52.154.19.232
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- Microsoft Corporation
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS8075
- Domain Name
- microsoft.com
- Country
- 🇺🇸 United States of America
- City
- Des Moines, Iowa
No reports in the last 60 days
52.154.19.232 has been reported 30 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
30 from
28 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 ShadowWhisperer |
HTTP GET /.git/HEAD UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like
|
Web App Attack | |
| 🇺🇸 mw |
GET /.env.local HTTP/1.1
|
Web App Attack | |
| 🇬🇧 SilverZippo |
Web App Attack
|
Web App Attack | |
| Anonymous |
Bot / scanning and/or hacking attempts: GET /wp-config.php HTTP/1.1, GET /.env.save HTTP/1.1
|
Hacking Web App Attack | |
| 🇺🇸 lime |
52.154.19.232 - - [02/Jun/2026:20:08:44 +0000] "GET /backup.sql HTTP/1.1" 302 538 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
|
Hacking Web App Attack | |
| 🇺🇸 MPL |
tcp port scan (8 or more attempts)
|
Port Scan | |
| 🇸🇪 NordhTech |
More than 3 malicious connection attempts, trying port(s) 2087/tcp, then blocked from services ...
|
Port Scan Hacking | |
| 🇺🇸 cwytech |
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: crowdsecurity/http-sensitive-files.
|
Bad Web Bot Web App Attack | |
| 🇷🇺 Andrey I |
ddos
|
DDoS Attack Port Scan | |
| 🇬🇧 PeravixGroup |
Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud
|
Port Scan Bad Web Bot | |
| 🇺🇸 mnsf |
Too many Status 50X (15)
|
Brute-Force Web App Attack | |
| 🇺🇸 gu-alvareza |
Spring.Boot.Actuator.Unauthorized.Access
|
Brute-Force | |
| 🇳🇱 i-turnradio.nl |
2026-06-02 @ 07:58:01 (CET) ~ Blocked for trying to access: /wp-config.php
|
Web App Attack | |
| 🇦🇺 gregoo23 |
|
Bad Web Bot Web App Attack | |
| 🇺🇸 Som1ght3n |
IP attempted to access sensitive `.git/config` files via HTTP, indicating a probe for exposed source code repositories.
|
Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown