JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.159.247.198

52.159.247.198 was found in our database!

This IP was reported 31 times. Confidence of Abuse is 76%: ?

76%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.159.247.198

Whois 52.159.247.198

IP Abuse Reports for 52.159.247.198:

This IP address has been reported a total of 31 times from 28 distinct sources. 52.159.247.198 was first reported on December 12th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇬 HighWay	2026-06-28 11:46:22 (1 week ago)	52.159.247.198 - - [28/Jun/2026:11:46:14 +0000] "CONNECT api.youpass.vn:443:443 HTTP/1.1" 400 500 "- ... show more 52.159.247.198 - - [28/Jun/2026:11:46:14 +0000] "CONNECT api.youpass.vn:443:443 HTTP/1.1" 400 500 "-" "-" 52.159.247.198 - - [28/Jun/2026:11:46:16 +0000] "CONNECT api.youpass.vn:443:443 HTTP/1.1" 400 500 "-" "-" 52.159.247.198 - - [28/Jun/2026:11:46:21 +0000] "CONNECT api.youpass.vn:443:443 HTTP/1.1" 400 500 "-" "-" ... show less	Hacking Port Scan
🇷🇸 Scan	2026-06-28 00:15:44 (1 week ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
Anonymous	2026-06-27 23:44:04 (1 week ago)	[elearning.zebs.ch] httpd-suspicious-path: sites=global; logs=/var/log/httpd/access_log; samples=/.g ... show more [elearning.zebs.ch] httpd-suspicious-path: sites=global; logs=/var/log/httpd/access_log; samples=/.git/config \| /.git/logs/HEAD \| /.git/refs/heads/master show less	Hacking Web App Attack
Anonymous	2026-06-27 23:04:06 (1 week ago)	PORT & IP Scan.	Port Scan Brute-Force
🇨🇿 Countryman	2026-06-27 22:09:21 (1 week ago)	IPS detection: HTPasswd.Access	Hacking
🇷🇴 gtheo99	2026-06-27 21:49:02 (1 week ago)	(cpanel) Failed cPanel login from 52.159.247.198 (US/United States/-): 2 in the last 900 secs	Brute-Force Web App Attack
🇮🇹 clamehost.it	2026-06-27 20:53:07 (1 week ago)	Automatic report - Brute Force attack using this IP address	Brute-Force
Anonymous	2026-06-27 20:48:18 (1 week ago)	Honeypot hit: Empty payload (likely service probe); 2082 [1], 2086 [1], 2083 [1], 2087 [1] TCP Repor ... show more Honeypot hit: Empty payload (likely service probe); 2082 [1], 2086 [1], 2083 [1], 2087 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 ISPLtd	2026-06-27 19:21:14 (1 week ago)	Jun 27 13:21:14 52.159.247.198 TCP SPT=16192 DPT=2083 SYN Jun 27 13:21:14 52.159.247.198 TCP SPT=162 ... show more Jun 27 13:21:14 52.159.247.198 TCP SPT=16192 DPT=2083 SYN Jun 27 13:21:14 52.159.247.198 TCP SPT=16203 DPT=2086 SYN Jun 27 13:21:14 52.159.247.198 TCP SPT=16196 DPT=8080 WIND ... show less	Port Scan
🇺🇸 Starburst SysOp Team	2026-06-27 18:53:11 (1 week ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-iad5-2)	Hacking Bad Web Bot
🇯🇵 SentinalX by uzumaru	2026-06-18 02:50:11 (3 weeks ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: ptlogin.4399.com:443 show less	Open Proxy Port Scan
🇷🇸 Scan	2026-06-15 00:48:35 (3 weeks ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇩🇪 femboy.cat	2026-06-14 22:03:16 (3 weeks ago)	Port scan to tcp/2082 from 52.159.247.198	Brute-Force
🇺🇸 sandra361	2026-06-14 20:47:44 (3 weeks ago)	Port scan detected: 9 attempts across 9 ports (2077,2078,2083,2086,2087,2095,2096,443,80). \| Evidenc ... show more Port scan detected: 9 attempts across 9 ports (2077,2078,2083,2086,2087,2095,2096,443,80). \| Evidence: GHOST_SCAN: IN=enp1s0 SRC=52.159.247.198 LEN=60 TOS=0x00 PREC=0x00 TTL=41 ID=57644 DF PROTO=TCP SPT=22594 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 show less	Port Scan
Anonymous	2026-06-14 20:37:54 (3 weeks ago)	Jun 14 16:37:54 localhost kernel: [109814766.199630] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more Jun 14 16:37:54 localhost kernel: [109814766.199630] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=52.159.247.198 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x40 TTL=48 ID=12092 DF PROTO=TCP SPT=22592 DPT=2078 WINDOW=64240 RES=0x00 SYN URGP=0 Jun 14 16:37:54 localhost kernel: [109814766.199652] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=52.159.247.198 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x40 TTL=48 ID=12092 DF PROTO=TCP SPT=22592 DPT=2078 SEQ=1004671920 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405A00402080A20EBBECB000000000103030A) Jun 14 16:37:54 localhost kernel: [109814766.201214] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=52.159.247.198 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x40 TTL=49 ID=20861 DF PROTO=TCP SPT=22594 DPT=2082 WINDOW=64240 RES=0x00 SYN URGP=0 Jun 14 16:37:54 localhost kernel: [109814766.206436] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f show less	Port Scan

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.167.75.86

🇨🇳 223.109.200.181

🇺🇸 205.210.31.84

🇸🇪 194.14.254.97

🇺🇸 74.115.172.118

🇨🇳 223.107.146.186

🇧🇷 205.210.31.153

🇷🇺 195.239.47.189

🇺🇸 192.155.84.194

🇪🇨 190.110.46.226

🇧🇷 187.126.105.42

🇧🇷 177.174.109.143

🇭🇰 152.32.215.224

🇮🇳 122.187.227.145

🇩🇪 69.5.169.206

🇩🇪 69.5.169.68

🇺🇸 65.49.1.200

🇺🇸 64.62.156.132

🇳🇱 45.148.10.151

🇳🇱 45.148.10.141