JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.141.56.133

52.141.56.133 was found in our database!

This IP was reported 123 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.141.56.133

Whois 52.141.56.133

IP Abuse Reports for 52.141.56.133:

This IP address has been reported a total of 123 times from 108 distinct sources. 52.141.56.133 was first reported on July 1st 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 openstrike.co.uk	2026-07-02 05:15:09 (1 hour ago)	539 attacks on PHP URLs: GET /inputs.php HTTP/1.1	Web App Attack
🇹🇭 thaizone.com	2026-07-02 03:43:02 (2 hours ago)	Hacking attempts against websites (D1) #1	Web App Attack Hacking
Anonymous	2026-07-02 03:33:58 (2 hours ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇺🇸 Major Hostility	2026-07-02 03:22:51 (3 hours ago)	"GET /xmlrpc.php HTTP/1.1" 403 "GET /a.php HTTP/1.1" 404 "GET /aa.php HTTP/1.1" 404 "GET /aaa.php HT ... show more "GET /xmlrpc.php HTTP/1.1" 403 "GET /a.php HTTP/1.1" 404 "GET /aa.php HTTP/1.1" 404 "GET /aaa.php HTTP/1.1" 404 "GET /ab.php HTTP/1.1" 404 "GET /lock360.php HTTP/1.1" 404 "GET /anonse/lock360.php HTTP/1.1" 404 "GET /file5.php HTTP/1.1" 404 "GET /sitemaps.php HTTP/1.1" 404 "GET /ioxi-o.php HTTP/1.1" 404 "GET /load.php HTTP/1.1" 404 "GET /k.php HTTP/1.1" 404 "GET /autoload_classmap.php HTTP/1.1" 404 "GET /post.php HTTP/1.1" 404 "GET /1.php HTTP/1.1" 404 "GET /flower.php HTTP/1.1" 404 "GET /admin.php HTTP/1.1" 404 "GET /file.php HTTP/1.1" 404 "GET /default.php HTTP/1.1" 404 "GET /defaults.php HTTP/1.1" 404 "GET /meta.php HTTP/1.1" 404 "GET /index.php% show less	Web App Attack
Anonymous	2026-07-02 03:22:07 (3 hours ago)	52.141.56.133 - - [02/Jul/2026:05:22:01 +0200] "GET /a.php HTTP/1.1" 404 52838 52.141.56.133 - - [02 ... show more 52.141.56.133 - - [02/Jul/2026:05:22:01 +0200] "GET /a.php HTTP/1.1" 404 52838 52.141.56.133 - - [02/Jul/2026:05:22:01 +0200] "GET /aa.php HTTP/1.1" 404 52838 52.141.56.133 - - [02/Jul/2026:05:22:02 +0200] "GET /aaa.php HTTP/1.1" 404 52838 52.141.56.133 - - [02/Jul/2026:05:22:02 +0200] "GET /ab.php HTTP/1.1" 404 52838 52.141.56.133 - - [02/Jul/2026:05:22:02 +0200] "GET /lock360.php HTTP/1.1" 404 52838 52.141.56.133 - - [02/Jul/2026:05:22:03 +0200] "GET /anonse/lock360.php HTTP/1.1" 404 52838 52.141.56.133 - - [02/Jul/2026:05:22:03 +0200] "GET /file5.php HTTP/1.1" 404 48040 52.141.56.133 - - [02/Jul/2026:05:22:04 +0200] "GET /sitemaps.php HTTP/1.1" 404 52838 52.141.56.133 - - [02/Jul/2026:05:22:04 +0200] "GET /ioxi-o.php HTTP/1.1" 404 52838 52.141.56.133 - - [02/Jul/2026:05:22:05 +0200] "GET /load.php HTTP/1.1" 404 52838 ... show less	Web Spam Web App Attack
🇺🇸 antlac1	2026-07-02 02:54:07 (3 hours ago)	crowdsecurity/http-backdoors-attempts	Brute-Force Web App Attack
🇩🇪 LRob.fr	2026-07-02 02:30:05 (4 hours ago)	Repeated 404 errors, blocked by Fail2ban in custom-404 jail	Bad Web Bot
🇺🇸 etu brutus	2026-07-02 02:16:48 (4 hours ago)	52.141.56.133 Blocked by [Attack Vector List] ...	Hacking Brute-Force Exploited Host
🇬🇷 setupgr	2026-07-02 02:08:29 (4 hours ago)	(mod_security) mod_security (id:1000001) triggered by 52.141.56.133 (KR/South Korea/Seoul/Yongsan-do ... show more (mod_security) mod_security (id:1000001) triggered by 52.141.56.133 (KR/South Korea/Seoul/Yongsan-dong/-/[AS8075 MICROSOFT-CORP-MSN-AS-BLOCK]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Thu Jul 02 05:08:29.350122 2026] [security2:error] [pid 3340895:tid 3340937] [remote 52.141.56.133:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/ioxi-o.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "103"] [id "1000001"] [msg "Bad file blocked: /ioxi-o.php"] [severity "CRITICAL"] [tag "security"] [hostname "www.endoscope.center"] [uri "/ioxi-o.php"] [unique_id "akXIHahRuBy9UGqIjqvYdwAGGAU"] show less	Port Scan
🇺🇸 sandap1	2026-07-02 02:05:03 (4 hours ago)	Blocked by os-abuseipdb; 4 hits, proto=tcp, ports=443,src_ip=52.141.56.133	Port Scan Hacking
🇧🇪 voormedia	2026-07-02 01:58:05 (4 hours ago)	Accessed trap at '/admin.php'	Web App Attack
🇩🇪 Philister11	2026-07-02 01:55:29 (4 hours ago)	CrowdSec: crowdsecurity/http-wordpress-scan (KR/AS8075)	Web App Attack
🇳🇴 Abuse Buster	2026-07-02 01:47:40 (4 hours ago)	52.141.56.133 - [02/Jul/2026:03:47:37 +0200] "GET /a.php HTTP/2.0" 404 36 "-" "Mozilla/5.0 (Windows ... show more 52.141.56.133 - [02/Jul/2026:03:47:37 +0200] "GET /a.php HTTP/2.0" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.56.133 - [02/Jul/2026:03:47:38 +0200] "GET /aa.php HTTP/2.0" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.56.133 - [02/Jul/2026:03:47:38 +0200] "GET /aaa.php HTTP/2.0" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.56.133 - [02/Jul/2026:03:47:38 +0200] "GET /ab.php HTTP/2.0" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇳🇱 enpepet	2026-07-02 01:40:11 (4 hours ago)	GENERAL: parametres: [url:xmlrpc=] UA:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 ( ... show more GENERAL: parametres: [url:xmlrpc=] UA:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 URL:/xmlrpc.php show less	Port Scan Hacking Brute-Force Bad Web Bot
🇩🇪 Philister11	2026-07-02 01:36:09 (4 hours ago)	CrowdSec: crowdsecurity/http-backdoors-attempts (KR/AS8075)	Web App Attack Hacking

Showing 1 to 15 of 123 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 189.90.55.243

🇫🇮 178.20.210.152

🇺🇸 162.216.149.79

🇯🇵 8.216.17.250

🇺🇸 3.129.187.38

🇬🇧 2a00:1450:4009:c0f::12b

🇦🇫 149.54.62.58

🇲🇽 101.44.187.115

🇩🇪 69.5.169.70

🇮🇳 58.84.61.115

🇧🇪 35.205.111.42

🇬🇧 35.203.210.85

🇬🇧 2a00:1450:4009:c19::12d

🇬🇧 2a00:1450:4009:c00::12c

🇰🇷 211.253.31.30

🇺🇸 192.169.244.109

🇳🇱 176.65.148.197

🇫🇮 173.194.98.19

🇧🇷 168.194.64.3

🇫🇷 161.97.183.231