JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.160.224.116

52.160.224.116 was found in our database!

This IP was reported 45 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.160.224.116

Whois 52.160.224.116

IP Abuse Reports for 52.160.224.116:

This IP address has been reported a total of 45 times from 43 distinct sources. 52.160.224.116 was first reported on May 31st 2026, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇬 HighWay	2026-06-27 13:53:32 (5 days ago)	52.160.224.116 - - [27/Jun/2026:13:53:28 +0000] "CONNECT www.eastmoney.com:443 HTTP/1.1" 403 444 "-" ... show more 52.160.224.116 - - [27/Jun/2026:13:53:28 +0000] "CONNECT www.eastmoney.com:443 HTTP/1.1" 403 444 "-" "Go-http-client/1.1" 52.160.224.116 - - [27/Jun/2026:13:53:29 +0000] "CONNECT www.sse.com.cn:443 HTTP/1.1" 403 441 "-" "Go-http-client/1.1" 52.160.224.116 - - [27/Jun/2026:13:53:30 +0000] "CONNECT finance.sina.com.cn:443 HTTP/1.1" 403 446 "-" "Go-http-client/1.1" ... show less	Hacking Port Scan
🇳🇱 soverin	2026-06-22 15:27:24 (1 week ago)	Network scan on port 80	Email Spam
🇺🇸 NeverBehave	2026-06-22 14:20:12 (1 week ago)	[fail2ban] service ocserv jail	Brute-Force Web App Attack
🇺🇸 rellim.com	2026-06-22 13:13:38 (1 week ago)	Jun 22 06:13:37 alice kernel: HACK IN=enp3s0 OUT=enp1s0f1 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08 ... show more Jun 22 06:13:37 alice kernel: HACK IN=enp3s0 OUT=enp1s0f1 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08:00 SRC=52.160.224.116 DST=204.17.205.254 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=16468 DF PROTO=TCP SPT=56327 DPT=2078 WINDOW=64240 RES=0x00 SYN URGP=0 Jun 22 06:13:38 alice kernel: HACK IN=enp3s0 OUT=enp1s0f1 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08:00 SRC=52.160.224.116 DST=204.17.205.254 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=48093 DF PROTO=TCP SPT=56320 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0 Jun 22 06:13:38 alice kernel: HACK IN=enp3s0 OUT=enp1s0f1 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08:00 SRC=52.160.224.116 DST=204.17.205.254 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=62287 DF PROTO=TCP SPT=56331 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇯🇵 demonsword	2026-06-20 12:44:58 (1 week ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: www.gstatic.com:443 show less	Open Proxy Port Scan
Anonymous	2026-06-18 09:46:36 (2 weeks ago)	Multiple web server 400 error codes from same source ip	Web App Attack
Anonymous	2026-06-18 07:44:23 (2 weeks ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force
Anonymous	2026-06-18 06:59:25 (2 weeks ago)	52.160.224.116 - - [18/Jun/2026:02:59:25 -0400] "GET /.git/config HTTP/1.1" 404 454 "-" "Mozilla/5.0 ... show more 52.160.224.116 - - [18/Jun/2026:02:59:25 -0400] "GET /.git/config HTTP/1.1" 404 454 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" ... show less	Brute-Force Web App Attack SSH
🇺🇸 xmission.com	2026-06-18 06:55:00 (2 weeks ago)	Blocked by UFW (TCP on 2078) Source port: 10445 TTL: 51 Packet length: 60 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 2078) Source port: 10445 TTL: 51 Packet length: 60 TOS: 0x00 This report (for 52.160.224.116) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 Nightreaver	2026-06-18 06:37:09 (2 weeks ago)	52.160.224.116 - - [18/Jun/2026:08:37:00 0200] "GET / HTTP/1.0" 400 625 "-" "-" 52.160.224.116 - - ... show more 52.160.224.116 - - [18/Jun/2026:08:37:00 0200] "GET / HTTP/1.0" 400 625 "-" "-" 52.160.224.116 - - [18/Jun/2026:08:37:01 0200] "GET / HTTP/1.0" 400 625 "-" "-" 52.160.224.116 - - [18/Jun/2026:08:37:03 0200] "GET / HTTP/1.0" 400 625 "-" "-" 52.160.224.116 - - [18/Jun/2026:08:37:07 0200] "GET / HTTP/1.0" 400 625 "-" "-" 52.160.224.116 - - [18/Jun/2026:08:37:08 0200] "GET / HTTP/1.0" 400 625 "-" "-"[...] show less	Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-06-18 06:23:54 (2 weeks ago)	Host header is a numeric IP address. Pattern match "^ (920350-131)	Hacking Bad Web Bot
🇬🇧 Nov	2026-06-17 03:34:21 (2 weeks ago)	Unauthorized access attempt (tcp/80)	Port Scan
🇨🇦 Tanados	2026-06-17 03:33:43 (2 weeks ago)	Blocked by UFW [2078/tcp] Source port: 62466 TTL: 45 Packet length: 60 TOS: 0x00 This report was ge ... show more Blocked by UFW [2078/tcp] Source port: 62466 TTL: 45 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 andypiper	2026-06-15 01:01:01 (2 weeks ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇷🇸 Scan	2026-06-15 00:35:14 (2 weeks ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking

Showing 1 to 15 of 45 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.149.158

🇩🇪 157.230.18.133

🇺🇸 147.185.132.28

🇧🇩 103.154.158.70

🇺🇸 45.145.129.135

🇬🇧 45.133.173.201

🇻🇳 27.79.5.235

🇰🇷 211.221.196.103

🇺🇸 150.136.229.253

🇫🇮 147.185.133.76

🇮🇩 103.130.18.2

🇫🇷 92.205.213.181

🇳🇱 91.92.40.25

🇬🇧 5.226.140.114

🇨🇳 220.182.22.136

🇵🇰 203.101.186.106

🇺🇸 128.203.201.204

🇮🇳 122.180.242.27

🇺🇸 54.91.134.82

🇭🇰 47.242.105.178