JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.173.162.34

52.173.162.34 was found in our database!

This IP was reported 248 times. Confidence of Abuse is 23%: ?

23%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Des Moines, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.173.162.34

Whois 52.173.162.34

IP Abuse Reports for 52.173.162.34:

This IP address has been reported a total of 248 times from 177 distinct sources. 52.173.162.34 was first reported on September 7th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-06-02 06:33:04 (1 week ago)	Blocked by UFW (TCP on 8848) Source port: 9232 TTL: 243 Packet length: 40 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 8848) Source port: 9232 TTL: 243 Packet length: 40 TOS: 0x00 This report (for 52.173.162.34) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇯🇵 demonsword	2026-05-29 12:06:06 (1 week ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: cp.cloudflare.com:80 show less	Open Proxy Port Scan
🇮🇱 spd.co.il	2026-05-22 21:02:59 (2 weeks ago)	Web application attack detected	Hacking Web App Attack
Anonymous	2026-05-20 21:37:51 (3 weeks ago)	(PERMBLOCK) 52.173.162.34 (US/United States/-) has had more than 4 temp blocks in the last 86400 sec ... show more (PERMBLOCK) 52.173.162.34 (US/United States/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Port Scan
Anonymous	2026-05-20 20:30:18 (3 weeks ago)	(caddyscan) Scanner path probe from 52.173.162.34 (US/United States/-): 5 in the last 3600 secs; Por ... show more (caddyscan) Scanner path probe from 52.173.162.34 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 52.173.162.34 - - [20/May/2026:20:30:15 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 52.173.162.34 - - [20/May/2026:20:30:15 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 52.173.162.34 - - [20/May/2026:20:30:15 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 52.173.162.34 - - [20/May/2026:20:30:15 +0000] "GET /@fs/.git/config?import&raw HTTP/1.1" [REDACTED] 200 2627 52.173.162.34 - - [20/May/2026:20:30:15 +0000] "GET /@fs/.git/config?import?raw HTTP/1.1" show less	Port Scan
Anonymous	2026-05-20 19:49:07 (3 weeks ago)	(caddyscan) Scanner path probe from 52.173.162.34 (US/United States/-): 5 in the last 3600 secs; Por ... show more (caddyscan) Scanner path probe from 52.173.162.34 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 52.173.162.34 - - [20/May/2026:19:48:05 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 52.173.162.34 - - [20/May/2026:19:48:05 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 52.173.162.34 - - [20/May/2026:19:48:05 +0000] "GET /@fs/.git/config?import&raw HTTP/1.1" [REDACTED] 200 2627 52.173.162.34 - - [20/May/2026:19:48:05 +0000] "GET /@fs/.git/config?import?raw HTTP/1.1" [REDACTED] 200 2627 52.173.162.34 - - [20/May/2026:19:49:03 +0000] "GET /.git/config HTTP/1.1" show less	Port Scan
Anonymous	2026-05-20 19:02:08 (3 weeks ago)	(caddyscan) Scanner path probe from 52.173.162.34 (US/United States/-): 5 in the last 3600 secs; Por ... show more (caddyscan) Scanner path probe from 52.173.162.34 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 52.173.162.34 - - [20/May/2026:19:02:05 +0000] "GET /config/.env HTTP/1.1" [REDACTED] 200 2627 52.173.162.34 - - [20/May/2026:19:02:05 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 52.173.162.34 - - [20/May/2026:19:02:05 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 52.173.162.34 - - [20/May/2026:19:02:05 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 52.173.162.34 - - [20/May/2026:19:02:05 +0000] "GET /@fs/.git/config?import&raw HTTP/1.1" show less	Port Scan
Anonymous	2026-05-20 17:52:54 (3 weeks ago)	(caddyscan) Scanner path probe from 52.173.162.34 (US/United States/-): 5 in the last 3600 secs; Por ... show more (caddyscan) Scanner path probe from 52.173.162.34 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 52.173.162.34 - - [20/May/2026:17:52:49 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 52.173.162.34 - - [20/May/2026:17:52:49 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 52.173.162.34 - - [20/May/2026:17:52:49 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 52.173.162.34 - - [20/May/2026:17:52:49 +0000] "GET /@fs/.git/config?import&raw HTTP/1.1" [REDACTED] 200 2627 52.173.162.34 - - [20/May/2026:17:52:49 +0000] "GET /@fs/.git/config?import?raw HTTP/1.1" show less	Port Scan
🇳🇱 Selckie	2026-04-05 13:19:33 (2 months ago)	fail2ban: NGINX unusual impact	Web App Attack
🇹🇷 0xi	2026-03-12 16:00:48 (2 months ago)	SSH brute-force attack detected (51 attempts). Targeted ports: 22. Triggered sensors: P0f, Cowrie, S ... show more SSH brute-force attack detected (51 attempts). Targeted ports: 22. Triggered sensors: P0f, Cowrie, Suricata, Fatt. Post-exploitation commands were executed. Observed via distributed honeypot network. show less	Brute-Force SSH
🇹🇷 rtbh.com.tr	2026-03-01 20:11:49 (3 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 octageeks.com	2026-03-01 05:07:22 (3 months ago)	Wordpress malicious attack:[sshd]	Web App Attack
🇫🇷 ericshim.me	2026-03-01 05:01:24 (3 months ago)	Cowrie honeypot hit at 2026-02-28T06:33:41.124766Z	Brute-Force SSH
🇫🇷 SiyCah	2026-03-01 04:00:53 (3 months ago)	52.173.162.34 fell into Endlessh tarpit; 0/3 total connections are currently still open. Total time ... show more 52.173.162.34 fell into Endlessh tarpit; 0/3 total connections are currently still open. Total time wasted: 12s. Total bytes sent by tarpit: 1.00KiB. Report generated by Endlessh Report Generator v1.2.3 show less	Brute-Force Port Scan SSH Hacking
🇦🇹 urnilxfgbez	2026-02-28 23:45:00 (3 months ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan

Showing 1 to 15 of 248 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.109

🇯🇵 203.25.124.79

🇧🇷 200.216.172.182

🇰🇷 116.123.155.102

🇦🇹 89.144.195.89

🇳🇱 80.82.77.139

🇩🇪 69.5.169.182

🇯🇵 203.25.124.13

🇬🇧 198.244.226.219

🇮🇶 185.158.23.150

🇩🇪 154.195.27.146

🇫🇮 147.185.133.215

🇷🇸 77.105.37.219

🇬🇧 37.156.64.172

🇺🇸 34.16.244.224

🇩🇪 195.230.103.245

🇺🇸 195.184.76.179

🇮🇩 157.15.40.1

🇨🇳 115.190.173.110

🇧🇷 177.85.3.99