JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

52.169.251.133

Neutral Activity

Abuse confidence score ?

0% Low Risk

17 reports

14 reporters · latest 2 years ago

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇮🇪 Ireland
City	Dublin, Leinster

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

52.169.251.133 has been reported 17 times. The most recent report is from 2 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 52.169.251.133

Export CSV

This IP address has been reported a total of 17 times from 14 distinct sources. 52.169.251.133 was first reported on April 24th 2024, and the most recent report was 2 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 artful	2024-04-25 23:26:00 (2 years ago)	Admin Tools reports security exceptions on client site	Web App Attack
🇺🇦 URAN Publishing Service	2024-04-25 21:12:30 (2 years ago)	52.169.251.133 - - [26/Apr/2024:00:12:29 +0300] "GET //wp-content/uploads/ HTTP/1.1" 404 275 "-" "Go ... show more 52.169.251.133 - - [26/Apr/2024:00:12:29 +0300] "GET //wp-content/uploads/ HTTP/1.1" 404 275 "-" "Go-http-client/1.1" ... show less	Web App Attack
Anonymous	2024-04-25 19:35:20 (2 years ago)	Fail2Ban apache-noscript	Bad Web Bot
Anonymous	2024-04-25 18:32:21 (2 years ago)	Fail2Ban Log Report 52.169.251.133 - [25/Apr/2024:20:32:18 +0200] "GET //cjfuns.php HTTP/2.0" 404 42 ... show more Fail2Ban Log Report 52.169.251.133 - [25/Apr/2024:20:32:18 +0200] "GET //cjfuns.php HTTP/2.0" 404 42 "https://cvazquez.es//cjfuns.php" "Go-http-client/2.0" "0.38" "52.169.251.133" 52.169.251.133 - [25/Apr/2024:20:32:18 +0200] "GET //wp-head.php HTTP/2.0" 404 42 "https://cvazquez.es//wp-head.php" "Go-http-client/2.0" "0.38" "52.169.251.133" 52.169.251.133 - [25/Apr/2024:20:32:18 +0200] "GET //class.api.php HTTP/2.0" 404 42 "https://cvazquez.es//class.api.php" "Go-http-client/2.0" "0.38" "52.169.251.133" 52.169.251.133 - [25/Apr/2024:20:32:19 +0200] "GET //st.php HTTP/2.0" 404 42 "https://cvazquez.es//st.php" "Go-http-client/2.0" "0.38" "52.169.251.133" ... show less	Hacking Brute-Force Web App Attack
🇨🇭 zynex	2024-04-25 15:11:10 (2 years ago)	URL Probing: /wp-content/install.php	Web App Attack
🇺🇦 URAN Publishing Service	2024-04-25 14:41:24 (2 years ago)	52.169.251.133 - - [25/Apr/2024:17:41:22 +0300] "GET //wp-content/uploads/ HTTP/1.1" 404 276 "-" "Go ... show more 52.169.251.133 - - [25/Apr/2024:17:41:22 +0300] "GET //wp-content/uploads/ HTTP/1.1" 404 276 "-" "Go-http-client/1.1" ... show less	Web App Attack
🇺🇸 MHuiG	2024-04-24 20:07:36 (2 years ago)	The IP has triggered Cloudflare WAF. action: block source: firewallCustom clientAsn: 8075 clientASND ... show more The IP has triggered Cloudflare WAF. action: block source: firewallCustom clientAsn: 8075 clientASNDescription: MICROSOFT-CORP-MSN-AS-BLOCK clientCountryName: IE clientIP: 52.169.251.133 clientRequestHTTPHost: blog.mhuig.top clientRequestHTTPMethodName: GET clientRequestHTTPProtocol: HTTP/1.1 clientRequestPath: //cjfuns.php clientRequestQuery: datetime: 2024-04-24T20:06:51Z rayName: 8798b75deeb077ae ruleId: 62370dc6b7504b8c983f836ea0faec20 userAgent: Go-http-client/1.1. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Open Proxy VPN IP Port Scan Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
🇫🇷 COMAITE	2024-04-24 17:26:28 (2 years ago)	Multiple web server 400 error codes from same source ip 52.169.251.133.	Web App Attack
🇩🇪 ps-center	2024-04-24 17:03:28 (2 years ago)	ABV: Web Attack GET //wp-includes/js/tinymce/plugins/compat3x/css/index.php	Web Spam Hacking Bad Web Bot Web App Attack
🇺🇸 RiSec	2024-04-24 15:10:25 (2 years ago)	[Wed Apr 24 15:10:14.462668 2024] [proxy_fcgi:error] [pid 100868] [client 52.169.251.133:1038] AH010 ... show more [Wed Apr 24 15:10:14.462668 2024] [proxy_fcgi:error] [pid 100868] [client 52.169.251.133:1038] AH01071: Got error 'Primary script unknown', referer: http://www.realinfosec.net//cgi-bin/install.php [Wed Apr 24 15:10:24.947100 2024] [cgi:error] [pid 100868] [client 52.169.251.133:1038] AH02811: script not found or unable to stat: /home/realinfosec/cgi-bin/cgi-bin, referer: http://www.realinfosec.net//cgi-bin/cgi-bin/about.php [Wed Apr 24 15:10:25.072661 2024] [cgi:error] [pid 100868] [client 52.169.251.133:1038] AH02811: script not found or unable to stat: /home/realinfosec/cgi-bin/cgi-bin, referer: http://www.realinfosec.net//cgi-bin/cgi-bin/about.php7 ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2024-04-24 14:36:12 (2 years ago)	52.169.251.133 - - [24/Apr/2024:17:36:11 +0300] "GET /wp-content/uploads/ HTTP/1.1" 404 292 "http:// ... show more 52.169.251.133 - - [24/Apr/2024:17:36:11 +0300] "GET /wp-content/uploads/ HTTP/1.1" 404 292 "http://theunj.org//wp-content/uploads/" "Go-http-client/1.1" ... show less	Web App Attack
🇳🇿 Tripwire	2024-04-24 10:58:20 (2 years ago)	Scanning for exploits - //cjfuns.php	Hacking Web App Attack
🇧🇪 jeroengui.be	2024-04-24 09:11:23 (2 years ago)	[Wed Apr 24 11:11:22.336191 2024] [proxy_fcgi:error] [pid 3359012] [client 52.169.251.133:0] AH01071 ... show more [Wed Apr 24 11:11:22.336191 2024] [proxy_fcgi:error] [pid 3359012] [client 52.169.251.133:0] AH01071: Got error 'Primary script unknown', referer: http://home.jeroengui.be//cjfuns.php [Wed Apr 24 11:11:22.407563 2024] [proxy_fcgi:error] [pid 3359012] [client 52.169.251.133:0] AH01071: Got error 'Primary script unknown', referer: http://home.jeroengui.be//wp-head.php [Wed Apr 24 11:11:22.464690 2024] [proxy_fcgi:error] [pid 3359012] [client 52.169.251.133:0] AH01071: Got error 'Primary script unknown', referer: http://home.jeroengui.be//class.api.php [Wed Apr 24 11:11:22.524641 2024] [proxy_fcgi:error] [pid 3359012] [client 52.169.251.133:0] AH01071: Got error 'Primary script unknown', referer: http://home.jeroengui.be//st.php [Wed Apr 24 11:11:22.582372 2024] [proxy_fcgi:error] [pid 3359012] [client 52.169.251.133:0] AH01071: Got error 'Primary script unknown', referer: http://home.jeroengui.be//my1.php ... show less	Brute-Force SSH
🇺🇦 URAN Publishing Service	2024-04-24 08:38:56 (2 years ago)	52.169.251.133 - - [24/Apr/2024:11:38:51 +0300] "GET //wp-content/uploads/ HTTP/1.1" 404 280 "-" "Go ... show more 52.169.251.133 - - [24/Apr/2024:11:38:51 +0300] "GET //wp-content/uploads/ HTTP/1.1" 404 280 "-" "Go-http-client/1.1" 52.169.251.133 - - [24/Apr/2024:11:38:55 +0300] "GET //wp-content/plugins/ HTTP/1.1" 404 280 "-" "Go-http-client/1.1" ... show less	Web App Attack
Anonymous	2024-04-24 08:35:37 (2 years ago)	Ports: 20,21,25,53,80,110,143,443,465,587,993,995,2077,2078,2079,2080,2082,2083,2086,2087,2095,2096, ... show more Ports: 20,21,25,53,80,110,143,443,465,587,993,995,2077,2078,2079,2080,2082,2083,2086,2087,2095,2096,3306,2195; Direction: 0; Trigger: LF_CUSTOMTRIGGER show less	Brute-Force SSH

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 167.94.146.51

🇫🇷 85.217.140.36

🇧🇷 45.6.29.18

🇳🇱 34.12.63.80

🇰🇷 211.240.117.200

🇻🇪 206.1.209.236

🇺🇸 162.243.147.237

🇺🇸 162.216.149.73

🇺🇸 128.118.178.210

🇷🇺 109.173.38.135

🇨🇦 85.217.149.48

🇪🇸 80.29.171.189

🇺🇸 72.240.125.133

🇨🇦 63.135.12.168

🇬🇧 200.138.46.195

🇹🇳 197.14.226.88

🇵🇱 194.180.49.217

🇺🇸 147.185.132.141

🇷🇺 81.23.173.32

🇳🇱 35.204.250.149