AbuseIPDB » 52.172.173.56

52.172.173.56 was found in our database!

This IP was reported 42 times. Confidence of Abuse is 79%: ?

79%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	India
City	Pune, Maharashtra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 52.172.173.56

Whois 52.172.173.56

IP Abuse Reports for 52.172.173.56:

This IP address has been reported a total of 42 times from 22 distinct sources. 52.172.173.56 was first reported on June 23rd 2025, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
lp	2025-07-09 09:20:03 (5 days ago)	SSH Brute force: 4 attempts were recorded from 52.172.173.56 2025-07-09T11:06:52+02:00 Disconn ... show moreSSH Brute force: 4 attempts were recorded from 52.172.173.56 2025-07-09T11:06:52+02:00 Disconnected from authenticating user root 52.172.173.56 port 1025 [preauth] 2025-07-09T11:10:12+02:00 Disconnected from authenticating user root 52.172.173.56 port 1026 [preauth] 2025-07-09T11:11:45+02:00 Disconnected from authenticating user root 52.172.173.56 port 1025 [preauth] 2025-07-09T11:13:34+02:00 Disconnected from authenticating user root 52.172.173.56 port 1024 [preauth] show less	Brute-Force SSH
LosMyGoedUit!	2025-07-09 09:15:55 (5 days ago)	2025-07-09T11:15:54+0200 Failed SSH Authentication/Brute Force Attack. (Server 9)	Brute-Force SSH
Study Bitcoin 🤗	2025-06-24 06:22:36 (2 weeks ago)	Port probe to tcp/22 (ssh) [srv125]	Port Scan Brute-Force SSH
wlt-blocker	2025-06-24 06:11:44 (2 weeks ago)	Attempts to access SSH server with wrong credentials	SSH
Study Bitcoin 🤗	2025-06-24 06:06:43 (2 weeks ago)	3 port probes: 3x tcp/22 (ssh) [srv125]	Port Scan Brute-Force SSH
LoNET	2025-06-24 06:01:42 (2 weeks ago)	Report 1733690 with IP 2781243 for SSH brute-force attack by source 2775915 via ssh-honeypot/0.2.0+h ... show moreReport 1733690 with IP 2781243 for SSH brute-force attack by source 2775915 via ssh-honeypot/0.2.0+http show less	Brute-Force SSH
Mario Silber	2025-06-24 05:59:14 (2 weeks ago)	(sshd) Failed SSH login from 52.172.173.56 (IN/India/-)	Brute-Force SSH
Study Bitcoin 🤗	2025-06-24 05:58:40 (2 weeks ago)	2 port probes: 2x tcp/22 (ssh) [srv125]	Port Scan Brute-Force SSH
James Calum	2025-06-24 05:56:28 (2 weeks ago)	Jun 24 05:56:25 Sildom2 sshd[3536080]: pam_unix(sshd:auth): authentication failure; logname= uid=0 e ... show moreJun 24 05:56:25 Sildom2 sshd[3536080]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.172.173.56 user=root Jun 24 05:56:27 Sildom2 sshd[3536080]: Failed password for root from 52.172.173.56 port 1089 ssh2 ... show less	Brute-Force SSH
Study Bitcoin 🤗	2025-06-24 05:50:50 (2 weeks ago)	Port probe to tcp/22 (ssh) [srv125]	Port Scan Brute-Force SSH
Silu	2025-06-24 03:37:49 (2 weeks ago)	ssh attack	Brute-Force SSH
ThreatBook.io	2025-06-23 23:27:48 (2 weeks ago)	ThreatBook Intelligence: IDC,Spam more details on https://threatbook.io/ip/52.172.173.56	SSH
Mailz1	2025-06-23 22:03:28 (2 weeks ago)	Jun 24 00:03:27 smtp sshd[4026888]: Failed password for invalid user root from 52.172.173.56 port 10 ... show moreJun 24 00:03:27 smtp sshd[4026888]: Failed password for invalid user root from 52.172.173.56 port 1088 ssh2 ... show less	Brute-Force SSH
yzfdude1	2025-06-23 21:46:16 (2 weeks ago)	Jun 23 15:41:34 daffy sshd[2080440]: Failed password for root from 52.172.173.56 port 1090 ssh2<br / ... show moreJun 23 15:41:34 daffy sshd[2080440]: Failed password for root from 52.172.173.56 port 1090 ssh2 Jun 23 15:46:13 daffy sshd[2080509]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.172.173.56 user=root Jun 23 15:46:15 daffy sshd[2080509]: Failed password for root from 52.172.173.56 port 1090 ssh2 ... show less	Brute-Force SSH
Anonymous	2025-06-23 21:45:11 (2 weeks ago)	Automated abuse report by SpeedIT Security Team	Brute-Force Exploited Host SSH

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩