JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

52.103.2.19

Activity Trending Down

Abuse confidence score ?

2% Caution

28 reports

12 reporters · latest 2 weeks ago

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Hostname(s)	mail-westusazolkn19010019.outbound.protection.outlook.com
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	San Jose, California

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 52.103.2.19

Export CSV

This IP address has been reported a total of 28 times from 12 distinct sources. 52.103.2.19 was first reported on September 30th 2025, and the most recent report was 2 weeks ago. In the last 60 days, the only reporter location was: Switzerland with 1 report. The only category in these recent reports was: Email Spam 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 Origon	2026-10-03 14:41:16 (2 weeks ago)	NOQUEUE - IP: 52.103.2.19 - Oct 3 16:41:16 plesk postfix/smtpd[1362879]: NOQUEUE: reject: RCPT from ... show more NOQUEUE - IP: 52.103.2.19 - Oct 3 16:41:16 plesk postfix/smtpd[1362879]: NOQUEUE: reject: RCPT from mail-westusazolkn19010019.outbound.protection.outlook.com[52.103.2.19]: 554 5.7.1 Service unavailable; Client host [52.103.2.19] blocked using all.s5h.net; See http://s5h.net/rbl; from=<[email protected]> to=<REDACTED@REDACTED> proto=ESMTP helo=<BYAPR05CU005.outbound.protection.outlook.com> show less	Email Spam
🇺🇸 xmission.com	2026-08-10 17:20:10 (2 months ago)	Sourced 1 spam messages over 3x XMissions threshold. Highest score: 30.7. Latest msgid suffix: ...-0 ... show more Sourced 1 spam messages over 3x XMissions threshold. Highest score: 30.7. Latest msgid suffix: ...-002Pz0-HU show less	Email Spam
🇨🇭 Origon	2026-08-05 12:48:20 (2 months ago)	NOQUEUE - IP: 52.103.2.19 - Aug 5 14:48:20 plesk postfix/smtpd[318212]: NOQUEUE: reject: RCPT from ... show more NOQUEUE - IP: 52.103.2.19 - Aug 5 14:48:20 plesk postfix/smtpd[318212]: NOQUEUE: reject: RCPT from mail-westusazolkn19010019.outbound.protection.outlook.com[52.103.2.19]: 554 5.7.1 Service unavailable; Client host [52.103.2.19] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?52.103.2.19; from=<[email protected]> to=<REDACTED@REDACTED> proto=ESMTP helo=<BYAPR05CU005.outbound.protection.outlook.com> show less	Email Spam
🇬🇺 jimdunn	2026-06-24 17:19:18 (3 months ago)	Spam email received in Outlook.com Junk Email folder. Likely originating IP: 52.103.2.19 Origin sour ... show more Spam email received in Outlook.com Junk Email folder. Likely originating IP: 52.103.2.19 Origin source header: Authentication-Results Origin evidence: sender IP is 52.103.2.19 ReceivedDateTime: 06/01/2026 13:50:49 InternetMessageId: <SJ0PR03MB64855C8D833BCE1A43500A2AAD152@SJ0PR03MB6485.namprd03.prod.outlook.com> Selection reason: Selected explicit public sender IP from Authentication-Results Known-good relay/IP/CIDR filtering was enabled. show less	Email Spam
Anonymous	2026-06-19 21:07:20 (4 months ago)	5 Login Attempts	Port Scan Brute-Force
🇵🇱 Wiktor Grecki	2026-06-09 09:02:00 (4 months ago)	Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=52.103.2.19; helo=byapr05cu005.outbound.p ... show more Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=52.103.2.19; helo=byapr05cu005.outbound.protection.outlook.com; [email protected]; receiver=<UNKNOWN> Authentication-Results: mx.poczta.onet.pl; dkim=pass header.d=outlook.com header.s=selector1 header.b=lrfAjRyh; arc=pass ("microsoft.com:s=arcselector10001:i=1"); spf=pass (mx.poczta.onet.pl: domain of [email protected] designates 52.103.2.19 as permitted sender) [email protected]; show less	Email Spam Phishing
🇫🇷 ✨	2026-04-29 01:00:15 (5 months ago)	Rule : Security 2012 \device\harddiskvolume5\program files (x86)\mail enable\bin64\mesmtpc.exe %592 ... show more Rule : Security 2012 \device\harddiskvolume5\program files (x86)\mail enable\bin64\mesmtpc.exe %592 52.103.2.19 22544 *hidden-privacy* 25 6 638702746 %610 44 show less	Port Scan Hacking Brute-Force
🇨🇭 Origon	2026-04-19 06:23:09 (6 months ago)	NOQUEUE - IP: 52.103.2.19 - Apr 19 08:23:08 plesk postfix/smtpd[369058]: NOQUEUE: reject: RCPT from ... show more NOQUEUE - IP: 52.103.2.19 - Apr 19 08:23:08 plesk postfix/smtpd[369058]: NOQUEUE: reject: RCPT from mail-westusazolkn19010019.outbound.protection.outlook.com[52.103.2.19]: 554 5.7.1 Service unavailable; Client host [52.103.2.19] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?52.103.2.19; from=<[email protected]> to=<REDACTED@REDACTED> proto=ESMTP helo=<BYAPR05CU005.outbound.protection.outlook.com> show less	Email Spam
🇨🇦 rootnk	2026-03-14 17:44:00 (7 months ago)	Evidencee at https://www.nk.ca/blog/index.php?/archives/16659-WebSEOApp-spam-from-Microsoft-Outlook- ... show more Evidencee at https://www.nk.ca/blog/index.php?/archives/16659-WebSEOApp-spam-from-Microsoft-Outlook-Part-2.html in 2 parts show less	Email Spam
🇺🇸 xmission.com	2026-03-05 18:01:14 (7 months ago)	Sourced 1 spam messages over 3x XMissions threshold. Highest score: 32.3. Latest msgid suffix: ...-0 ... show more Sourced 1 spam messages over 3x XMissions threshold. Highest score: 32.3. Latest msgid suffix: ...-000a7R-VT show less	Email Spam
🇬🇧 Ged	2026-02-20 08:09:20 (8 months ago)	Spam.	Email Spam
Anonymous	2026-01-22 22:03:00 (8 months ago)	Received: from PH7PR13MB5619.namprd13.prod.outlook.com ([fe80::958d:98ad:ace5:840]) by PH7PR13MB5619 ... show more Received: from PH7PR13MB5619.namprd13.prod.outlook.com ([fe80::958d:98ad:ace5:840]) by PH7PR13MB5619.namprd13.prod.outlook.com ([fe80::958d:98ad:ace5:840%4]) with mapi id 15.20.9542.008; Wed, 21 Jan 2026 20:24:47 +0000 From: Ponciano Rashaun <[email protected]> To: betray <[email protected]> Subject: Incorrect address delivery failed Tracking Number: 51601064Thread-Topic: Incorrect address delivery failed Tracking Number: 51601064 Sender: Ponciano Rashaun Message-ID: <PH7PR13MB56198072A386ECC521043F01A896A@PH7PR13MB5619.namprd13.prod.outlook.com> Return-Path: <bounces+SRS=bM/[email protected]> X-Originating-Ip: [52.103.2.19] Received-SPF: pass (domain of groups.outlook.com designates 52.103.2.19 as permitted sender) Authentication-Results: mta.yahoo.com; dkim=unknown; spf=pass smtp.mailfrom=groups.outlook.com arc_overridden_status=NOT_OVERRIDDEN; show less	Fraud Orders DDoS Attack FTP Brute-Force Phishing Web Spam Email Spam Port Scan Hacking Spoofing Brute-Force Exploited Host
🇬🇧 stom	2026-01-05 08:48:59 (9 months ago)	2026-01-05T08:48:57.629286ls1.tom2.co.uk postfix/smtpd[20993]: NOQUEUE: reject: RCPT from unknown[52 ... show more 2026-01-05T08:48:57.629286ls1.tom2.co.uk postfix/smtpd[20993]: NOQUEUE: reject: RCPT from unknown[52.103.2.19]: 550 5.1.1 <[email protected]>: Recipient address rejected: User unknown in virtual alias table; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<BYAPR05CU005.outbound.protection.outlook.com> ... show less	Email Spam Brute-Force
🇨🇭 Origon	2025-12-30 19:44:42 (9 months ago)	NOQUEUE - IP: 52.103.2.19 - Dec 30 20:44:42 plesk postfix/smtpd[2804851]: NOQUEUE: reject: RCPT fro ... show more NOQUEUE - IP: 52.103.2.19 - Dec 30 20:44:42 plesk postfix/smtpd[2804851]: NOQUEUE: reject: RCPT from mail-westusazolkn19010019.outbound.protection.outlook.com[52.103.2.19]: 554 5.7.1 Service unavailable; Client host [52.103.2.19] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?52.103.2.19; from=<[email protected]> to=<REDACTED@REDACTED> proto=ESMTP helo=<BYAPR05CU005.outbound.protection.outlook.com> show less	Email Spam
🇺🇸 Sox	2025-12-09 14:46:00 (10 months ago)	SPAM COP From: Solana Heated Vest Sale ---- <[email protected]> from BYAPR05C ... show more SPAM COP From: Solana Heated Vest Sale ---- <[email protected]> from BYAPR05CU005.outbound.protection.outlook.com ([52.103.2.19]) by cmsmtp with ESMTP id SxpLvqDvmEtmpSxpLvJkjJ from DM6PR19MB3129.namprd19.prod.outlook.com (2603:10b6:5:194::11) by MN6PR19MB7865.namprd19.prod.outlook.com (2603:10b6:208:474::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9412.7 show less	Phishing Email Spam Port Scan Hacking Spoofing Brute-Force

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 212.30.36.68

🇻🇳 210.245.30.140

🇦🇷 201.178.89.47

🇨🇴 190.253.123.82

🇺🇸 136.87.173.118

🇰🇷 112.220.250.20

🇰🇷 112.216.120.67

🇮🇳 110.226.115.219

🇩🇪 212.30.36.97

🇺🇸 205.210.31.28

🇧🇷 191.187.135.207

🇺🇸 136.87.104.100

🇺🇸 129.121.136.199

🇦🇺 110.142.146.188

🇧🇪 109.143.124.42

🇫🇷 109.123.251.171

🇺🇸 108.84.235.97

🇬🇧 86.38.187.11

🇳🇱 45.74.28.6

🇧🇷 34.39.217.225