JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.169.127.96

52.169.127.96

Neutral Activity

208 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Microsoft Corporation

Usage Type

Data Center/Web Hosting/Transit

ASN

AS8075

Domain Name

microsoft.com

Country

🇮🇪 Ireland

City

Dublin, Leinster

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

52.169.127.96 has been reported 208 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 52.169.127.96:

This IP address has been reported a total of 208 times from 116 distinct sources. 52.169.127.96 was first reported on August 1st 2025, and the most recent report was 1 year ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 Gem	2025-08-08 22:16:21 (1 year ago)	Unauthorized web scan.	Web App Attack
🇭🇺 NyaljBe	2025-08-07 00:48:00 (1 year ago)	52.169.127.96 - - [04/Aug/2025:19:38:02 +0200] "GET /wp-admin/network/xmrlpc.php HTTP/1.1" 404 153 " ... show more 52.169.127.96 - - [04/Aug/2025:19:38:02 +0200] "GET /wp-admin/network/xmrlpc.php HTTP/1.1" 404 153 "-" "-" 52.169.127.96 - - [04/Aug/2025:19:38:02 +0200] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 404 153 "-" "-" 52.169.127.96 - - [04/Aug/2025:19:38:02 +0200] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 404 153 "-" "-" 52.169.127.96 - - [04/Aug/2025:19:38:02 +0200] "GET /wp-content/plugins/seoplugins/db.php HTTP/1.1" 404 153 "-" "-" 52.169.127.96 - - [04/Aug/2025:19:38:02 +0200] "GET /wp-content/themes/seotheme/db.php HTTP/1.1" 404 153 "-" "-" 52.169.127.96 - - [04/Aug/2025:19:38:02 +0200] "GET /wp-content/plugins/linkpreview/db.php HTTP/1.1" 404 153 "-" "-" 52.169.127.96 - - [04/Aug/2025:19:38:02 +0200] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 404 153 "-" "-" 52.169.127.96 - - [04/Aug/2025:19:38:01 +0200] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 404 153 "-" "-" 52.169.127.96 - - [04/Aug/2025:19:38:01 +0200] "GET /wp-admin/css/colors/index.php HTTP/1.1" 404 153 show less	Web App Attack
🇹🇷 rtbh.com.tr	2025-08-05 20:08:04 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇭🇺 DumaNet	2025-08-05 07:08:00 (1 year ago)	WordPress plugin attack attempts. Date: 2025 Aug 04. 18:34:12 Source IP: 52.169.127.96 Portion ... show more WordPress plugin attack attempts. Date: 2025 Aug 04. 18:34:12 Source IP: 52.169.127.96 Portion of the log(s): 52.169.127.96 - [04/Aug/2025:18:34:12 +0200] "GET /libraries/phpmailer/updates.php HTTP/1.1" 404 153 "-" "-" 52.169.127.96 - [04/Aug/2025:18:34:12 +0200] "GET /libraries/legacy/updates.php HTTP/1.1" 404 153 "-" "-" 52.169.127.96 - [04/Aug/2025:18:34:12 +0200] "GET /updates.php HTTP/1.1" 404 153 "-" "-" 52.169.127.96 - [04/Aug/2025:18:34:12 +0200] "GET /wp-admin/cloud.php HTTP/1.1" 404 153 "-" "-" 52.169.127.96 - [04/Aug/2025:18:34:12 +0200] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 404 153 "-" "-" 52.169.127.96 - [04/Aug/2025:18:34:12 +0200] "GET /wp-admin/includes/cloud.php HTTP/1.1" 404 153 "-" "-" 52.169.127.96 - [04/Aug/2025:18:34:12 +0200] "GET /wp-admin/css/colors/cloud.php HTTP/1.1" 404 153 "-" "-" 52.169.127.96 - [04/Aug/2025:18:34:12 +0200] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 404 153 "-" "-" 52.169.127.96 - [04/Aug/2025:18:34:12 +0200] "GET /wp-admin/ show less	Hacking Web App Attack
🇭🇺 DumaNet	2025-08-05 06:20:00 (1 year ago)	WordPress plugin attack attempts. Date: 2025 Aug 04. 18:25:00 Source IP: 52.169.127.96 Portion ... show more WordPress plugin attack attempts. Date: 2025 Aug 04. 18:25:00 Source IP: 52.169.127.96 Portion of the log(s): 52.169.127.96 - [04/Aug/2025:18:25:00 +0200] "GET /wp-admin/user/cloud.php HTTP/1.1" 404 153 "-" "-" 52.169.127.96 - [04/Aug/2025:18:25:00 +0200] "GET /css/cloud.php HTTP/1.1" 404 153 "-" "-" 52.169.127.96 - [04/Aug/2025:18:25:00 +0200] "GET /wp-content/updates.php HTTP/1.1" 404 153 "-" "-" 52.169.127.96 - [04/Aug/2025:18:25:00 +0200] "GET /cgi-bin/cloud.php HTTP/1.1" 404 153 "-" "-" 52.169.127.96 - [04/Aug/2025:18:24:59 +0200] "GET /cloud.php HTTP/1.1" 404 153 "-" "-" 52.169.127.96 - [04/Aug/2025:18:24:59 +0200] "GET /wp-admin/network/cloud.php HTTP/1.1" 404 153 "-" "-" 52.169.127.96 - [04/Aug/2025:18:24:59 +0200] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 404 153 "-" "-" 52.169.127.96 - [04/Aug/2025:18:24:59 +0200] "GET /wp-admin/images/about.php HTTP/1.1" 404 153 "-" "-" 52.169.127.96 - [04/Aug/2025:18:24:59 +0200] "GET /wp-admin/css/about.php HTTP/1.1" 404 153 "-" "-" show less	Hacking Web App Attack
🇬🇧 openstrike.co.uk	2025-08-05 05:13:23 (1 year ago)	20 attacks on PHP URLs: GET /.well-known/acme-challenge/about.php HTTP/1.1	Web App Attack
🇭🇺 DumaNet	2025-08-05 04:32:00 (1 year ago)	WordPress plugin attack attempts. Date: 2025 Aug 04. 18:14:05 Source IP: 52.169.127.96 Portion ... show more WordPress plugin attack attempts. Date: 2025 Aug 04. 18:14:05 Source IP: 52.169.127.96 Portion of the log(s): 52.169.127.96 - [04/Aug/2025:18:13:59 +0200] "GET /wp-content/languages/about.php HTTP/1.1" 404 153 "-" "-" 52.169.127.96 - [04/Aug/2025:18:13:58 +0200] "GET /img/about.php HTTP/1.1" 404 153 "-" "-" 52.169.127.96 - [04/Aug/2025:18:13:58 +0200] "GET /wp-includes/ID3/about.php HTTP/1.1" 404 153 "-" "-" 52.169.127.96 - [04/Aug/2025:18:13:58 +0200] "GET /wp-includes/Text/about.php HTTP/1.1" 404 153 "-" "-" 52.169.127.96 - [04/Aug/2025:18:13:58 +0200] "GET /.well-known/about.php HTTP/1.1" 404 153 "-" "-" 52.169.127.96 - [04/Aug/2025:18:13:58 +0200] "GET /wp-content/about.php HTTP/1.1" 404 153 "-" "-" 52.169.127.96 - [04/Aug/2025:18:13:58 +0200] "GET /wp-content/banners/about.php HTTP/1.1" 404 153 "-" "-" 52.169.127.96 - [04/Aug/2025:18:13:58 +0200] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 404 153 "-" "-" 52.169.127.96 - [04/Aug/2025:18:13:58 +0200] "GET /wp-includes/rest-api/about.php show less	Hacking Web App Attack
🇺🇸 octageeks.com	2025-08-05 04:07:54 (1 year ago)	Wordpress malicious attack:[octa404]	Web App Attack
🇫🇷 Murazaki	2025-08-04 22:03:00 (1 year ago)	www.mehdibenadel.com 52.169.127.96 - - [04/Aug/2025:09:14:53 +0200] "GET /.well-known/acme-challenge ... show more www.mehdibenadel.com 52.169.127.96 - - [04/Aug/2025:09:14:53 +0200] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 404 146 "-" "-" "-" ... show less	Hacking
🇹🇷 rtbh.com.tr	2025-08-04 20:08:04 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇬🇧 findlab	2025-08-04 16:40:03 (1 year ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
🇫🇮 Christopher Hughes	2025-08-04 16:06:20 (1 year ago)	[Mon Aug 04 17:06:17.599153 2025] [proxy_fcgi:error] [pid 2507356:tid 140157265114688] [client 52.16 ... show more [Mon Aug 04 17:06:17.599153 2025] [proxy_fcgi:error] [pid 2507356:tid 140157265114688] [client 52.169.127.96:2851] AH01071: Got error 'Primary script unknown' [Mon Aug 04 17:06:19.278273 2025] [proxy_fcgi:error] [pid 2507356:tid 140158447896128] [client 52.169.127.96:2851] AH01071: Got error 'Primary script unknown' [Mon Aug 04 17:06:19.619453 2025] [proxy_fcgi:error] [pid 2507356:tid 140157223151168] [client 52.169.127.96:2851] AH01071: Got error 'Primary script unknown' [Mon Aug 04 17:06:19.965203 2025] [proxy_fcgi:error] [pid 2507356:tid 140158473074240] [client 52.169.127.96:2851] AH01071: Got error 'Primary script unknown' [Mon Aug 04 17:06:20.181211 2025] [proxy_fcgi:error] [pid 2507356:tid 140158422718016] [client 52.169.127.96:2851] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
Anonymous	2025-08-04 16:00:53 (1 year ago)	wordpress-trap	Web App Attack
Anonymous	2025-08-04 16:00:17 (1 year ago)	Fail2Ban apache-noscript	Bad Web Bot
🇮🇩 Burayot	2025-08-04 15:00:22 (1 year ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 52.169.127.96 (IE/Ireland/-): 1 in ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 52.169.127.96 (IE/Ireland/-): 1 in the last 3600 secs show less	Web App Attack

Showing 1 to 15 of 208 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 116.99.170.115

🇲🇦 81.192.46.36

🇫🇮 34.88.79.231

🇺🇸 23.95.122.71

🇰🇷 211.253.31.30

🇺🇸 207.46.13.9

🇬🇧 35.203.210.20

🇬🇧 5.252.83.97

🇨🇳 218.59.235.170

🇵🇱 176.53.159.197

🇺🇸 172.253.91.156

🇨🇳 115.54.96.97

🇳🇱 91.92.40.43

🇧🇬 78.128.114.46

🇵🇰 59.103.230.194

🇺🇸 216.25.89.89

🇩🇪 193.187.148.170

🇲🇽 187.189.96.115

🇺🇦 176.105.196.170

🇭🇰 152.32.171.73