JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.238.26.243

52.238.26.243 was found in our database!

This IP was reported 231 times. Confidence of Abuse is 43%: ?

43%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.238.26.243

Whois 52.238.26.243

IP Abuse Reports for 52.238.26.243:

This IP address has been reported a total of 231 times from 159 distinct sources. 52.238.26.243 was first reported on September 10th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 rjdefrancisco	2026-06-12 07:06:19 (2 days ago)	Unwanted traffic detected by honeypot on June 11, 2026: brute force and hacking attacks (1 over teln ... show more Unwanted traffic detected by honeypot on June 11, 2026: brute force and hacking attacks (1 over telnet). show less	Port Scan Brute-Force SSH
🇺🇸 LSPCCU	2026-06-11 20:59:51 (2 days ago)	TSEC Honeypot Network report. Threat score: 70/100. Categories: Hacking. Honeypot: ssh-telnet, cowri ... show more TSEC Honeypot Network report. Threat score: 70/100. Categories: Hacking. Honeypot: ssh-telnet, cowrie. Context: 52. show less	Hacking
🇺🇸 ShadowWhisperer	2026-06-11 20:58:36 (2 days ago)	TELNET port scan / probe. possible nmap scan	Port Scan IoT Targeted
🇩🇪 dispaisyenterprises	2026-06-11 20:51:33 (2 days ago)	Honeypot [fra-de-honeypot]: Brute-force attack detected on 23/TELNET • Credential used: GET / HTTP/1 ... show more Honeypot [fra-de-honeypot]: Brute-force attack detected on 23/TELNET • Credential used: GET / HTTP/1.1:Host: [SOME-IP] • Number of login attempts: 1 Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking
🇩🇪 anycast_ac	2026-06-11 20:42:25 (2 days ago)	[mirai-detector honeypot] Inbound attack against our honeypot on tcp/23 (telnet). Tried credentials: ... show more [mirai-detector honeypot] Inbound attack against our honeypot on tcp/23 (telnet). Tried credentials: b'GET / HTTP/1.1':b'Host: 87.120.93.156' show less	DDoS Attack IoT Targeted Brute-Force
🇩🇪 licen777	2026-06-11 20:41:12 (2 days ago)	Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-06-11T20:40:53Z and 2026-06-1 ... show more Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-06-11T20:40:53Z and 2026-06-11T20:41:12Z show less	Brute-Force SSH
🇯🇵 mkaraki	2026-05-09 06:47:19 (1 month ago)	1778309234 # Service_probe # SIGNATURE_SEND # source_ip:52.238.26.243 # dst_port:1192 ...	Port Scan
🇨🇳 ThreatBook.io	2026-04-23 22:26:17 (1 month ago)	ThreatBook Intelligence: Spam,Info more details on https://threatbook.io/ip/52.238.26.243 2026-04-23 ... show more ThreatBook Intelligence: Spam,Info more details on https://threatbook.io/ip/52.238.26.243 2026-04-23 20:13:28 http://httpbin.org/ip 2026-04-23 20:13:28 http://httpbin.org/get show less	Web App Attack
🇳🇱 Selckie	2026-04-03 07:26:41 (2 months ago)	fail2ban: NGINX unusual impact	Web App Attack
🇺🇸 Rayulcifer	2026-03-31 21:12:40 (2 months ago)	52.238.26.243 - - [31/Mar/2026:16:12:08 -0500] "CONNECT www.betataksi.com:443:443 HTTP/1.1" 400 392 ... show more 52.238.26.243 - - [31/Mar/2026:16:12:08 -0500] "CONNECT www.betataksi.com:443:443 HTTP/1.1" 400 392 "-" "-" 52.238.26.243 - - [31/Mar/2026:16:12:10 -0500] "CONNECT www.betataksi.com:443:443 HTTP/1.1" 400 392 "-" "-" ... show less	Open Proxy Port Scan Hacking Web App Attack SSH
🇹🇷 0xi	2026-03-12 11:15:46 (3 months ago)	SSH brute-force attack detected (70 attempts). Targeted ports: 22. Triggered sensors: P0f, Cowrie, S ... show more SSH brute-force attack detected (70 attempts). Targeted ports: 22. Triggered sensors: P0f, Cowrie, Suricata, Fatt. Post-exploitation commands were executed. Observed via distributed honeypot network. show less	Brute-Force SSH
🇩🇪 2048	2026-03-07 17:16:11 (3 months ago)	2026-03-07T18:16:07.886048+01:00 machodeer kernel: [1160584.925123] [UFW BLOCK] IN=ens3 OUT= MAC=RED ... show more 2026-03-07T18:16:07.886048+01:00 machodeer kernel: [1160584.925123] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=52.238.26.243 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=39 ID=38807 DF PROTO=TCP SPT=35872 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-03-07T18:16:08.918913+01:00 machodeer kernel: [1160585.958604] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=52.238.26.243 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=39 ID=38808 DF PROTO=TCP SPT=35872 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-03-07T18:16:09.942815+01:00 machodeer kernel: [1160586.982624] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=52.238.26.243 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=39 ID=38809 DF PROTO=TCP SPT=35872 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 show less	Port Scan
🇹🇷 rtbh.com.tr	2026-03-01 20:11:49 (3 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇨🇳 ThreatBook.io	2026-02-28 22:37:19 (3 months ago)	ThreatBook Intelligence: Spam,Info more details on https://threatbook.io/ip/52.238.26.243 2026-02-28 ... show more ThreatBook Intelligence: Spam,Info more details on https://threatbook.io/ip/52.238.26.243 2026-02-28 01:49:50 ["netstat -tulpn \| head -10"] 2026-02-28 03:26:32 ["env \| head -10"] 2026-02-28 01:38:23 ["hostname"] 2026-02-28 02:55:02 ["uname -a"] 2026-02-28 03:50:48 ["uname -a"] 2026-02-28 03:18:11 ["whoami"] 2026-02-28 04:11:32 ["grep 'model name' /proc/cpuinfo 2>/dev/null \| head -1 \| cut -d ':' -f2- \| sed 's/^ *//' \| xargs \|\| echo unknown"] 2026-02-28 03:22:29 ["env \| head -10"] show less	Brute-Force
🇹🇷 rtbh.com.tr	2026-02-28 20:11:48 (3 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force

Showing 1 to 15 of 231 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 142.93.123.105

🇫🇷 91.231.89.128

🇫🇷 51.178.43.161

🇪🇸 188.164.194.248

🇺🇸 162.216.150.141

🇺🇸 144.126.216.193

🇰🇷 110.14.190.221

🇵🇰 103.26.82.49

🇨🇩 102.216.240.61

🇳🇱 91.92.241.188

🇺🇸 52.161.182.113

🇰🇿 31.132.90.3

🇬🇧 185.61.154.2

🇵🇰 123.253.93.243

🇸🇬 104.248.147.25

🇮🇳 103.47.74.214

🇮🇳 74.224.96.228

🇧🇬 5.188.206.66

🇭🇰 199.45.155.98

🇬🇹 190.151.130.5