JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.180.139.148

52.180.139.148 was found in our database!

This IP was reported 65 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Des Moines, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.180.139.148

Whois 52.180.139.148

IP Abuse Reports for 52.180.139.148:

This IP address has been reported a total of 65 times from 48 distinct sources. 52.180.139.148 was first reported on October 12th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 polycoda	2026-10-16 19:56:58 (1 hour ago)	AutoBlock: 📡 Port Scan (Non Decay-Based)	Port Scan
🇷🇺 dnsbd.tech	2026-10-16 19:02:01 (2 hours ago)	nftables: Port scan (TCP:1583) [srv1]	Port Scan Hacking
🇩🇪 XYCoderXY	2026-10-16 18:06:22 (3 hours ago)	Port scan: unsolicited TCP connection (handshake completed) to a decoy port with no production servi ... show more Port scan: unsolicited TCP connection (handshake completed) to a decoy port with no production service at 2026-10-16 18:06:22 UTC. Destination port probed: tcp/3389 (RDP). Source blocked. - Lumerux Defense (lumerux.com), automated report. Contact: [email protected] show less	Port Scan
🇺🇸 RAP	2026-10-16 14:05:11 (7 hours ago)	2026-10-16 14:05:11 UTC Unauthorized activity to TCP port 5900.	Port Scan
🇺🇸 xmission.com	2026-10-16 09:35:36 (11 hours ago)	Blocked by UFW (TCP on 7222) Source port: 36122 TTL: 51 Packet length: 52 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 7222) Source port: 36122 TTL: 51 Packet length: 52 TOS: 0x00 This report (for 52.180.139.148) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 Admins@FBN	2026-10-16 07:00:01 (14 hours ago)	FW-PortScan: Traffic Blocked srcport=53432 dstport=8530	Port Scan
🇺🇸 xmission.com	2026-10-16 06:09:29 (15 hours ago)	Blocked by UFW (TCP on 4840) Source port: 54008 TTL: 51 Packet length: 52 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 4840) Source port: 54008 TTL: 51 Packet length: 52 TOS: 0x00 This report (for 52.180.139.148) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-10-16 04:50:32 (16 hours ago)	Blocked by UFW (TCP on 115) Source port: 57772 TTL: 51 Packet length: 52 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 115) Source port: 57772 TTL: 51 Packet length: 52 TOS: 0x00 This report (for 52.180.139.148) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇸🇰 Schomburg	2026-10-16 03:15:08 (17 hours ago)	Automatic report from SCH firewall log. https://github.com/Ragnarocek/Windows_FW_AbuseIPDB_Report ... show more Automatic report from SCH firewall log. https://github.com/Ragnarocek/Windows_FW_AbuseIPDB_Reporting ID: kqBd7zJOZpI0waRPLFPML3t1uwuz66uK show less	Port Scan Hacking Brute-Force
🇩🇪 EinfxchFinn	2026-10-16 01:57:15 (19 hours ago)	Unauthorized connection attempt to port 2323 from 52.180.139.148	Port Scan
🇩🇪 chillcog.com	2026-10-15 20:16:27 (1 day ago)	Blocked by on honeypot [5672/tcp] \| SPT: 34105 \| TTL: 38 \| LEN: 52 \| TOS: 0x00 • Reported by: abuse. ... show more Blocked by on honeypot [5672/tcp] \| SPT: 34105 \| TTL: 38 \| LEN: 52 \| TOS: 0x00 • Reported by: abuse.terraforge.fun show less	Port Scan
🇩🇪 David Ferneding	2026-10-15 18:59:22 (1 day ago)	Blocked by UFW (TCP on 9000) Source port: 47180 TTL: 54 Packet length: 52 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 9000) Source port: 47180 TTL: 54 Packet length: 52 TOS: 0x00 This report (for 52.180.139.148) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇦🇹 Pingger Shikkoken	2026-10-15 17:36:01 (1 day ago)	2026-10-15T17:36:01+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6 ... show more 2026-10-15T17:36:01+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=52.180.139.148 DST=152.53.50.28 LEN=52 TOS=0x00 PREC=0x00 TTL=39 ID=46243 PROTO=TCP SPT=51857 DPT=2077 WINDOW=65535 RES=0x00 SYN URGP=0 show less	Hacking
🇨🇦 Tanados	2026-10-15 05:50:15 (1 day ago)	Blocked by UFW [631/tcp] Source port: 58266 TTL: 45 Packet length: 52 TOS: 0x00 This report was gen ... show more Blocked by UFW [631/tcp] Source port: 58266 TTL: 45 Packet length: 52 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇧🇪 sid3windr	2026-10-15 05:48:37 (1 day ago)	GET /hudson (Tarpitted for 1d15h8m29s, wasted 8.06MB)	Web App Attack

Showing 1 to 15 of 65 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 193.163.125.157

🇺🇸 162.216.150.18

🇮🇳 157.20.228.20

🇨🇳 106.59.139.245

🇱🇹 77.90.185.78

🇨🇴 201.233.130.118

🇧🇷 187.50.194.182

🇹🇷 176.236.127.114

🇩🇪 165.227.171.81

🇺🇸 143.42.188.111

🇺🇸 134.209.51.221

🇺🇸 104.237.132.58

🇫🇷 85.217.140.24

🇺🇸 70.182.26.124

🇺🇸 66.132.172.237

🇺🇸 44.204.80.36

🇮🇹 34.154.120.11

🇺🇸 20.14.75.205

🇬🇧 194.50.235.131

🇮🇳 103.97.215.11