JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 5.175.217.137

5.175.217.137 was found in our database!

This IP was reported 70 times. Confidence of Abuse is 100%: ?

100%

ISP	GHOSTnet
Usage Type	Data Center/Web Hosting/Transit
ASN	AS209874
Domain Name	ghostnet.de
Country	🇩🇪 Germany
City	Aachen, North Rhine-Westphalia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 5.175.217.137

Whois 5.175.217.137

IP Abuse Reports for 5.175.217.137:

This IP address has been reported a total of 70 times from 39 distinct sources. 5.175.217.137 was first reported on June 6th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Admins@FBN	2026-06-25 07:56:12 (2 days ago)	FW-PortScan: Traffic Blocked srcport=35387 dstport=8088	Port Scan
🇺🇸 MPL	2026-06-25 07:55:22 (2 days ago)	tcp/8088 (4 or more attempts)	Port Scan
🇩🇪 SMi-Web	2026-06-25 07:42:26 (2 days ago)	Blocked by firewall on hugin [8088/tcp] \| Rule: AbuseIPDB \| SPT: 43344 \| TTL: 244 \| LEN: 40 \| TOS: 0 ... show more Blocked by firewall on hugin [8088/tcp] \| Rule: AbuseIPDB \| SPT: 43344 \| TTL: 244 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇳🇵 radheykrishna.com.np	2026-06-25 07:34:02 (2 days ago)	Jun 25 13:18:58 kernel: [5862695.372400] [UFW BLOCK] IN=ens160 OUT= SRC=5.175.217.137 LEN=40 TOS=0x0 ... show more Jun 25 13:18:58 kernel: [5862695.372400] [UFW BLOCK] IN=ens160 OUT= SRC=5.175.217.137 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=35644 DPT=8088 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 xmission.com	2026-06-25 07:32:06 (2 days ago)	Blocked by UFW (TCP on 8088) Source port: 46111 TTL: 237 Packet length: 40 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 8088) Source port: 46111 TTL: 237 Packet length: 40 TOS: 0x08 This report (for 5.175.217.137) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇦🇹 centurion	2026-06-25 07:09:04 (2 days ago)	Blocked by UFW on ns03 [8088/tcp] Source port: 53262 TTL: 245 Packet length: 40 TOS: 0x00 This repo ... show more Blocked by UFW on ns03 [8088/tcp] Source port: 53262 TTL: 245 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇯🇵 jay hung	2026-06-25 07:05:42 (2 days ago)	2026-06-25T07:05:41.234474+00:00 quarktech kernel: [1015796.002984] [UFW BLOCK] IN=eth0 OUT= MAC=22: ... show more 2026-06-25T07:05:41.234474+00:00 quarktech kernel: [1015796.002984] [UFW BLOCK] IN=eth0 OUT= MAC=22:00:92:2e:84:93:fe:ff:ff:ff:ff:ff:08:00 SRC=5.175.217.137 DST=172.237.20.248 LEN=40 TOS=0x00 PREC=0x40 TTL=232 ID=54321 PROTO=TCP SPT=34622 DPT=8088 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇮🇩 hermawan	2026-06-25 07:00:59 (2 days ago)	06/25/2026-14:00:54.705003 [Drop] [] [1:921373:1] Suricata Dibuat Gemini TCP SYN port scanner - W ... show more 06/25/2026-14:00:54.705003 [Drop] [] [1:921373:1] Suricata Dibuat Gemini TCP SYN port scanner - Win 65535 [**] [Classification: (null)] [Priority: 3] {TCP} 5.175.217.137:55733 -> 103.166.156.58:8088 ... show less	Email Spam Hacking
🇺🇸 xmission.com	2026-06-25 07:00:14 (2 days ago)	Blocked by UFW (TCP on 8088) Source port: 38229 TTL: 237 Packet length: 40 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 8088) Source port: 38229 TTL: 237 Packet length: 40 TOS: 0x08 This report (for 5.175.217.137) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2026-06-25 06:55:26 (2 days ago)	tcp/8088 (12 or more attempts)	Port Scan
🇩🇪 Admins@FBN	2026-06-25 06:49:15 (2 days ago)	FW-PortScan: Traffic Blocked srcport=57887 dstport=8088	Port Scan
🇺🇸 RAP	2026-06-25 06:32:12 (2 days ago)	2026-06-25 06:32:12 UTC Unauthorized activity to TCP port 8088. Web App	Port Scan Web App Attack
🇮🇳 Mr.Singh	2026-06-25 06:30:27 (2 days ago)	NFT blocked 5.175.217.137 on 25-Jun-2026..	Port Scan Brute-Force
🇺🇸 xmission.com	2026-06-25 06:28:00 (2 days ago)	Blocked by UFW (TCP on 8088) Source port: 35584 TTL: 238 Packet length: 40 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 8088) Source port: 35584 TTL: 238 Packet length: 40 TOS: 0x08 This report (for 5.175.217.137) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-06-25 06:26:55 (2 days ago)	2026-06-25T07:26:55.003622+01:00 vps kernel: [44108960.837380] [PORTSCAN DETECTED] IN=ens3 OUT= MAC= ... show more 2026-06-25T07:26:55.003622+01:00 vps kernel: [44108960.837380] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=5.175.217.137 DST=54.37.14.118 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=54321 PROTO=TCP SPT=38821 DPT=8088 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force

Showing 1 to 15 of 70 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇹 45.227.254.170

🇰🇷 211.105.129.57

🇳🇱 176.65.139.242

🇹🇼 118.165.98.185

🇸🇬 108.162.227.136

🇫🇷 85.217.140.44

🇬🇧 35.203.211.32

🇸🇬 20.212.52.137

🇧🇷 209.14.85.116

🇸🇰 185.66.200.100

🇺🇸 172.98.33.140

🇨🇳 121.237.36.31

🇷🇴 92.118.39.71

🇨🇦 85.217.149.69

🇮🇱 84.111.136.210

🇺🇸 66.132.172.122

🇨🇳 218.13.26.42

🇧🇷 177.85.247.230

🇺🇸 172.125.233.5

🇮🇩 163.7.11.155