JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.234.1.103

52.234.1.103 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 38%: ?

38%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.234.1.103

Whois 52.234.1.103

IP Abuse Reports for 52.234.1.103:

This IP address has been reported a total of 20 times from 16 distinct sources. 52.234.1.103 was first reported on May 2nd 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 micropedro	2026-07-01 10:31:11 (1 week ago)	6 incidents: malicious activity. First: 2026-06-17 04:30, Last: 2026-07-01 06:31 UTC. Triggers: ufw- ... show more 6 incidents: malicious activity. First: 2026-06-17 04:30, Last: 2026-07-01 06:31 UTC. Triggers: ufw-repeater. show less	Port Scan
🇺🇸 micropedro	2026-07-01 10:30:54 (1 week ago)	10 incidents: web scanning/attack, port scanning. Ports: 2082/TCP(1), 2087/TCP(1), 8080/TCP(1), 8443 ... show more 10 incidents: web scanning/attack, port scanning. Ports: 2082/TCP(1), 2087/TCP(1), 8080/TCP(1), 8443/TCP(1). First: 2026-06-03 02:37, Last: 2026-07-01 06:30 UTC. Triggers: port-trap,non-public-port,ufw-repeater,recidive,firewall-tcp,firewall-http. show less	Port Scan Brute-Force Web App Attack
🇺🇸 micropedro	2026-06-10 07:30:12 (4 weeks ago)	9 incidents: web scanning/attack, port scanning. First: 2026-06-03 02:37, Last: 2026-06-10 03:30 UTC ... show more 9 incidents: web scanning/attack, port scanning. First: 2026-06-03 02:37, Last: 2026-06-10 03:30 UTC. Triggers: ufw-repeater,port-trap,non-public-port,ufw-repeater,recidive,firewall-tcp,firewall-http. show less	Port Scan Brute-Force Web App Attack
🇫🇷 ISPLtd	2026-06-03 06:50:09 (1 month ago)	Jun 3 03:50:09 52.234.1.103 TCP SPT=45490 DPT=2087 SYN Jun 3 03:50:09 52.234.1.103 TCP SPT=45471 D ... show more Jun 3 03:50:09 52.234.1.103 TCP SPT=45490 DPT=2087 SYN Jun 3 03:50:09 52.234.1.103 TCP SPT=45471 DPT=8443 SYN Jun 3 03:50:09 52.234.1.103 TCP SPT=45472 DPT=8080 ... show less	Port Scan
🇧🇷 SOC PR	2026-06-03 06:46:38 (1 month ago)	IPS: Sensitive Configuration File Disclosure.	Hacking
Anonymous	2026-06-03 06:10:13 (1 month ago)	Honeypot wireguard: source IP triggered 3+ blocked attempts in 24h (ports: 443/tcp (HTTPS), 8080/tcp ... show more Honeypot wireguard: source IP triggered 3+ blocked attempts in 24h (ports: 443/tcp (HTTPS), 8080/tcp (HTTP-alt), 8443/tcp (HTTPS-alt)) show less	Port Scan
🇫🇷 Dechavanne	2026-06-03 06:00:09 (1 month ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
🇺🇸 TPI-Abuse	2026-06-03 05:44:06 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 52.234.1.103 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 52.234.1.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 01:44:01.866077 2026] [security2:error] [pid 4747:tid 4747] [client 52.234.1.103:45475] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.101"] [uri "/.git/HEAD"] [unique_id "ah-_IXTZiqwR-jjWClBDoAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Bouncer	2026-06-03 05:13:21 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 52.234.1.103 (US/United States/-): 5 in the las ... show more (mod_security) mod_security (id:210730) triggered by 52.234.1.103 (US/United States/-): 5 in the last 60 secs show less	Brute-Force
Anonymous	2026-06-03 04:50:36 (1 month ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇺🇸 TPI-Abuse	2026-06-03 04:46:34 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 52.234.1.103 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 52.234.1.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 00:46:27.170779 2026] [security2:error] [pid 24654:tid 24667] [client 52.234.1.103:45982] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.127"] [uri "/.git/config"] [unique_id "ah-xo1m5Y8AzGEuiFpw07AAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-03 04:30:38 (1 month ago)	AS8075: 52.234.0.0/16 - Microsoft Corporation (US)	Port Scan
🇺🇸 TPI-Abuse	2026-06-03 04:29:08 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 52.234.1.103 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 52.234.1.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 00:29:01.597089 2026] [security2:error] [pid 23029:tid 23029] [client 52.234.1.103:1833] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.9"] [uri "/.git/HEAD"] [unique_id "ah-tjTMCsiMsX3bYrDuO3QAAAB4"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 PeravixGroup	2026-06-03 04:25:00 (1 month ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇩🇪 pscriptos	2026-06-03 04:23:03 (1 month ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 154.17.176.154

🇫🇷 85.217.140.36

🇸🇬 68.178.160.25

🇺🇸 66.132.172.244

🇯🇵 52.198.236.209

🇯🇵 18.176.53.143

🇨🇳 14.103.111.171

🇧🇬 79.124.40.110

🇯🇵 52.253.118.21

🇺🇸 45.33.105.76

🇺🇸 2607:f8b0:4004:c29::12e

🇧🇬 212.104.116.148

🇳🇱 185.93.89.79

🇸🇬 139.59.105.108

🇩🇪 82.21.68.48

🇸🇬 13.212.82.137

🇺🇸 192.178.115.219

🇨🇳 140.250.89.35

🇵🇭 120.29.87.110

🇨🇳 106.12.7.70