JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.159.244.180

52.159.244.180 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 24%: ?

24%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.159.244.180

Whois 52.159.244.180

IP Abuse Reports for 52.159.244.180:

This IP address has been reported a total of 21 times from 20 distinct sources. 52.159.244.180 was first reported on November 5th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇸 Scan	2026-06-30 01:16:18 (1 week ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇺🇸 TPI-Abuse	2026-06-14 20:26:04 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 52.159.244.180 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 52.159.244.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 16:25:56.024307 2026] [security2:error] [pid 1610:tid 1610] [client 52.159.244.180:56259] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.143"] [uri "/.git/config"] [unique_id "ai8OVLn-L6X51M_YCDfh2gAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 eber965	2026-06-14 19:52:37 (3 weeks ago)	[Sun Jun 14 15:52:30 2026] [authz_core:error] [pid 2656320:tid 140064948463360] [client 52.159.244.1 ... show more [Sun Jun 14 15:52:30 2026] [authz_core:error] [pid 2656320:tid 140064948463360] [client 52.159.244.180:56321] AH01630: client denied by server configuration: /var/www/html/.git [Sun Jun 14 15:52:31 2026] [authz_core:error] [pid 2656320:tid 140064847816448] [client 52.159.244.180:56322] AH01630: client denied by server configuration: /var/www/html/.env [Sun Jun 14 15:52:35 2026] [authz_core:error] [pid 2656320:tid 140065897010944] [client 52.159.244.180:56323] AH01630: client denied by server configuration: /var/www/html/.env.backup [Sun Jun 14 15:52:35 2026] [authz_core:error] [pid 2656320:tid 140064965248768] [client 52.159.244.180:56326] AH01630: client denied by server configuration: /var/www/html/.env.save [Sun Jun 14 15:52:36 2026] [authz_core:error] [pid 2656099:tid 140065527297792] [client 52.159.244.180:56258] AH01630: client denied by server configuration: /var/www/html/.aws ... show less	Brute-Force
🇺🇸 xmission.com	2026-06-14 19:11:35 (3 weeks ago)	Blocked by UFW (TCP on 5000) Source port: 56321 TTL: 115 Packet length: 40 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 5000) Source port: 56321 TTL: 115 Packet length: 40 TOS: 0x00 This report (for 52.159.244.180) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇹🇷 Threat.live	2026-06-14 17:10:03 (3 weeks ago)	Suspicious Connection Attempts	Brute-Force
🇮🇱 spd.co.il	2026-05-01 05:01:27 (2 months ago)	Unauthorized access attempts on ports: 22	Brute-Force SSH
🇮🇪 RoboSOC	2026-04-29 08:19:21 (2 months ago)	SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found	Port Scan
Anonymous	2026-04-29 04:48:21 (2 months ago)	$f2bV_matches	Brute-Force SSH
🇭🇺 sRichy	2026-04-29 04:47:52 (2 months ago)	Apr 29 06:47:16 vpn sshd[2252892]: User root from 52.159.244.180 not allowed because not listed in A ... show more Apr 29 06:47:16 vpn sshd[2252892]: User root from 52.159.244.180 not allowed because not listed in AllowUsers Apr 29 06:47:34 vpn sshd[2252949]: User root from 52.159.244.180 not allowed because not listed in AllowUsers Apr 29 06:47:51 vpn sshd[2253089]: User root from 52.159.244.180 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
🇦🇺 greenhost.com.au	2026-03-22 16:00:15 (3 months ago)	Automated report: 221 attacks in 24h targeting privacymate via SSH. SSH/brute_force: 221 on privacym ... show more Automated report: 221 attacks in 24h targeting privacymate via SSH. SSH/brute_force: 221 on privacymate show less	Brute-Force SSH
🇬🇧 starlord101	2026-03-22 08:00:17 (3 months ago)	Automated SSH brute-force: 3 failed login attempts targeting root/admin on Hostinger VPS	Brute-Force SSH
🇬🇧 AdrianT	2026-03-22 01:24:32 (3 months ago)	SSH brute force	Brute-Force SSH
🇬🇧 Axel	2026-03-22 01:22:06 (3 months ago)	Blocked by Fail2Ban. Flagged by jail ssh \| UK-01	Brute-Force
🇺🇸 66691337	2026-03-22 01:21:44 (3 months ago)	2026-03-22T01:19:56.568Z ACCEPT host=52.159.244.180 port=37888 fd=4 n=1/4096 2026-03-22T01:19:56.568 ... show more 2026-03-22T01:19:56.568Z ACCEPT host=52.159.244.180 port=37888 fd=4 n=1/4096 2026-03-22T01:19:56.568Z ACCEPT host=52.159.244.180 port=37888 fd=4 n=1/4096 2026-03-22T01:20:30.201Z ACCEPT host=52.159.244.180 port=37889 fd=5 n=2/4096 2026-03-22T01:20:30.201Z ACCEPT host=52.159.244.180 port=37889 fd=5 n=2/4096 2026-03-22T01:21:02.312Z ACCEPT host=52.159.244.180 port=37890 fd=6 n=3/4096 2026-03-22T01:21:02.312Z ACCEPT host=52.159.244.180 port=37890 fd=6 n=3/4096 2026-03-22T01:21:42.815Z ACCEPT host=52.159.244.180 port=37891 fd=7 n=4/4096 2026-03-22T01:21:42.815Z ACCEPT host=52.159.244.180 port=37891 fd=7 n=4/4096 ... show less	Brute-Force SSH
🇬🇧 oolivero45	2026-03-22 01:21:27 (3 months ago)	Mar 22 01:20:55 nervous-edison8 sshd[2196908]: Failed password for root from 52.159.244.180 port 378 ... show more Mar 22 01:20:55 nervous-edison8 sshd[2196908]: Failed password for root from 52.159.244.180 port 37888 ssh2 Mar 22 01:20:54 nervous-edison8 sshd[2196914]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.159.244.180 user=root Mar 22 01:20:56 nervous-edison8 sshd[2196914]: Failed password for root from 52.159.244.180 port 37888 ssh2 Mar 22 01:21:25 nervous-edison8 sshd[2197141]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.159.244.180 user=root Mar 22 01:21:27 nervous-edison8 sshd[2197141]: Failed password for root from 52.159.244.180 port 37888 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.71

🇧🇷 187.111.28.131

🇺🇸 147.185.132.201

🇺🇸 147.185.132.39

🇷🇴 92.118.39.14

🇬🇧 35.203.211.187

🇺🇸 20.127.185.37

🇺🇸 2607:f8b0:4004:c0b::124

🇩🇪 206.81.23.7

🇲🇽 189.203.39.215

🇹🇷 176.240.132.208

🇺🇸 172.174.72.225

🇩🇪 165.154.164.112

🇫🇷 161.97.103.51

🇸🇦 154.205.134.214

🇫🇮 147.185.133.106

🇨🇳 112.49.119.143

🇧🇩 103.114.20.75

🇸🇬 103.13.207.166

🇷🇴 80.94.92.55