JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.138.39.105

52.138.39.105 was found in our database!

This IP was reported 670 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.138.39.105

Whois 52.138.39.105

IP Abuse Reports for 52.138.39.105:

This IP address has been reported a total of 670 times from 236 distinct sources. 52.138.39.105 was first reported on March 21st 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇭 thaizone.com	2026-03-21 22:50:54 (2 months ago)	Hacking attempts against websites (D1) #2	Web App Attack Hacking
🇫🇷 masterguru	2026-03-21 22:49:36 (2 months ago)	Too much 404 requests in 1 minute. Operator GE matched 10 at IP:block_script. (46020-193)	Hacking
🇺🇦 URAN Publishing Service	2026-03-21 22:47:59 (2 months ago)	52.138.39.105 - - [22/Mar/2026:00:47:58 +0200] "GET /wp-admin/?p= HTTP/1.1" 404 353 "-" "Mozilla/5.0 ... show more 52.138.39.105 - - [22/Mar/2026:00:47:58 +0200] "GET /wp-admin/?p= HTTP/1.1" 404 353 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇩🇪 h7ex	2026-03-21 22:47:51 (2 months ago)	Attempted execution of scripts via Apache (noscripts) (Jail: apache-noscript)	Hacking Exploited Host
🇺🇸 ph	2026-03-21 22:47:06 (2 months ago)	Bad web bot attempting to run wp-admin on non-WP site	Hacking Bad Web Bot Web App Attack
🇷🇺 Reaper	2026-03-21 22:42:22 (2 months ago)	GET /wp-admin/?p=	Web App Attack
🇺🇸 paulo.apoloni	2026-03-21 22:36:50 (2 months ago)	52.138.39.105 - - [21/Mar/2026:19:23:42 -0300] "GET /wp-admin/?p= HTTP/1.1" 444 0 "-" "Mozilla/5.0 ( ... show more 52.138.39.105 - - [21/Mar/2026:19:23:42 -0300] "GET /wp-admin/?p= HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.138.39.105 - - [21/Mar/2026:19:23:42 -0300] "GET /wp-admin/?p= HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.138.39.105 - - [21/Mar/2026:19:23:42 -0300] "GET /wp-admin/?p= HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.138.39.105 - - [21/Mar/2026:19:23:42 -0300] "GET /wp-admin/?p= HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.138.39.105 - - [21/Mar/2026:19:36:50 -0300] "GET /wp-admin/?p= HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇬🇧 poundawebsiteltd	2026-03-21 22:35:48 (2 months ago)	Apache 403 Forbidden Access. Evidence: [REDACTED_DOMAIN]:443 52.138.39.105 - - [21/Mar/2026:22:35:47 ... show more Apache 403 Forbidden Access. Evidence: [REDACTED_DOMAIN]:443 52.138.39.105 - - [21/Mar/2026:22:35:47 +0000] GET /wp-admin/js/ HTTP/1.1 403 235 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 show less	Web App Attack
🇩🇪 LRob.fr	2026-03-21 22:30:16 (2 months ago)	Repeated attacks detected by Fail2Ban in recidive jail	Hacking
🇺🇸 xmission.com	2026-03-21 22:24:51 (2 months ago)	52.138.39.105 - - [21/Mar/2026:16:24:49 -0600] "GET /term.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Win ... show more 52.138.39.105 - - [21/Mar/2026:16:24:49 -0600] "GET /term.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.138.39.105 - - [21/Mar/2026:16:24:49 -0600] "GET /test.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.138.39.105 - - [21/Mar/2026:16:24:49 -0600] "GET /themes.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.138.39.105 - - [21/Mar/2026:16:24:49 -0600] "GET /tool.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.138.39.105 - - [21/Mar/2026:16:24:49 -0600] "GET /tx78.php?p= HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.138.39. ... show less	Web App Attack
🇬🇧 SilverZippo	2026-03-21 22:21:43 (2 months ago)	Web App Attack	Web App Attack
🇬🇧 poundawebsiteltd	2026-03-21 22:17:44 (2 months ago)	Apache 403 Forbidden Access. Evidence: [REDACTED_DOMAIN]:443 52.138.39.105 - - [21/Mar/2026:22:17:42 ... show more Apache 403 Forbidden Access. Evidence: [REDACTED_DOMAIN]:443 52.138.39.105 - - [21/Mar/2026:22:17:42 +0000] GET /wp-admin/js/index.php?p= HTTP/1.1 500 3038 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 show less	Web App Attack
Anonymous	2026-03-21 22:11:04 (2 months ago)	TACHIDE WEBEXPLOIT 52.138.39.105 (52.138.39.105)	Web App Attack
🇫🇮 Christopher Hughes	2026-03-21 22:00:11 (2 months ago)	[Sat Mar 21 22:00:11.141967 2026] [proxy_fcgi:error] [pid 1262970:tid 140446034556480] [client 52.13 ... show more [Sat Mar 21 22:00:11.141967 2026] [proxy_fcgi:error] [pid 1262970:tid 140446034556480] [client 52.138.39.105:2146] AH01071: Got error 'Primary script unknown' [Sat Mar 21 22:00:11.275424 2026] [proxy_fcgi:error] [pid 1262970:tid 140446143596096] [client 52.138.39.105:2146] AH01071: Got error 'Primary script unknown' [Sat Mar 21 22:00:11.408746 2026] [proxy_fcgi:error] [pid 1262970:tid 140446168774208] [client 52.138.39.105:2146] AH01071: Got error 'Primary script unknown' [Sat Mar 21 22:00:11.541707 2026] [proxy_fcgi:error] [pid 1262970:tid 140446126810688] [client 52.138.39.105:2146] AH01071: Got error 'Primary script unknown' [Sat Mar 21 22:00:11.674407 2026] [proxy_fcgi:error] [pid 1262970:tid 140446839862848] [client 52.138.39.105:2146] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
Anonymous	2026-03-21 21:58:55 (2 months ago)	WordPress/Woo probe	Web App Attack

Showing 511 to 525 of 670 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 207.90.244.19

🇬🇧 104.143.224.132

🇮🇳 103.117.155.41

🇳🇱 94.102.49.193

🇰🇷 222.107.156.227

🇰🇷 220.74.119.84

🇰🇷 218.156.93.202

🇮🇩 202.152.201.166

🇺🇸 165.154.182.152

🇺🇸 162.216.149.184

🇩🇿 154.242.218.192

🇮🇳 154.221.35.72

🇺🇸 143.198.238.87

🇬🇧 139.59.170.85

🇺🇸 104.23.250.71

🇫🇷 62.210.124.141

🇧🇷 45.164.39.253

🇸🇬 43.128.104.75

🇧🇷 20.197.238.250

🇺🇸 8.229.216.39