52.242.243.193
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- Microsoft Corporation
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS8075
- Domain Name
- microsoft.com
- Country
- 🇺🇸 United States of America
- City
- Des Moines, Iowa
Abuse Reports
Total reports
16 from
15 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇯🇵 SentinalX by uzumaru |
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: www.google.com:443
|
Open Proxy Port Scan | |
| 🇩🇪 LRob |
|
Bad Web Bot | |
| 🇳🇴 jad-abuse |
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Observed by 1 sensor(s); 32 hits.
|
Port Scan Bad Web Bot | |
| 🇺🇸 mnsf |
Too many Status 40X (11)
|
Brute-Force Web App Attack | |
| 🇩🇪 LRob |
|
Bad Web Bot | |
| 🇬🇧 sandra361 |
Port scan detected: 11 attempts across 1 port (4000). | Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=52.242.243.193 LEN=40 TOS=0x00 PREC=0x00 TTL=40 ID=57522 DF PROTO=TCP SPT=4088 DPT=4000 WINDOW=64240 RES=0x00 ACK FIN URGP=0
|
Port Scan | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Empty payload (likely service probe); 4000 [3] TCP
|
Port Scan | |
| 🇨🇭 SOC [GOLINE SA] |
|
Port Scan | |
| 🇨🇿 lp |
anomaly: tcp_port_scan, 1001 > threshold 1000, repeats 2811 times
|
Port Scan | |
| Anonymous |
Port Scan
|
Port Scan | |
| 🇩🇪 kingjan1999 |
Blocked by UFW [4000/tcp] | SPT: 3619 | TTL: 49 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇦🇺 LiftUp Hosting |
Honeypot hit: Empty payload (likely service probe); 4000 [3] TCP
|
Port Scan | |
| 🇬🇧 sonot |
Blocked by UFW on tunneluk01 [4000/tcp] | SPT: 3594 | TTL: 41 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇺🇸 cazae |
Unauthorized attempt on debian [4000/tcp]
Source port: 3194
TTL: 46
Packet length: 60
TOS: 0x00
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇩🇪 _ArminS_ |
SP-Scan 3173:4000 detected 2026.09.19 23:59:53
blocked until 2026.11.08 16:02:40
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown