JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.159.225.196

52.159.225.196 was found in our database!

This IP was reported 424 times. Confidence of Abuse is 49%: ?

49%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.159.225.196

Whois 52.159.225.196

IP Abuse Reports for 52.159.225.196:

This IP address has been reported a total of 424 times from 18 distinct sources. 52.159.225.196 was first reported on September 4th 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 somosbr	2026-06-03 07:33:18 (2 weeks ago)	[2026-06-03T07:33:18Z] Unsolicited scan from 52.159.225.196 to port 80/tcp	Port Scan
🇩🇪 wiredalter	2026-06-03 06:54:36 (2 weeks ago)	Blocked by UFW on dVPS [2082/tcp] Source Port: 15751 TTL: 40 Packet Length: 60 TOS: 0x00 Analyzed b ... show more Blocked by UFW on dVPS [2082/tcp] Source Port: 15751 TTL: 40 Packet Length: 60 TOS: 0x00 Analyzed by https://ip.wiredalter.com show less	Port Scan Brute-Force
🇺🇸 MPL	2026-06-03 06:39:25 (2 weeks ago)	tcp port scan (16 or more attempts)	Port Scan
🇯🇵 mkaraki	2026-06-03 06:19:56 (2 weeks ago)	1780467595 # Service_probe # SIGNATURE_SEND # source_ip:52.159.225.196 # dst_port:80 ...	Port Scan
🇳🇱 Jos Moonen	2026-06-03 06:10:44 (2 weeks ago)	52.159.225.196 - - [03/Jun/2026:08:10:33 +0200] "GET /.env HTTP/1.1" 200 3 "-" "Mozilla/5.0 (X11; Li ... show more 52.159.225.196 - - [03/Jun/2026:08:10:33 +0200] "GET /.env HTTP/1.1" 200 3 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 52.159.225.196 - - [03/Jun/2026:08:10:44 +0200] "GET /phpinfo.php HTTP/1.1" 200 3 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" ... show less	Web App Attack Brute-Force
🇩🇪 ghostwarriors	2026-06-03 04:20:19 (2 weeks ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇬🇧 PeravixGroup	2026-06-03 03:59:16 (2 weeks ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇺🇸 pduggusa	2026-05-25 01:49:19 (3 weeks ago)	Detected attacking dugganusa.com at 2026-05-25T01:49:19.920Z \| VirusTotal: 1 malware detections \| So ... show more Detected attacking dugganusa.com at 2026-05-25T01:49:19.920Z \| VirusTotal: 1 malware detections \| Source: DugganUSA PreCog auto-block show less	Hacking Exploited Host
🇺🇸 pduggusa	2026-05-25 00:48:19 (3 weeks ago)	Detected attacking dugganusa.com at 2026-05-25T00:48:18.985Z \| VirusTotal: 1 malware detections \| So ... show more Detected attacking dugganusa.com at 2026-05-25T00:48:18.985Z \| VirusTotal: 1 malware detections \| Source: DugganUSA PreCog auto-block show less	Hacking Exploited Host
🇺🇸 pduggusa	2026-05-24 02:43:23 (3 weeks ago)	Detected attacking dugganusa.com at 2026-05-24T02:43:23.309Z \| VirusTotal: 1 malware detections \| So ... show more Detected attacking dugganusa.com at 2026-05-24T02:43:23.309Z \| VirusTotal: 1 malware detections \| Source: DugganUSA PreCog auto-block show less	Hacking Exploited Host
🇺🇸 pduggusa	2026-05-24 01:44:26 (3 weeks ago)	Detected attacking dugganusa.com at 2026-05-24T01:44:26.310Z \| VirusTotal: 1 malware detections \| So ... show more Detected attacking dugganusa.com at 2026-05-24T01:44:26.310Z \| VirusTotal: 1 malware detections \| Source: DugganUSA PreCog auto-block show less	Hacking Exploited Host
🇺🇸 pduggusa	2026-05-24 00:41:47 (3 weeks ago)	Detected attacking dugganusa.com at 2026-05-24T00:41:46.984Z \| VirusTotal: 1 malware detections \| So ... show more Detected attacking dugganusa.com at 2026-05-24T00:41:46.984Z \| VirusTotal: 1 malware detections \| Source: DugganUSA PreCog auto-block show less	Hacking Exploited Host
🇺🇸 pduggusa	2026-05-23 04:24:38 (4 weeks ago)	Detected attacking dugganusa.com at 2026-05-23T04:24:38.873Z \| VirusTotal: 1 malware detections \| So ... show more Detected attacking dugganusa.com at 2026-05-23T04:24:38.873Z \| VirusTotal: 1 malware detections \| Source: DugganUSA PreCog auto-block show less	Hacking Exploited Host
🇺🇸 pduggusa	2026-05-23 01:52:16 (4 weeks ago)	Detected attacking dugganusa.com at 2026-05-23T01:52:16.559Z \| VirusTotal: 1 malware detections \| So ... show more Detected attacking dugganusa.com at 2026-05-23T01:52:16.559Z \| VirusTotal: 1 malware detections \| Source: DugganUSA PreCog auto-block show less	Hacking Exploited Host
🇺🇸 pduggusa	2026-05-23 00:50:53 (4 weeks ago)	Detected attacking dugganusa.com at 2026-05-23T00:50:53.284Z \| VirusTotal: 1 malware detections \| So ... show more Detected attacking dugganusa.com at 2026-05-23T00:50:53.284Z \| VirusTotal: 1 malware detections \| Source: DugganUSA PreCog auto-block show less	Hacking Exploited Host

Showing 1 to 15 of 424 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.236.228.202

🇪🇸 217.160.204.180

🇫🇮 178.20.210.151

🇱🇹 91.224.92.17

🇱🇹 81.30.98.158

🇱🇹 45.227.254.170

🇨🇳 27.204.196.167

🇻🇳 14.224.190.218

🇯🇵 8.216.5.224

🇲🇾 172.197.216.13

🇺🇸 91.230.168.245

🇳🇱 77.165.10.99

🇰🇷 221.146.243.237

🇷🇴 193.46.255.86

🇧🇷 160.20.33.223

🇵🇰 153.117.17.25

🇷🇺 95.165.142.8

🇨🇿 92.62.233.214

🇳🇱 86.54.31.32

🇩🇪 69.5.169.54