JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.158.35.86

52.158.35.86 was found in our database!

This IP was reported 155 times. Confidence of Abuse is 39%: ?

39%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇮🇪 Ireland
City	Dublin, Leinster

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.158.35.86

Whois 52.158.35.86

IP Abuse Reports for 52.158.35.86:

This IP address has been reported a total of 155 times from 68 distinct sources. 52.158.35.86 was first reported on May 6th 2026, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 micropedro	2026-06-28 07:30:42 (3 weeks ago)	4 incidents: malicious activity. First: 2026-06-21 02:30, Last: 2026-06-28 03:30 UTC. Triggers: ufw- ... show more 4 incidents: malicious activity. First: 2026-06-21 02:30, Last: 2026-06-28 03:30 UTC. Triggers: ufw-repeater. show less	Port Scan
🇺🇸 micropedro	2026-06-28 07:30:27 (3 weeks ago)	3 incidents: malicious activity. First: 2026-06-14 02:16, Last: 2026-06-28 03:30 UTC. Triggers: ufw- ... show more 3 incidents: malicious activity. First: 2026-06-14 02:16, Last: 2026-06-28 03:30 UTC. Triggers: ufw-repeater. show less	Port Scan
🇺🇸 micropedro	2026-06-14 06:17:07 (1 month ago)	3 incidents: malicious activity. First: 2026-06-07 02:15, Last: 2026-06-14 02:17 UTC. Triggers: ufw- ... show more 3 incidents: malicious activity. First: 2026-06-07 02:15, Last: 2026-06-14 02:17 UTC. Triggers: ufw-repeater. show less	Port Scan
🇺🇸 micropedro	2026-06-07 06:15:34 (1 month ago)	3 incidents: web scanning/attack. First: 2026-05-30 23:31, Last: 2026-06-07 02:15 UTC. Triggers: ngi ... show more 3 incidents: web scanning/attack. First: 2026-05-30 23:31, Last: 2026-06-07 02:15 UTC. Triggers: nginx-badbots,ufw-repeater. show less	Port Scan Bad Web Bot Web App Attack
🇩🇪 evilrave	2026-06-05 05:26:24 (1 month ago)	52.158.35.86 - - [05/Jun/2026:05:26:23 +0000] "GET /.env HTTP/1.1" 444 0 Host="[REDACTED_HOSTNAME].d ... show more 52.158.35.86 - - [05/Jun/2026:05:26:23 +0000] "GET /.env HTTP/1.1" 444 0 Host="[REDACTED_HOSTNAME].dev" SNI="-" ... show less	Bad Web Bot
🇧🇷 Peregrine	2026-06-04 03:10:38 (1 month ago)	Fail2Ban Jail: tomcat-honeypot \| Evidence: 52.158.35.86 162.158.6.247 - - [31/May/2026:15:06:31 -030 ... show more Fail2Ban Jail: tomcat-honeypot \| Evidence: 52.158.35.86 162.158.6.247 - - [31/May/2026:15:06:31 -0300] "GET /.env HTTP/1.1" 404 414 show less	Bad Web Bot
🇧🇷 Peregrine	2026-06-03 03:10:17 (1 month ago)	Fail2Ban Jail: tomcat-honeypot \| Evidence: 52.158.35.86 162.158.6.247 - - [31/May/2026:15:06:31 -030 ... show more Fail2Ban Jail: tomcat-honeypot \| Evidence: 52.158.35.86 162.158.6.247 - - [31/May/2026:15:06:31 -0300] "GET /.env HTTP/1.1" 404 414 show less	Bad Web Bot
🇧🇷 Peregrine	2026-06-02 03:10:13 (1 month ago)	Fail2Ban Jail: tomcat-honeypot \| Evidence: 52.158.35.86 162.158.6.247 - - [31/May/2026:15:06:31 -030 ... show more Fail2Ban Jail: tomcat-honeypot \| Evidence: 52.158.35.86 162.158.6.247 - - [31/May/2026:15:06:31 -0300] "GET /.env HTTP/1.1" 404 414 show less	Bad Web Bot
🇺🇸 Charlesiv	2026-06-01 18:00:48 (1 month ago)	Triggered Cloudflare WAF (botFight) from IE. Action taken: MANAGED_CHALLENGE ASN: 8075 (Microsoft Co ... show more Triggered Cloudflare WAF (botFight) from IE. Action taken: MANAGED_CHALLENGE ASN: 8075 (Microsoft Corporation) Protocol: HTTP/1.1 (POST method) Endpoint: / Timestamp: 2026-06-01T16:32:09Z Ray ID: a04f9cda4e6d299b UA: python-requests/2.33.1 show less	Bad Web Bot
🇧🇷 Francisco Carlos	2026-05-31 20:17:09 (1 month ago)	Honeypot captured 1 automated attack/scan requests (JR Save Tech). Types: env-leak. Sample: GET /.en ... show more Honeypot captured 1 automated attack/scan requests (JR Save Tech). Types: env-leak. Sample: GET /.env show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-31 20:00:56 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 52.158.35.86 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 52.158.35.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 16:00:51.431593 2026] [security2:error] [pid 30856:tid 30877] [client 52.158.35.86:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mindgardens.com"] [uri "/.env"] [unique_id "ahyTc-fcDry9fsdO3J9e7QAAAJA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-31 19:32:26 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 52.158.35.86 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 52.158.35.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 15:32:20.321141 2026] [security2:error] [pid 28372:tid 28372] [client 52.158.35.86:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pixacast.com"] [uri "/.env"] [unique_id "ahyMxPthJajoigBR08elxwAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 4server	2026-05-31 19:00:49 (1 month ago)	[SunMay3121:00:44.8556182026][security2:error][pid1582096:tid1582135][client52.158.35.86:0]ModSecuri ... show more [SunMay3121:00:44.8556182026][security2:error][pid1582096:tid1582135][client52.158.35.86:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\\|wget\\|python\\|nikto\\|sqlmap\\|acunetix\\|fimap\\|dirbuster\\|cmsmap\)\"atREQUEST_HEADERS:user-agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"gmint.ch\"][uri\"/.env\"][unique_id\"ahyFXAOOMeHMQrScWm4TPQAAAAk\"] show less	Port Scan Brute-Force Web App Attack
🇧🇷 Peregrine	2026-05-31 18:06:41 (1 month ago)	Fail2Ban Jail: tomcat-honeypot \| Evidence: 52.158.35.86 162.158.6.247 - - [31/May/2026:15:06:31 -030 ... show more Fail2Ban Jail: tomcat-honeypot \| Evidence: 52.158.35.86 162.158.6.247 - - [31/May/2026:15:06:31 -0300] "GET /.env HTTP/1.1" 404 414 show less	Bad Web Bot
🇺🇸 Epimetheus	2026-05-31 08:10:51 (1 month ago)	Unauthorized access attempts: [GET] /.env [GET] /.env UA: python-requests/2.33.1	Web App Attack

Showing 1 to 15 of 155 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.86.148.242

🇧🇪 198.235.24.244

🇦🇴 193.163.125.246

🇳🇱 185.136.15.86

🇺🇸 184.105.247.230

🇧🇷 177.223.7.62

🇺🇸 162.216.150.135

🇨🇳 112.249.186.196

🇺🇸 104.28.195.191

🇭🇰 101.36.125.72

🇳🇱 91.92.47.203

🇬🇷 83.235.16.111

🇺🇸 64.62.156.175

🇺🇸 45.194.67.26

🇮🇹 34.154.209.179

🇮🇹 34.17.77.25

🇨🇳 27.150.188.148

🇲🇽 189.203.90.166

🇦🇷 181.26.110.100

🇧🇷 179.189.201.235