AbuseIPDB » 52.138.237.52

52.138.237.52 was found in our database!

This IP was reported 86 times. Confidence of Abuse is 1%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	Ireland
City	Dublin, Leinster

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 52.138.237.52

Whois 52.138.237.52

IP Abuse Reports for 52.138.237.52:

This IP address has been reported a total of 86 times from 55 distinct sources. 52.138.237.52 was first reported on November 14th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
FeG Deutschland	2024-11-16 12:38:02 (2 months ago)	Looking for CMS/PHP/SQL vulnerablilities - 13	Exploited Host Web App Attack
strefapi_com	2024-11-16 12:36:46 (2 months ago)	Brute-force web ...	Hacking Brute-Force Web App Attack
rellik	2024-11-16 12:23:00 (2 months ago)	Scanning Critical File	Hacking Web App Attack
Anonymous	2024-11-16 10:31:03 (2 months ago)	Bot / scanning and/or hacking attempts: GET /fosil.php HTTP/1.1, GET /wp-includes/Requests/about.php ... show moreBot / scanning and/or hacking attempts: GET /fosil.php HTTP/1.1, GET /wp-includes/Requests/about.php HTTP/1.1, GET /new.php HTTP/1.1, GET /install.php HTTP/1.1, GET /sidwsi.php HTTP/1.1, GET /ws.php7 HTTP/1.1, GET /thumbs.php HTTP/1.1, GET //wp-content/install.php HTTP/1.1, GET /log.php HTTP/1.1, GET /chosen HTTP/1.1, GET /cloud.php HTTP/1.1, GET /randkeyword.PhP7 HTTP/1.1, GET /wp-admin/includes/cloud.php HTTP/1.1, GET /makeasmtp.php HTTP/1.1, GET /randkeyword.PhP8 HTTP/1.1, GET /ws.php HTTP/1.1, GET /TNT.php HTTP/1.1, GET /ebs.php7 HTTP/1.1, GET /wp-content/plugins/index.php HTTP/1.1, GET /as.php HTTP/1.1, GET /css/index.php HTTP/1.1, GET /readme.php HTTP/1.1, GET /gel4y.php HTTP/1.1, GET /.well-known/ HTTP/1.1 show less	Hacking Web App Attack
Mendip_Defender	2024-11-16 09:20:06 (2 months ago)	52.138.237.52 - - [16/Nov/2024:09:20:11 +0000] "GET /wp-content/themes/plugins.php HTTP/1.0" 404 315 ... show more52.138.237.52 - - [16/Nov/2024:09:20:11 +0000] "GET /wp-content/themes/plugins.php HTTP/1.0" 404 31532 "-" "-" 52.138.237.52 - - [16/Nov/2024:09:20:12 +0000] "GET /wp-content/upgrade/edit-links.php HTTP/1.0" 404 31532 "-" "-" ... show less	Hacking Web App Attack
Ba-Yu	2024-11-16 09:17:38 (2 months ago)	WordPress hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
sefinek.net	2024-11-16 09:09:13 (2 months ago)	Triggered Cloudflare WAF (firewallCustom) from IE. Action taken: MANAGED_CHALLENGE ASN: ... show moreTriggered Cloudflare WAF (firewallCustom) from IE. Action taken: MANAGED_CHALLENGE ASN: 8075 (MICROSOFT-CORP-MSN-AS-BLOCK) Protocol: HTTP/1.1 (GET method) Zone: sefinek.net Endpoint: /wp-admin/css/colors/coffee/xmrlpc.php Query: ?p= Timestamp: 2024-11-16T08:05:22Z Ray ID: 8e35f9bd6a8379eb Report generated by Cloudflare-WAF-To-AbuseIPDB: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
IRISIO	2024-11-16 09:00:29 (2 months ago)	scans/SQL injection/spam posts : 277 queries	SQL Injection Web App Attack
Mediashaker	2024-11-16 08:29:54 (2 months ago)	(apache-scanners) Failed apache-scanners trigger with match [redacted] from 52.138.237.52 (IE/Irelan ... show more(apache-scanners) Failed apache-scanners trigger with match [redacted] from 52.138.237.52 (IE/Ireland/-) show less	Port Scan
Anonymous	2024-11-16 07:37:02 (2 months ago)	wordpress-trap	Web App Attack
Gwyneth Llewelyn	2024-11-15 22:34:16 (2 months ago)	52.138.237.52 - - [15/Nov/2024:22:34:14 +0000] "GET /cgi-bin/about.php HTTP/2.0" 404 1064 "-" "-"	Bad Web Bot
QT	2024-11-15 19:16:06 (2 months ago)	Website hack attempted at 2024-11-16 05:16:01 +1000	Web App Attack
CryptoYakari	2024-11-15 17:47:47 (2 months ago)	52.138.237.52 - - [15/Nov/2024:20:47:45 +0300] "GET /todo.php HTTP/1.0" 404 200 "-" "-" 52.138 ... show more52.138.237.52 - - [15/Nov/2024:20:47:45 +0300] "GET /todo.php HTTP/1.0" 404 200 "-" "-" 52.138.237.52 - - [15/Nov/2024:20:47:45 +0300] "GET /wp-content/themes/plugins.php HTTP/1.0" 404 3252 "-" "-" 52.138.237.52 - - [15/Nov/2024:20:47:45 +0300] "GET /wp-admin/network/plugins.php HTTP/1.0" 404 3252 "-" "-" 52.138.237.52 - - [15/Nov/2024:20:47:45 +0300] "GET /wp-content/upgrade/edit-links.php HTTP/1.0" 404 3252 "-" "-" 52.138.237.52 - - [15/Nov/2024:20:47:45 +0300] "GET /chtmlfuns.php HTTP/1.0" 404 200 "-" "-" ... show less	Web Spam Blog Spam Bad Web Bot Web App Attack
Apache	2024-11-15 13:42:32 (2 months ago)	(mod_security) mod_security (id:20000010) triggered by 52.138.237.52 (IE/Ireland/-): 5 in the last 3 ... show more(mod_security) mod_security (id:20000010) triggered by 52.138.237.52 (IE/Ireland/-): 5 in the last 300 secs show less	Brute-Force Web App Attack
Anonymous	2024-11-15 13:29:55 (2 months ago)	(WPLOGIN) WP Login Attack 52.138.237.52 (IE/Ireland/-): 5 in the last 3600 secs; Ports: ; Direction ... show more(WPLOGIN) WP Login Attack 52.138.237.52 (IE/Ireland/-): 5 in the last 3600 secs; Ports: ; Direction: 1 show less	Brute-Force SSH