JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.150.30.130

52.150.30.130 was found in our database!

This IP was reported 60 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Washington, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.150.30.130

Whois 52.150.30.130

IP Abuse Reports for 52.150.30.130:

This IP address has been reported a total of 60 times from 51 distinct sources. 52.150.30.130 was first reported on October 20th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Selckie	2026-06-14 14:26:04 (2 days ago)	fail2ban: NGINX unusual impact	Web App Attack
Anonymous	2026-06-13 22:59:29 (3 days ago)	Port Scan Attack.	Port Scan
🇺🇸 sumnone	2026-06-13 22:35:55 (3 days ago)	Port probing on unauthorized port 8090	Port Scan Hacking Exploited Host
🇺🇸 TPI-Abuse	2026-06-13 21:30:10 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 52.150.30.130 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 52.150.30.130 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 17:30:05.559294 2026] [security2:error] [pid 1843:tid 1843] [client 52.150.30.130:7375] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.144"] [uri "/.env.production"] [unique_id "ai3L3YE_07hSYRKOITeRzgAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-13 20:25:33 (3 days ago)	Port Scan	Port Scan
Anonymous	2026-06-13 20:03:14 (3 days ago)	Jun 13 16:03:13 localhost kernel: [109726288.021391] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more Jun 13 16:03:13 localhost kernel: [109726288.021391] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=52.150.30.130 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x40 TTL=43 ID=9696 DF PROTO=TCP SPT=7305 DPT=8888 WINDOW=64240 RES=0x00 SYN URGP=0 Jun 13 16:03:13 localhost kernel: [109726288.021412] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=52.150.30.130 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x40 TTL=43 ID=9696 DF PROTO=TCP SPT=7305 DPT=8888 SEQ=2164434207 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405A00402080A0E0EFB11000000000103030A) Jun 13 16:03:13 localhost kernel: [109726288.022959] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=52.150.30.130 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x40 TTL=46 ID=55986 DF PROTO=TCP SPT=7298 DPT=8880 WINDOW=64240 RES=0x00 SYN URGP=0 Jun 13 16:03:13 localhost kernel: [109726288.027665] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:0 show less	Port Scan
🇩🇪 ISPLtd	2026-06-13 19:48:13 (3 days ago)	Jun 13 16:48:12 52.150.30.130 TCP SPT=7233 DPT=2086 SYN Jun 13 16:48:12 52.150.30.130 TCP SPT=7232 D ... show more Jun 13 16:48:12 52.150.30.130 TCP SPT=7233 DPT=2086 SYN Jun 13 16:48:12 52.150.30.130 TCP SPT=7232 DPT=5000 SYN Jun 13 16:48:12 52.150.30.130 TCP SPT=7234 DPT=2077 ... show less	Port Scan
🇺🇸 xmission.com	2026-06-13 18:31:45 (3 days ago)	Blocked by UFW (TCP on 4000) Source port: 17424 TTL: 48 Packet length: 60 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 4000) Source port: 17424 TTL: 48 Packet length: 60 TOS: 0x00 This report (for 52.150.30.130) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 gbzret4d	2026-06-13 18:21:48 (3 days ago)	Honeypot [uk-production01]: Empty payload (likely service probe); 2086 [4], 4000 [1] TCP	Port Scan
🇺🇸 RAP	2026-06-13 17:59:19 (3 days ago)	2026-06-13 17:59:19 UTC Unauthorized activity to TCP port 8080. Web App	Port Scan Web App Attack
Anonymous	2026-06-13 17:09:28 (3 days ago)	Honeypot hit: Empty payload (likely service probe); 8000 [1], 2078 [1], 2082 [1], 2086 [1], 2077 [1] ... show more Honeypot hit: Empty payload (likely service probe); 8000 [1], 2078 [1], 2082 [1], 2086 [1], 2077 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 Axel	2026-06-13 17:08:43 (3 days ago)	Blocked by UFW on MVI [443/tcp] \| SPT: 7233 \| TTL: 48 \| LEN: 60 \| TOS: 0x00 • Reported by: github.co ... show more Blocked by UFW on MVI [443/tcp] \| SPT: 7233 \| TTL: 48 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2026-06-13 16:37:28 (3 days ago)	tcp port scan (7 or more attempts)	Port Scan
🇨🇿 0x44	2026-06-08 04:11:04 (1 week ago)	52.150.30.130 [07/Jun/2026 Connection attempt blocked ]	Port Scan
🇺🇸 RAP	2026-06-07 14:14:09 (1 week ago)	2026-06-07 14:14:09 UTC Unauthorized activity to TCP port 8080. Web App	Port Scan Web App Attack

Showing 1 to 15 of 60 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 222.92.61.242

🇩🇴 190.167.237.191

🇻🇳 165.154.136.52

🇺🇸 162.216.149.132

🇨🇳 140.210.78.20

🇨🇳 114.141.150.101

🇺🇸 108.59.10.27

🇳🇱 91.92.40.7

🇫🇷 85.217.140.4

🇨🇳 60.209.128.58

🇳🇱 45.148.10.151

🇻🇳 27.77.138.70

🇨🇳 14.18.249.77

🇮🇳 13.233.253.7

🇨🇳 221.228.10.158

🇩🇪 194.187.176.88

🇺🇸 192.227.210.218

🇺🇸 192.155.84.194

🇧🇷 187.36.130.95

🇧🇷 152.67.46.203