JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.125.140.7

52.125.140.7 was found in our database!

This IP was reported 874 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.125.140.7

Whois 52.125.140.7

IP Abuse Reports for 52.125.140.7:

This IP address has been reported a total of 874 times from 104 distinct sources. 52.125.140.7 was first reported on September 2nd 2021, and the most recent report was 2 years ago.

Old Reports: The most recent abuse report for this IP address is from 2 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇾 Rizzy	2024-01-02 03:54:44 (2 years ago)	Multiple WAF Violations	Brute-Force Web App Attack
Anonymous	2023-12-29 02:25:00 (2 years ago)	no auth attempts in 0 secs: user=<>, 52.125.140.7, TLS handshaking: Connection closed	Email Spam
🇺🇸 TPI-Abuse	2023-12-28 08:26:25 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 52.125.140.7 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 52.125.140.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 28 03:26:18.995435 2023] [security2:error] [pid 14272] [client 52.125.140.7:6123] [client 52.125.140.7] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|autodiscover.ondakompun.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.ondakompun.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected]"] [unique_id "ZY0xKqobObOJAlJe3aaauwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2023-12-27 13:26:21 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 52.125.140.7 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 52.125.140.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 27 08:26:16.410978 2023] [security2:error] [pid 31939] [client 52.125.140.7:6045] [client 52.125.140.7] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|autodiscover.seacorre.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.seacorre.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected]"] [unique_id "ZYwl-Mcx3g5I97qHUnsELQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 10dencehispahard SL	2023-12-27 08:20:01 (2 years ago)	LOGIN authentication failed	Email Spam Brute-Force
🇫🇷 lefraisier.net	2023-12-27 08:03:56 (2 years ago)	Port Scan : IP : 52.125.140.7 TCP SYN ACK sport 7308 dport 465 IP : 52.125.140.7 TCP SYN ACK sport 7 ... show more Port Scan : IP : 52.125.140.7 TCP SYN ACK sport 7308 dport 465 IP : 52.125.140.7 TCP SYN ACK sport 7308 dport 465 IP : 52.125.140.7 TCP SYN ACK sport 7320 dport 465 IP : 52.125.140.7 TCP SYN ACK sport 7320 dport 465 IP : 52.125.140.7 TCP SYN ACK sport 7340 dport 465 IP : 52.125.140.7 TCP SYN ACK sport 7306 dport 465 IP : 52.125.140.7 TCP SYN ACK sport 7306 dport 465 ... show less	Port Scan
🇲🇾 Rizzy	2023-12-27 04:56:36 (2 years ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇲🇾 Rizzy	2023-12-26 00:33:27 (2 years ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2023-12-25 13:31:40 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 52.125.140.7 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 52.125.140.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 25 08:31:36.970830 2023] [security2:error] [pid 24617] [client 52.125.140.7:7374] [client 52.125.140.7] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|autodiscover.5degrees-eg.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.5degrees-eg.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected]"] [unique_id "ZYmEOEzOCyPOsuCFcTaYXAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 itak	2023-12-24 16:55:09 (2 years ago)	postfix Server DDoS - AUTH drops, early HANGUPs, other DDoS attacks, etc. Might contain brute-force ... show more postfix Server DDoS - AUTH drops, early HANGUPs, other DDoS attacks, etc. Might contain brute-force dictionary attack sightings on IMAP and SMTP. show less	DDoS Attack Port Scan
🇲🇾 Rizzy	2023-12-22 00:37:58 (2 years ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇩🇪 dwmp	2023-12-21 14:38:08 (2 years ago)	Dec 21 15:38:07 plesk postfix/smtpd[157786]: lost connection after CONNECT from unknown[52.125.140.7 ... show more Dec 21 15:38:07 plesk postfix/smtpd[157786]: lost connection after CONNECT from unknown[52.125.140.7] Dec 21 15:38:07 plesk postfix/smtpd[156698]: lost connection after CONNECT from unknown[52.125.140.7] Dec 21 15:38:07 plesk postfix/smtpd[157850]: lost connection after CONNECT from unknown[52.125.140.7] ... show less	Brute-Force SSH
🇸🇬 pusathosting.com	2023-12-21 01:00:10 (2 years ago)	imap1 failed login	Brute-Force
🇳🇱 maxxsense	2023-12-19 17:38:30 (2 years ago)	Port Scan detected from 52.125.140.7 (NL/The Netherlands/-).	Port Scan
🇲🇾 Rizzy	2023-12-18 01:04:01 (2 years ago)	Multiple WAF Violations	Brute-Force Web App Attack

Showing 1 to 15 of 874 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 218.78.46.81

🇺🇸 184.105.139.87

🇮🇳 106.213.83.196

🇹🇷 94.154.43.58

🇩🇪 69.5.169.16

🇸🇳 41.214.55.235

🇨🇭 37.120.213.13

🇷🇴 2.57.121.25

🇬🇭 197.251.249.117

🇵🇪 181.176.72.184

🇨🇭 179.43.186.223

🇩🇪 172.217.33.148

🇻🇳 123.16.209.119

🇰🇭 119.13.57.201

🇨🇳 113.81.177.222

🇧🇩 45.64.136.67

🇵🇰 39.34.129.85

🇮🇳 223.239.131.129

🇩🇪 167.233.36.134

🇺🇸 134.199.215.152