JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

52.190.182.225

Activity Trending Down

Abuse Confidence Score

16% Caution

17 reports

16 reporters · latest 1 week ago

ISP: Microsoft Corporation
Usage Type: Data Center/Web Hosting/Transit
ASN: AS8075
Domain Name: microsoft.com
Country: 🇺🇸 United States of America
City: San Jose, California

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

17 from 16 distinct reporters

First reported

September 2nd 2025

Most recent report

1 week ago

Last 60 days

Top reporter locations 🇫🇷 France 1 🇭🇰 Hong Kong 1 🇳🇱 Netherlands 1

Most common categories Port Scan 2 Web App Attack 1

Old reports The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Zikmadol	2026-11-01 12:22:19 UTC · (1 week ago)	Trapline honeypot: llama.cpp API abuse. Feed: https://github.com/Zikmadol/trapline-ioc	Web App Attack
🇳🇱 tmiland	2026-11-01 11:55:56 UTC · (1 week ago)	Port Scan detected from 52.190.182.225 (US/United States/-). 11 hits in the last 257 seconds; IP: 52.190.182.225; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: 2026-11-01T12:51:37.563706+01:00 vps1 kernel: Firewall: TCP_IN Blocked* IN=eth0 OUT ... show more Port Scan detected from 52.190.182.225 (US/United States/-). 11 hits in the last 257 seconds; IP: 52.190.182.225; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: 2026-11-01T12:51:37.563706+01:00 vps1 kernel: Firewall: TCP_IN Blocked* IN=eth0 OUT= MAC=9e:3f:45:90:21:61:fe:00:00:00:01:01:08:00 SRC=52.190.182.225 DST=... LEN=40 TOS=0x00 PREC=0x00 TTL=227 ID=44009 PROTO=TCP SPT=20488 DPT=7891 WINDOW=1024 RES=0x00 SYN URGP=0 2026-11-01T12:51:45.335240+01:00 vps1 kernel: Firewall: TCP_IN Blocked IN=eth0 OUT= MAC=9e:3f:45:90:21:61:fe:00:00:00:01:01:08:00 SRC=52.190.182.225 DST=... LEN=40 TOS=0x00 PREC=0x00 TTL=234 ID=41745 PROTO=TCP SPT=20488 DPT=8005 WINDOW=1024 RES=0x00 SYN URGP=0 2026-11-01T12:52:20.274211+01:00 vps1 kernel: Firewall: TCP_IN Blocked IN=eth0 OUT= MAC=9e:3f:45:90:21:61:fe:00:00:00:01:01:08:00 SRC=52.190.182.225 DST=... LEN=40 TOS=0x00 PREC=0x00 TTL=227 ID=32416 PROTO=TCP SPT=20488 DPT=8118 WINDOW=1024 RES=0x00 SYN URGP=0 2026-11-01T12:53:34.305194+01:00 vps1 kernel: Firewall show less	Port Scan
🇭🇰 CyberFox	2026-09-21 16:46:59 UTC · (1 month ago)	443/tcp (1 or more attempts)	Port Scan
🇯🇵 demonsword	2026-07-31 10:47:35 UTC · (3 months ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: icanhazip.com:443	Open Proxy Port Scan
🇧🇷 wagnerbocchi	2026-07-27 18:59:10 UTC · (3 months ago)	2026-07-27T15:58:59.169379-03:00 dev sshd[2752730]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.190.182.225 user=root 2026-07-27T15:59:01.162088-03:00 dev sshd[2752730]: Failed password for root from 52 ... show more 2026-07-27T15:58:59.169379-03:00 dev sshd[2752730]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.190.182.225 user=root 2026-07-27T15:59:01.162088-03:00 dev sshd[2752730]: Failed password for root from 52.190.182.225 port 2061 ssh2 2026-07-27T15:59:07.073532-03:00 dev sshd[2752795]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.190.182.225 user=root 2026-07-27T15:59:09.498803-03:00 dev sshd[2752795]: Failed password for root from 52.190.182.225 port 2068 ssh2 ... show less	Brute-Force SSH
Anonymous	2026-07-11 04:18:08 UTC · (4 months ago)	Fuzzing/Looking for credentials files.	Brute-Force Web App Attack
🇬🇧 PeravixGroup	2026-06-02 07:03:45 UTC · (5 months ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud	Port Scan Bad Web Bot
🇩🇪 cloudmax	2026-06-02 06:47:31 UTC · (5 months ago)	Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnerability probing	Port Scan
🇺🇸 RAP	2026-06-02 06:08:20 UTC · (5 months ago)	2026-06-02 06:08:20 UTC Unauthorized activity to TCP port 8080. Web App	Port Scan Web App Attack
🇷🇸 Scan	2026-06-02 02:10:51 UTC · (5 months ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇯🇵 SentinalX by uzumaru	2026-05-20 08:16:25 UTC · (5 months ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: cp.cloudflare.com:80	Open Proxy Port Scan
🇯🇵 demonsword	2026-05-02 16:15:46 UTC · (6 months ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: graph.vshield.pro:443	Open Proxy Port Scan
🇬🇧 2048	2026-04-04 13:20:51 UTC · (7 months ago)	2026-04-04T14:20:47.845860+01:00 machodeer kernel: [3565667.389370] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=52.190.182.225 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=42 ID=42111 DF PROTO=TCP SPT=59328 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026- ... show more 2026-04-04T14:20:47.845860+01:00 machodeer kernel: [3565667.389370] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=52.190.182.225 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=42 ID=42111 DF PROTO=TCP SPT=59328 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-04-04T14:20:48.857782+01:00 machodeer kernel: [3565668.401365] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=52.190.182.225 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=42 ID=42112 DF PROTO=TCP SPT=59328 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-04-04T14:20:49.846863+01:00 machodeer kernel: [3565669.390251] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=52.190.182.225 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=39 ID=39870 DF PROTO=TCP SPT=59329 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 show less	Port Scan
🇺🇸 canine.tools	2026-04-01 01:42:45 UTC · (7 months ago)	[fail2ban Auto Report] {"time":"2026-03-31T21:42:44.856801608-04:00","level":"INFO","source":{"function":"github.com/TecharoHQ/anubis/lib.(Server).checkRules","file":"/Users/cadey/Code/TecharoHQ/botstopper/upstream/anubis/lib/anubis.go","line":309}, ... show more [fail2ban Auto Report] {"time":"2026-03-31T21:42:44.856801608-04:00","level":"INFO","source":{"function":"github.com/TecharoHQ/anubis/lib.(Server).checkRules","file":"/Users/cadey/Code/TecharoHQ/botstopper/upstream/anubis/lib/anubis.go","line":309},"msg":"explicit deny","subsystem":"anubis","host":"searxng.canine.tools","method":"GET","path":"/","user_agent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/136.0.7103.25 Safari/537.36","accept_language":"","priority":"u=0, i","x-forwarded-for":"52.190.182.225","x-real-ip":"52.190.182.225","host":"searxng.canine.tools","check_result":{"name":"bot/headless-chrome","rule":"DENY","weight":0}} ... show less	Bad Web Bot
🇺🇸 xmission.com	2026-03-28 13:44:15 UTC · (7 months ago)	Blocked by UFW (TCP on 9101) Source port: 55304 TTL: 115 Packet length: 40 TOS: 0x00 This report (for 52.190.182.225) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 222.222.124.164

🇨🇳 121.15.7.100

🇬🇪 94.43.131.110

🇳🇱 2a01:4020:2:b:103::631

🇺🇸 199.165.159.102

🇺🇦 195.72.146.74

🇨🇳 180.163.65.14

🇺🇸 74.249.195.210

🇨🇳 58.240.123.98

🇻🇪 38.74.244.113

🇯🇵 35.75.73.253

🇳🇱 23.176.184.152

🇦🇷 186.39.178.59

🇦🇷 179.238.45.176

🇺🇸 172.56.28.119

🇺🇸 162.252.52.185

🇦🇺 111.220.132.207

🇵🇱 91.235.124.67

🇷🇴 86.122.24.204

🇳🇱 5.2.69.85