52.138.16.158
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- Microsoft Corporation
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS8075
- Domain Name
- microsoft.com
- Country
- 🇨🇦 Canada
- City
- Toronto, Ontario
No reports in the last 60 days
52.138.16.158 has been reported 293 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
293 from
251 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇬🇧 innovacommunications |
Reported from Imunify360 blocklist
|
Brute-Force SSH | |
| 🇩🇪 Holger |
WordPress WebAttack
|
Brute-Force Web App Attack | |
| 🇪🇸 Gem |
Unauthorized web scan.
|
Web App Attack | |
| 🇹🇷 rtbh.com.tr |
list.rtbh.com.tr report: tcp/0
|
Brute-Force | |
| 🇮🇹 mauri64 |
Troppi errori Apache (460)
|
Hacking | |
| 🇨🇳 ThreatBook.io |
ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/52.138.16.158
2026-03-03 06:10:08 /wp-blogs.php
2026-03-03 06:10:07 /wp-content/plugins/hellopress/wp_filemanager.php
2026-03-03 06:10:08 /666.php
|
Web App Attack | |
| 🇫🇷 Murazaki |
perforce.balamb.fr 52.138.16.158 - - [03/Mar/2026:03:48:17 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 503 190 "-" "-" "-"
...
|
Hacking | |
| Anonymous |
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: CA, Attack patterns: WordPress scanning, Malicious User-Agent
|
Bad Web Bot Web App Attack | |
| 🇳🇱 homeshowdomain.nl |
Auto-ban: 345 malicious requests on 2026-03-02 (e.g., env/backup probes, brute-force, or error bursts).
|
Web App Attack SSH Hacking | |
| 🇳🇱 oisecnet |
Automated report: Unauthorized vulnerability scanning detected on 2026-03-03. 13 requests from this IP.
|
Brute-Force Web App Attack SSH | |
| 🇳🇱 JCB |
52.138.16.158 - - [03/Mar/2026:01:40:55 +0200] "GET /wp-blogs.php HTTP/1.1" 404 416 "-" "-"
52.138.16.158 - - [03/Mar/2026:01:40:56 +0200] "GET /amp.php HTTP/1.1" 404 416 "-" "-"
...
|
Web App Attack | |
| 🇫🇷 geot |
WordPress scanning bot
|
Hacking Bad Web Bot Web App Attack | |
| 🇳🇿 FaB Property Group |
Requested file: wp-content/plugins/hellopress/wp_filemanager.php
|
Web App Attack | |
| Anonymous |
|
Web App Attack Hacking SQL Injection | |
| 🇭🇺 NyaljBe |
|
Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown