JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.173.182.163

52.173.182.163 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 44%: ?

44%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Des Moines, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.173.182.163

Whois 52.173.182.163

IP Abuse Reports for 52.173.182.163:

This IP address has been reported a total of 37 times from 30 distinct sources. 52.173.182.163 was first reported on July 31st 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 backslash	2026-06-24 08:36:00 (1 week ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
🇳🇱 Savvii	2026-06-16 02:18:45 (2 weeks ago)	20 attempts against mh-misbehave-ban on bud	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-16 01:43:45 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 52.173.182.163 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 52.173.182.163 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 21:43:38.223620 2026] [security2:error] [pid 11573:tid 11573] [client 52.173.182.163:17223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.151.15"] [uri "/.git/HEAD"] [unique_id "ajCqSq5El2eksx3J08u0TgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇸 Scan	2026-06-16 01:01:34 (2 weeks ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
Anonymous	2026-06-16 00:43:08 (2 weeks ago)	Bot detected scanning for vulnerable pages	Port Scan
Anonymous	2026-06-15 17:25:33 (2 weeks ago)	Port Scan	Port Scan
🇩🇪 check-the-sum.fr	2026-06-15 16:04:56 (2 weeks ago)	Port Scanning	Port Scan
🇺🇸 MPL	2026-06-15 14:15:48 (2 weeks ago)	tcp port scan (10 or more attempts)	Port Scan
🇩🇪 ansessa.com	2026-06-01 07:52:30 (1 month ago)	2026-06-01T07:52:28.089603+00:00 ansessa-s-1vcpu-1gb-fra1-01 sshd[363162]: Failed password for root ... show more 2026-06-01T07:52:28.089603+00:00 ansessa-s-1vcpu-1gb-fra1-01 sshd[363162]: Failed password for root from 52.173.182.163 port 51229 ssh2 2026-06-01T07:52:28.210042+00:00 ansessa-s-1vcpu-1gb-fra1-01 sshd[363162]: Failed password for root from 52.173.182.163 port 51229 ssh2 ... show less	Brute-Force SSH
🇳🇱 homeshowdomain.nl	2026-04-07 21:59:19 (2 months ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-04-06. show less	Web App Attack SSH Hacking
🇧🇪 cmbplf	2026-04-06 05:28:39 (2 months ago)	502 requests with url.path */.git/config	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2026-04-06 05:03:44 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 52.173.182.163 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 52.173.182.163 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 01:03:41.337848 2026] [security2:error] [pid 804:tid 804] [client 52.173.182.163:31838] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lizlemos.org.rejuvenationsystems.com"] [uri "/.git/config"] [unique_id "adM-rf1uJx1mWTH_Ni_33wAAAA0"], referer: https://docs.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-04-06 04:57:28 (2 months ago)	Multiple WAF Violations	Web App Attack
🇨🇭 4server	2026-04-06 04:53:28 (2 months ago)	[MonApr0606:53:24.7822372026][security2:error][pid1781987:tid1781990][client52.173.182.163:0]ModSecu ... show more [MonApr0606:53:24.7822372026][security2:error][pid1781987:tid1781990][client52.173.182.163:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"/etc/passwd\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"141\"][id\"347009\"][rev\"1\"][msg\"Atomicorp.comWAFRules:ProtectedFileaccessdenied\"][severity\"CRITICAL\"][hostname\"ticinosystem.ch.81-17-25-250.cpanel.site\"][uri\"/@fs/etc/passwd\"][unique_id\"adM8RHK30WC7kG3XFpPOmwAAAIA\"] show less	Hacking Web App Attack
🇬🇧 Axel	2026-04-06 04:42:01 (2 months ago)	Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /.git/config ... show more Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /.git/config Server: UK-01 show less	Web App Attack Hacking SQL Injection

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 2409:8702:48bc:b1::4a

🇮🇳 2404:7c80:54:48bb:c0dd:854a:f56e:561e

🇨🇳 171.40.8.106

🇨🇳 113.104.184.153

🇺🇸 103.143.239.167

🇺🇸 100.29.192.60

🇺🇸 64.62.156.200

🇱🇹 193.187.115.215

🇸🇬 172.236.129.186

🇸🇬 104.215.148.107

🇭🇰 101.32.1.25

🇩🇪 69.5.169.138

🇧🇷 20.206.105.139

🇳🇱 5.187.35.26

🇮🇳 4.224.49.76

🇮🇹 217.73.233.111

🇬🇧 185.161.16.2

🇩🇪 152.53.42.70

🇻🇳 123.21.137.237

🇦🇲 212.73.75.82