JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.190.182.224

52.190.182.224 was found in our database!

This IP was reported 92 times. Confidence of Abuse is 78%: ?

78%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.190.182.224

Whois 52.190.182.224

IP Abuse Reports for 52.190.182.224:

This IP address has been reported a total of 92 times from 57 distinct sources. 52.190.182.224 was first reported on September 14th 2025, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 cloudmax	2026-06-14 02:50:37 (2 hours ago)	Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnera ... show more Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnerability probing show less	Port Scan
🇧🇾 lns.bz	2026-06-14 02:46:44 (2 hours ago)	Too many 404 requests [BY]	Web App Attack
🇷🇸 Scan	2026-06-14 00:40:33 (4 hours ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇹🇼 ip4.tw	2026-06-13 23:14:02 (6 hours ago)	Malicious web scan	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-06-13 21:37:38 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 52.190.182.224 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 52.190.182.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 17:37:34.424400 2026] [security2:error] [pid 23354:tid 23354] [client 52.190.182.224:44034] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.110"] [uri "/.git/HEAD"] [unique_id "ai3Nnl36VHbrREx65VDNHQAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-13 15:48:50 (13 hours ago)	(mod_security) mod_security (id:210492) triggered by 52.190.182.224 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 52.190.182.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 11:48:46.787893 2026] [security2:error] [pid 13367:tid 13367] [client 52.190.182.224:53974] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.151.17"] [uri "/.git/HEAD"] [unique_id "ai173tgr01mVqnj5dJ_P8gAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 MPL	2026-06-13 15:44:29 (13 hours ago)	tcp port scan (8 or more attempts)	Port Scan
🇩🇪 Nightreaver	2026-06-13 14:55:52 (14 hours ago)	52.190.182.224 - - [13/Jun/2026:16:55:47 0200] "GET / HTTP/1.0" 400 625 "-" "-" 52.190.182.224 - - ... show more 52.190.182.224 - - [13/Jun/2026:16:55:47 0200] "GET / HTTP/1.0" 400 625 "-" "-" 52.190.182.224 - - [13/Jun/2026:16:55:48 0200] "GET / HTTP/1.0" 400 625 "-" "-" 52.190.182.224 - - [13/Jun/2026:16:55:50 0200] "GET / HTTP/1.0" 400 625 "-" "-" 52.190.182.224 - - [13/Jun/2026:16:55:51 0200] "GET / HTTP/1.0" 400 625 "-" "-" 52.190.182.224 - - [13/Jun/2026:16:55:52 0200] "GET / HTTP/1.0" 400 625 "-" "-"[...] show less	Bad Web Bot Web App Attack
🇩🇪 Blexyel	2026-06-13 14:47:23 (14 hours ago)	52.190.182.224 - - [13/Jun/2026:16:47:22 +0200] "GET /.git/config HTTP/1.1" 301 162 "-" "Mozilla/5.0 ... show more 52.190.182.224 - - [13/Jun/2026:16:47:22 +0200] "GET /.git/config HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" ... show less	Brute-Force Web App Attack
🇫🇷 dynamix	2026-06-13 12:49:43 (16 hours ago)	Multiple WAF Violations	Web App Attack
🇬🇧 Apache	2026-06-13 12:39:03 (16 hours ago)	(mod_security) mod_security (id:210492) triggered by 52.190.182.224 (US/United States/-): 5 in the l ... show more (mod_security) mod_security (id:210492) triggered by 52.190.182.224 (US/United States/-): 5 in the last 300 secs show less	Brute-Force Web App Attack
🇹🇼 kk_it_man	2026-06-13 12:10:11 (17 hours ago)		Port Scan
Anonymous	2026-05-23 13:40:36 (3 weeks ago)	(PERMBLOCK) 52.190.182.224 (US/United States/-) has had more than 4 temp blocks in the last 86400 se ... show more (PERMBLOCK) 52.190.182.224 (US/United States/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Port Scan
Anonymous	2026-05-23 13:15:01 (3 weeks ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇩🇪 sigurg	2026-05-23 12:52:06 (3 weeks ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking

Showing 1 to 15 of 92 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 185.242.3.195

🇫🇮 147.185.133.117

🇺🇸 147.185.132.128

🇺🇸 107.172.132.194

🇭🇰 34.92.190.164

🇳🇱 204.76.203.206

🇧🇷 201.18.68.42

🇷🇺 193.106.3.145

🇸🇻 186.33.24.150

🇦🇷 181.23.34.184

🇺🇸 157.254.194.78

🇧🇬 79.124.49.226

🇺🇸 66.132.172.57

🇺🇸 40.119.43.103

🇧🇪 35.187.29.111

🇰🇷 34.50.45.212

🇺🇸 20.85.246.45

🇨🇳 203.2.114.29

🇺🇸 172.96.182.111

🇺🇸 165.154.182.213