52.186.169.136

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
69 reports
40 reporters · latest 1 hour ago
ISP
Microsoft Corporation
Usage Type
Data Center/Web Hosting/Transit
ASN
AS8075
Domain Name
microsoft.com
Country
🇺🇸 United States of America
City
Dulles Town Center, Virginia
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
69 from 40 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 30 🇩🇪 Germany 12 🇫🇷 France 6
Most common categories Port Scan 65 Hacking 10 Brute-Force 4 Web App Attack 3 Bad Web Bot 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 seajaydaboi36
Automated detection: unsolicited connection to Pterodactyl Wings server.
Port Scan Hacking Brute-Force
🇩🇪 iNetWorker
firewall-block, port(s): 7002/tcp
Port Scan
🇮🇹 CoreTech srl
[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact,ndpi_desktop_or_file_sharing_session
Hacking
Anonymous
unsolicited connect TCP dport 8098 (sport 46030)
Hacking
🇺🇸 MPL
tcp/135 (2 or more attempts)
Port Scan
🇺🇸 MPL
tcp/9200 (2 or more attempts)
Port Scan
🇳🇱 i-turnradio.nl
2026-11-14 14:48:29 +01:00 - Unsolicited TCP connection to a port honeypot; probing port 5900.
Port Scan
🇺🇸 MPL
tcp port scan (3 or more attempts)
Port Scan
🇺🇸 MPL
tcp/9200
Port Scan
🇩🇪 KPS
Portscan-T
Port Scan
🇷🇺 dnsbd.tech
nftables: Port scan (TCP:18245) [srv1]
Port Scan Hacking
🇺🇸 MPL
tcp/6667
Port Scan
🇺🇸 schematics.cc
Blocked by on honeypot2 [8009/tcp] | SPT: 35206 | TTL: 50 | LEN: 52 | TOS: 0x00 • Reported by: abuse.terraforge.fun
Port Scan
🇫🇷 Kejult
Honeypot Finding: repeated TCP service probing on TCP/8580 (service); 2 application-level events across 2 source port(s). Sensor(s): Honeytrap.
Port Scan
🇬🇧 myintarweb
52.186.169.136 - - [14/Nov/2026:01:28:18 +0000] 80 "GET /developmentserver/metadatauploader HTTP/1.1" 403 1428 "-" "Mozilla/5.0 zgrab/0.x" ...
Hacking Bad Web Bot Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇷 189.7.126.30
🇳🇱 144.225.43.82
🇺🇸 100.52.247.15
🇺🇸 100.50.17.159
🇳🇱 77.67.26.57
🇺🇸 66.132.159.97
🇳🇱 64.205.72.227
🇨🇳 49.235.156.121
🇳🇱 45.148.10.210
🇺🇸 20.118.235.7
🇺🇸 20.98.163.135
🇨🇳 222.223.62.8
🇨🇳 221.1.195.6
🇨🇳 218.4.214.115
🇦🇺 216.226.77.20
🇬🇧 193.163.125.137
feedback