JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.190.183.82

52.190.183.82 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 75%: ?

75%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.190.183.82

Whois 52.190.183.82

IP Abuse Reports for 52.190.183.82:

This IP address has been reported a total of 22 times from 18 distinct sources. 52.190.183.82 was first reported on July 19th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ValtonTahiri	2026-06-04 06:31:14 (1 week ago)	UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ... show more UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=52.190.183.82; proto=TCP; source_port=58195; target_port=8848; flags=ACK,RST show less	Port Scan
🇧🇪 boxed-it	2026-06-03 06:25:23 (1 week ago)	GET /.git/HEAD (Tarpitted for , wasted 120B)	Web App Attack
🇹🇼 kk_it_man	2026-06-03 06:00:12 (1 week ago)		Port Scan
🇺🇸 TPI-Abuse	2026-06-03 05:34:20 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 52.190.183.82 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 52.190.183.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 01:34:13.986900 2026] [security2:error] [pid 25643:tid 25643] [client 52.190.183.82:12199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.43"] [uri "/.git/config"] [unique_id "ah-81YpsINZA2PKw2IQf0wAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 mediarama.com	2026-06-03 05:14:20 (1 week ago)	Banned by Fail2Ban	Web App Attack
🇺🇸 SuperCores Hosting	2026-06-03 05:09:50 (1 week ago)	[2026-06-03 05:09:50.883635] TELNET/8080 Unautorized connection, Suspicious Mirai Botnet.	IoT Targeted Brute-Force Hacking Port Scan DDoS Attack
🇸🇰 EVISION	2026-06-03 05:00:58 (1 week ago)	Automatic report from EV firewall log. https://github.com/Ragnarocek/Windows_FW_AbuseIPDB_Reporti ... show more Automatic report from EV firewall log. https://github.com/Ragnarocek/Windows_FW_AbuseIPDB_Reporting ID: 02ZovEhaSK5PAp4coRxKcJjTyKJTimvF show less	Port Scan Hacking Brute-Force
🇹🇷 SeczarSecureOps	2026-06-03 04:47:31 (1 week ago)	Auto-blocked by Seczar SecureOps — Port Scan Detection (6 events in 10min) at 2026-06-03 04:47	Port Scan
🇺🇸 xmission.com	2026-06-03 03:39:34 (1 week ago)	Blocked by UFW (TCP on 2087) Source port: 11660 TTL: 52 Packet length: 60 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 2087) Source port: 11660 TTL: 52 Packet length: 60 TOS: 0x00 This report (for 52.190.183.82) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 Justin F. \| AS204464	2026-06-03 03:16:38 (1 week ago)	Honeypot [nx-infrastructure]: Empty payload (likely service probe); 2083 [1], 2082 [1] TCP Reported ... show more Honeypot [nx-infrastructure]: Empty payload (likely service probe); 2083 [1], 2082 [1] TCP Reported by: Justin F. show less	Port Scan
🇦🇺 gregoo23	2026-06-03 03:11:17 (1 week ago)	52.190.183.82 - - [03/Jun/2026:13:11:11 +1000] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (W ... show more 52.190.183.82 - - [03/Jun/2026:13:11:11 +1000] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" 52.190.183.82 - - [03/Jun/2026:13:11:14 +1000] "GET /.env.production HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Mobile Safari/537.36" 52.190.183.82 - - [03/Jun/2026:13:11:15 +1000] "GET /.env.backup HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
Anonymous	2026-06-03 03:07:08 (1 week ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇬🇧 PeravixGroup	2026-06-03 02:52:33 (1 week ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇮🇱 spd.co.il	2026-05-22 16:03:04 (2 weeks ago)	Web application attack detected	Hacking Web App Attack
🇩🇪 big-cloud.nl	2026-05-20 20:17:34 (3 weeks ago)	Try to access /config/.env	Web App Attack

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇴 2.57.121.112

🇲🇽 187.191.48.5

🇺🇸 162.216.150.74

🇸🇾 91.144.21.210

🇺🇸 68.154.119.216

🇺🇸 20.118.233.215

🇺🇸 20.12.231.72

🇧🇷 187.58.66.231

🇧🇴 181.188.172.6

🇵🇱 87.251.64.147

🇰🇷 59.24.133.197

🇸🇨 45.194.67.130

🇮🇩 43.249.140.69

🇬🇧 35.203.210.234

🇺🇸 207.90.244.19

🇺🇸 205.185.127.50

🇺🇿 198.163.195.119

🇧🇬 193.24.211.107

🇲🇽 186.96.145.241

🇰🇷 175.207.197.171