JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

52.157.237.253

Neutral Activity

Abuse Confidence Score

0% Low Risk

200 reports

88 reporters · latest 6 months ago

ISP: Microsoft Corporation
Usage Type: Data Center/Web Hosting/Transit
ASN: AS8075
Domain Name: microsoft.com
Country: 🇳🇱 Netherlands
City: Amsterdam, North Holland

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

52.157.237.253 has been reported 200 times. The most recent report is from 6 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

200 from 88 distinct reporters

First reported

January 5th 2026

Most recent report

6 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob	2026-05-01 16:37:27 UTC · (6 months ago)	Apache web server attack detected by Fail2Ban in plesk-apache jail	Web App Attack
Anonymous	2026-01-26 19:30:20 UTC · (9 months ago)	Failed Wordpress Logins	Web App Attack
Anonymous	2026-01-16 03:00:20 UTC · (9 months ago)	Failed Wordpress Logins	Web App Attack
Anonymous	2026-01-10 18:30:19 UTC · (10 months ago)	Failed Wordpress Logins	Web App Attack
🇫🇷 SpaceHost-Server	2026-01-08 23:42:37 UTC · (10 months ago)		Brute-Force Web App Attack
Anonymous	2026-01-08 02:00:28 UTC · (10 months ago)	Failed Wordpress Logins	Web App Attack
🇫🇷 tecnicorioja	2026-01-07 23:01:15 UTC · (10 months ago)	POST /xmlrpc.php [07/Jan/2026:08:41:14	Brute-Force Web App Attack
🇨🇦 KIsmay	2026-01-07 12:14:38 UTC · (10 months ago)	Jan 7 00:17:36 www4 WPAudit[3766649]: 52.157.237.253 www.amandasrestaurant.ca "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36" gina:1234567890 FAIL Jan 7 02:53:22 www4 WPAudit[3795141]: ... show more Jan 7 00:17:36 www4 WPAudit[3766649]: 52.157.237.253 www.amandasrestaurant.ca "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36" gina:1234567890 FAIL Jan 7 02:53:22 www4 WPAudit[3795141]: 52.157.237.253 valhallasafety.com "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.181 Safari/537.36" valhalla:valhalla@2025 FAIL Jan 7 04:42:31 www4 WPAudit[3813618]: 52.157.237.253 amandasrestaurant.ca "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.162 Safari/537.36" sbd-admin:sbd-admin123!@# FAIL Jan 7 07:04:10 www4 WPAudit[3823349]: 52.157.237.253 www.westkootenayrentals.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.170 Safari/537.36 OPR/53.0.2907.68" root:pass@2023 FAIL Jan 7 07:14:37 www4 WPAudit[3824033]: 52.157.237.253 amandasrestaurant.ca "Mozilla/5.0 (Windows ... show less	Brute-Force Web App Attack
🇫🇮 bittiguru.fi	2026-01-07 11:50:06 UTC · (10 months ago)	52.157.237.253 - [07/Jan/2026:13:49:39 +0200] "POST /xmlrpc.php HTTP/2.0" 404 9917 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; MALCJS; rv:11.0) like Gecko" "5.13" 52.157.237.253 - [07/Jan/2026:13:50:06 +0200] "POST /xmlrpc.php HTTP/2.0" 404 ... show more 52.157.237.253 - [07/Jan/2026:13:49:39 +0200] "POST /xmlrpc.php HTTP/2.0" 404 9917 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; MALCJS; rv:11.0) like Gecko" "5.13" 52.157.237.253 - [07/Jan/2026:13:50:06 +0200] "POST /xmlrpc.php HTTP/2.0" 404 9917 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; MALCJS; rv:11.0) like Gecko" "5.13" ... show less	Hacking Brute-Force Web App Attack
🇺🇸 smithclass.net	2026-01-07 11:33:35 UTC · (10 months ago)	Jan 7 11:33:35 gravy wordpress(lallygag.net)[724467]: Authentication attempt for unknown user maclallygag-net from 52.157.237.253 ...	Hacking Brute-Force
🇺🇸 rafled	2026-01-07 11:24:17 UTC · (10 months ago)	post to xmlrpc	Web App Attack
🇩🇪 psauxit	2026-01-07 11:09:41 UTC · (10 months ago)	Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrpc_attack, wp-login brute force, excessive crawling/scraping	Hacking Web App Attack
🇧🇷 leolemos	2026-01-07 11:06:01 UTC · (10 months ago)	52.157.237.253 - - [07/Jan/2026:08:05:34 -0300] "POST /wp-login.php HTTP/2.0" 200 3373 "[redacted]/wp-login.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/7.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729 ... show more 52.157.237.253 - - [07/Jan/2026:08:05:34 -0300] "POST /wp-login.php HTTP/2.0" 200 3373 "[redacted]/wp-login.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/7.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3; GWX:MANAGED)" 52.157.237.253 - - [07/Jan/2026:08:05:50 -0300] "POST /xmlrpc.php HTTP/2.0" 403 426 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.1.1 Safari/605.1.15" 52.157.237.253 - - [07/Jan/2026:08:05:56 -0300] "POST /xmlrpc.php HTTP/2.0" 403 426 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.1.1 Safari/605.1.15" 52.157.237.253 - - [07/Jan/2026:08:06:00 -0300] "POST /xmlrpc.php HTTP/2.0" 403 426 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.1.1 Safari/605.1.15" show less	Brute-Force Web App Attack
🇫🇮 bittiguru.fi	2026-01-07 10:40:42 UTC · (10 months ago)	52.157.237.253 - [07/Jan/2026:12:38:57 +0200] "POST /xmlrpc.php HTTP/2.0" 403 239 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; SLCC2; Media Center ... show more 52.157.237.253 - [07/Jan/2026:12:38:57 +0200] "POST /xmlrpc.php HTTP/2.0" 403 239 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; SLCC2; Media Center PC 6.0)" "1.73" 52.157.237.253 - [07/Jan/2026:12:40:41 +0200] "POST /xmlrpc.php HTTP/2.0" 404 9917 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; apetito Gruppe; rv:11.0) like Gecko" "5.13" ... show less	Hacking Brute-Force Web App Attack
🇵🇱 bmino.pl	2026-01-07 10:19:54 UTC · (10 months ago)	Autoban IP(2): 52.157.237.253 - Hostname: unknown - City: Amsterdam - Region: North Holland - Country: NL - Location: 52.3740,4.8897 - Organization: AS8075 Microsoft Corporation - failed attempts.	Web App Attack

Showing 1 to 15 of 200 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇩🇪 88.76.87.57

🇺🇸 50.21.79.233

🇧🇪 35.206.163.211

🇺🇸 18.191.255.164

🇻🇳 2a09:bac1:7ac0:10::3c3:26

🇨🇳 222.210.35.197

🇵🇹 185.92.210.73

🇧🇷 177.152.87.6

🇮🇳 122.166.252.192

🇺🇸 102.129.152.178

🇳🇱 77.239.124.78

🇺🇸 66.132.172.118

🇮🇳 49.207.1.170

🇨🇦 45.198.224.234

🇬🇧 45.133.173.41

🇺🇸 40.119.45.138

🇺🇸 20.221.74.121

🇰🇷 220.71.237.220

🇸🇬 178.128.54.199

🇧🇷 177.124.75.66