JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.140.125.52

52.140.125.52 was found in our database!

This IP was reported 90 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇮🇳 India
City	Pune, Maharashtra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.140.125.52

Whois 52.140.125.52

IP Abuse Reports for 52.140.125.52:

This IP address has been reported a total of 90 times from 80 distinct sources. 52.140.125.52 was first reported on July 6th 2026, and the most recent report was 3 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 Saec	2026-07-06 15:42:02 (3 minutes ago)	Jarvis auto-ban: CF top attacker on saec.me (999 hits, IN)	Port Scan Web App Attack
Anonymous	2026-07-06 15:40:07 (5 minutes ago)	52.140.125.52 - - [06/Jul/2026:17:40:05 +0200] "GET /admin.php HTTP/1.1" 404 28145 "-" "Mozilla/5.0 ... show more 52.140.125.52 - - [06/Jul/2026:17:40:05 +0200] "GET /admin.php HTTP/1.1" 404 28145 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.140.125.52 - - [06/Jul/2026:17:40:05 +0200] "GET /admin.php HTTP/1.1" 404 5706 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.140.125.52 - - [06/Jul/2026:17:40:05 +0200] "GET /goods.php HTTP/1.1" 404 28145 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.140.125.52 - - [06/Jul/2026:17:40:05 +0200] "GET /goods.php HTTP/1.1" 404 5706 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.140.125.52 - - [06/Jul/2026:17:40:06 +0200] "GET /public/css.php HTTP/1.1" 404 28145 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/ ... show less	Bad Web Bot Web App Attack
🇺🇸 rsa	2026-07-06 15:32:00 (13 minutes ago)	GET /lv.php HTTP/1.1	DDoS Attack Brute-Force Exploited Host Web App Attack Hacking
🇺🇸 masterguru	2026-07-06 15:25:23 (19 minutes ago)	Too much 404 requests in 1 hour. Operator GE matched 50 at IP:block_script. (4002-169)	Hacking Web App Attack
🇵🇱 lns.bz	2026-07-06 15:25:02 (20 minutes ago)	Web app attack [PL.Lu]	Exploited Host Web App Attack
🇫🇷 Baking333	2026-07-06 15:23:31 (21 minutes ago)	[redacted] 52.140.125.52 - - [06/Jul/2026:16:23:29 +0100] "GET /wp-includes/block-supports/ HTTP/1.1 ... show more [redacted] 52.140.125.52 - - [06/Jul/2026:16:23:29 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 301 648 0/397 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" [redacted] 52.140.125.52 - - [06/Jul/2026:16:23:30 +0100] "GET /wp-content/[redacted] HTTP/1.1" 302 1554 0/64676 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
🇮🇹 Inartis	2026-07-06 15:21:45 (23 minutes ago)	52.140.125.52 - - [06/Jul/2026:17:21:37 +0200] "GET /admin.php HTTP/1.1" 404 183580 "-" "Mozilla/5.0 ... show more 52.140.125.52 - - [06/Jul/2026:17:21:37 +0200] "GET /admin.php HTTP/1.1" 404 183580 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.140.125.52 - - [06/Jul/2026:17:21:42 +0200] "GET /adminfuns.php HTTP/1.1" 404 179755 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.140.125.52 - - [06/Jul/2026:17:21:43 +0200] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 404 179788 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 WellSpring	2026-07-06 15:21:43 (23 minutes ago)	wordpress scan on 209.today/wp-includes/block-supports/ — WellSpr.ing/NetSentinel civic-AI security ... show more wordpress scan on 209.today/wp-includes/block-supports/ — WellSpr.ing/NetSentinel civic-AI security layer show less	Bad Web Bot Web App Attack
🇮🇩 soc-yk	2026-07-06 15:18:12 (27 minutes ago)	Type: web_scanning Risk: 100 Events: 115 Evidence: - Automated hostile web probing detected - Repea ... show more Type: web_scanning Risk: 100 Events: 115 Evidence: - Automated hostile web probing detected - Repeated web scanning activity observed - Multi-event operational persistence identified - Threat escalation behavior observed show less	Web App Attack
🇮🇩 zam	2026-07-06 15:14:08 (31 minutes ago)	52.140.125.52 - - [06/Jul/2026:15:13:58 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 52.140.125.52 - - [06/Jul/2026:15:13:58 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 81174 52.140.125.52 - - [06/Jul/2026:15:13:59 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 81174 52.140.125.52 - - [06/Jul/2026:15:13:59 +0000] "GET /admin.php HTTP/1.1" 404 81174 52.140.125.52 - - [06/Jul/2026:15:14:00 +0000] "GET /public/css.php HTTP/1.1" 404 81174 52.140.125.52 - - [06/Jul/2026:15:14:00 +0000] "GET /classwithtostring.php HTTP/1.1" 404 81174 {"log":"52.140.125.52 - - [06/Jul/2026:15:14:01 +0000] show less	Web App Attack
🇧🇪 voormedia	2026-07-06 15:03:01 (42 minutes ago)	Accessed trap at '/admin.php'	Web App Attack
🇬🇧 cybersteve99	2026-07-06 14:57:06 (48 minutes ago)	Too many 4xx Requests -	Brute-Force Web App Attack
🇩🇪 R.G.	2026-07-06 14:56:15 (49 minutes ago)	(ScanningForFiles) Scanning for files triggerd 52.140.125.52 (IN/India/-): 10 in the last 900 secs; ... show more (ScanningForFiles) Scanning for files triggerd 52.140.125.52 (IN/India/-): 10 in the last 900 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇧🇾 lns.bz	2026-07-06 14:51:56 (53 minutes ago)	Too many 404 requests [BY]	Web App Attack
🇫🇷 Lacrimosa99	2026-07-06 14:46:21 (58 minutes ago)	52.140.125.52 - - [06/Jul/2026:16:46:18 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 52.140.125.52 - - [06/Jul/2026:16:46:18 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 6253 "-" "-" 52.140.125.52 - - [06/Jul/2026:16:46:19 +0200] "GET /admin.php HTTP/1.1" 404 267 "-" "-" 52.140.125.52 - - [06/Jul/2026:16:46:20 +0200] "GET /wp-content/admin.php HTTP/1.1" 404 363 "-" "-" ... show less	Web Spam

Showing 1 to 15 of 90 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.84.168.62

🇺🇸 66.132.186.228

🇫🇷 54.37.8.159

🇸🇬 34.87.10.248

🇺🇸 216.244.66.197

🇮🇶 169.224.89.87

🇮🇳 103.86.180.10

🇯🇵 47.74.13.101

🇵🇰 43.230.92.32

🇸🇪 213.65.190.48

🇺🇸 207.180.29.33

🇩🇪 159.69.196.210

🇵🇭 143.44.192.160

🇷🇴 80.94.92.234

🇺🇸 70.125.121.10

🇨🇳 36.106.167.39

🇷🇺 2a09:bac1:6180:3380::388:7a

🇺🇸 172.253.0.29

🇱🇹 62.60.130.148

🇸🇬 47.79.11.214