52.173.237.211
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- Microsoft Corporation
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS8075
- Domain Name
- microsoft.com
- Country
- 🇺🇸 United States of America
- City
- Des Moines, Iowa
Abuse Reports
Total reports
89 from
60 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇩🇪 xavier-momain.eu |
CrowdSec ban — scenario: ssh:bruteforce
|
Brute-Force SSH | |
| 🇹🇷 neron |
CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall
|
Hacking Web App Attack | |
| 🇩🇪 xavier-momain.eu |
CrowdSec detection: ssh:bruteforce
|
Brute-Force SSH | |
| 🇹🇷 neron |
CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall
|
Hacking Web App Attack | |
| 🇩🇪 anycast_ac |
[mirai-detector honeypot] Inbound attack against our honeypot on tcp/8080 (http).
Commands captured:
$
|
DDoS Attack IoT Targeted Brute-Force | |
| 🇩🇪 anycast_ac |
[mirai-detector honeypot] Inbound attack against our honeypot on tcp/8443 (generic).
|
DDoS Attack IoT Targeted Brute-Force | |
| 🇩🇪 Selckie |
fail2ban: NGINX unusual impact
|
Web App Attack | |
| 🇯🇵 VXG-NET |
port=80, indicator_type=info-leak
|
Hacking | |
| 🇳🇱 Tsumugi Kotobuki |
Port Scan on Honeypot | Ports: 8443/HTTPS-alt, 8080/HTTP-proxy, 80/HTTP | Proto: TCP(3) | Flags: all SYN | TTL: 35-42 | Len: 60B(3x) | Win: 64240(3) | F2B/ufw-honeypot@2026-08-28T18:13:52Z
|
Port Scan Hacking | |
| 🇺🇸 HamSammich |
Automated sensor: 15 HTTP connection/probe attempts over the last 24h (latest 2026-08-28T16:48Z).
|
Brute-Force Web App Attack | |
| 🇺🇸 Axel |
Blocked by UFW on LAXHH [2083/tcp] | SPT: 24601 | TTL: 48 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇹🇷 neron |
CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall
|
Hacking Web App Attack | |
| Anonymous |
MikroTik Enterprise Honeypot
|
Port Scan | |
| 🇮🇳 evicky2002 |
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
|
Hacking Brute-Force SSH | |
| 🇳🇱 ipoac.nl |
ipoac.nl:80 52.173.237.211 - - [03/Aug/2026:07:33:53 +0200] 84.27.222.8 "GET /.git/refs/heads/master HTTP/1.1" 404 1679 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
|
Bad Web Bot |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown