JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.140.193.66

52.140.193.66 was found in our database!

This IP was reported 210 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.140.193.66

Whois 52.140.193.66

IP Abuse Reports for 52.140.193.66:

This IP address has been reported a total of 210 times from 178 distinct sources. 52.140.193.66 was first reported on July 7th 2026, and the most recent report was 23 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Catalin Negru	2026-07-11 07:39:49 (23 hours ago)	Recidive ban by fail2ban on server.blackbit.ro	Brute-Force
🇺🇸 Rayulcifer	2026-07-10 20:51:50 (1 day ago)	[Tue Jul 07 11:45:37.807111 2026] [access_compat:error] [pid 2445283:tid 123146954852032] [client 52 ... show more [Tue Jul 07 11:45:37.807111 2026] [access_compat:error] [pid 2445283:tid 123146954852032] [client 52.140.193.66:7531] AH01797: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php [Tue Jul 07 11:45:38.020512 2026] [access_compat:error] [pid 2445283:tid 123147558831808] [client 52.140.193.66:7531] AH01797: client denied by server configuration: proxy:http://localhost:4000/this_is_a_new_hello_world.php [Tue Jul 07 11:45:38.213156 2026] [access_compat:error] [pid 2445283:tid 123147799598784] [client 52.140.193.66:7531] AH01797: client denied by server configuration: proxy:http://localhost:4000/index.php/wp-includes/PHPMailer/ [Tue Jul 07 11:45:38.376251 2026] [access_compat:error] [pid 2445283:tid 123147550439104] [client 52.140.193.66:7531] AH01797: client denied by server configuration: proxy:http://localhost:4000/wk/index.php [Tue Jul 07 11:45:38.587685 2026] [access_compat:error] [pid 2445283:tid 123145344239296] [client 5 ... show less	Brute-Force SSH
Anonymous	2026-07-10 11:14:00 (1 day ago)	"Packet Flood; Triggered WAF; Multiple attempts to access nonexistent vulnerable php files"	DDoS Attack
🇩🇪 milcraft.nl	2026-07-08 21:09:49 (3 days ago)	Honeypot / Fake URL Access: Access to hidden and / or intentionally fake URLs designed to detect aut ... show more Honeypot / Fake URL Access: Access to hidden and / or intentionally fake URLs designed to detect automated scanners or malicious bots. .env, .env.local, .env.production, .htpasswd Activity is consistent with web application abuse. show less	Hacking
Anonymous	2026-07-08 16:08:04 (3 days ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: JP, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: JP, Attack patterns: WordPress scanning, Webshell probing, Cloud secrets probing show less	Bad Web Bot Web App Attack
🇧🇪 Ivo Vynckier	2026-07-08 09:38:00 (3 days ago)	52.140.193.66 - - [07/Jul/2026:20:03:17 +0200] "GET /wk/index.php HTTP/1.1" 301 298 "-" "-" 52.140. ... show more 52.140.193.66 - - [07/Jul/2026:20:03:17 +0200] "GET /wk/index.php HTTP/1.1" 301 298 "-" "-" 52.140.193.66 - - [07/Jul/2026:20:03:18 +0200] "GET /function/function.php HTTP/1.1" 301 307 "-" "-" 52.140.193.66 - - [07/Jul/2026:20:03:18 +0200] "GET /wp-content/uploads/index.php HTTP/1.1" 301 314 "-" "-" 52.140.193.66 - - [07/Jul/2026:20:03:19 +0200] "GET /themes.php HTTP/1.1" 301 296 "-" "-" 52.140.193.66 - - [07/Jul/2026:20:03:19 +0200] "GET /randkeyword.PhP7 HTTP/1.1" 301 302 "-" "-" 52.140.193.66 - - [07/Jul/2026:20:03:20 +0200] "GET /ws.php HTTP/1.1" 301 292 "-" "-" 52.140.193.66 - - [07/Jul/2026:20:03:20 +0200] "GET /wp-conf.php HTTP/1.1" 301 297 "-" "-" 52.140.193.66 - - [07/Jul/2026:20:03:21 +0200] "GET /wp-login.php HTTP/1.1" 301 298 "-" "-" 52.140.193.66 - - [07/Jul/2026:20:03:21 +0200] "GET /as.php HTTP/1.1" 301 292 "-" "-" 52.140.193.66 - - [07/Jul/2026:20:03:22 +0200] "GET /class-t.api.php HTTP/1.1" 301 301 "-" "-" show less	Web App Attack
🇵🇱 dzpk	2026-07-08 04:36:50 (4 days ago)	52.140.193.66 - - [07/Jul/2026:20:26:42 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 52.140.193.66 - - [07/Jul/2026:20:26:42 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 848 "-" "-" show less	Bad Web Bot Web App Attack
🇧🇪 taivas.nl	2026-07-08 04:32:25 (4 days ago)	Many_bad_calls	Web App Attack
🇲🇽 octageeks.com	2026-07-08 04:22:29 (4 days ago)	Wordpress malicious attack:[octascan]	Web App Attack
Anonymous	2026-07-08 00:49:06 (4 days ago)	"GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1"	Hacking Web App Attack
🇫🇷 SpaceHost-Server	2026-07-07 22:35:05 (4 days ago)		Brute-Force Web App Attack
🇫🇷 Jimbo67	2026-07-07 22:02:48 (4 days ago)	Cloudflare WAF: 18 hits in 30s \| action=block \| abuse=suspicious_probe \| categories=19,21 \| rule_id= ... show more Cloudflare WAF: 18 hits in 30s \| action=block \| abuse=suspicious_probe \| categories=19,21 \| rule_id=6b3b6f80935d46c4bca5505114ee3942 \| URIs=/2P.php,/BDKR28,/class-t.api.php,/class.php,/config-backup.php \| confidence=0.82 show less	Bad Web Bot Web App Attack
🇺🇸 infra-monitor	2026-07-07 22:00:08 (4 days ago)	Automated ban via infra-monitor: webshell-high-confidence, php-known-backdoor, wp-sensitive-paths, + ... show more Automated ban via infra-monitor: webshell-high-confidence, php-known-backdoor, wp-sensitive-paths, +6 more show less	Port Scan Hacking Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-07 21:59:04 (4 days ago)	Auto-ban: >3000 req/min op 2026-07-07	Web App Attack SSH Hacking
🇩🇪 DaleCooper	2026-07-07 21:44:50 (4 days ago)	52.140.193.66 - - [07/Jul/2026:23:42:45 +0200] "GET /wp-login.php HTTP/1.1" 404 139 "-" "-" 52.140.1 ... show more 52.140.193.66 - - [07/Jul/2026:23:42:45 +0200] "GET /wp-login.php HTTP/1.1" 404 139 "-" "-" 52.140.193.66 - - [07/Jul/2026:23:42:58 +0200] "GET /wp-signup.php HTTP/1.1" 404 139 "-" "-" ... show less	Brute-Force

Showing 1 to 15 of 210 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇴 193.32.162.84

🇲🇽 187.190.35.163

🇩🇪 185.242.3.82

🇨🇳 180.76.245.60

🇺🇸 172.253.198.157

🇹🇭 165.154.119.20

🇺🇸 136.144.33.187

🇨🇳 124.152.53.142

🇮🇳 103.158.40.65

🇩🇪 69.5.169.107

🇭🇰 47.243.58.151

🇧🇷 205.210.31.230

🇬🇧 198.244.242.182

🇸🇨 196.251.121.141

🇬🇧 194.50.235.136

🇨🇱 172.217.39.155

🇺🇸 162.216.150.30

🇩🇪 162.19.246.208

🇺🇸 143.198.79.98

🇹🇷 94.154.43.88