JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.141.19.25

52.141.19.25 was found in our database!

This IP was reported 514 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.141.19.25

Whois 52.141.19.25

IP Abuse Reports for 52.141.19.25:

This IP address has been reported a total of 514 times from 414 distinct sources. 52.141.19.25 was first reported on August 22nd 2026, and the most recent report was 10 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Epimetheus	2026-08-23 12:22:32 (10 minutes ago)	Unauthorized access attempts: [GET] /3cf97/index.php [GET] /12.php [GET] /19.php [GET] /term.php [G ... show more Unauthorized access attempts: [GET] /3cf97/index.php [GET] /12.php [GET] /19.php [GET] /term.php [GET] /about.php [GET] /wp-includes/ID3/about.php [GET] /wp-includes/Text/ [GET] /ts.php [GET] /bak.php [GET] /olik.php [GET] /wp-includes/blocks/details/ [GET] /wp-content/uploads/ [GET] /.well-known/about.php [GET] //wp-content/admin.php [GET] //wp-includes/Requests/ [GET] /wp-admin/css/colors/modern/ [GET] /wp-content/themes/index.php [GET] //wp-includes/l10n/ [GET] //wp-includes/css/dist/ [GET] //wp-includes/js/jquery/ [GET] //wp-includes/assets/ [GET] /wp-admin/css/colors/sunrise/ [GET] //cgi-bin/index.php [GET] /FWAZ.php [GET] /admin.php [GET] /kir.php [GET] //doc.php [GET] /ccc.php [GET] /hp2.php [GET] /reviall.php [GET] /too.php [GET] /aaa.php [GET] /bajah.php [GET] /155.php [GET] /fpwch.php [GET] /yj09.php [GET] //abcd.php [GET] /domvf.php [GET] /scxy.php [GET] /adminner.php [GET] /blurbs.php [GET] /simple.php [GET] /wp-load.php [GET] /classwithtostring.php [GET] /c ...(Truncated) show less	Web App Attack
🇩🇪 Hugopvigo	2026-08-23 12:21:38 (11 minutes ago)	[Sun Aug 23 14:21:32.868596 2026] [authz_core:error] [pid 1166248:tid 135311435843264] [client 52.14 ... show more [Sun Aug 23 14:21:32.868596 2026] [authz_core:error] [pid 1166248:tid 135311435843264] [client 52.141.19.25:0] AH01630: client denied by server configuration: /var/www/html/wordpress/wp-content/uploads/index.php [Sun Aug 23 14:21:37.094867 2026] [authz_core:error] [pid 1166248:tid 135310419666624] [client 52.141.19.25:0] AH01630: client denied by server configuration: /var/www/html/wordpress/wp-content/admin.php [Sun Aug 23 14:21:37.752315 2026] [authz_core:error] [pid 1166248:tid 135310579062464] [client 52.141.19.25:0] AH01630: client denied by server configuration: /var/www/html/wordpress/wp-content/themes/index.php ... show less	Hacking Brute-Force Web App Attack SSH
🇺🇸 Charlesiv	2026-08-23 12:16:53 (16 minutes ago)	Triggered Cloudflare WAF (botFight) from KR. Action taken: MANAGED_CHALLENGE ASN: 8075 (Microsoft Co ... show more Triggered Cloudflare WAF (botFight) from KR. Action taken: MANAGED_CHALLENGE ASN: 8075 (Microsoft Corporation) Protocol: HTTP/1.1 (GET method) Endpoint: / Timestamp: 2026-08-23T11:32:08Z Ray ID: a2f9cb828d6f20a4 UA: Empty string show less	Bad Web Bot
🇫🇷 Campus France	2026-08-23 12:16:52 (16 minutes ago)	[Sun Aug 23 14:16:51.786403 2026] [php:error] [pid 861498] [client 52.141.19.25:44395] script '/var/ ... show more [Sun Aug 23 14:16:51.786403 2026] [php:error] [pid 861498] [client 52.141.19.25:44395] script '/var/www/html/desk.radio-campus.org/desk/www/this_is_a_new_hello_world.php' not found or unable to stat ... show less	Brute-Force Web App Attack
🇩🇪 itsolon	2026-08-23 12:15:23 (18 minutes ago)	[23/Aug/2026:14:15:20 +0200] 178748732058.156210 52.141.19.25 54870 217.154.7.177 443 [23/Aug/2026:1 ... show more [23/Aug/2026:14:15:20 +0200] 178748732058.156210 52.141.19.25 54870 217.154.7.177 443 [23/Aug/2026:14:15:21 +0200] 17874873211.702386 52.141.19.25 34585 217.154.7.177 80 [23/Aug/2026:14:15:22 +0200] 178748732262.089673 52.141.19.25 54870 217.154.7.177 443 [23/Aug/2026:14:15:22 +0200] 178748732232.833845 52.141.19.25 34585 217.154.7.177 80 [23/Aug/2026:14:15:23 +0200] 178748732393.560358 52.141.19.25 54870 217.154.7.177 443 ... show less	Port Scan Hacking Brute-Force Web App Attack
🇳🇿 Antinson	2026-08-23 11:59:38 (33 minutes ago)	Scraping with a high error ratio and request rate Requests to unauthorized or suspicious endpoints ( ... show more Scraping with a high error ratio and request rate Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.) show less	Bad Web Bot
🇺🇸 kadour	2026-08-23 11:52:47 (40 minutes ago)	[Sun Aug 23 06:52:45.395494 2026] [proxy_fcgi:error] [pid 2853127:tid 2853235] [client 52.141.19.25: ... show more [Sun Aug 23 06:52:45.395494 2026] [proxy_fcgi:error] [pid 2853127:tid 2853235] [client 52.141.19.25:41840] AH01071: Got error 'Primary script unknown' [Sun Aug 23 06:52:45.762747 2026] [proxy_fcgi:error] [pid 2853127:tid 2853237] [client 52.141.19.25:41840] AH01071: Got error 'Primary script unknown' [Sun Aug 23 06:52:46.120243 2026] [proxy_fcgi:error] [pid 2853127:tid 2853240] [client 52.141.19.25:41840] AH01071: Got error 'Primary script unknown' [Sun Aug 23 06:52:46.459338 2026] [proxy_fcgi:error] [pid 2853127:tid 2853241] [client 52.141.19.25:41840] AH01071: Got error 'Primary script unknown' [Sun Aug 23 06:52:46.839403 2026] [proxy_fcgi:error] [pid 2853127:tid 2853243] [client 52.141.19.25:41840] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇺🇸 xmission.com	2026-08-23 11:49:50 (43 minutes ago)	Blocked by UFW (TCP on 80) Source port: 34563 TTL: 115 Packet length: 52 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 80) Source port: 34563 TTL: 115 Packet length: 52 TOS: 0x00 This report (for 52.141.19.25) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
Anonymous	2026-08-23 11:39:05 (54 minutes ago)	Excessive 404 errors - web scanning/probing	Bad Web Bot
🇷🇴 clauss	2026-08-23 11:33:34 (59 minutes ago)	52.141.19.25 - - [23/Aug/2026:14:33:32 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 52.141.19.25 - - [23/Aug/2026:14:33:32 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/2.0" 404 13366 "-" "-" 52.141.19.25 - - [23/Aug/2026:14:33:34 +0300] "GET /222.php HTTP/2.0" 404 13366 "-" "-" ... show less	Web App Attack
Anonymous	2026-08-23 11:33:02 (1 hour ago)	Aggressive web scan	Bad Web Bot Web App Attack
🇩🇪 hchristo	2026-08-23 11:32:40 (1 hour ago)	[Sun Aug 23 13:32:38.408525 2026] [proxy_fcgi:error] [pid 52510:tid 52595] [client 52.141.19.25:5379 ... show more [Sun Aug 23 13:32:38.408525 2026] [proxy_fcgi:error] [pid 52510:tid 52595] [client 52.141.19.25:53797] AH01071: Got error 'Primary script unknown' [Sun Aug 23 13:32:38.907047 2026] [proxy_fcgi:error] [pid 52510:tid 52605] [client 52.141.19.25:53797] AH01071: Got error 'Primary script unknown' [Sun Aug 23 13:32:39.403292 2026] [proxy_fcgi:error] [pid 52510:tid 52579] [client 52.141.19.25:53797] AH01071: Got error 'Primary script unknown' [Sun Aug 23 13:32:39.898726 2026] [proxy_fcgi:error] [pid 52510:tid 52611] [client 52.141.19.25:53797] AH01071: Got error 'Primary script unknown' [Sun Aug 23 13:32:40.396509 2026] [proxy_fcgi:error] [pid 52510:tid 52591] [client 52.141.19.25:53797] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force
🇺🇸 Rocky Mountain Bioengineering Symposium	2026-08-23 11:31:33 (1 hour ago)	[Sat Aug 22 21:40:30.453514 2026] [cgid:error] [pid 183470:tid 139830713251392] [client 52.141.19.25 ... show more [Sat Aug 22 21:40:30.453514 2026] [cgid:error] [pid 183470:tid 139830713251392] [client 52.141.19.25:65123] AH01264: script not found or unable to stat: /usr/lib/cgi-bin/index.php [Sun Aug 23 03:56:39.754761 2026] [cgid:error] [pid 183470:tid 139831619335744] [client 52.141.19.25:31717] AH01264: script not found or unable to stat: /usr/lib/cgi-bin/index.php [Sun Aug 23 05:31:32.367203 2026] [cgid:error] [pid 183735:tid 139832424642112] [client 52.141.19.25:27434] AH01264: script not found or unable to stat: /usr/lib/cgi-bin/index.php ... show less	Web App Attack
🇵🇹 rooster	2026-08-23 11:29:01 (1 hour ago)	[23/Aug/2026:12:28:59 +0100] 404 - GET http a109-49-176-159.cpe.netcabo.pt "/wp-content/plugins/hell ... show more [23/Aug/2026:12:28:59 +0100] 404 - GET http a109-49-176-159.cpe.netcabo.pt "/wp-content/plugins/hellopress/wp_filemanager.php" [Client 52.141.19.25] [Length 150] [Gzip -] "-" "-" [23/Aug/2026:12:28:59 +0100] 404 - GET http a109-49-176-159.cpe.netcabo.pt "/this_is_a_new_hello_world.php" [Client 52.141.19.25] [Length 150] [Gzip -] "-" "-" [23/Aug/2026:12:29:00 +0100] 404 - GET http a109-49-176-159.cpe.netcabo.pt "/3PJcpMFsD8B.php" [Client 52.141.19.25] [Length 150] [Gzip -] "-" "-" [23/Aug/2026:12:29:00 +0100] 404 - GET http a109-49-176-159.cpe.netcabo.pt "/5PJcpMFsD8B.php" [Client 52.141.19.25] [Length 150] [Gzip -] "-" "-" [23/Aug/2026:12:29:00 +0100] 404 - GET http a109-49-176-159.cpe.netcabo.pt "/4PJcpMFsD8B.php" [Client 52.141.19.25] [Length 150] [Gzip -] "-" "-" ... show less	Hacking Web App Attack
🇦🇺 Klaverstyn	2026-08-23 11:21:48 (1 hour ago)	Cross-vhost secrets/RCE probing campaign	Web App Attack Hacking

Showing 1 to 15 of 514 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 179.63.64.165

🇫🇮 147.185.133.77

🇬🇧 104.207.53.80

🇺🇸 64.62.156.176

🇬🇧 35.203.210.75

🇧🇷 34.39.203.201

🇷🇺 185.49.240.109

🇺🇸 171.22.217.220

🇳🇱 160.119.66.13

🇺🇸 143.198.132.119

🇭🇰 104.208.99.163

🇷🇺 95.37.158.18

🇷🇺 77.106.23.113

🇩🇪 69.5.169.108

🇱🇹 62.60.130.201

🇸🇬 51.79.130.176

🇺🇸 45.61.177.186

🇨🇦 24.122.136.94

🇨🇦 20.151.9.127

🇬🇧 193.163.125.198