JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.242.243.3

52.242.243.3 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 26%: ?

26%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Des Moines, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.242.243.3

Whois 52.242.243.3

IP Abuse Reports for 52.242.243.3:

This IP address has been reported a total of 10 times from 10 distinct sources. 52.242.243.3 was first reported on July 20th 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇰🇷 2048	2026-08-13 20:15:09 (1 month ago)	SSH credential brute-force observed by honeypot. Source IP: 52.242.243.3 Targeted device: DVR First ... show more SSH credential brute-force observed by honeypot. Source IP: 52.242.243.3 Targeted device: DVR First seen: 13 Aug 2026 16:36:47 UTC Last seen: 13 Aug 2026 20:15:09 UTC Attempts: 38 Client: SSH-2.0-Go Sample credentials: root:admin, root:administrator, root:12345, root:Admin@123, root:admin123, root:Admin123@, root:Admin, root:admin123@, root:admin@123, root:Admin12345 show less	Brute-Force SSH IoT Targeted
🇧🇷 gkp1	2026-08-13 19:46:47 (1 month ago)	2026-08-13T19:46:13.942674+00:00 srv556089 sshd[687172]: pam_unix(sshd:auth): authentication failure ... show more 2026-08-13T19:46:13.942674+00:00 srv556089 sshd[687172]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.242.243.3 user=root 2026-08-13T19:46:15.651249+00:00 srv556089 sshd[687172]: Failed password for root from 52.242.243.3 port 36888 ssh2 2026-08-13T19:46:19.604104+00:00 srv556089 sshd[687208]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.242.243.3 user=root 2026-08-13T19:46:21.804047+00:00 srv556089 sshd[687208]: Failed password for root from 52.242.243.3 port 36889 ssh2 2026-08-13T19:46:24.767877+00:00 srv556089 sshd[687232]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.242.243.3 user=root 2026-08-13T19:46:26.987845+00:00 srv556089 sshd[687232]: Failed password for root from 52.242.243.3 port 36891 ssh2 2026-08-13T19:46:33.882206+00:00 srv556089 sshd[687295]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost= ... show less	Brute-Force SSH
🇰🇷 yazzang	2026-08-13 17:00:02 (1 month ago)	SSH honeypot: automated intrusion attempts against a personal decoy server (Server Guardian Warboard ... show more SSH honeypot: automated intrusion attempts against a personal decoy server (Server Guardian Warboard). Read-only capture. show less	Hacking Brute-Force Exploited Host SSH
🇰🇷 hanb.jp	2026-08-13 16:36:23 (1 month ago)	Aug 13 16:36:22 v4bgp sshd[1064198]: Failed password for root from 52.242.243.3 port 61464 ssh2 Aug ... show more Aug 13 16:36:22 v4bgp sshd[1064198]: Failed password for root from 52.242.243.3 port 61464 ssh2 Aug 13 16:36:20 v4bgp sshd[1064200]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.242.243.3 user=root Aug 13 16:36:22 v4bgp sshd[1064200]: Failed password for root from 52.242.243.3 port 61464 ssh2 ... show less	Brute-Force SSH
🇺🇸 Ar1s	2026-07-28 00:04:36 (1 month ago)	[1:2610542] TGI HUNT gitrepo HTTP Probe ::: Port: 80/TCP	Exploited Host
🇷🇸 Scan	2026-07-28 00:01:05 (1 month ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
Anonymous	2026-07-27 23:50:28 (1 month ago)	52.242.243.3 - - [27/Jul/2026:23:50:27 +0000] "GET /.env HTTP/1.1" 404 153 "-" "Mozilla/5.0 (X11; Li ... show more 52.242.243.3 - - [27/Jul/2026:23:50:27 +0000] "GET /.env HTTP/1.1" 404 153 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" "-" "91.98.135.170" ... show less	Hacking Bad Web Bot Web App Attack
🇨🇿 Countryman	2026-07-27 23:49:46 (1 month ago)	IPS detection: Spring.Boot.Actuator.Unauthorized.Access	Hacking
Anonymous	2026-07-27 23:43:46 (1 month ago)	denied traffic to a honeypot network. destination port 2078.	Port Scan Hacking
🇯🇵 SentinalX by uzumaru	2026-07-20 06:07:51 (1 month ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: www.gstatic.com:443 show less	Open Proxy Port Scan

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 207.154.230.149

🇲🇽 187.199.21.151

🇮🇶 185.185.175.190

🇺🇦 176.110.103.89

🇮🇳 103.192.199.245

🇳🇴 87.120.104.79

🇺🇸 74.7.241.176

🇨🇦 34.152.48.13

🇨🇦 34.95.4.200

🇦🇺 34.40.155.119

🇺🇸 34.20.163.88

🇰🇷 183.104.70.23

🇪🇨 181.196.24.37

🇸🇬 152.32.218.149

🇮🇳 122.15.129.26

🇨🇳 106.12.128.30

🇰🇪 102.0.18.68

🇫🇷 91.231.89.250

🇩🇪 64.89.163.224

🇮🇶 37.239.69.17