JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

4.221.173.23

Neutral Activity

Abuse Confidence Score

0% Low Risk

78 reports

50 reporters · latest 8 months ago

ISP: Microsoft Corporation
Usage Type: Data Center/Web Hosting/Transit
ASN: AS8075
Domain Name: microsoft.com
Country: 🇿🇦 South Africa
City: Johannesburg, Gauteng

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

4.221.173.23 has been reported 78 times. The most recent report is from 8 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

78 from 50 distinct reporters

First reported

January 21st 2026

Most recent report

8 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 rtbh.com.tr	2026-03-01 20:11:49 UTC · (8 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2026-02-28 20:11:48 UTC · (8 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 anon333	2026-02-27 20:35:52 UTC · (8 months ago)	Hacker syslog review 1772224552	Hacking
🇺🇸 anon333	2026-02-27 19:48:30 UTC · (8 months ago)	Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-02-27T19:36:24Z and 2026-02-27T19:48:29Z	Brute-Force SSH
🇺🇸 jennij	2026-02-27 19:47:31 UTC · (8 months ago)	Fail2Ban sshd ban on debian ...	Brute-Force SSH
🇷🇺 ago.su	2026-02-27 19:18:20 UTC · (8 months ago)	F2B blocked SSH BF [otd]	Brute-Force SSH
🇵🇱 webadmin	2026-02-27 19:10:02 UTC · (8 months ago)	2026-02-27T20:06:55.522620+01:00 www sshd-session[4170543]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=4.221.173.23 user=root 2026-02-27T20:06:57.130358+01:00 www sshd-session[4170543]: Failed password fo ... show more 2026-02-27T20:06:55.522620+01:00 www sshd-session[4170543]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=4.221.173.23 user=root 2026-02-27T20:06:57.130358+01:00 www sshd-session[4170543]: Failed password for root from 4.221.173.23 port 52332 ssh2 2026-02-27T20:06:57.397420+01:00 www sshd-session[4170543]: Disconnected from authenticating user root 4.221.173.23 port 52332 [preauth] 2026-02-27T20:09:59.252834+01:00 www sshd-session[4170772]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=4.221.173.23 user=root 2026-02-27T20:10:01.724433+01:00 www sshd-session[4170772]: Failed password for root from 4.221.173.23 port 58120 ssh2 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-02-27 19:03:46 UTC · (8 months ago)	4.221.173.23 (ZA/South Africa/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Feb 27 13:00:54 17583 sshd[31582]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show more 4.221.173.23 (ZA/South Africa/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Feb 27 13:00:54 17583 sshd[31582]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.61.104 user=root Feb 27 13:02:25 17583 sshd[31738]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.233.181.127 user=root Feb 27 13:02:27 17583 sshd[31738]: Failed password for root from 186.233.181.127 port 50142 ssh2 Feb 27 13:00:56 17583 sshd[31582]: Failed password for root from 91.121.61.104 port 14647 ssh2 Feb 27 13:03:32 17583 sshd[31826]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=4.221.173.23 user=root IP Addresses Blocked: 91.121.61.104 (FR/France/ip104.ip-91-121-61.eu) 186.233.181.127 (BR/Brazil/186.233.181.127-rev.raimax.com.br) show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-02-27 18:34:37 UTC · (8 months ago)	4.221.173.23 (ZA/South Africa/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Feb 27 12:31:32 17781 sshd[1950]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show more 4.221.173.23 (ZA/South Africa/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Feb 27 12:31:32 17781 sshd[1950]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=4.221.173.23 user=root Feb 27 12:31:34 17781 sshd[1950]: Failed password for root from 4.221.173.23 port 35722 ssh2 Feb 27 12:30:46 17781 sshd[1868]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.8.117 user=root Feb 27 12:30:49 17781 sshd[1868]: Failed password for root from 159.65.8.117 port 47830 ssh2 Feb 27 12:34:29 17781 sshd[2208]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.8.117 user=root IP Addresses Blocked: show less	Brute-Force SSH
🇨🇦 Dmitry Shesterin	2026-02-27 18:07:30 UTC · (8 months ago)	Feb 27 13:05:31 pvr sshd[778463]: Failed password for root from 4.221.173.23 port 56782 ssh2 Feb 27 13:07:28 pvr sshd[778566]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=4.221.173.23 user=root Feb 27 13:0 ... show more Feb 27 13:05:31 pvr sshd[778463]: Failed password for root from 4.221.173.23 port 56782 ssh2 Feb 27 13:07:28 pvr sshd[778566]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=4.221.173.23 user=root Feb 27 13:07:30 pvr sshd[778566]: Failed password for root from 4.221.173.23 port 42474 ssh2 ... show less	Brute-Force SSH
🇺🇸 Runlevel0	2026-02-27 17:35:08 UTC · (8 months ago)	Too many failed attempts / attacks from 4.221.173.23	Brute-Force FTP Brute-Force Port Scan
🇺🇸 Like Ma	2026-02-27 17:33:47 UTC · (8 months ago)	Feb 27 12:26:57 newage sshd[7319]: Failed password for root from 4.221.173.23 port 48874 ssh2 ...	Brute-Force SSH
🇺🇸 bigscoots.com	2026-02-27 17:27:06 UTC · (8 months ago)	4.221.173.23 (ZA/South Africa/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Feb 27 17:26:57 23675 sshd[2924]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show more 4.221.173.23 (ZA/South Africa/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Feb 27 17:26:57 23675 sshd[2924]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=4.221.173.23 user=root Feb 27 17:26:39 23675 sshd[2921]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.185.68.238 user=root Feb 27 17:26:41 23675 sshd[2921]: Failed password for root from 185.185.68.238 port 59274 ssh2 Feb 27 17:25:19 23675 sshd[2830]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.180.91.158 user=root Feb 27 17:25:21 23675 sshd[2830]: Failed password for root from 182.180.91.158 port 49786 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇸🇬 abuseipreport.darajati	2026-02-27 17:06:12 UTC · (8 months ago)	2026-02-28T01:04:10.931382+08:00 VDarajati-SG sshd[2772307]: Failed password for root from 4.221.173.23 port 48982 ssh2 2026-02-28T01:06:10.087314+08:00 VDarajati-SG sshd[2791375]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tt ... show more 2026-02-28T01:04:10.931382+08:00 VDarajati-SG sshd[2772307]: Failed password for root from 4.221.173.23 port 48982 ssh2 2026-02-28T01:06:10.087314+08:00 VDarajati-SG sshd[2791375]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=4.221.173.23 user=root 2026-02-28T01:06:12.065825+08:00 VDarajati-SG sshd[2791375]: Failed password for root from 4.221.173.23 port 58582 ssh2 ... show less	SSH
🇺🇸 bigscoots.com	2026-02-27 16:57:20 UTC · (8 months ago)	4.221.173.23 (ZA/South Africa/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Feb 27 10:48:58 17693 sshd[28415]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show more 4.221.173.23 (ZA/South Africa/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Feb 27 10:48:58 17693 sshd[28415]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.19.28.96 user=root Feb 27 10:49:00 17693 sshd[28415]: Failed password for root from 151.19.28.96 port 58051 ssh2 Feb 27 10:56:57 17693 sshd[29623]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=4.221.173.23 user=root Feb 27 10:56:25 17693 sshd[29584]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.74.19 user=root Feb 27 10:56:27 17693 sshd[29584]: Failed password for root from 37.187.74.19 port 52158 ssh2 IP Addresses Blocked: 151.19.28.96 (IT/Italy/19.151.in-addr.arpa) show less	Brute-Force SSH

Showing 1 to 15 of 78 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 43.242.97.26

🇧🇷 205.210.31.224

🇮🇷 193.151.133.105

🇬🇧 185.253.98.90

🇹🇹 181.118.53.64

🇳🇱 138.226.239.234

🇨🇳 116.172.93.48

🇺🇸 66.132.186.212

🇫🇷 62.197.147.54

🇵🇱 2400:cb00:923:1000:9a8e:3770:32be:f60b

🇨🇭 209.99.190.186

🇺🇸 170.187.165.218

🇩🇪 109.160.32.41

🇫🇷 82.65.140.218

🇨🇳 36.7.90.98

🇹🇼 34.80.64.111

🇳🇱 160.119.66.206

🇮🇳 103.219.207.162

🇰🇼 78.89.154.59

🇺🇸 45.131.193.68