JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 72.221.196.157

72.221.196.157 was found in our database!

This IP was reported 153 times. Confidence of Abuse is 0%: ?

ISP	Cox Communications Inc.
Usage Type	Fixed Line ISP
ASN	AS22773
Hostname(s)	ipmapt-72-221-196-157.sd.sd.cox.net
Domain Name	cox.com
Country	🇺🇸 United States of America
City	San Diego, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 72.221.196.157

Whois 72.221.196.157

IP Abuse Reports for 72.221.196.157:

This IP address has been reported a total of 153 times from 72 distinct sources. 72.221.196.157 was first reported on May 12th 2021, and the most recent report was 6 months ago.

Old Reports: The most recent abuse report for this IP address is from 6 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 GunsawianHosting	2026-03-12 17:08:57 (6 months ago)	Open Proxy	Open Proxy
🇵🇱 cheatmaster.store	2026-02-26 06:26:39 (6 months ago)	Automated report: This IP address has been identified as an active public open proxy. Classification ... show more Automated report: This IP address has been identified as an active public open proxy. Classification: Open Proxy \| Spoofing \| VPN/Anonymizer \| Bad Web Bot. Country: United States Threat level: High. This host is listed across multiple public proxy databases and poses a risk of abuse, credential stuffing, scraping, and spoofed traffic. Reported by automated threat intelligence pipeline. Do not whitelist without manual verification. show less	Web Spam Port Scan Web App Attack
Anonymous	2024-05-23 21:50:37 (2 years ago)	"Proxies that are used for attacking https://pastebin.com/JZr9dSDT"	Open Proxy
Anonymous	2024-05-23 21:50:37 (2 years ago)	"Proxies that are used for attacking https://pastebin.com/JZr9dSDT"	Open Proxy
Anonymous	2024-05-23 21:50:37 (2 years ago)	"Proxies that are used for attacking https://pastebin.com/JZr9dSDT"	Open Proxy
🇪🇸 el-brujo	2024-05-23 10:00:37 (2 years ago)	Proxies digitalstress[.]su used for attacking	DDoS Attack
🇦🇺 MAGIC	2023-08-29 10:17:40 (3 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇬🇧 Hobby Bob	2023-08-22 02:24:40 (3 years ago)	Aug 22 03:24:40 mail dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=, m ... show more Aug 22 03:24:40 mail dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=72.221.196.157, lip=X.X.X.X session= show less	Port Scan Hacking
Anonymous	2023-08-20 21:03:56 (3 years ago)		Web App Attack
🇨🇦 basedchad	2023-08-19 15:23:26 (3 years ago)	This IP was blocked and reported due to suspicious activity recorded on one of https://loadtesting.m ... show more This IP was blocked and reported due to suspicious activity recorded on one of https://loadtesting.me servers. show less	DDoS Attack Port Scan Brute-Force
🇬🇧 gtabomber	2023-08-18 09:58:19 (3 years ago)	2023-08-18T10:58:12.787490 espaceonline.co.uk auth[30742]: pam_unix(dovecot:auth): authentication fa ... show more 2023-08-18T10:58:12.787490 espaceonline.co.uk auth[30742]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot [email protected] rhost=72.221.196.157 2023-08-18T10:58:14.582359 espaceonline.co.uk dovecot[1767]: auth-worker(30742): pam([email protected],72.221.196.157,<KXkWkS8DnaVI3cSd>): unknown user (given password: Panafonic2) 2023-08-18T10:58:16.404365 espaceonline.co.uk dovecot[1767]: imap-login: Disconnected (auth failed, 1 attempts in 4 secs): user=<[email protected]>, method=PLAIN, rip=72.221.196.157, lip=176.126.240.132, TLS, session=<KXkWkS8DnaVI3cSd> ... show less	Brute-Force SSH
🇦🇺 oncord	2023-08-14 12:14:08 (3 years ago)	Form spam	Web Spam
🇦🇷 SOC Telecentro	2023-08-14 12:14:04 (3 years ago)	Automatic report - Brute Force attack using this IP address over e-commerce solution (10202 times in ... show more Automatic report - Brute Force attack using this IP address over e-commerce solution (10202 times in last 24 hours) show less	DDoS Attack Brute-Force Bad Web Bot
🇦🇷 SOC Telecentro	2023-08-10 12:34:52 (3 years ago)	Automatic report - Brute Force attack using this IP address over e-commerce solution (5598 times in ... show more Automatic report - Brute Force attack using this IP address over e-commerce solution (5598 times in last 24 hours) show less	DDoS Attack Brute-Force Bad Web Bot
🇦🇷 SOC Telecentro	2023-08-07 12:52:31 (3 years ago)	Automatic report - Brute Force attack using this IP address over e-commerce solution (12062 times in ... show more Automatic report - Brute Force attack using this IP address over e-commerce solution (12062 times in last 24 hours) show less	DDoS Attack Brute-Force Bad Web Bot

Showing 1 to 15 of 153 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 222.120.25.190

🇺🇸 213.254.175.236

🇹🇼 198.235.24.55

🇷🇴 193.32.162.84

🇧🇷 189.89.16.12

🇸🇬 185.200.116.77

🇺🇸 162.216.150.251

🇻🇳 117.5.146.194

🇷🇺 109.106.129.17

🇺🇦 91.195.172.249

🇺🇸 45.204.123.85

🇷🇺 37.204.209.136

🇺🇸 35.237.222.154

🇦🇺 34.151.186.59

🇺🇸 34.122.28.103

🇩🇪 217.26.237.70

🇺🇸 213.254.175.77

🇧🇷 205.210.31.180

🇮🇩 202.148.31.43

🇵🇰 182.188.24.243