JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.159.244.74

52.159.244.74 was found in our database!

This IP was reported 166 times. Confidence of Abuse is 42%: ?

42%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.159.244.74

Whois 52.159.244.74

IP Abuse Reports for 52.159.244.74:

This IP address has been reported a total of 166 times from 125 distinct sources. 52.159.244.74 was first reported on February 27th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Savvii	2026-06-16 18:49:32 (1 day ago)	15 attempts against mh-modsecurity-ban on storm	Brute-Force Web App Attack
🇩🇪 ValtonTahiri	2026-06-16 17:32:05 (1 day ago)	UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ... show more UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=52.159.244.74; proto=TCP; source_port=57359; target_port=2078; flags=SYN show less	Port Scan
🇯🇵 VXG-NET	2026-06-16 16:11:44 (1 day ago)	port=80, indicator_type=info-leak	Hacking
🇺🇸 TPI-Abuse	2026-06-16 16:07:24 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 52.159.244.74 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 52.159.244.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 12:07:18.961117 2026] [security2:error] [pid 29101:tid 29101] [client 52.159.244.74:57177] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.107"] [uri "/.git/HEAD"] [unique_id "ajF0thwDxti5vWRVjitZ4QAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇷 maviei	2026-06-16 16:06:14 (1 day ago)	2026-06-16T13:06:13.296875-03:00 srv1251771 kernel: [1392802.416028] [UFW BLOCK] IN=eth0 OUT= MAC=40 ... show more 2026-06-16T13:06:13.296875-03:00 srv1251771 kernel: [1392802.416028] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=52.159.244.74 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=43 ID=20475 DF PROTO=TCP SPT=57033 DPT=2083 WINDOW=64240 RES=0x00 SYN URGP=0 2026-06-16T13:06:13.298747-03:00 srv1251771 kernel: [1392802.416754] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=52.159.244.74 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=43 ID=21803 DF PROTO=TCP SPT=57030 DPT=2078 WINDOW=64240 RES=0x00 SYN URGP=0 2026-06-16T13:06:13.298803-03:00 srv1251771 kernel: [1392802.417610] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=52.159.244.74 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=44 ID=53764 DF PROTO=TCP SPT=57043 DPT=2096 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇯🇵 demonsword	2026-06-11 10:51:57 (6 days ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: www.eastmoney.com:443 show less	Open Proxy Port Scan
🇹🇷 0xi	2026-03-13 14:00:44 (3 months ago)	SSH brute-force attack detected (82 attempts). Targeted ports: 22. Triggered sensors: P0f, Cowrie, S ... show more SSH brute-force attack detected (82 attempts). Targeted ports: 22. Triggered sensors: P0f, Cowrie, Suricata, Fatt. Post-exploitation commands were executed. Observed via distributed honeypot network. show less	Brute-Force SSH
🇹🇷 rtbh.com.tr	2026-03-01 20:11:49 (3 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇨🇳 ThreatBook.io	2026-02-28 23:21:57 (3 months ago)	ThreatBook Intelligence: Spam,Info more details on https://threatbook.io/ip/52.159.244.74 2026-02-28 ... show more ThreatBook Intelligence: Spam,Info more details on https://threatbook.io/ip/52.159.244.74 2026-02-28 01:53:48 ["uname -a"] 2026-02-28 03:51:40 ["pwd"] 2026-02-28 04:10:40 ["hostname"] 2026-02-28 01:56:49 ["ls -la /"] 2026-02-28 03:10:11 ["ssh -V"] show less	Brute-Force
🇹🇷 rtbh.com.tr	2026-02-28 20:11:48 (3 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Anonymous	2026-02-28 06:17:33 (3 months ago)	<jail> banned by fail2ban	Brute-Force Web App Attack
🇫🇷 ericshim.me	2026-02-28 05:01:54 (3 months ago)	Cowrie honeypot hit at 2026-02-27T17:57:59.527667Z	Brute-Force SSH
🇫🇷 SiyCah	2026-02-28 04:00:51 (3 months ago)	52.159.244.74 fell into Endlessh tarpit; 0/3 total connections are currently still open. Total time ... show more 52.159.244.74 fell into Endlessh tarpit; 0/3 total connections are currently still open. Total time wasted: 13s. Total bytes sent by tarpit: 966B. Report generated by Endlessh Report Generator v1.2.3 show less	Brute-Force Port Scan SSH Hacking
🇫🇷 tecnicorioja	2026-02-28 00:00:56 (3 months ago)	Failed password for root Feb 27 20:00:06 port 18472	Brute-Force SSH
🇫🇷 tecnicorioja	2026-02-27 23:45:11 (3 months ago)	Failed password for root Feb 27 21:03:25 port 18472	Brute-Force SSH

Showing 1 to 15 of 166 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.164.232.13

🇳🇱 188.166.112.205

🇪🇸 158.158.104.28

🇺🇸 147.185.132.201

🇨🇳 111.26.177.216

🇺🇸 91.230.168.170

🇿🇦 41.76.108.97

🇮🇩 203.153.103.177

🇲🇳 203.23.199.89

🇧🇷 168.90.89.49

🇳🇱 159.65.207.3

🇫🇷 159.26.105.72

🇵🇰 153.117.32.97

🇨🇳 103.236.94.150

🇮🇩 103.122.34.142

🇨🇬 102.141.45.170

🇳🇱 45.148.10.151

🇨🇳 223.84.209.188

🇧🇷 177.37.16.254

🇧🇷 168.90.91.245