AbuseIPDB » 52.190.183.89
52.190.183.89
This IP was reported 9 times. Confidence of
Abuse
is 15% : ?
ISP
Microsoft Corporation
Usage Type
Data Center/Web Hosting/Transit
ASN
AS8075
Domain Name
microsoft.com
Country
🇺🇸
United States of America
City
San Jose, California
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 52.190.183.89 :
This IP address has been reported a total of
9
times from
8 distinct
sources.
52.190.183.89 was first reported on
October 6th 2025 , and the most recent report was
2 weeks ago
Old Reports:
The most recent abuse report for this IP address is from
2 weeks ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇮🇹
VHosting
2026-05-28 15:00:05
(2 weeks ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇬🇧
pinguin
2026-05-28 11:08:06
(2 weeks ago)
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: LOG
Protocol: HTTP/2 (GET method)
...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: LOG
Protocol: HTTP/2 (GET method)
Endpoint: /@fs/.git/config
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇯🇵
demonsword
2026-05-01 08:12:28
(1 month ago)
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ...
show more
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: 1.1.1.1:443
show less
Open Proxy
Port Scan
🇺🇸
Rayulcifer
2026-04-06 18:10:33
(2 months ago)
52.190.183.89 - - [06/Apr/2026:13:09:53 -0500] "CONNECT h2.dstat.love:443 HTTP/1.1" 502 488 "-" "-"
...
show more
52.190.183.89 - - [06/Apr/2026:13:09:53 -0500] "CONNECT h2.dstat.love:443 HTTP/1.1" 502 488 "-" "-"
52.190.183.89 - - [06/Apr/2026:13:10:32 -0500] "CONNECT www.itemsatis.com:443 HTTP/1.1" 502 488 "-" "-"
...
show less
Open Proxy
Port Scan
Hacking
Web App Attack
SSH
🇮🇱
spd.co.il
2026-03-29 17:01:43
(2 months ago)
Web application attack detected
Hacking
Web App Attack
🇩🇪
frej
2026-03-21 02:28:13
(2 months ago)
Brute force login attempt. Auto-banned after repeated failed authentication.
Brute-Force
🇨🇭
backslash
2026-02-16 07:55:04
(3 months ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
🇩🇪
2048
2026-02-03 07:02:51
(4 months ago)
2026-02-03T08:02:48.579965+01:00 machodeer kernel: [15853.833645] [UFW BLOCK] IN=ens3 OUT= MAC=REDAC ...
show more
2026-02-03T08:02:48.579965+01:00 machodeer kernel: [15853.833645] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=52.190.183.89 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=42 ID=63472 DF PROTO=TCP SPT=47306 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0
2026-02-03T08:02:49.603929+01:00 machodeer kernel: [15854.857638] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=52.190.183.89 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=42 ID=63473 DF PROTO=TCP SPT=47306 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0
2026-02-03T08:02:51.077377+01:00 machodeer kernel: [15856.331149] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=52.190.183.89 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=41 ID=38255 DF PROTO=TCP SPT=47308 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0
show less
Port Scan
🇺🇸
Rayulcifer
2025-10-06 13:24:52
(8 months ago)
52.190.183.89 - - [06/Oct/2025:08:24:50 -0500] "CONNECT shopbacgau.com:443:443 HTTP/1.1" 400 492 "-" ...
show more
52.190.183.89 - - [06/Oct/2025:08:24:50 -0500] "CONNECT shopbacgau.com:443:443 HTTP/1.1" 400 492 "-" "-"
52.190.183.89 - - [06/Oct/2025:08:24:51 -0500] "CONNECT shopbacgau.com:443:443 HTTP/1.1" 400 492 "-" "-"
...
show less
Open Proxy
Port Scan
Hacking
Web App Attack
SSH
Showing 1 to
9
of 9 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: