JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.159.228.212

52.159.228.212 was found in our database!

This IP was reported 196 times. Confidence of Abuse is 39%: ?

39%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.159.228.212

Whois 52.159.228.212

IP Abuse Reports for 52.159.228.212:

This IP address has been reported a total of 196 times from 101 distinct sources. 52.159.228.212 was first reported on August 1st 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 demonsword	2026-07-13 14:39:39 (1 week ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: ptlogin.4399.com:443 show less	Open Proxy Port Scan
🇳🇱 Selckie	2026-07-04 11:30:53 (2 weeks ago)	fail2ban: NGINX unusual impact	Web App Attack
🇩🇪 wsyq	2026-06-15 04:27:50 (1 month ago)	Fail2Ban - \[NGINX\]40x-Forcing to access a restricted resource ...	Bad Web Bot Web App Attack
🇳🇱 ipoac.nl	2026-06-15 04:14:20 (1 month ago)	ipoac.nl:80 52.159.228.212 - - [15/Jun/2026:06:14:19 +0200] 203.26.133.248 "GET /.git/config HTTP/1. ... show more ipoac.nl:80 52.159.228.212 - - [15/Jun/2026:06:14:19 +0200] 203.26.133.248 "GET /.git/config HTTP/1.1" 404 1679 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" show less	Bad Web Bot
🇩🇪 paissangroup	2026-06-15 02:37:29 (1 month ago)	Multiple WAF Violations	Web App Attack
🇫🇷 ✨	2026-06-15 02:34:18 (1 month ago)	Domain : requestbox.net Rule : env 2026-06-15 02:32:29 W3SVC281 PLESK76 217.194.212.4 GET /.env.loca ... show more Domain : requestbox.net Rule : env 2026-06-15 02:32:29 W3SVC281 PLESK76 217.194.212.4 GET /.env.local - 80 - 52.159.228.212 HTTP/1.1 Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Mobile Safari/537.36 - - 217.194.212.4 301 0 0 431 222 187 - - show less	Hacking SQL Injection
🇺🇸 TPI-Abuse	2026-06-15 02:09:47 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 52.159.228.212 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 52.159.228.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 22:09:43.524042 2026] [security2:error] [pid 4306:tid 4306] [client 52.159.228.212:8213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.151.16"] [uri "/.git/HEAD"] [unique_id "ai9e57fScvtmkbK9gFGgFwAAAIk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-06-15 01:18:48 (1 month ago)	Blocked by UFW (TCP on 2078) Source port: 8218 TTL: 52 Packet length: 60 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 2078) Source port: 8218 TTL: 52 Packet length: 60 TOS: 0x00 This report (for 52.159.228.212) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-06-15 00:41:50 (1 month ago)	PROTO=TCP DPT=2077	Port Scan Hacking
🇷🇸 Scan	2026-06-15 00:32:17 (1 month ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇫🇷 Baking333	2026-06-15 00:14:43 (1 month ago)	[redacted] 52.159.228.212 - - [15/Jun/2026:01:14:40 +0100] "GET /.git/config HTTP/1.1" 307 386 "-" " ... show more [redacted] 52.159.228.212 - - [15/Jun/2026:01:14:40 +0100] "GET /.git/config HTTP/1.1" 307 386 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Mobile Safari/537.36" [redacted] 52.159.228.212 - - [15/Jun/2026:01:14:42 +0100] "GET /.env HTTP/1.1" 307 386 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://[redacted]/[redacted])" show less	Bad Web Bot Web App Attack
Anonymous	2026-06-14 23:25:33 (1 month ago)	Port Scan	Port Scan
🇧🇾 lns.bz	2026-06-14 22:58:04 (1 month ago)	Too many 404 requests [BY]	Web App Attack
🇩🇪 Honeypot-EU-Fru	2026-06-14 22:55:13 (1 month ago)	52.159.228.212 - - [redacted] [15/Jun/2026:00:55:09 +0200] "GET /.git/HEAD HTTP/1.1" 404 125 "-" "Mo ... show more 52.159.228.212 - - [redacted] [15/Jun/2026:00:55:09 +0200] "GET /.git/HEAD HTTP/1.1" 404 125 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.4; rv:125.0) Gecko/20100101 Firefox/125.0" 0.000 - - 52.1 ... show less	Bad Web Bot Web App Attack
🇩🇪 lumbermatt_de	2026-06-14 22:48:38 (1 month ago)	Vulnerability exploit attack detected	Web App Attack

Showing 1 to 15 of 196 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 207.90.244.18

🇧🇷 205.210.31.154

🇺🇸 185.202.171.37

🇩🇪 167.99.254.106

🇩🇪 165.232.120.46

🇺🇸 143.198.110.218

🇩🇪 139.19.117.197

🇺🇸 137.184.231.37

🇧🇷 131.255.203.50

🇹🇼 114.35.0.177

🇮🇳 103.26.108.104

🇨🇭 51.103.133.211

🇸🇬 43.159.35.188

🇺🇸 40.76.116.132

🇨🇳 27.17.205.185

🇧🇪 198.235.24.213

🇩🇪 195.182.16.23

🇲🇽 186.96.145.241

🇧🇷 181.217.88.20

🇧🇩 144.79.249.123