JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

52.173.163.130

Neutral Activity

Abuse confidence score ?

0% Low Risk

66 reports

23 reporters · latest 1 month ago

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Des Moines, Iowa

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 52.173.163.130

Export CSV

This IP address has been reported a total of 66 times from 23 distinct sources. 52.173.163.130 was first reported on September 8th 2025, and the most recent report was 1 month ago. In the last 60 days, the only reporter location was: Czechia with 2 reports. The only category in these recent reports was: Hacking 2 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇿 Countryman	2026-09-01 17:36:04 (1 month ago)	IPS detection: Spring.Boot.Actuator.Unauthorized.Access	Hacking
🇨🇿 Countryman	2026-09-01 17:36:04 (1 month ago)	IPS detection: Spring.Boot.Actuator.Unauthorized.Access	Hacking
🇮🇹 VHosting	2026-08-07 17:45:03 (2 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇯🇵 demonsword	2026-06-21 13:06:50 (3 months ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: api.binance.com:443 show less	Open Proxy Port Scan
Anonymous	2026-06-13 18:17:45 (4 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇬🇧 Nov	2026-06-13 10:06:26 (4 months ago)	Unauthorized HTTP access attempt (tcp/80)	Port Scan
🇩🇪 cloudmax	2026-06-13 09:42:22 (4 months ago)	Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnera ... show more Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnerability probing show less	Port Scan
🇺🇸 MPL	2026-06-13 06:05:32 (4 months ago)	tcp port scan (19 or more attempts)	Port Scan
Anonymous	2026-06-13 05:35:28 (4 months ago)	Honeypot hit: Empty payload (likely service probe); 2087 [1], 4000 [1] TCP Reported by: https://gith ... show more Honeypot hit: Empty payload (likely service probe); 2087 [1], 4000 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
Anonymous	2026-06-13 05:25:33 (4 months ago)	Port Scan	Port Scan
🇷🇸 Smel	2026-06-13 04:45:07 (4 months ago)	MH/MP Probe, Scan, Hack -	Port Scan Hacking
🇹🇷 Threat.live	2026-06-06 18:10:03 (4 months ago)	Threat.live: Web Scan	Web App Attack
Anonymous	2026-04-12 03:56:01 (6 months ago)	2026-04-12T05:54:30.112801+02:00 hvs sshd-session[147437]: Connection closed by authenticating user ... show more 2026-04-12T05:54:30.112801+02:00 hvs sshd-session[147437]: Connection closed by authenticating user root 52.173.163.130 port 49497 [preauth] 2026-04-12T05:54:53.211985+02:00 hvs sshd-session[147441]: Connection closed by authenticating user root 52.173.163.130 port 49797 [preauth] 2026-04-12T05:55:15.608197+02:00 hvs sshd-session[147450]: Connection closed by authenticating user root 52.173.163.130 port 49474 [preauth] 2026-04-12T05:55:38.621670+02:00 hvs sshd-session[147454]: Connection closed by authenticating user root 52.173.163.130 port 49478 [preauth] 2026-04-12T05:56:01.271277+02:00 hvs sshd-session[147458]: Connection closed by authenticating user root 52.173.163.130 port 49495 [preauth] ... show less	Brute-Force SSH
🇩🇪 zUnlegit	2026-04-12 03:53:05 (6 months ago)	2026-04-12T05:52:17.931143+02:00 root260 sshd[2697276]: Failed password for root from 52.173.163.130 ... show more 2026-04-12T05:52:17.931143+02:00 root260 sshd[2697276]: Failed password for root from 52.173.163.130 port 49483 ssh2 2026-04-12T05:52:39.753600+02:00 root260 sshd[2703111]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.173.163.130 user=root 2026-04-12T05:52:41.174114+02:00 root260 sshd[2703111]: Failed password for root from 52.173.163.130 port 49804 ssh2 2026-04-12T05:53:02.505628+02:00 root260 sshd[2708864]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.173.163.130 user=root 2026-04-12T05:53:04.418772+02:00 root260 sshd[2708864]: Failed password for root from 52.173.163.130 port 49497 ssh2 ... show less	Brute-Force SSH
🇨🇿 smidra	2026-04-12 03:53:00 (6 months ago)	2026-04-12T05:52:14.214633+02:00 ns3.revonet.cz sshd-session[86652]: Failed password for root from 5 ... show more 2026-04-12T05:52:14.214633+02:00 ns3.revonet.cz sshd-session[86652]: Failed password for root from 52.173.163.130 port 49483 ssh2 2026-04-12T05:52:36.961088+02:00 ns3.revonet.cz sshd-session[86667]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.173.163.130 user=root 2026-04-12T05:52:38.904197+02:00 ns3.revonet.cz sshd-session[86667]: Failed password for root from 52.173.163.130 port 49793 ssh2 2026-04-12T05:52:58.290377+02:00 ns3.revonet.cz sshd-session[86670]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.173.163.130 user=root 2026-04-12T05:53:00.009243+02:00 ns3.revonet.cz sshd-session[86670]: Failed password for root from 52.173.163.130 port 49483 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 66 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 106.120.240.183

🇷🇺 95.143.217.78

🇳🇱 85.203.42.68

🇨🇳 221.6.211.16

🇲🇽 201.140.105.211

🇺🇸 172.252.104.152

🇷🇺 109.194.108.203

🇫🇷 91.231.89.110

🇩🇪 69.5.169.249

🇮🇶 65.20.149.93

🇺🇸 40.223.209.28

🇺🇸 40.223.120.72

🇨🇳 39.164.66.85

🇺🇸 34.73.230.152

🇨🇦 24.48.43.14

🇹🇭 203.156.108.110

🇦🇷 186.182.90.191

🇺🇸 172.121.93.179

🇳🇱 129.121.111.123

🇨🇳 111.48.160.201