JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.138.39.105

52.138.39.105 was found in our database!

This IP was reported 670 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.138.39.105

Whois 52.138.39.105

IP Abuse Reports for 52.138.39.105:

This IP address has been reported a total of 670 times from 236 distinct sources. 52.138.39.105 was first reported on March 21st 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 Christopher Hughes	2026-03-23 02:59:54 (2 months ago)	[Mon Mar 23 02:59:51.883004 2026] [proxy_fcgi:error] [pid 1310730:tid 140446588180032] [client 52.13 ... show more [Mon Mar 23 02:59:51.883004 2026] [proxy_fcgi:error] [pid 1310730:tid 140446588180032] [client 52.138.39.105:33139] AH01071: Got error 'Primary script unknown' [Mon Mar 23 02:59:52.016919 2026] [proxy_fcgi:error] [pid 1310730:tid 140446210704960] [client 52.138.39.105:33139] AH01071: Got error 'Primary script unknown' [Mon Mar 23 02:59:52.150954 2026] [proxy_fcgi:error] [pid 1310730:tid 140447141836352] [client 52.138.39.105:33139] AH01071: Got error 'Primary script unknown' [Mon Mar 23 02:59:53.366984 2026] [proxy_fcgi:error] [pid 1310730:tid 140447175407168] [client 52.138.39.105:33139] AH01071: Got error 'Primary script unknown' [Mon Mar 23 02:59:53.633609 2026] [proxy_fcgi:error] [pid 1310730:tid 140446202312256] [client 52.138.39.105:33139] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇩🇪 ISPLtd	2026-03-23 02:45:29 (2 months ago)	52.138.39.105 [22/Mar/2026:23:45:27 -0300] armadilloservices.ca:443 URL:/PII/function.php "GET /PII/ ... show more 52.138.39.105 [22/Mar/2026:23:45:27 -0300] armadilloservices.ca:443 URL:/PII/function.php "GET /PII/function.php 52.138.39.105 [22/Mar/2026:23:45:29 -0300] armadilloservices.ca:443 URL:/xmlrpc.php "GET /xmlrpc.php ... show less	Hacking Web App Attack
🇬🇧 Mendip_Defender	2026-03-23 02:41:14 (2 months ago)	52.138.39.105 - - [23/Mar/2026:02:41:12 +0000] "GET /wp-content/index.php HTTP/1.0" 404 5016 "-" "Mo ... show more 52.138.39.105 - - [23/Mar/2026:02:41:12 +0000] "GET /wp-content/index.php HTTP/1.0" 404 5016 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.138.39.105 - - [23/Mar/2026:02:41:12 +0000] "GET /wp-content/themes/ HTTP/1.0" 404 5016 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.138.39.105 - - [23/Mar/2026:02:41:12 +0000] "GET /wp-content/uploads/admin.php HTTP/1.0" 403 5015 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Hacking Web App Attack
Anonymous	2026-03-23 02:36:50 (2 months ago)	(mod_security) mod_security triggered on hostname [redacted])	SQL Injection
🇫🇷 Baking333	2026-03-23 02:33:33 (2 months ago)	[redacted] 52.138.39.105 - - [23/Mar/2026:03:33:31 +0100] "GET /wp-content/[redacted] HTTP/1.1" 302 ... show more [redacted] 52.138.39.105 - - [23/Mar/2026:03:33:31 +0100] "GET /wp-content/[redacted] HTTP/1.1" 302 5303 0/48851 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" [redacted] 52.138.39.105 - - [23/Mar/2026:03:33:31 +0100] "GET /wp-content/themes/ HTTP/1.1" 301 642 0/315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
🇺🇸 Epimetheus	2026-03-23 02:32:12 (2 months ago)	Unauthorized access attempts: [GET] /upload.php [GET] /ava.php [GET] /test1.php [GET] /wp-content/w ... show more Unauthorized access attempts: [GET] /upload.php [GET] /ava.php [GET] /test1.php [GET] /wp-content/wp-conflg.php [GET] /.well-known/ [GET] /wp-includes/ [GET] /wp-admin/css/bolt.php [GET] /wp-content/themes/ [GET] /xmlrpc.php [GET] /wp-includes/rest-api/fields/ [GET] /wp-includes/images/wlw/ [GET] /classwithtostring.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 show less	Web App Attack
🇩🇪 www.mammazone.it	2026-03-23 02:08:49 (2 months ago)	[Mon Mar 23 03:08:48.954220 2026] [autoindex:error] [pid 1673857] [client 52.138.39.105:27593] AH012 ... show more [Mon Mar 23 03:08:48.954220 2026] [autoindex:error] [pid 1673857] [client 52.138.39.105:27593] AH01276: Cannot serve directory /var/www/mammazone.it/.well-known/: No matching DirectoryIndex (index.html,index.cgi,index.pl,index.php,index.xhtml,index.htm) found, and server-generated directory index forbidden by Options directive ... show less	Hacking Web App Attack
🇬🇧 andypiper	2026-03-23 02:02:09 (2 months ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇫🇷 HerrWolf	2026-03-23 02:00:02 (2 months ago)	CrowdSec Detection: crowdsecurity/http-admin-interface-probing	Web App Attack
🇬🇧 yvoictra	2026-03-23 01:56:13 (2 months ago)	52.138.39.105 - - [23/Mar/2026:02:54:48 +0100] "GET /wp-content/uploads/admin.php HTTP/1.1" 404 2269 ... show more 52.138.39.105 - - [23/Mar/2026:02:54:48 +0100] "GET /wp-content/uploads/admin.php HTTP/1.1" 404 22698 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.138.39.105 - - [23/Mar/2026:02:54:49 +0100] "GET /403.php HTTP/1.1" 404 23105 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.138.39.105 - - [23/Mar/2026:02:54:50 +0100] "GET /ava.php HTTP/1.1" 404 23106 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.138.39.105 - - [23/Mar/2026:02:54:51 +0100] "GET /info.php HTTP/1.1" 404 23107 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.138.39.105 - - [23/Mar/2026:02:54:51 +0100] "GET /wp-content/plugins/about.php HTTP/1.1" 404 22695 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like G ... show less	Brute-Force Web App Attack
🇫🇮 Christopher Hughes	2026-03-23 01:52:09 (2 months ago)	[Mon Mar 23 01:30:44.770709 2026] [proxy_fcgi:error] [pid 1307783:tid 140446185526848] [client 52.13 ... show more [Mon Mar 23 01:30:44.770709 2026] [proxy_fcgi:error] [pid 1307783:tid 140446185526848] [client 52.138.39.105:14197] AH01071: Got error 'Primary script unknown' [Mon Mar 23 01:30:44.903315 2026] [proxy_fcgi:error] [pid 1307783:tid 140447267661376] [client 52.138.39.105:14197] AH01071: Got error 'Primary script unknown' [Mon Mar 23 01:52:09.227502 2026] [proxy_fcgi:error] [pid 1307782:tid 140446755968576] [client 52.138.39.105:13327] AH01071: Got error 'Primary script unknown' [Mon Mar 23 01:52:09.376378 2026] [proxy_fcgi:error] [pid 1307782:tid 140446747575872] [client 52.138.39.105:13327] AH01071: Got error 'Primary script unknown' [Mon Mar 23 01:52:09.510208 2026] [proxy_fcgi:error] [pid 1307782:tid 140446764361280] [client 52.138.39.105:13327] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇱🇻 garmtech.com	2026-03-23 01:43:18 (2 months ago)	Attempted access to sensitive endpoint (/wp-content/index.php) detected. Automated scan or unauthori ... show more Attempted access to sensitive endpoint (/wp-content/index.php) detected. Automated scan or unauthorized probing. show less	Web App Attack
🇫🇷 PacketFilter	2026-03-23 01:35:50 (2 months ago)	Fail2Ban	Hacking Web App Attack
Anonymous	2026-03-23 01:33:52 (2 months ago)	/wp-content/index.php	Web App Attack
🇫🇮 Christopher Hughes	2026-03-23 01:30:45 (2 months ago)	[Mon Mar 23 01:30:42.530624 2026] [proxy_fcgi:error] [pid 1307783:tid 140447309624896] [client 52.13 ... show more [Mon Mar 23 01:30:42.530624 2026] [proxy_fcgi:error] [pid 1307783:tid 140447309624896] [client 52.138.39.105:14197] AH01071: Got error 'Primary script unknown' [Mon Mar 23 01:30:42.663243 2026] [proxy_fcgi:error] [pid 1307783:tid 140447292839488] [client 52.138.39.105:14197] AH01071: Got error 'Primary script unknown' [Mon Mar 23 01:30:42.796021 2026] [proxy_fcgi:error] [pid 1307783:tid 140447540053568] [client 52.138.39.105:14197] AH01071: Got error 'Primary script unknown' [Mon Mar 23 01:30:43.980312 2026] [proxy_fcgi:error] [pid 1307783:tid 140446831470144] [client 52.138.39.105:14197] AH01071: Got error 'Primary script unknown' [Mon Mar 23 01:30:44.243159 2026] [proxy_fcgi:error] [pid 1307783:tid 140446797899328] [client 52.138.39.105:14197] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack

Showing 226 to 240 of 670 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.68

🇧🇷 104.23.254.79

🇺🇸 64.62.197.85

🇱🇹 62.60.130.210

🇧🇪 34.140.166.170

🇺🇸 216.25.89.74

🇧🇷 191.53.9.22

🇲🇽 189.203.163.10

🇸🇪 185.132.127.69

🇺🇸 147.185.132.123

🇨🇳 106.13.181.87

🇳🇱 83.168.106.26

🇺🇸 64.62.197.87

🇺🇸 64.62.197.2

🇺🇸 45.202.240.36

🇳🇱 45.148.10.157

🇳🇱 45.148.10.147

🇺🇸 34.26.14.127

🇲🇾 1.9.203.73

🇨🇳 222.189.36.138