JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.150.15.31

52.150.15.31 was found in our database!

This IP was reported 63 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Washington, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.150.15.31

Whois 52.150.15.31

IP Abuse Reports for 52.150.15.31:

This IP address has been reported a total of 63 times from 20 distinct sources. 52.150.15.31 was first reported on May 9th 2024, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Linuxmalwarehuntingnl	2024-07-02 07:03:53 (1 year ago)	Unauthorized connection attempt	Brute-Force
🇺🇸 TPI-Abuse	2024-06-04 03:51:05 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 52.150.15.31 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 52.150.15.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 03 23:50:59.339243 2024] [security2:error] [pid 2342251] [client 52.150.15.31:50066] [client 52.150.15.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gracebaptisthartsville.com"] [uri "/.env"] [unique_id "Zl6PIzK9Sh_JTVLK09_J-QAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Swiptly	2024-06-03 11:21:26 (2 years ago)	Multiple critical ModSecurity events ...	Web Spam Bad Web Bot
🇩🇪 conseilgouz	2024-06-03 10:20:42 (2 years ago)	ave-17 : Block hidden directories=>/.env(/)	Hacking
🇺🇸 TPI-Abuse	2024-06-02 11:48:49 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 52.150.15.31 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 52.150.15.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 02 07:48:43.474165 2024] [security2:error] [pid 22465] [client 52.150.15.31:33146] [client 52.150.15.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lifestyledreamvacation.com"] [uri "/.env"] [unique_id "ZlxcG6DA_9zZmKuhuBE3NgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇱 www.afrohosting.cl	2024-06-01 16:40:56 (2 years ago)	Brute force	Brute-Force
🇺🇸 TPI-Abuse	2024-06-01 11:04:59 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 52.150.15.31 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 52.150.15.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 01 07:04:53.661949 2024] [security2:error] [pid 12399] [client 52.150.15.31:36092] [client 52.150.15.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "personinenvironment.com"] [uri "/.env"] [unique_id "ZlsAVbrJfCDfTU9hZoV_8AAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-06-01 10:48:29 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 52.150.15.31 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 52.150.15.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 01 06:48:25.292003 2024] [security2:error] [pid 29223] [client 52.150.15.31:43336] [client 52.150.15.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pattymoorearmstrong.com"] [uri "/.env"] [unique_id "Zlr8eUga32ywI436kMXsoAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-06-01 06:23:52 (2 years ago)	(mod_security) mod_security (id:217200) triggered by 52.150.15.31 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:217200) triggered by 52.150.15.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 01 02:23:43.873936 2024] [security2:error] [pid 12792] [client 52.150.15.31:51564] [client 52.150.15.31] ModSecurity: Access denied with code 403 (phase 1). Match of "endsWith /wp-cron.php" against "REQUEST_FILENAME" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "103"] [id "217200"] [rev "2"] [msg "COMODO WAF: HTTP/1.1 POST request missing Content-Length Header\|\|notearsweb.com\|F\|2"] [data "/"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "notearsweb.com"] [uri "/"] [unique_id "Zlq-b4DEEk--rFUrbEEPywAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-05-31 05:49:28 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 52.150.15.31 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 52.150.15.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 31 01:49:20.543940 2024] [security2:error] [pid 22029] [client 52.150.15.31:50830] [client 52.150.15.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "relationshipecology.com"] [uri "/.env"] [unique_id "Zllk4Ej763V8r5AZ4dTodgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-05-31 05:23:40 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 52.150.15.31 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 52.150.15.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 31 01:23:37.115509 2024] [security2:error] [pid 24669] [client 52.150.15.31:59758] [client 52.150.15.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rejuvenationsystems.com"] [uri "/.env"] [unique_id "Zlle2X0oDehZrN5H0rHB5QAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-05-27 22:59:44 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 52.150.15.31 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 52.150.15.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 27 18:59:37.425021 2024] [security2:error] [pid 16333] [client 52.150.15.31:48392] [client 52.150.15.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cbsproductionsinc.com"] [uri "/.env"] [unique_id "ZlUQWcynbT-bcrPJJpCfGAAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-05-27 08:06:39 (2 years ago)	Excessive 404 Traffic Wordpress	Web App Attack
🇺🇸 TPI-Abuse	2024-05-26 00:52:51 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 52.150.15.31 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 52.150.15.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 25 20:52:48.899578 2024] [security2:error] [pid 31943] [client 52.150.15.31:59920] [client 52.150.15.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "partyblockbaby.com"] [uri "/.env"] [unique_id "ZlKH4POT27auSpgK2zO1NgAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 iNetWorker	2024-05-25 21:02:45 (2 years ago)	trolling for resource vulnerabilities	Web App Attack

Showing 1 to 15 of 63 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇴 190.60.40.165

🇺🇸 184.105.139.82

🇨🇳 183.221.20.144

🇺🇸 162.216.150.27

🇺🇸 162.216.149.125

🇫🇮 147.185.133.104

🇨🇳 120.229.47.149

🇺🇸 97.93.43.157

🇧🇷 45.205.1.245

🇳🇱 45.198.224.5

🇳🇱 45.148.10.151

🇮🇳 13.203.230.229

🇺🇸 216.25.89.71

🇮🇪 207.254.29.22

🇧🇷 200.79.187.255

🇬🇧 192.248.150.180

🇬🇹 181.78.109.48

🇸🇬 172.253.211.85

🇺🇸 172.111.36.128

🇭🇰 150.5.148.103