JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.188.86.152

52.188.86.152 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 28%: ?

28%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Dulles Town Center, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.188.86.152

Whois 52.188.86.152

IP Abuse Reports for 52.188.86.152:

This IP address has been reported a total of 25 times from 19 distinct sources. 52.188.86.152 was first reported on May 22nd 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 schematics.cc	2026-09-18 15:42:25 (2 days ago)	Blocked by on honeypot2 [443/tcp] \| SPT: 8264 \| TTL: 114 \| LEN: 40 \| TOS: 0x00 • Reported by: abuse. ... show more Blocked by on honeypot2 [443/tcp] \| SPT: 8264 \| TTL: 114 \| LEN: 40 \| TOS: 0x00 • Reported by: abuse.terraforge.fun show less	Port Scan
🇳🇱 Ilop	2026-09-18 15:30:28 (2 days ago)	[v6-22] Firewall dropped 3 unsolicited packet(s) proto=tcp to port(s) 443 from 52.188.86.152 — WAN s ... show more [v6-22] Firewall dropped 3 unsolicited packet(s) proto=tcp to port(s) 443 from 52.188.86.152 — WAN scan (automated sensor) show less	Port Scan
🇺🇸 www.winos.me	2026-09-18 15:18:29 (2 days ago)	Shield: Layer4 Port 9 Trap	Port Scan Hacking
Anonymous	2026-09-04 08:04:41 (2 weeks ago)		DNS Compromise DDoS Attack
🇯🇵 demonsword	2026-07-11 08:41:51 (2 months ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: api.binance.com:443 show less	Open Proxy Port Scan
🇺🇸 Axel	2026-06-16 15:15:31 (3 months ago)	Blocked by UFW on MVI [2078/tcp] \| SPT: 32208 \| TTL: 47 \| LEN: 60 \| TOS: 0x00 • Reported by: github. ... show more Blocked by UFW on MVI [2078/tcp] \| SPT: 32208 \| TTL: 47 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2026-06-16 14:09:15 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 52.188.86.152 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 52.188.86.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 10:09:11.838520 2026] [security2:error] [pid 32313:tid 32313] [client 52.188.86.152:32530] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.19"] [uri "/.git/HEAD"] [unique_id "ajFZBzWhzXbuns8hLqLQeAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 D3monite	2026-06-16 13:59:15 (3 months ago)	Attempted Brute Force (whostmgrd)	Brute-Force
🇩🇪 ISPLtd	2026-06-16 13:15:00 (3 months ago)	Jun 16 10:14:59 52.188.86.152 TCP SPT=32517 DPT=2078 SYN Jun 16 10:15:00 52.188.86.152 TCP SPT=32524 ... show more Jun 16 10:14:59 52.188.86.152 TCP SPT=32517 DPT=2078 SYN Jun 16 10:15:00 52.188.86.152 TCP SPT=32524 DPT=2096 SYN Jun 16 10:15:00 52.188.86.152 TCP SPT=32533 DPT=2087 ... show less	Port Scan
🇺🇸 masterguru	2026-06-16 12:17:27 (3 months ago)	Host header is a numeric IP address. Pattern match "^ (920350-147)	Hacking Bad Web Bot
🇺🇸 MPL	2026-06-16 12:02:00 (3 months ago)	tcp port scan (10 or more attempts)	Port Scan
🇩🇪 bescared	2026-06-16 11:01:01 (3 months ago)	F2B - Malicious activity detected. Excessive port scans. -8ff06ede-	Port Scan
🇺🇸 Axel	2026-06-15 09:15:02 (3 months ago)	Blocked by UFW on MVI [2078/tcp] \| SPT: 7367 \| TTL: 48 \| LEN: 60 \| TOS: 0x00 • Reported by: github.c ... show more Blocked by UFW on MVI [2078/tcp] \| SPT: 7367 \| TTL: 48 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-06-15 07:22:14 (3 months ago)	Port Scan Attack.	Port Scan
🇺🇸 Rayulcifer	2026-06-12 19:38:19 (3 months ago)	52.188.86.152 - - [12/Jun/2026:14:38:19 -0500] "CONNECT www.sse.com.cn:443 HTTP/1.1" 403 344 "-" "Go ... show more 52.188.86.152 - - [12/Jun/2026:14:38:19 -0500] "CONNECT www.sse.com.cn:443 HTTP/1.1" 403 344 "-" "Go-http-client/1.1" 52.188.86.152 - - [12/Jun/2026:14:38:19 -0500] "CONNECT finance.sina.com.cn:443 HTTP/1.1" 403 344 "-" "Go-http-client/1.1" 52.188.86.152 - - [12/Jun/2026:14:38:19 -0500] "CONNECT web.ifzq.gtimg.cn:443 HTTP/1.1" 403 344 "-" "Go-http-client/1.1" 52.188.86.152 - - [12/Jun/2026:14:38:19 -0500] "CONNECT proxy.finance.qq.com:443 HTTP/1.1" 403 344 "-" "Go-http-client/1.1" 52.188.86.152 - - [12/Jun/2026:14:38:19 -0500] "\x16\x03\x01\x05\xd4\x01" 400 392 "-" "-" ... show less	Open Proxy Port Scan Hacking Web App Attack SSH

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 216.48.181.193

🇲🇦 196.117.91.29

🇩🇪 69.5.169.229

🇩🇪 69.5.169.207

🇧🇪 34.38.33.72

🇺🇸 2604:a880:400:d1:0:5:2a6:1

🇩🇪 194.88.98.123

🇺🇸 172.203.228.114

🇪🇸 172.68.135.216

🇺🇸 137.184.188.41

🇺🇸 136.116.62.127

🇷🇴 80.94.92.55

🇩🇪 69.5.169.163

🇩🇪 69.5.169.129

🇺🇸 52.167.144.231

🇰🇷 14.36.5.203

🇺🇸 104.196.182.89

🇺🇸 66.132.172.32

🇲🇾 49.124.151.70

🇮🇩 41.216.177.55