JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.167.144.179

52.167.144.179 was found in our database!

This IP was reported 2,050 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Hostname(s)	msnbot-52-167-144-179.search.msn.com
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Boydton, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Important Note: 52.167.144.179 is an IP address from within our benign crawler whitelist. We confidently believe it is not a bad bot. If you disagree, please provide us with compelling evidence.

Report 52.167.144.179

Whois 52.167.144.179

IP Abuse Reports for 52.167.144.179:

This IP address has been reported a total of 2,050 times from 165 distinct sources. 52.167.144.179 was first reported on March 2nd 2023, and the most recent report was 12 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 oncord	2026-06-15 07:43:49 (12 hours ago)	Form spam	Web Spam
🇪🇸 librebit	2026-06-15 03:30:26 (17 hours ago)	Brute force	Brute-Force
🇨🇭 SOC [GOLINE SA]	2026-06-15 03:07:12 (17 hours ago)	IDS Alert: ETN AGGRESSIVE IPs Group 11 === ATTACK === Signature: ETN AGGRESSIVE IPs Group 11 \| SID: ... show more IDS Alert: ETN AGGRESSIVE IPs Group 11 === ATTACK === Signature: ETN AGGRESSIVE IPs Group 11 \| SID: 5000011 \| Severity: 2 \| Category: Misc Attack === SOURCE === IP: 52.167.144.179 (IPv4) \| Port: 29985 \| Country: United States \| ISP: MSFT \| rDNS: msnbot-52-167-144-179.search.msn.com === TARGET === Host: lilys.ch \| IP: 185.54.81.50 \| Port: 443 \| Protocol: TCP \| App: N/A === RESPONSE === Time: 2026-06-15 05:07:12 \| Action: Blocked show less	Port Scan Hacking Bad Web Bot
🇫🇷 JPPO	2026-06-14 21:41:51 (22 hours ago)	ETN AGGRESSIVE IPs Group 17 ports , ports: 443(x2)	Port Scan
🇩🇪 findlab	2026-06-14 21:00:01 (23 hours ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
🇺🇸 fortypoundhead	2026-06-14 14:43:11 (1 day ago)	Banned IP Address	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-06-14 12:36:48 (1 day ago)	(mod_security) mod_security (id:210730) triggered by 52.167.144.179 (msnbot-52-167-144-179.search.ms ... show more (mod_security) mod_security (id:210730) triggered by 52.167.144.179 (msnbot-52-167-144-179.search.msn.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 08:36:42.499494 2026] [security2:error] [pid 26675:tid 26685] [client 52.167.144.179:26368] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|dubarch.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dubarch.com"] [uri "/ahmedalbanna.com"] [unique_id "ai6gWvS55JoBfgKL7MduUQAAAEY"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 oncord	2026-06-14 07:10:53 (1 day ago)	Form spam	Web Spam
🇫🇷 polido	2026-06-13 20:00:01 (2 days ago)	Unauthorized connection attempt to port 443 from 52.167.144.179	Port Scan
🇬🇷 setupgr	2026-06-13 17:59:16 (2 days ago)	(mod_security) mod_security (id:11000010) triggered by 52.167.144.179: 1 in the last 86400 secs; Por ... show more (mod_security) mod_security (id:11000010) triggered by 52.167.144.179: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Jun 13 20:59:11.202344 2026] [security2:error] [pid 921889:tid 946216] [remote 52.167.144.179:0] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "bingbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "103"] [id "11000010"] [msg "BLOCKED BOT: bingbot - in michalismaniatis.com"] [severity "CRITICAL"] [hostname "michalismaniatis.com"] [uri "/sitemap.xml"] [unique_id "ai2abyykT1eM1OfD7buRAQABUSE"] show less	Port Scan
🇫🇮 inlink.ltd	2026-06-13 13:57:00 (2 days ago)	WAF PoW failure, possible botnet behavior, IP mismatch, POST request made by 52.167.144.179 was not ... show more WAF PoW failure, possible botnet behavior, IP mismatch, POST request made by 52.167.144.179 was not IP who made PoW GET request earlier show less	DDoS Attack Exploited Host
🇬🇷 setupgr	2026-06-13 13:15:49 (2 days ago)	(PERMBLOCK) 52.167.144.179 has had more than 4 temp blocks in the last 86400 secs; Ports: ; Directi ... show more (PERMBLOCK) 52.167.144.179 has had more than 4 temp blocks in the last 86400 secs; Ports: ; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: N/A show less	Port Scan
🇫🇷 JPPO	2026-06-13 11:23:35 (2 days ago)	ETN AGGRESSIVE IPs Group 17 ports , ports: 443(x2)	Port Scan
🇬🇷 setupgr	2026-06-13 08:20:04 (2 days ago)	(mod_security) mod_security (id:11000010) triggered by 52.167.144.179: 1 in the last 86400 secs; Por ... show more (mod_security) mod_security (id:11000010) triggered by 52.167.144.179: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Jun 13 11:20:00.441444 2026] [security2:error] [pid 705293:tid 705416] [remote 52.167.144.179:27382] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "bingbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "103"] [id "11000010"] [msg "BLOCKED BOT: bingbot - in fashionfragonard.gr"] [severity "CRITICAL"] [hostname "fashionfragonard.gr"] [uri "/wp-content/uploads/philippe-ferandis/PFE20SU01.jpg"] [unique_id "ai0SsHxsrtCDMa-O0cInJAABBgQ"] show less	Port Scan
🇪🇸 librebit	2026-06-13 06:48:09 (2 days ago)	Brute force	Brute-Force

Showing 1 to 15 of 2050 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 186.130.116.244

🇸🇬 34.124.208.70

🇩🇪 185.220.101.40

🇮🇩 182.253.64.11

🇷🇴 80.94.92.177

🇫🇷 77.133.122.13

🇮🇳 74.125.178.213

🇨🇦 34.47.21.105

🇮🇹 2a00:1450:4025:1807::126

🇩🇪 213.209.159.56

🇬🇹 200.62.8.108

🇮🇳 172.217.34.150

🇺🇸 147.185.132.177

🇺🇸 98.35.234.154

🇷🇴 92.118.39.62

🇺🇸 45.79.175.85

🇭🇰 43.154.198.181

🇮🇩 36.92.41.115

🇨🇦 199.167.138.45

🇮🇳 103.158.40.65