JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.160.149.134

52.160.149.134 was found in our database!

This IP was reported 7 times. Confidence of Abuse is 41%: ?

41%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.160.149.134

Whois 52.160.149.134

IP Abuse Reports for 52.160.149.134:

This IP address has been reported a total of 7 times from 6 distinct sources. 52.160.149.134 was first reported on May 22nd 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 Lazarus	2026-06-02 12:04:19 (3 days ago)	HTTP probe.	Bad Web Bot
🇺🇸 ISPLtd	2026-06-02 12:03:47 (3 days ago)	Jun 2 09:03:47 52.160.149.134 TCP SPT=3652 DPT=2087 SYN Jun 2 09:03:47 52.160.149.134 TCP SPT=3665 ... show more Jun 2 09:03:47 52.160.149.134 TCP SPT=3652 DPT=2087 SYN Jun 2 09:03:47 52.160.149.134 TCP SPT=3665 DPT=8443 SYN Jun 2 09:03:47 52.160.149.134 TCP SPT=3660 DPT=2082 ... show less	Port Scan
🇺🇸 TPI-Abuse	2026-06-02 10:58:40 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 52.160.149.134 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 52.160.149.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 06:58:33.820188 2026] [security2:error] [pid 1264:tid 1264] [client 52.160.149.134:3130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.162"] [uri "/.git/HEAD"] [unique_id "ah63WTNqdEW3rWTaalLmqQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-02 10:33:30 (3 days ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇺🇸 MPL	2026-06-02 08:32:01 (3 days ago)	tcp port scan (8 or more attempts)	Port Scan
🇺🇸 TPI-Abuse	2026-06-02 06:26:36 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 52.160.149.134 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 52.160.149.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 02:26:33.233877 2026] [security2:error] [pid 17195:tid 17195] [client 52.160.149.134:3137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.102"] [uri "/.git/HEAD"] [unique_id "ah53mZ1TCrqDdYmeMWX-ygAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇯🇵 demonsword	2026-05-22 08:11:28 (2 weeks ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: cp.cloudflare.com:80 show less	Open Proxy Port Scan

Showing 1 to 7 of 7 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 124.116.171.46

🇷🇴 80.94.95.249

🇳🇮 38.226.162.232

🇺🇸 2604:a880:400:d1:0:4:6c7b:1001

🇺🇸 216.25.89.155

🇺🇸 205.210.31.96

🇲🇳 203.23.199.88

🇩🇪 130.12.181.97

🇩🇪 94.16.115.121

🇷🇺 82.208.65.46

🇺🇸 66.132.186.218

🇺🇸 66.132.172.133

🇰🇷 58.224.62.29

🇮🇩 202.145.0.18

🇹🇼 180.177.80.85

🇭🇰 128.1.131.221

🇨🇳 125.35.109.214

🇨🇳 124.174.129.198

🇭🇰 122.10.115.18

🇷🇺 94.233.127.218