JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.161.82.100

52.161.82.100 was found in our database!

This IP was reported 60 times. Confidence of Abuse is 54%: ?

54%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Cheyenne, Wyoming

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.161.82.100

Whois 52.161.82.100

IP Abuse Reports for 52.161.82.100:

This IP address has been reported a total of 60 times from 26 distinct sources. 52.161.82.100 was first reported on October 6th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ghostwarriors	2026-06-24 23:20:25 (2 days ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇧🇬 HighWay	2026-06-24 23:08:31 (2 days ago)	52.161.82.100 - - [24/Jun/2026:23:08:29 +0000] "GET http://speedtest.tele2.net/1MB.zip HTTP/1.1" 403 ... show more 52.161.82.100 - - [24/Jun/2026:23:08:29 +0000] "GET http://speedtest.tele2.net/1MB.zip HTTP/1.1" 403 464 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 52.161.82.100 - - [24/Jun/2026:23:08:30 +0000] "GET http://cachefly.cachefly.net/200mb.test HTTP/1.1" 403 466 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 52.161.82.100 - - [24/Jun/2026:23:08:30 +0000] "GET http://ipv4.download.thinkbroadband.com/1MB.zip HTTP/1.1" 403 477 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" ... show less	Hacking Port Scan
🇺🇸 Rayulcifer	2026-06-24 23:03:29 (2 days ago)	52.161.82.100 - - [24/Jun/2026:18:03:27 -0500] "GET http://cachefly.cachefly.net/200mb.test HTTP/1.1 ... show more 52.161.82.100 - - [24/Jun/2026:18:03:27 -0500] "GET http://cachefly.cachefly.net/200mb.test HTTP/1.1" 403 363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 52.161.82.100 - - [24/Jun/2026:18:03:27 -0500] "GET http://speedtest.tele2.net/1MB.zip HTTP/1.1" 403 363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 52.161.82.100 - - [24/Jun/2026:18:03:28 -0500] "GET http://ipv4.download.thinkbroadband.com/1MB.zip HTTP/1.1" 403 363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 52.161.82.100 - - [24/Jun/2026:18:03:28 -0500] "CONNECT speed.cloudflare.com:443 HTTP/1.1" 403 344 "-" "-" 52.161.82.100 - - [24/Jun/2026:18:03:28 -0500] "CONNECT speed.hetzner.de:443 HTTP/1.1" 403 344 "-" "-" ... show less	Open Proxy Port Scan Hacking Web App Attack SSH
🇺🇸 xmission.com	2026-06-11 08:34:15 (2 weeks ago)	Blocked by UFW (TCP on 2095) Source port: 61504 TTL: 52 Packet length: 60 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 2095) Source port: 61504 TTL: 52 Packet length: 60 TOS: 0x00 This report (for 52.161.82.100) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇳🇱 debestelapp	2026-06-02 06:39:24 (3 weeks ago)		Web App Attack
🇺🇸 sumnone	2026-06-02 05:26:47 (3 weeks ago)	Port probing on unauthorized port 2087	Port Scan Hacking Exploited Host
Anonymous	2026-06-02 05:18:06 (3 weeks ago)	Unauthorized connection	Port Scan Hacking
🇺🇸 TPI-Abuse	2026-06-02 04:35:17 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 52.161.82.100 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 52.161.82.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 00:35:10.754289 2026] [security2:error] [pid 1996:tid 1996] [client 52.161.82.100:62594] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.138"] [uri "/.env"] [unique_id "ah5dfpVtAJzm1V6gY6ibmQAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 wiredalter	2026-06-02 02:55:30 (3 weeks ago)	Blocked by UFW on dVPS [2083/tcp] Source Port: 62503 TTL: 43 Packet Length: 60 TOS: 0x00 Analyzed b ... show more Blocked by UFW on dVPS [2083/tcp] Source Port: 62503 TTL: 43 Packet Length: 60 TOS: 0x00 Analyzed by https://ip.wiredalter.com show less	Port Scan Brute-Force
🇺🇸 MPL	2026-06-02 02:52:03 (3 weeks ago)	tcp port scan (3 or more attempts)	Port Scan
🇺🇸 MPL	2026-06-02 02:52:03 (3 weeks ago)	tcp port scan (19 or more attempts)	Port Scan
🇫🇷 masterguru	2026-06-02 02:43:31 (3 weeks ago)	Host header is a numeric IP address. Pattern match "^ (920350-131)	Hacking Bad Web Bot
🇷🇸 Scan	2026-06-02 02:07:18 (3 weeks ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇺🇸 NeverBehave	2026-06-02 01:32:19 (3 weeks ago)	[fail2ban] service ocserv jail	Brute-Force Web App Attack
🇺🇸 MPL	2026-05-31 19:54:37 (3 weeks ago)	tcp/8848	Port Scan

Showing 1 to 15 of 60 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 150.107.36.236

🇮🇳 103.206.97.128

🇳🇱 194.50.16.253

🇷🇺 193.233.63.191

🇺🇸 192.227.240.33

🇻🇪 154.59.56.135

🇳🇬 102.140.97.134

🇷🇺 92.126.223.175

🇲🇾 49.124.152.218

🇺🇸 20.65.194.57

🇮🇳 157.49.152.125

🇸🇬 118.194.234.29

🇨🇳 114.254.1.141

🇻🇳 58.186.20.143

🇧🇬 5.188.206.66

🇺🇸 165.227.209.27

🇦🇪 94.207.29.159

🇺🇸 86.111.187.163

🇫🇷 85.217.140.35

🇺🇸 66.132.172.235