JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.190.140.107

52.190.140.107 was found in our database!

This IP was reported 124 times. Confidence of Abuse is 36%: ?

36%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.190.140.107

Whois 52.190.140.107

IP Abuse Reports for 52.190.140.107:

This IP address has been reported a total of 124 times from 55 distinct sources. 52.190.140.107 was first reported on December 30th 2025, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇸 Scan	2026-06-30 01:20:48 (4 hours ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
Anonymous	2026-06-30 01:01:27 (4 hours ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇺🇸 xmission.com	2026-06-02 05:01:54 (4 weeks ago)	Blocked by UFW (TCP on 2083) Source port: 46016 TTL: 51 Packet length: 60 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 2083) Source port: 46016 TTL: 51 Packet length: 60 TOS: 0x00 This report (for 52.190.140.107) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2026-06-02 04:50:50 (4 weeks ago)	tcp port scan (8 or more attempts)	Port Scan
🇹🇭 Sawasdee	2026-06-02 03:19:36 (4 weeks ago)	Port Scan ...	Port Scan
🇫🇮 [email protected]	2026-06-02 03:07:27 (4 weeks ago)	Attack attempt against Interwebbi servers; Port Scan detected from 52.190.140.107 (US/United State ... show more Attack attempt against Interwebbi servers; Port Scan detected from 52.190.140.107 (US/United States/-). 5 hits in the last 420 seconds; IP: 52.190.140.107; Ports: *; Direction: 0; Trigger: PS_LIMIT; show less	Brute-Force
🇷🇸 Scan	2026-06-02 00:08:46 (4 weeks ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇺🇸 MPL	2026-06-01 23:44:25 (4 weeks ago)	tcp/multiple (8 or more attempts)	Port Scan
🇬🇧 PeravixGroup	2026-06-01 23:35:26 (4 weeks ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇩🇪 Bedios GmbH	2026-04-08 04:39:18 (2 months ago)	Login credentials theft attempt	Hacking
🇺🇸 TPI-Abuse	2026-04-08 03:55:08 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 52.190.140.107 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 52.190.140.107 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 07 23:54:59.733667 2026] [security2:error] [pid 2193554:tid 2193554] [client 52.190.140.107:56188] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "legacy-insight.com"] [uri "/.git/config"] [unique_id "adXRk1i2zBsE22qX80ACpQAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 ipoac.nl	2026-04-08 03:16:52 (2 months ago)	ipoac.nl:443 52.190.140.107 - - [08/Apr/2026:05:16:50 +0200] ipoac.nl "GET /.git/config HTTP/2.0" 40 ... show more ipoac.nl:443 52.190.140.107 - - [08/Apr/2026:05:16:50 +0200] ipoac.nl "GET /.git/config HTTP/2.0" 404 2927 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" show less	Bad Web Bot
🇧🇪 cmbplf	2026-04-08 01:30:43 (2 months ago)	212 requests with url.path /auth.json 156 requests with url.path /.git/config 116 requests with ... show more 212 requests with url.path /auth.json 156 requests with url.path /.git/config 116 requests with url.path .netrc 116 requests with url.path .npmrc 116 requests with url.path .git-credentials 106 requests with url.path .gitconfig 106 requests with url.path *.yarnrc show less	Brute-Force Bad Web Bot
🇬🇧 Smish	2026-04-08 01:06:18 (2 months ago)	HONEYPOT HIT --> Fail2ban time=1775610377 log=2026-04-08T02:06:17+01:00 ip=52.190.140.107 host=as210 ... show more HONEYPOT HIT --> Fail2ban time=1775610377 log=2026-04-08T02:06:17+01:00 ip=52.190.140.107 host=as210667.net method=GET uri="/.git/config" status=404 ua="Mozilla/5.0 (iPhone; CPU iPhone OS 17_2_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Mobile/15E148 Safari/604.1" ref="https://news.ycombinator.com/" rid=0f87df1db506891945073af03c771a83 show less	Web App Attack
🇺🇸 TPI-Abuse	2026-04-08 00:20:47 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 52.190.140.107 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 52.190.140.107 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 07 20:20:39.821054 2026] [security2:error] [pid 1973600:tid 1973600] [client 52.190.140.107:56054] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "4windsmedia.com"] [uri "/.git/config"] [unique_id "adWfV4xKq33Ef_XInDdeJwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 124 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇮 2a01:4f9:4b:3965::2

🇨🇳 219.155.209.88

🇧🇷 200.155.66.2

🇰🇪 197.248.207.139

🇺🇸 193.3.53.8

🇮🇳 103.168.57.31

🇫🇷 91.231.89.118

🇷🇴 185.100.87.136

🇺🇸 107.173.225.26

🇺🇸 104.23.248.43

🇹🇯 95.142.87.172

🇳🇱 45.74.7.108

🇷🇴 45.43.166.127

🇰🇷 175.212.173.17

🇧🇷 170.238.160.191

🇺🇸 147.185.132.63

🇺🇸 147.182.183.153

🇨🇦 67.71.55.209

🇺🇸 66.240.236.116

🇬🇧 2a06:4880:2000::27