52.146.90.181
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- Microsoft Corporation
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS8075
- Domain Name
- microsoft.com
- Country
- 🇺🇸 United States of America
- City
- Dulles Town Center, Virginia
Abuse Reports
Total reports
14 from
11 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
Repeated unauthorized connection attempts to restricted service observed.
|
Port Scan Hacking Brute-Force Bad Web Bot Web App Attack | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 3389)
Source port: 54159
TTL: 235
Packet length: 40
TOS: 0x00
This report (for 52.146.90.181) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan Hacking Brute-Force | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 3389)
Source port: 54159
TTL: 238
Packet length: 40
TOS: 0x00
This report (for 52.146.90.181) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan Hacking Brute-Force | |
| 🇺🇸 sumnone |
Port probing on unauthorized port 3389
|
Port Scan Hacking Exploited Host | |
| Anonymous |
Blocked by UFW [3389/tcp] | SPT: 54159 | TTL: 231 | LEN: 40 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇧🇷 noconex |
Wazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN Behavioral Unusually fast Terminal Server Traffic Potential Scan or Infection (Inbound)) detectado de 52.146.90.181
|
Port Scan Brute-Force SSH | |
| 🇺🇸 avgsmoe |
HONEY offender. Observed 2 times.
|
Port Scan Brute-Force | |
| 🇺🇸 OceanTreasure |
tcp/3389; Unsolicited SYN to a dark IP that has never hosted any service (darknet, no DNS name) @ 2026-09-19T18:23:24Z
|
Port Scan | |
| 🇩🇪 Tsumugi Kotobuki |
Port Scan on Honeypot | Ports: 3389/RDP | Proto: TCP(1) | Flags: all SYN | TTL: 237 | Len: 44B | Win: 1024(1) | F2B/ufw-honeypot@2026-09-19T18:22:49Z
|
Port Scan Hacking | |
| 🇺🇸 MPL |
tcp/3389 (4 or more attempts)
|
Port Scan | |
| 🇺🇸 MPL |
tcp/3389 (2 or more attempts)
|
Port Scan | |
| 🇺🇸 NetVexor |
Attack source identified and submitted via NetVexor BGP Blackhole Network
|
Port Scan Hacking Brute-Force | |
| 🇺🇸 mibbsdevs |
(ric-sv) CoffeePot: Connection attempt detected on closed service bait ports (22/23/3306/3389/5432).
|
Port Scan | |
| 🇳🇱 Tsumugi Kotobuki |
Port Scan on Honeypot | Ports: 3389/RDP | Proto: TCP(1) | Flags: all SYN | TTL: 230 | Len: 40B | Win: 1024(1) | F2B/ufw-honeypot@2026-09-19T16:19:26Z
|
Port Scan Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown