JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

52.149.159.169

Neutral Activity

Abuse confidence score ?

0% Low Risk

344 reports

171 reporters · latest 2 years ago

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Dulles Town Center, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

52.149.159.169 has been reported 344 times. The most recent report is from 2 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 52.149.159.169

Export CSV

This IP address has been reported a total of 344 times from 171 distinct sources. 52.149.159.169 was first reported on April 9th 2022, and the most recent report was 2 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇸 Smel	2023-11-17 15:54:04 (2 years ago)	HTTP/80/443/8080 Unauthorized Probe, Hack -	Hacking Web App Attack
🇷🇸 Smel	2023-03-30 16:21:45 (3 years ago)	HTTP/80/443/8080 Probe, Hack -	Hacking Web App Attack
Anonymous	2022-10-13 21:24:57 (3 years ago)	52.149.159.169 - - [14/Oct/2022:03:24:56 +0200] "GET /.env HTTP/1.1" 403 400 "-" "Mozilla/5.0 (Windo ... show more 52.149.159.169 - - [14/Oct/2022:03:24:56 +0200] "GET /.env HTTP/1.1" 403 400 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36" 52.149.159.169 - - [14/Oct/2022:03:24:56 +0200] "GET /conf/.env HTTP/1.1" 403 400 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36" 52.149.159.169 - - [14/Oct/2022:03:24:56 +0200] "GET /wp-content/.env HTTP/1.1" 403 400 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36" ... show less	Web App Attack
🇫🇷 LRNP	2022-10-13 21:15:21 (3 years ago)	_ 52.149.159.169 - - [14/Oct/2022:01:15:19 +0000] "GET /.env HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Win ... show more _ 52.149.159.169 - - [14/Oct/2022:01:15:19 +0000] "GET /.env HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36" ... show less	Bad Web Bot Web App Attack
Anonymous	2022-10-13 04:10:38 (3 years ago)	(mod_security) mod_security triggered on hostname [redacted] 52.149.159.169 (US/United States/-): ( ... show more (mod_security) mod_security triggered on hostname [redacted] 52.149.159.169 (US/United States/-): (CF_ENABLE) show less	SQL Injection
🇩🇪 ISPLtd	2022-10-12 18:26:19 (3 years ago)	52.149.159.169 - - [12/Oct/2022:19:26:18 -0300] "GET /.env ...	Hacking Web App Attack
🇺🇸 Moby	2022-10-11 23:59:05 (3 years ago)	Tue Oct 11 22:03:01.184883 202252.149.159.169 - - [11/Oct/2022:22:59:03 -0500] "GET /conf/.env HTTP/ ... show more Tue Oct 11 22:03:01.184883 202252.149.159.169 - - [11/Oct/2022:22:59:03 -0500] "GET /conf/.env HTTP/1.1" 404 984 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36" Tue Oct 11 22:03:01.184883 202252.149.159.169 - - [11/Oct/2022:22:59:03 -0500] "GET /wp-content/.env HTTP/1.1" 404 984 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36" Tue Oct 11 22:03:01.184883 202252.149.159.169 - - [11/Oct/2022:22:59:04 -0500] "GET /wp-admin/.env HTTP/1.1" 404 984 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36" ... show less	Web App Attack
🇸🇪 Lemmy	2022-10-11 23:15:15 (3 years ago)	apache-noscript	Web App Attack
🇺🇸 FireballDWF	2022-10-11 03:00:16 (3 years ago)	404 NOT FOUND	Web App Attack
Anonymous	2022-10-11 02:45:31 (3 years ago)	52.149.159.169 - - [11/Oct/2022:08:45:31 +0200] "GET /.env HTTP/1.1" 403 400 "-" "Mozilla/5.0 (Windo ... show more 52.149.159.169 - - [11/Oct/2022:08:45:31 +0200] "GET /.env HTTP/1.1" 403 400 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36" ... show less	Web App Attack
Anonymous	2022-10-11 01:53:09 (3 years ago)	(mod_security) mod_security triggered on hostname [redacted] 52.149.159.169 (US/United States/-): ( ... show more (mod_security) mod_security triggered on hostname [redacted] 52.149.159.169 (US/United States/-): (CF_ENABLE) show less	SQL Injection
🇨🇦 JuicyJ	2022-10-07 09:21:52 (3 years ago)	web app common files attack	Hacking
🇩🇪 ISPLtd	2022-10-07 08:03:19 (3 years ago)	52.149.159.169 - - [07/Oct/2022:09:03:19 -0300] "GET /.env ...	Hacking Web App Attack
Anonymous	2022-10-06 20:05:51 (3 years ago)	Fail2Ban triggered	Web App Attack
🇺🇸 npcautomotive.com	2022-10-06 10:23:54 (4 years ago)	52.149.159.169 - - [06/Oct/2022:14:23:56 +0000] "GET /.env HTTP/1.1" 301 245 "-" "Mozilla/5.0 (Windo ... show more 52.149.159.169 - - [06/Oct/2022:14:23:56 +0000] "GET /.env HTTP/1.1" 301 245 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36" ... show less	Hacking

Showing 1 to 15 of 344 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 212.104.78.210

🇺🇸 147.185.132.103

🇺🇸 136.71.91.255

🇨🇳 120.48.45.34

🇧🇷 179.125.129.191

🇻🇳 171.250.186.248

🇺🇸 146.190.222.193

🇺🇸 139.144.239.72

🇺🇸 138.197.24.249

🇨🇳 112.29.109.174

🇳🇱 109.160.32.157

🇳🇱 45.148.10.152

🇷🇴 2.57.121.25

🇳🇱 2600:3c0e::2000:5aff:fe94:f9f7

🇺🇸 147.90.234.22

🇭🇰 123.58.213.118

🇮🇳 103.89.136.111

🇭🇰 101.36.118.248

🇫🇷 85.217.140.47

🇵🇰 39.46.174.248