco Ippoliti
[Oct 26 20:13:19] NOTICE[203346] res_pjsip/pjsip_distributor.c: Request 'OPTIONS' from '<sip:1@1>' failed for '5.173.16.52:41703' (callid: 1) - No matching endpoint found ...
Brute-Force Port Scan
🇺🇸 NetGuard
Web App Attack
🇮🇹 Francesco Ippoliti
[Oct 25 15:19:28] NOTICE[203346] res_pjsip/pjsip_distributor.c: Request 'OPTIONS' from '<sip:1@1>' failed for '5.173.16.52:49208' (callid: 1) - No matching endpoint found ...
Brute-Force Port Scan
🇩🇪 NxtGenIT
Sentrypeer Honeypot hit, SIP Method: OPTIONS, User Agent: NOT_FOUND
FTP Brute-Force
🇫🇷 uthul
T-Pot honeypot: 1 hits on ports [5060] (automated)
Port Scan Hacking
🇪🇸 raiolanetworks.com
Honeypot detection: SIP/VoIP fraud. 2 events observed. Reported automatically from a honeypot sensor.
Fraud VoIP Brute-Force
🇧🇷 Host One
T-Pot Honeypot alert: 3 malicious events (exploit_attempt) detected.
Hacking
🇫🇷 uthul
T-Pot honeypot: 4 hits on ports [53, 5060] (automated)
Port Scan Hacking
🇮🇹 Francesco Ippoliti
Brute-Force Port Scan
🇦🇹 SchiWaGoA
DNS flooding on our DNS server: 16x xxx.heimaoip.com in 25s. Banned by Adguard Shield 🔗 https://git.techniverse.net/scriptos/adguard-shield.git
DDoS Attack
🇺🇸 kosada.com
Web bot: denial-of-service flood
DDoS Attack Bad Web Bot

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇫🇮 193.187.110.160
🇸🇬 147.93.159.238
🇳🇱 109.160.32.104
🇮🇳 106.219.229.101
🇭🇰 220.246.42.212
🇨🇦 198.34.183.128
🇧🇷 179.185.18.67
🇦🇲 176.32.193.16
🇰🇷 121.177.214.57
🇮🇳 103.187.110.110
🇫🇷 91.196.152.15
🇵🇱 87.251.64.132
🇨🇦 85.217.149.16
🇺🇸 65.49.1.108
🇬🇧 35.203.210.9
🇺🇸 174.76.8.147
feedback