AbuseIPDB » 52.173.105.236

52.173.105.236 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 100%: ?

100%
ISP Microsoft Corporation
Usage Type Data Center/Web Hosting/Transit
ASN AS8075
Domain Name microsoft.com
Country ๐Ÿ‡บ๐Ÿ‡ธ United States of America
City Des Moines, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

IP Abuse Reports for 52.173.105.236:

This IP address has been reported a total of 23 times from 21 distinct sources. 52.173.105.236 was first reported on , and the most recent report was .

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡บ๐Ÿ‡ธ ShadowWhisperer
RDP
Port Scan
๐Ÿ‡จ๐Ÿ‡ฆ Slackin' Jack
Triggered honeypot on port 3389. (52.173.105.236)
Port Scan
๐Ÿ‡จ๐Ÿ‡ญ cybsecaoccol
unauthorized connection or malicious port scan attempted on tcp port 3389 - sch
Port Scan Hacking
๐Ÿ‡ฉ๐Ÿ‡ช Luhte
Port Scan Hacking
๐Ÿ‡ซ๐Ÿ‡ท Coco Bongo
1783740437 - 07/11/2026 05:27:17 Host: 52.173.105.236/52.173.105.236 Port: 3389 TCP Blocked ...
Port Scan
๐Ÿ‡ฉ๐Ÿ‡ช Honeypot-EU-Fru
1783740228 - 07/11/2026 05:23:48 Host: 52.173.105.236/52.173.105.236 Port: 3389 TCP Blocked ...
Port Scan
๐Ÿ‡ช๐Ÿ‡ธ el-brujo
Hacking
๐Ÿ‡ซ๐Ÿ‡ท thecocasio
Port Scan
๐Ÿ‡ฉ๐Ÿ‡ช HoneyPot-FrPri
1783739070 - 07/11/2026 05:04:30 Host: 52.173.105.236/52.173.105.236 Port: 2323 TCP Blocked ...
Port Scan
Anonymous
Trying ports that it shouldn't be.
Port Scan Hacking Exploited Host
๐Ÿ‡จ๐Ÿ‡ฆ alexbfr
Fail2Ban Report, custom-honeypot jail: Automated honeypot detection.
Hacking
๐Ÿ‡ช๐Ÿ‡ธ whatda
RDP connection attempt for user "unknown"
Hacking Port Scan
๐Ÿ‡บ๐Ÿ‡ธ donarev419
Connection to port 3389 with data transfer. Data preview: 
Port Scan Hacking
๐Ÿ‡ต๐Ÿ‡ฑ nfsec.pl
Detected: TCP scan on port: 3389 with flags: SYN
Port Scan
๐Ÿ‡ฆ๐Ÿ‡น begou.dev
[Threat Intelligence] Port Scanning and/or Unauthorized access -> TCP/3389
Port Scan

Showing 1 to 15 of 23 reports


Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown ๐Ÿšฉ

Recently Reported IPs:

๐Ÿ‡น๐Ÿ‡ญ 202.29.220.106
๐Ÿ‡ธ๐Ÿ‡ฌ 128.199.138.138
๐Ÿ‡ต๐Ÿ‡ญ 49.145.221.198
๐Ÿ‡ฌ๐Ÿ‡ง 2.57.17.199
๐Ÿ‡ง๐Ÿ‡ท 205.210.31.172
๐Ÿ‡ต๐Ÿ‡ฆ 191.98.196.7
๐Ÿ‡บ๐Ÿ‡ธ 104.173.186.77
๐Ÿ‡ซ๐Ÿ‡ท 91.196.152.44
๐Ÿ‡ฌ๐Ÿ‡ง 87.106.44.172
๐Ÿ‡ธ๐Ÿ‡ฌ 84.75.150.190
๐Ÿ‡จ๐Ÿ‡ณ 81.70.165.42
๐Ÿ‡บ๐Ÿ‡ธ 81.30.98.204
๐Ÿ‡บ๐Ÿ‡ธ 66.132.172.118
๐Ÿ‡บ๐Ÿ‡ธ 20.29.24.16
๐Ÿ‡บ๐Ÿ‡ธ 205.210.31.38
๐Ÿ‡ง๐Ÿ‡ช 198.235.24.244
๐Ÿ‡บ๐Ÿ‡ธ 172.236.228.222
๐Ÿ‡ฌ๐Ÿ‡ง 154.16.44.25
๐Ÿ‡บ๐Ÿ‡ธ 129.82.138.44
๐Ÿ‡ฎ๐Ÿ‡ณ 103.157.149.14