JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.159.243.179

52.159.243.179 was found in our database!

This IP was reported 40 times. Confidence of Abuse is 28%: ?

28%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.159.243.179

Whois 52.159.243.179

IP Abuse Reports for 52.159.243.179:

This IP address has been reported a total of 40 times from 37 distinct sources. 52.159.243.179 was first reported on February 13th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 www.fransveldman.world	2026-07-15 11:58:44 (1 day ago)	Fetched browser challenge page 55 times in <2h without solving. Likely bad bot.	Bad Web Bot
🇩🇪 www.fransveldman.world	2026-07-15 11:43:07 (1 day ago)	Fetched browser challenge page 10 times in <2h without solving. Likely bad bot.	Bad Web Bot
🇧🇷 maviei	2026-06-16 08:25:07 (1 month ago)	2026-06-16T05:25:05.838058-03:00 srv1251771 kernel: [1365135.029870] [UFW BLOCK] IN=eth0 OUT= MAC=40 ... show more 2026-06-16T05:25:05.838058-03:00 srv1251771 kernel: [1365135.029870] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=52.159.243.179 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=44 ID=39360 DF PROTO=TCP SPT=30720 DPT=2083 WINDOW=64240 RES=0x00 SYN URGP=0 2026-06-16T05:25:05.838147-03:00 srv1251771 kernel: [1365135.030189] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=52.159.243.179 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=44 ID=14459 DF PROTO=TCP SPT=30721 DPT=2086 WINDOW=64240 RES=0x00 SYN URGP=0 2026-06-16T05:25:05.838216-03:00 srv1251771 kernel: [1365135.030433] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=52.159.243.179 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=44 ID=57613 DF PROTO=TCP SPT=30720 DPT=2082 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇷🇸 Scan	2026-06-03 02:27:51 (1 month ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
Anonymous	2026-06-03 00:40:52 (1 month ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇬🇧 PeravixGroup	2026-06-03 00:37:36 (1 month ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
Anonymous	2026-06-03 00:23:12 (1 month ago)	Fail2Ban Log Report 52.159.243.179 - [03/Jun/2026:02:23:10 +0200] "GET /.git/config HTTP/1.1" 301 16 ... show more Fail2Ban Log Report 52.159.243.179 - [03/Jun/2026:02:23:10 +0200] "GET /.git/config HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" "-" "-" ... show less	Hacking SQL Injection Web App Attack
🇧🇾 lns.bz	2026-06-03 00:12:40 (1 month ago)	Too many 404 requests [BY]	Web App Attack
🇹🇷 Threat.live	2026-05-31 14:25:03 (1 month ago)	Threat.live: Web Scan	Web App Attack
🇹🇷 Threat.live	2026-03-03 11:35:33 (4 months ago)	Brute Force, tcp/22	Brute-Force
🇨🇳 ThreatBook.io	2026-03-02 22:37:07 (4 months ago)	ThreatBook Intelligence: Spam,Info more details on https://threatbook.io/ip/52.159.243.179 2026-03-0 ... show more ThreatBook Intelligence: Spam,Info more details on https://threatbook.io/ip/52.159.243.179 2026-03-02 17:49:37 ["uptime"] 2026-03-02 17:50:25 ["whoami"] 2026-03-02 17:45:35 ["ps aux \| head -10"] show less	Brute-Force
🇧🇪 Depress0	2026-03-02 11:11:08 (4 months ago)	SSH login attempts (endlessh): 2026-03-02T10:00:58.421Z ACCEPT host=::ffff:52.159.243.179 port=40984 ... show more SSH login attempts (endlessh): 2026-03-02T10:00:58.421Z ACCEPT host=::ffff:52.159.243.179 port=40984 fd=7 n=4/4096 show less	Brute-Force SSH
🇹🇷 tayfargem	2026-03-02 10:08:48 (4 months ago)	2026-03-02 12:57:27 Failed password for root from 52.159.243.179 port 40984 ssh2 2026-03-02 13:03:07 ... show more 2026-03-02 12:57:27 Failed password for root from 52.159.243.179 port 40984 ssh2 2026-03-02 13:03:07 rhost=52.159.243.179 user=root show less	Brute-Force SSH
🇩🇪 aki-solutions.net	2026-03-02 10:03:42 (4 months ago)	2026-03-02T10:58:01.286542 dc-eu-ger-fra-001.aki-solutions.local sshd[552388]: Failed password for r ... show more 2026-03-02T10:58:01.286542 dc-eu-ger-fra-001.aki-solutions.local sshd[552388]: Failed password for root from 52.159.243.179 port 40984 ssh2 2026-03-02T11:03:38.764416 dc-eu-ger-fra-001.aki-solutions.local sshd[555476]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.159.243.179 user=root 2026-03-02T11:03:41.135462 dc-eu-ger-fra-001.aki-solutions.local sshd[555476]: Failed password for root from 52.159.243.179 port 40984 ssh2 ... show less	Brute-Force SSH
🇺🇸 Zeeaster	2026-03-02 09:56:19 (4 months ago)	abuse-sshd h1	Brute-Force SSH

Showing 1 to 15 of 40 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 209.50.191.235

🇷🇺 178.154.237.17

🇺🇸 162.216.149.89

🇨🇳 113.125.34.82

🇺🇸 64.62.197.227

🇺🇸 54.210.10.52

🇳🇱 45.155.90.56

🇭🇰 43.161.227.105

🇬🇹 190.143.191.251

🇩🇪 167.94.146.33

🇺🇸 162.216.150.152

🇺🇸 157.245.134.253

🇬🇧 151.217.4.34

🇺🇸 146.88.240.187

🇺🇸 135.237.124.6

🇨🇳 112.123.228.180

🇵🇱 83.168.110.23

🇺🇸 45.156.129.121

🇮🇷 2.189.128.6

🇮🇳 163.61.33.117