52.159.229.0
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- Microsoft Corporation
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS8075
- Domain Name
- microsoft.com
- Country
- πΊπΈ United States of America
- City
- San Jose, California
Abuse Reports
Total reports
81 from
51 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| π©πͺ LRob |
|
Port Scan Web App Attack | |
| π¨π¦ Sakusen |
Automated web scanning: 33 reqs, 30 paths probed, 30 returned 404; probed: 30 other
|
Bad Web Bot | |
| πΊπΈ mnsf |
Too many Status 40X (11)
|
Brute-Force Web App Attack | |
| π¬π§ CrystalMaker |
Vulnerability scan - GET /sitemap_index.xml
|
Hacking | |
| π©πͺ www.fransveldman.world |
Fetched browser challenge page 10 times in <2h without solving. Likely bad bot.
|
Bad Web Bot | |
| πΊπΈ Void Vendor |
VoidTrap [15,21]: [offense #1 β 30 minutes] Unauthorized Lucy internal endpoint: /stream | ip: 52.159.229.0 | loc: unknown location | path: /stream/ingest | ua: python-requests/2.34.2
|
Hacking Web App Attack | |
| π·πΈ Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| Anonymous |
denied traffic to a honeypot network. destination port 2078.
|
Port Scan Hacking | |
| π¬π§ Nov |
Unauthorized access attempt (tcp/80)
|
Port Scan | |
| π©πͺ www.fransveldman.world |
Fetched browser challenge page 10 times in <2h without solving. Likely bad bot.
|
Bad Web Bot | |
| π―π΅ SentinalX by uzumaru |
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: fapi.binance.com:443
|
Open Proxy Port Scan | |
| π·πΈ Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| π©πͺ ITSNF |
Blocked by OPNsense firewall; 16 hits, proto=tcp, ports=2082,2083,2086,2087,443,80,8080,8443
|
Port Scan Hacking | |
| π¨π³ ιΉιΉ |
monitor: on VM-0-7-ubuntu | port: 8443 | ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| π©πͺ _ArminS_ |
WEB-Scan 5120:80 detected 2026.06.02 21:06:39
blocked until 2026.07.22 14:09:26
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown