Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Boydton

Region: Virginia

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
52.167.144.79 spamattack
Automatic report - Banned IP Access
2023-02-18 15:43:00
Whois info:
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#


NetRange:       52.145.0.0 - 52.191.255.255
CIDR:           52.146.0.0/15, 52.152.0.0/13, 52.145.0.0/16, 52.148.0.0/14, 52.160.0.0/11
NetName:        MSFT
NetHandle:      NET-52-145-0-0-1
Parent:         NET52 (NET-52-0-0-0-0)
NetType:        Direct Allocation
OriginAS:       
Organization:   Microsoft Corporation (MSFT)
RegDate:        2015-11-24
Updated:        2021-12-14
Ref:            https://rdap.arin.net/registry/ip/52.145.0.0



OrgName:        Microsoft Corporation
OrgId:          MSFT
Address:        One Microsoft Way
City:           Redmond
StateProv:      WA
PostalCode:     98052
Country:        US
RegDate:        1998-07-10
Updated:        2025-06-10
Comment:        To report suspected security issues specific to traffic emanating from Microsoft online services, including the distribution of malicious content or other illicit or illegal material through a Microsoft online service, please submit reports to:
Comment:        * https://cert.microsoft.com.  
Comment:        
Comment:        For SPAM and other abuse issues, such as Microsoft Accounts, please contact:
Comment:        * abuse@microsoft.com.  
Comment:        
Comment:        To report security vulnerabilities in Microsoft products and services, please contact:
Comment:        * secure@microsoft.com.  
Comment:        
Comment:        For legal and law enforcement-related requests, please contact:
Comment:        * msndcc@microsoft.com
Comment:        
Comment:        For routing, peering or DNS issues, please 
Comment:        contact:
Comment:        * IOC@microsoft.com
Ref:            https://rdap.arin.net/registry/entity/MSFT


OrgTechHandle: BEDAR6-ARIN
OrgTechName:   Bedard, Dawn 
OrgTechPhone:  +1-425-538-6637 
OrgTechEmail:  dabedard@microsoft.com
OrgTechRef:    https://rdap.arin.net/registry/entity/BEDAR6-ARIN

OrgRoutingHandle: CHATU3-ARIN
OrgRoutingName:   Chaturmohta, Somesh 
OrgRoutingPhone:  +1-425-882-8080 
OrgRoutingEmail:  someshch@microsoft.com
OrgRoutingRef:    https://rdap.arin.net/registry/entity/CHATU3-ARIN

OrgTechHandle: SINGH683-ARIN
OrgTechName:   Singh, Prachi 
OrgTechPhone:  +1-425-707-5601 
OrgTechEmail:  pracsin@microsoft.com
OrgTechRef:    https://rdap.arin.net/registry/entity/SINGH683-ARIN

OrgTechHandle: IPHOS5-ARIN
OrgTechName:   IPHostmaster, IPHostmaster 
OrgTechPhone:  +1-425-538-6637 
OrgTechEmail:  iphostmaster@microsoft.com
OrgTechRef:    https://rdap.arin.net/registry/entity/IPHOS5-ARIN

OrgAbuseHandle: MAC74-ARIN
OrgAbuseName:   Microsoft Abuse Contact
OrgAbusePhone:  +1-425-882-8080 
OrgAbuseEmail:  abuse@microsoft.com
OrgAbuseRef:    https://rdap.arin.net/registry/entity/MAC74-ARIN

OrgTechHandle: MRPD-ARIN
OrgTechName:   Microsoft Routing, Peering, and DNS
OrgTechPhone:  +1-425-882-8080 
OrgTechEmail:  IOC@microsoft.com
OrgTechRef:    https://rdap.arin.net/registry/entity/MRPD-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 52.167.144.169
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33617
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;52.167.144.169.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026061001 1800 900 604800 86400

;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jun 11 09:10:18 CST 2026
;; MSG SIZE  rcvd: 107
Host info
169.144.167.52.in-addr.arpa domain name pointer msnbot-52-167-144-169.search.msn.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
169.144.167.52.in-addr.arpa	name = msnbot-52-167-144-169.search.msn.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
46.35.7.43 attack
Port scanning
2020-08-12 03:22:09
138.68.178.64 attack
Failed password for root from 138.68.178.64 port 60990 ssh2
2020-08-12 03:11:26
51.255.173.70 attackspambots
2020-08-11T14:05:05.929425+02:00  sshd[16647]: Failed password for root from 51.255.173.70 port 34408 ssh2
2020-08-12 03:20:06
212.29.219.12 attackbotsspam
 TCP (SYN) 212.29.219.12:13460 -> port 23, len 44
2020-08-12 02:56:09
49.88.112.112 attack
Aug 11 15:18:27 plusreed sshd[2509]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.112  user=root
Aug 11 15:18:30 plusreed sshd[2509]: Failed password for root from 49.88.112.112 port 33408 ssh2
...
2020-08-12 03:24:00
71.105.238.178 attackspambots
71.105.238.178 - - \[11/Aug/2020:18:01:53 +0300\] "POST /xmlrpc.php HTTP/1.1" 200 4768 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
...
2020-08-12 03:24:16
45.40.199.82 attackbotsspam
$f2bV_matches
2020-08-12 03:17:23
118.25.49.119 attackspam
Too many connections or unauthorized access detected from Arctic banned ip
2020-08-12 03:15:12
36.79.235.108 attack
36.79.235.108 - - [11/Aug/2020:15:18:03 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
36.79.235.108 - - [11/Aug/2020:15:18:09 +0100] "POST /wp-login.php HTTP/1.1" 200 5871 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
36.79.235.108 - - [11/Aug/2020:15:19:19 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
...
2020-08-12 03:01:09
45.129.33.10 attackspambots
Port scan: Attack repeated for 24 hours
2020-08-12 03:06:26
192.243.246.155 attack
BT Communications spamming me! No way to unsubscribe.
2020-08-12 03:27:05
118.89.108.152 attack
Aug 11 15:10:27 firewall sshd[9727]: Failed password for root from 118.89.108.152 port 48606 ssh2
Aug 11 15:13:45 firewall sshd[9879]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.108.152  user=root
Aug 11 15:13:46 firewall sshd[9879]: Failed password for root from 118.89.108.152 port 39756 ssh2
...
2020-08-12 03:01:22
27.3.161.26 attackspambots
1597147588 - 08/11/2020 14:06:28 Host: 27.3.161.26/27.3.161.26 Port: 445 TCP Blocked
2020-08-12 03:01:47
185.153.197.32 attack
Aug 11 20:13:04 [host] kernel: [2836585.496725] [U
Aug 11 20:13:14 [host] kernel: [2836595.997460] [U
Aug 11 20:15:19 [host] kernel: [2836720.397165] [U
Aug 11 20:16:55 [host] kernel: [2836816.596679] [U
Aug 11 20:18:35 [host] kernel: [2836916.519477] [U
Aug 11 20:19:50 [host] kernel: [2836991.876321] [U
2020-08-12 03:12:11
113.88.164.37 attackbots
Aug 11 18:38:20 h2779839 sshd[6712]: Invalid user Qaz!@#$124 from 113.88.164.37 port 36754
Aug 11 18:38:20 h2779839 sshd[6712]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.88.164.37
Aug 11 18:38:20 h2779839 sshd[6712]: Invalid user Qaz!@#$124 from 113.88.164.37 port 36754
Aug 11 18:38:22 h2779839 sshd[6712]: Failed password for invalid user Qaz!@#$124 from 113.88.164.37 port 36754 ssh2
Aug 11 18:41:35 h2779839 sshd[6776]: Invalid user !TT$-pass1 from 113.88.164.37 port 40510
Aug 11 18:41:35 h2779839 sshd[6776]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.88.164.37
Aug 11 18:41:35 h2779839 sshd[6776]: Invalid user !TT$-pass1 from 113.88.164.37 port 40510
Aug 11 18:41:37 h2779839 sshd[6776]: Failed password for invalid user !TT$-pass1 from 113.88.164.37 port 40510 ssh2
Aug 11 18:44:43 h2779839 sshd[6793]: Invalid user fucker1 from 113.88.164.37 port 44252
...
2020-08-12 03:08:45

Recently Reported IPs

47.92.48.18 31.14.254.97 193.32.209.230 2606:4700:10::ac43:2199
2606:4700:10::ac43:2505 113.101.221.102 199.189.151.104 39.98.90.228
101.251.219.13 81.28.13.138 2606:4700:10::6814:6272 206.163.4.153
38.244.65.79 172.237.109.5 17.22.237.152 17.22.237.118
47.95.204.180 211.101.244.246 47.92.52.227 2606:4700:10::ac43:1416