52.153.127.110
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Microsoft Corporation
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS8075
- Domain Name
- microsoft.com
- Country
- 🇺🇸 United States of America
- City
- San Antonio, Texas
Abuse Reports
Total reports
31 from
25 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇮🇹 CoreTech srl |
[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact,ndpi_unsafe_protocol
|
Hacking | |
| 🇩🇪 Admins@FBN |
FW-PortScan: Traffic Blocked srcport=5825 dstport=23
|
Port Scan | |
| 🇫🇷 Altai |
Telnet honeypot hit on port 23.
Credentials/commands seen:
login: root
password: 2011vsta
|
Port Scan Brute-Force Exploited Host IoT Targeted | |
| 🇺🇸 RAP |
2026-10-25 22:53:06 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇫🇷 EvoX |
🛡️ Honeypot [bsts-tpot-sensor]: Unauthorized connection attempt detected on 23/TELNET
|
Hacking Port Scan | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 23)
Source port: 5760
TTL: 52
Packet length: 60
TOS: 0x00
This report (for 52.153.127.110) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan Hacking Brute-Force | |
| 🇺🇸 RAP |
2026-10-25 13:07:43 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇵🇱 Kitki30.com |
Entered Telnet Tarpit (endlessh, server 1).
Log: 2026-10-25T12:38:10.661Z ACCEPT host=::ffff:52.153.127.110 port=5760 fd=24 n=25/4096
|
IoT Targeted Port Scan Brute-Force | |
| 🇧🇷 chronos |
Telnet: Connection attempt to the unencrypted remote login service, commonly probed by IoT botnets. | Port: 23 | Proto: TCP | AS: AS8075 Microsoft Corporation | Location: United States, San Antonio (~20km)
|
IoT Targeted Port Scan | |
| 🇩🇪 EGP Abuse Dept |
Scanning for port/service exploits on tpc-025.mach3builders.nl
|
Port Scan Hacking | |
| 🇳🇱 venix |
Unauthorized connection attempt detected from IP address 52.153.127.110 to port 23 (web01.amsterdam)
|
Brute-Force Exploited Host | |
| 🇹🇷 Domainhizmetleri.com |
Source: DH Hunter (Honeypot) | Reason: Telnet Login Attempt (23/tcp)
|
Port Scan SSH | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:6016 dst:23
|
Port Scan | |
| 🇦🇺 FEWA |
Fail2Ban Ban Triggered
|
Hacking Brute-Force | |
| Anonymous |
unsolicited connect TCP dport 23 (sport 6016)
|
Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown