JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.159.243.196

52.159.243.196 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 57%: ?

57%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.159.243.196

Whois 52.159.243.196

IP Abuse Reports for 52.159.243.196:

This IP address has been reported a total of 30 times from 21 distinct sources. 52.159.243.196 was first reported on August 15th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 dpsbs	2026-07-25 21:27:18 (1 day ago)	multiple ips intrustions detected	Hacking
🇺🇸 rellim.com	2026-07-25 20:02:44 (1 day ago)	Jul 25 13:02:43 alice kernel: HACK IN=enp3s0 OUT=enp1s0f1 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08 ... show more Jul 25 13:02:43 alice kernel: HACK IN=enp3s0 OUT=enp1s0f1 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08:00 SRC=52.159.243.196 DST=204.17.205.254 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=34219 DF PROTO=TCP SPT=56214 DPT=2078 WINDOW=64240 RES=0x00 SYN URGP=0 Jul 25 13:02:43 alice kernel: HACK IN=enp3s0 OUT=enp1s0f1 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08:00 SRC=52.159.243.196 DST=204.17.205.254 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=53509 DF PROTO=TCP SPT=56208 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0 Jul 25 13:02:43 alice kernel: HACK IN=enp3s0 OUT=enp1s0f1 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08:00 SRC=52.159.243.196 DST=204.17.205.254 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=49541 DF PROTO=TCP SPT=56197 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 Ba-Yu	2026-07-25 19:22:19 (1 day ago)	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
Anonymous	2026-07-25 18:35:23 (1 day ago)	denied traffic to a honeypot network. destination port 2078.	Port Scan Hacking
🇺🇸 xmission.com	2026-07-25 18:19:20 (1 day ago)	Blocked by UFW (TCP on 80) Source port: 55693 TTL: 52 Packet length: 60 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 80) Source port: 55693 TTL: 52 Packet length: 60 TOS: 0x00 This report (for 52.159.243.196) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇫🇮 6kilowatti	2026-07-25 17:23:56 (1 day ago)	2026-07-25T20:23:55.776445+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18 ... show more 2026-07-25T20:23:55.776445+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18:bd:57:7e:08:00 SRC=52.159.243.196 DST=5.61.88.83 LEN=60 TOS=0x00 PREC=0x00 TTL=40 ID=6043 DF PROTO=TCP SPT=56094 DPT=2078 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Port Scan
Anonymous	2026-06-14 23:41:00 (1 month ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇺🇸 MPL	2026-06-14 15:09:07 (1 month ago)	tcp port scan (10 or more attempts)	Port Scan
🇺🇸 TPI-Abuse	2026-06-14 14:59:45 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 52.159.243.196 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 52.159.243.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 10:59:41.495272 2026] [security2:error] [pid 29942:tid 29942] [client 52.159.243.196:47730] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.151.23"] [uri "/.git/HEAD"] [unique_id "ai7B3dgiE6t6mTXLN2UXGQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-06-14 14:32:16 (1 month ago)	Blocked by UFW (TCP on 2078) Source port: 47668 TTL: 51 Packet length: 60 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 2078) Source port: 47668 TTL: 51 Packet length: 60 TOS: 0x00 This report (for 52.159.243.196) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 _ArminS_	2026-06-14 13:22:56 (1 month ago)	WEB-Scan 47488:80 detected 2026.06.14 15:22:56 blocked until 2026.08.03 08:25:43	Port Scan
🇹🇭 Sawasdee	2026-06-14 12:45:08 (1 month ago)	Unwanted checking 80 or 443 port ...	Bad Web Bot
🇨🇿 Prcek	2026-06-14 12:26:14 (1 month ago)	PortScan:HOST=52.159.243.196,DPORTS=80,443,2078,2082	Port Scan
🇳🇱 Savvii	2026-06-14 11:43:41 (1 month ago)	15 attempts against mh-modsecurity-ban on pf221103	Brute-Force Web App Attack
🇺🇸 Gabriel Camargo	2026-06-14 11:19:11 (1 month ago)	52.159.243.196 - - [14/Jun/2026:06:19:10 -0500] "GET /.git/HEAD HTTP/1.1" 404 134 "-" "Mozilla/5.0 ( ... show more 52.159.243.196 - - [14/Jun/2026:06:19:10 -0500] "GET /.git/HEAD HTTP/1.1" 404 134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" 52.159.243.196 - - [14/Jun/2026:06:19:10 -0500] "GET /.git/config HTTP/1.1" 404 134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" 52.159.243.196 - - [14/Jun/2026:06:19:11 -0500] "GET /.env HTTP/1.1" 404 197 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0" ... show less	Brute-Force SSH

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 222.118.59.16

🇺🇸 172.253.192.24

🇺🇸 74.76.235.6

🇺🇸 66.132.195.30

🇳🇱 45.148.10.30

🇺🇸 20.29.23.94

🇨🇭 209.99.190.115

🇺🇸 195.184.76.194

🇲🇽 189.203.163.10

🇫🇷 172.71.131.67

🇮🇳 147.93.170.232

🇷🇺 91.215.108.85

🇫🇷 91.196.152.202

🇺🇸 66.132.186.235

🇬🇧 46.43.20.75

🇭🇰 43.155.86.225

🇺🇸 35.237.94.18

🇰🇷 222.97.195.179

🇰🇷 211.251.245.88

🇩🇪 151.243.11.236