JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.173.163.129

52.173.163.129 was found in our database!

This IP was reported 44 times. Confidence of Abuse is 55%: ?

55%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Des Moines, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.173.163.129

Whois 52.173.163.129

IP Abuse Reports for 52.173.163.129:

This IP address has been reported a total of 44 times from 34 distinct sources. 52.173.163.129 was first reported on October 3rd 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 VMHeaven.io	2026-07-01 22:31:58 (1 week ago)	Blocked by UFW [2087/tcp] Source port: 45065 TTL: 43 Packet length: 60	Port Scan
🇬🇧 markawes	2026-07-01 21:50:07 (1 week ago)	[markis] Auto banned by Fail2Ban. Reason: Malicious web scan / attempted access to sensitive paths. ... show more [markis] Auto banned by Fail2Ban. Reason: Malicious web scan / attempted access to sensitive paths. Evidence: 52.173.163.129 - - [01/Jul/2026:22:50:05 +0100] "GET /.git/HEAD HTTP/1.1" 404 455 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 52.173.163.129 - - [01/Jul/2026:22:50:06 +0100] "GET /.git/config HTTP/1.1" 404 455 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" 52.173.163.129 - - [01/Jul/2026:22:50:06 +0100] "GET /.git/logs/HEAD HTTP/1.1" 404 455 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" show less	Port Scan Hacking Web App Attack
🇺🇸 RAP	2026-07-01 20:45:22 (1 week ago)	2026-07-01 20:45:22 UTC Unauthorized activity to TCP port 8080. Web App	Port Scan Web App Attack
🇺🇸 xmission.com	2026-07-01 20:17:57 (1 week ago)	Blocked by UFW (TCP on 2087) Source port: 45131 TTL: 50 Packet length: 60 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 2087) Source port: 45131 TTL: 50 Packet length: 60 TOS: 0x00 This report (for 52.173.163.129) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇦🇺 AWW-Admin	2026-07-01 19:43:16 (1 week ago)	(mod_security) mod_security triggered on hostname [redacted] 52.173.163.129 (US/United States/-)	SQL Injection
🇬🇧 Marten Mark	2026-07-01 18:31:21 (1 week ago)	52.173.163.129 - - [01/Jul/2026:18:31:21 +0000] "GET /.git/HEAD HTTP/1.1" 301 166 "-" "Mozilla/5.0 ( ... show more 52.173.163.129 - - [01/Jul/2026:18:31:21 +0000] "GET /.git/HEAD HTTP/1.1" 301 166 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" ... show less	Web App Attack Bad Web Bot
🇩🇪 dispaisyenterprises	2026-07-01 17:45:49 (1 week ago)	Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 2086 [1], 2087 [1], 2082 [1], 2083 ... show more Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 2086 [1], 2087 [1], 2082 [1], 2083 [1] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇯🇵 SentinalX by uzumaru	2026-06-15 10:00:11 (3 weeks ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: cp.cloudflare.com:80 show less	Open Proxy Port Scan
Anonymous	2026-06-02 05:00:00 (1 month ago)	SSH Brute-Force	DDoS Attack Port Scan Hacking Brute-Force SSH
🇺🇸 ipblock.com	2026-06-02 04:25:00 (1 month ago)	IPBlock protected site ID [1365-l]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
Anonymous	2026-06-02 04:08:51 (1 month ago)	Unauthorized access (tcp/80/http)	Port Scan Web App Attack
🇺🇸 RAP	2026-06-02 03:29:36 (1 month ago)	2026-06-02 03:29:36 UTC Unauthorized activity to TCP port 8443. Web App	Port Scan Web App Attack
🇺🇸 TPI-Abuse	2026-06-02 01:55:45 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 52.173.163.129 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 52.173.163.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 21:55:38.212094 2026] [security2:error] [pid 25584:tid 25584] [client 52.173.163.129:13067] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.4"] [uri "/.git/HEAD"] [unique_id "ah44Gjkp8DKcjFxx_S8ISwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ISPLtd	2026-06-02 01:26:31 (1 month ago)	Jun 1 22:26:30 52.173.163.129 TCP SPT=13061 DPT=8080 SYN Jun 1 22:26:30 52.173.163.129 TCP SPT=130 ... show more Jun 1 22:26:30 52.173.163.129 TCP SPT=13061 DPT=8080 SYN Jun 1 22:26:30 52.173.163.129 TCP SPT=13063 DPT=2087 SYN Jun 1 22:26:30 52.173.163.129 TCP SPT=13066 DPT=2082 ... show less	Port Scan
🇹🇭 Sawasdee	2026-06-02 00:57:50 (1 month ago)	Port Scan ...	Port Scan

Showing 1 to 15 of 44 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.148

🇫🇮 147.185.133.180

🇶🇦 2600:1900:4260:40e::6e

🇫🇷 217.113.196.72

🇺🇸 207.45.28.131

🇹🇷 94.154.43.230

🇺🇸 81.30.98.193

🇺🇸 70.120.203.193

🇺🇸 65.49.20.103

🇮🇩 2406:da19:776:6e01:2423:7ecc:9f56:2bef

🇰🇷 220.116.26.179

🇬🇧 194.50.235.151

🇺🇸 172.245.88.157

🇵🇰 103.131.215.230

🇺🇸 71.6.233.238

🇳🇱 45.148.10.183

🇬🇧 5.226.140.75

🇹🇼 198.235.24.25

🇳🇱 185.223.235.36

🇭🇰 94.190.208.219