JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.159.244.178

52.159.244.178 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 33%: ?

33%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.159.244.178

Whois 52.159.244.178

IP Abuse Reports for 52.159.244.178:

This IP address has been reported a total of 30 times from 25 distinct sources. 52.159.244.178 was first reported on October 3rd 2025, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Tsumugi Kotobuki	2026-07-27 01:13:52 (7 hours ago)	Port Scan on Honeypot \| Ports: 80/HTTP \| Proto: TCP(1) \| Flags: all SYN \| TTL: 42 \| Len: 60B \| Win: ... show more Port Scan on Honeypot \| Ports: 80/HTTP \| Proto: TCP(1) \| Flags: all SYN \| TTL: 42 \| Len: 60B \| Win: 64240(1) \| F2B/ufw-honeypot@2026-07-27T01:13:52Z show less	Port Scan Hacking
🇷🇸 Scan	2026-07-27 01:00:36 (8 hours ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
Anonymous	2026-07-27 00:40:15 (8 hours ago)	denied traffic to a non-approved destination port. destination port 2095.	Port Scan
🇺🇸 MPL	2026-06-16 07:49:12 (1 month ago)	tcp port scan (10 or more attempts)	Port Scan
🇧🇷 SOCBR	2026-06-16 07:43:04 (1 month ago)	IPS: WordPress Sensitive System Files Information Disclosure.	Hacking
🇩🇪 Admins@FBN	2026-06-11 09:09:41 (1 month ago)	FW-PortScan: Traffic Blocked srcport=44048 dstport=9000	Port Scan
🇮🇱 spd.co.il	2026-05-24 18:05:09 (2 months ago)	Web application attack detected	Hacking Web App Attack
🇧🇪 cmbplf	2026-05-22 21:46:21 (2 months ago)	174 requests with url.path /@fs/	Brute-Force Bad Web Bot
🇸🇬 Cloudkul Cloudkul	2026-05-22 19:49:39 (2 months ago)	Attempted Not Found (404 status code) requests on our application, more than 30% of their total requ ... show more Attempted Not Found (404 status code) requests on our application, more than 30% of their total requests. show less	Brute-Force Web App Attack
🇯🇵 beon	2026-05-22 19:10:32 (2 months ago)	[DateTime=>2026-05-22T19:10:32Z to 2026-05-22T19:10:36Z (UTC)] , [HoneyPot_Hits=>15 times] , [HoneyP ... show more [DateTime=>2026-05-22T19:10:32Z to 2026-05-22T19:10:36Z (UTC)] , [HoneyPot_Hits=>15 times] , [HoneyPots=>/.env, /config/.env, /config.json, /secrets.yml, /.git/config, /@fs/.env and others] , [404targets=>/settings.json, /const.js, /credentials.yml.enc, /application.yml, /appsettings.json, /Jenkinsfile and others] , [total_Hits=>31 times] , [hit_per_second=>7.75] , [Keyword=>irregular query] show less	Bad Web Bot Web App Attack Hacking
🇨🇦 dispensight	2026-05-22 18:37:19 (2 months ago)	Adversary infrastructure reachback to sinkholed domain (gettrumpmemestrendingtokens.com): 31 GET req ... show more Adversary infrastructure reachback to sinkholed domain (gettrumpmemestrendingtokens.com): 31 GET requests to secureleaf.dispensight.com. Paths: /sink.html. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 14.1; rv:133.0) Gecko/20100101 Firefox/133.0. show less	Bad Web Bot Web App Attack
Anonymous	2026-05-22 18:06:44 (2 months ago)	Blocked: Reason='Suspicious traffic score=80 (review-based detection)'; Requests=31	Hacking
Anonymous	2026-05-22 17:02:56 (2 months ago)	(PERMBLOCK) 52.159.244.178 (US/United States/-) has had more than 4 temp blocks in the last 86400 se ... show more (PERMBLOCK) 52.159.244.178 (US/United States/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Port Scan
Anonymous	2026-05-22 16:46:35 (2 months ago)	(caddyscan) Scanner path probe from 52.159.244.178 (US/United States/-): 5 in the last 3600 secs; Po ... show more (caddyscan) Scanner path probe from 52.159.244.178 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 52.159.244.178 - - [22/May/2026:16:46:30 +0000] "GET /@fs/.env.development?import&raw HTTP/1.1" [REDACTED] 200 2627 52.159.244.178 - - [22/May/2026:16:46:30 +0000] "GET /@fs/.env.production?import&raw HTTP/1.1" [REDACTED] 200 2627 52.159.244.178 - - [22/May/2026:16:46:30 +0000] "GET /@fs/.env.test?import&raw HTTP/1.1" [REDACTED] 200 2627 52.159.244.178 - - [22/May/2026:16:46:30 +0000] "GET /@fs/.git/config?import&raw HTTP/1.1" [REDACTED] 200 2627 52.159.244.178 - - [22/May/2026:16:46:30 +0000] "GET /@fs/.git/config?import?raw HTTP/1.1" show less	Port Scan
Anonymous	2026-05-22 16:19:13 (2 months ago)	(caddyscan) Scanner path probe from 52.159.244.178 (US/United States/-): 5 in the last 3600 secs; Po ... show more (caddyscan) Scanner path probe from 52.159.244.178 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 52.159.244.178 - - [22/May/2026:16:19:08 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 52.159.244.178 - - [22/May/2026:16:19:09 +0000] "GET /config/.env HTTP/1.1" [REDACTED] 200 2627 52.159.244.178 - - [22/May/2026:16:19:09 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 52.159.244.178 - - [22/May/2026:16:19:09 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 52.159.244.178 - - [22/May/2026:16:19:10 +0000] "GET /.env HTTP/1.1" show less	Port Scan

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇦 217.147.171.54

🇳🇱 195.178.110.108

🇧🇷 131.108.55.40

🇳🇱 104.248.206.108

🇧🇬 78.128.114.50

🇳🇱 45.148.10.157

🇮🇪 34.243.127.134

🇬🇧 31.14.254.102

🇬🇧 31.14.254.85

🇬🇧 5.226.140.96

🇨🇳 222.71.122.90

🇻🇪 200.8.243.44

🇷🇺 185.240.102.11

🇧🇷 170.82.253.14

🇧🇷 138.186.44.196

🇨🇴 138.84.53.248

🇧🇷 131.100.130.224

🇺🇸 104.129.198.129

🇺🇸 103.144.245.123

🇱🇰 103.21.166.213