JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.159.244.81

52.159.244.81 was found in our database!

This IP was reported 34 times. Confidence of Abuse is 90%: ?

90%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.159.244.81

Whois 52.159.244.81

IP Abuse Reports for 52.159.244.81:

This IP address has been reported a total of 34 times from 29 distinct sources. 52.159.244.81 was first reported on August 8th 2025, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 RafaLeardi	2026-06-18 07:00:03 (1 hour ago)	Leardi-Servers Firewall: M(106.1) Port_Scanner	Port Scan
🇧🇷 RafaLeardi	2026-06-16 07:00:03 (2 days ago)	Leardi-Servers Firewall: M(106.1) Port_Scanner	Port Scan
🇧🇷 RafaLeardi	2026-06-15 07:00:03 (3 days ago)	Leardi-Servers Firewall: M(106.1) Port_Scanner	Port Scan
🇺🇸 MPL	2026-06-15 02:12:40 (3 days ago)	tcp port scan (44 or more attempts)	Port Scan
🇷🇸 Scan	2026-06-15 01:17:46 (3 days ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
Anonymous	2026-06-11 23:09:18 (6 days ago)	Fail2Ban SSH brute-force detected	Brute-Force SSH
🇺🇸 roki.ovh	2026-06-11 20:26:29 (6 days ago)	Jun 11 22:25:50 roki2 sshd\[21640\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 ... show more Jun 11 22:25:50 roki2 sshd\[21640\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.159.244.81 user=root Jun 11 22:25:52 roki2 sshd\[21640\]: Failed password for root from 52.159.244.81 port 45060 ssh2 Jun 11 22:26:09 roki2 sshd\[21704\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.159.244.81 user=root Jun 11 22:26:11 roki2 sshd\[21704\]: Failed password for root from 52.159.244.81 port 45057 ssh2 Jun 11 22:26:26 roki2 sshd\[21746\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.159.244.81 user=root ... show less	Brute-Force SSH
🇺🇸 ISPLtd	2026-06-11 20:08:45 (6 days ago)	Jun 11 14:08:44 52.159.244.81 TCP SPT=44992 DPT=22 SYN ...	Port Scan SSH
🇺🇸 shadowlab	2026-06-11 19:45:38 (6 days ago)	2026-06-11T12:45:12.456752-07:00 shadownetworks.org sshd[582562]: Failed password for root from 52.1 ... show more 2026-06-11T12:45:12.456752-07:00 shadownetworks.org sshd[582562]: Failed password for root from 52.159.244.81 port 44994 ssh2 2026-06-11T12:45:28.667439-07:00 shadownetworks.org sshd[582780]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.159.244.81 user=root 2026-06-11T12:45:30.977161-07:00 shadownetworks.org sshd[582780]: Failed password for root from 52.159.244.81 port 44992 ssh2 2026-06-11T12:45:35.664829-07:00 shadownetworks.org sshd[582861]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.159.244.81 user=root 2026-06-11T12:45:37.599781-07:00 shadownetworks.org sshd[582861]: Failed password for root from 52.159.244.81 port 44993 ssh2 ... show less	Brute-Force SSH
🇫🇷 Lino Project	2026-06-11 17:43:44 (6 days ago)	Jun 11 19:43:42 vps1 sshd[1721012]: Invalid user r00t from 52.159.244.81 port 44993 ...	Brute-Force SSH
🇦🇹 urnilxfgbez	2026-06-10 22:45:00 (1 week ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇺🇸 MPL	2026-06-10 10:13:02 (1 week ago)	tcp port scan (16 or more attempts)	Port Scan
🇺🇸 SuperCores Hosting	2026-06-10 09:37:32 (1 week ago)	[2026-06-10 09:37:32.481771] TELNET/8080 Unautorized connection, Suspicious Mirai Botnet.	IoT Targeted Brute-Force Hacking Port Scan DDoS Attack
🇺🇸 TPI-Abuse	2026-06-10 09:27:57 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 52.159.244.81 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 52.159.244.81 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 05:27:50.199190 2026] [security2:error] [pid 15682:tid 15682] [client 52.159.244.81:18512] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.205"] [uri "/.git/HEAD"] [unique_id "aikuFifpzZWgfGZcEuShuAAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 iamxorum	2026-06-10 08:54:22 (1 week ago)	2026-06-10T08:54:21.788732+00:00 XRM-01 kernel: [HONEYPORT] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2:74 ... show more 2026-06-10T08:54:21.788732+00:00 XRM-01 kernel: [HONEYPORT] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2:74:7f:6e:37:e3:08:00 SRC=52.159.244.81 DST=46.62.222.43 LEN=60 TOS=0x00 PREC=0x00 TTL=47 ID=63368 DF PROTO=TCP SPT=18507 DPT=8080 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Port Scan

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 202.152.204.159

🇹🇷 185.255.95.139

🇳🇱 157.245.73.170

🇺🇸 104.234.32.225

🇩🇪 80.66.72.211

🇬🇧 35.203.211.190

🇺🇸 2001:470:2cc:1::28b

🇺🇸 208.84.100.11

🇮🇳 165.99.53.89

🇺🇸 162.216.149.74

🇮🇳 103.123.227.10

🇱🇹 62.60.130.60

🇳🇱 45.148.10.151

🇬🇧 35.203.211.149

🇰🇷 218.150.184.241

🇸🇪 185.197.74.239

🇮🇩 163.7.6.41

🇷🇺 93.124.97.2

🇷🇺 89.109.40.134

🇵🇱 87.251.64.158