JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.123.189.59

52.123.189.59 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 3%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Boydton, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.123.189.59

Whois 52.123.189.59

IP Abuse Reports for 52.123.189.59:

This IP address has been reported a total of 10 times from 1 distinct source. 52.123.189.59 was first reported on May 22nd 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-28 13:21:18 (2 weeks ago)	(mod_security) mod_security (id:210730) triggered by 52.123.189.59 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 52.123.189.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 09:21:14.355362 2026] [security2:error] [pid 19492:tid 19492] [client 52.123.189.59:35850] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|autodiscover.feaverslane.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.feaverslane.com"] [uri "/autodiscover/autodiscover.json/v1.0/live.com"] [unique_id "akEfyoPjLDeaslQNiaAwcAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-02 14:29:33 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 52.123.189.59 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 52.123.189.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 10:29:25.499067 2026] [security2:error] [pid 24585:tid 24585] [client 52.123.189.59:13325] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|autodiscover.cbcconsult.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.cbcconsult.com"] [uri "/autodiscover/autodiscover.json/v1.0/live.com"] [unique_id "ah7oxUb2flMA5Sk5IZ6u0gAAAC4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-20 13:25:47 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 52.123.189.59 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 52.123.189.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 20 09:25:41.744130 2026] [security2:error] [pid 3808238:tid 3808238] [client 52.123.189.59:30731] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|autodiscover.kfraser.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.kfraser.com"] [uri "/autodiscover/autodiscover.json/v1.0/live.com"] [unique_id "aeYpVfWYTLLgtOHgMqGlMwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-27 13:08:09 (3 months ago)	(mod_security) mod_security (id:210730) triggered by 52.123.189.59 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 52.123.189.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 27 09:08:05.524092 2026] [security2:error] [pid 26881:tid 26881] [client 52.123.189.59:29707] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|autodiscover.feaverslane.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.feaverslane.com"] [uri "/autodiscover/autodiscover.json/v1.0/live.com"] [unique_id "acaBNfog4KO_TvpV_SBZ0QAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-31 17:51:46 (5 months ago)	(mod_security) mod_security (id:210730) triggered by 52.123.189.59 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 52.123.189.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 31 12:51:42.715474 2026] [security2:error] [pid 3791956:tid 3791956] [client 52.123.189.59:10249] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|autodiscover.peaksalesnw.com\|F\|2"] [data ".com#[email protected]"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.peaksalesnw.com"] [uri "/autodiscover/autodiscover.json/v1.0/live.com#[email protected]"] [unique_id "aX5BLrMfnuUUsW03IZwN0QAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-02 17:26:36 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 52.123.189.59 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 52.123.189.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 02 12:26:28.666787 2026] [security2:error] [pid 9065:tid 9065] [client 52.123.189.59:32834] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|autodiscover.cbcconsult.com\|F\|2"] [data ".com#[email protected]"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.cbcconsult.com"] [uri "/autodiscover/autodiscover.json/v1.0/live.com#[email protected]"] [unique_id "aVf_xO9XAUHqhdV-78LXewAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-17 19:57:56 (7 months ago)	(mod_security) mod_security (id:210730) triggered by 52.123.189.59 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 52.123.189.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 17 14:57:48.583122 2025] [security2:error] [pid 29753:tid 29753] [client 52.123.189.59:21516] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|autodiscover.feaverslane.com\|F\|2"] [data ".com#[email protected]"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.feaverslane.com"] [uri "/autodiscover/autodiscover.json/v1.0/live.com#[email protected]"] [unique_id "aRt-PJlZOu1dfaDj14Ie8QAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-10-27 18:01:53 (8 months ago)	(mod_security) mod_security (id:210730) triggered by 52.123.189.59 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 52.123.189.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 27 14:01:47.136652 2025] [security2:error] [pid 19608:tid 19608] [client 52.123.189.59:22024] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|autodiscover.cbcconsult.com\|F\|2"] [data ".com#[email protected]"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.cbcconsult.com"] [uri "/autodiscover/autodiscover.json/v1.0/live.com#[email protected]"] [unique_id "aP-zixrfm19st-8upJIFUgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-18 17:39:45 (9 months ago)	(mod_security) mod_security (id:210730) triggered by 52.123.189.59 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 52.123.189.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 18 13:39:40.718865 2025] [security2:error] [pid 7244:tid 7244] [client 52.123.189.59:7042] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|autodiscover.varalla.com\|F\|2"] [data ".com#[email protected]"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.varalla.com"] [uri "/autodiscover/autodiscover.json/v1.0/live.com#[email protected]"] [unique_id "aMxD3NrYpmzya18xaDPmkQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-05-22 11:26:32 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 52.123.189.59 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 52.123.189.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 22 07:26:24.851145 2025] [security2:error] [pid 1071521:tid 1071521] [client 52.123.189.59:16395] [client 52.123.189.59] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|autodiscover.feaverslane.com\|F\|2"] [data ".com#[email protected]"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.feaverslane.com"] [uri "/autodiscover/autodiscover.json/v1.0/live.com#[email protected]"] [unique_id "aC8J4IvgpLVeSKHcZpNv1AAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.78

🇦🇿 188.64.9.49

🇺🇸 170.187.165.218

🇷🇴 80.94.92.55

🇬🇧 217.146.80.106

🇧🇷 200.11.123.54

🇭🇰 199.45.154.176

🇧🇪 198.235.24.236

🇹🇼 198.235.24.76

🇲🇱 197.155.176.133

🇧🇷 170.78.32.158

🇺🇸 136.144.35.137

🇨🇦 67.71.55.209

🇨🇳 60.186.155.7

🇧🇪 198.235.24.223

🇧🇪 198.235.24.207

🇩🇪 194.113.233.25

🇦🇴 193.163.125.115

🇲🇽 189.172.183.214

🇺🇦 150.228.5.133