52.161.59.2
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- Microsoft Corporation
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS8075
- Domain Name
- microsoft.com
- Country
- 🇺🇸 United States of America
- City
- Cheyenne, Wyoming
No reports in the last 60 days
52.161.59.2 has been reported 20 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
20 from
17 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇩🇪 xavier-momain.eu |
CrowdSec detection: ssh:bruteforce
|
Brute-Force SSH | |
| 🇹🇷 neron |
CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall
|
Hacking Web App Attack | |
| 🇹🇷 neron |
CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall
|
Hacking Web App Attack | |
| 🇺🇸 Axel |
Blocked by UFW on LAXHH [2083/tcp] | SPT: 18544 | TTL: 49 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇺🇸 aks4226 |
Bot search, attacking common web applications.
|
Web App Attack | |
| 🇹🇷 neron |
CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall
|
Hacking Web App Attack | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| Anonymous |
denied traffic to a non-approved destination port. destination port 2086.
|
Port Scan | |
| 🇺🇸 Cyber Crusader |
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
|
Port Scan Hacking Brute-Force | |
| 🇩🇪 XICTRON |
ModSecurity rule violation detected by Fail2Ban
|
Web App Attack | |
| 🇯🇵 SentinalX by uzumaru |
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: www.eastmoney.com:443
|
Open Proxy Port Scan | |
| 🇺🇸 MPL |
tcp port scan (15 or more attempts)
|
Port Scan | |
| 🇭🇰 mutebot.net |
SRC=52.161.59.2, PROTO=TCP, SPT=53434, DPT=8080
|
Port Scan | |
| 🇺🇸 OceanTreasure |
tcp/80; Spring Boot Actuator exposure attempt: "GET /actuator/env" @ 2026-06-10T02:50:51Z [azure]
|
Web App Attack | |
| 🇬🇧 PeravixGroup |
Imunify360 WAF block (graylisted)
|
Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown