52.156.2.88

Classification: Malicious

52.156.2.88 is a malicious IP address. Reported by 3 threat sources, last seen 2026-09-05. Network: AS8075 Microsoft Corporation.

Current activity

  • Known attacker — Seen launching attacks over the Internet.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
DDoS Attacker Blocklist.net.ua 2026-01-01 15:01:25 2026-09-05 16:22:16 attacker malicious-activity
Empty reason Blocklist.net.ua 2026-09-04 16:24:17 2026-09-04 16:24:17 attacker malicious-activity
Malicious Host AbuseIPDB 2025-12-30 14:22:15 2026-01-20 11:59:41 compromised malicious-activity
HTTP bot Blocklist.de 2026-01-01 09:59:47 2026-01-01 13:54:45 malicious-activity
Bruteforce AbuseIPDB 2025-12-30 13:35:24 2026-01-01 00:46:45 malicious-activity
SSH Attacker AbuseIPDB 2025-12-30 15:22:22 2025-12-31 23:00:20 malicious-activity
Hacking AbuseIPDB 2025-12-30 14:10:54 2025-12-31 23:00:20 malicious-activity
HTTP Attacker AbuseIPDB 2025-12-30 13:40:05 2025-12-31 23:00:20 malicious-activity
Port Scanner AbuseIPDB 2025-12-30 14:31:21 2025-12-30 23:58:07 anomalous-activity
HTTP Scrapper AbuseIPDB 2025-12-30 14:17:43 2025-12-30 23:08:17 anomalous-activity
SQL Injection AbuseIPDB 2025-12-30 17:28:38 2025-12-30 21:55:48 malicious-activity
Known Attacker AbuseIPDB 2025-12-30 18:21:33 2025-12-30 18:21:33 malicious-activity
FTP Attacker AbuseIPDB 2025-12-30 18:21:33 2025-12-30 18:21:33 malicious-activity
Phishing AbuseIPDB 2025-12-30 18:21:33 2025-12-30 18:21:33 malicious-activity
Mail Spammer AbuseIPDB 2025-12-30 18:21:33 2025-12-30 18:21:33 malicious-activity
DDoS Attacker AbuseIPDB 2025-12-30 13:43:37 2025-12-30 15:19:57 malicious-activity

Tags

attacker spam bruteforce bot abuse

Whois information

AS name
AS8075 Microsoft Corporation
Registrant
Microsoft Corporation
City
Toronto
Postal code
M5H 2N2
Country
CA — Canada 🇨🇦
First indexed
2026-01-01 06:43:47
Last updated
2026-09-05 16:22:16