JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.169.50.79

52.169.50.79 was found in our database!

This IP was reported 154 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇮🇪 Ireland
City	Dublin, Leinster

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.169.50.79

Whois 52.169.50.79

IP Abuse Reports for 52.169.50.79:

This IP address has been reported a total of 154 times from 59 distinct sources. 52.169.50.79 was first reported on November 8th 2024, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 threatx	2024-11-27 22:58:38 (1 year ago)	Common blacklisted IPs across tenants	DDoS Attack Bad Web Bot Web App Attack
🇺🇸 threatx	2024-11-26 08:22:06 (1 year ago)	Common blacklisted IPs across tenants	DDoS Attack Bad Web Bot Web App Attack
Anonymous	2024-11-21 19:11:04 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-11-21 18:22:32 (1 year ago)	wordpress-trap	Web App Attack
🇦🇺 MAGIC	2024-11-21 04:07:48 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇹🇷 rtbh.com.tr	2024-11-20 20:53:13 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇻🇳 Xuan Can	2024-11-20 15:35:25 (1 year ago)	(mod_security) mod_security (id:6) triggered by 52.169.50.79 (IE/Ireland/-): 1 in the last 3600 secs ... show more (mod_security) mod_security (id:6) triggered by 52.169.50.79 (IE/Ireland/-): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 20 22:35:16.517786 2024] [security2:error] [pid 625:tid 655] [client 52.169.50.79:2630] [client 52.169.50.79] ModSecurity: Access denied with connection close (phase 2). Pattern match "wp-login.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "62"] [id "6"] [severity "CRITICAL"] [hostname "kb.pavietnam.vn"] [uri "/wp-login.php"] [unique_id "Zz4BtKRXDaVJ_Spy3gm7KAAAAEM"] show less	Brute-Force SSH
🇪🇸 robotstxt	2024-11-19 22:33:59 (1 year ago)	52.169.50.79 - - [19/Nov/2024:22:33:08 +0000] "GET /cgi-bin/wp-login.php HTTP/1.1" 404 156473 "-" rt ... show more 52.169.50.79 - - [19/Nov/2024:22:33:08 +0000] "GET /cgi-bin/wp-login.php HTTP/1.1" 404 156473 "-" rt="0.334" "-" "-" h="economipedia.com" sn="economipedia.com" ru="/cgi-bin/wp-login.php" u="/index.php" ucs="-" ua="unix:/var/run/php/economipedia74.sock" us="404" uct="0.000" urt="0.334" 52.169.50.79 - - [19/Nov/2024:22:33:09 +0000] "GET /cgi-bin/themes.php HTTP/1.1" 404 156465 "-" rt="0.320" "-" "-" h="economipedia.com" sn="economipedia.com" ru="/cgi-bin/themes.php" u="/index.php" ucs="-" ua="unix:/var/run/php/economipedia74.sock" us="404" uct="0.000" urt="0.320" 52.169.50.79 - - [19/Nov/2024:22:33:08 +0000] "GET /cgi-bin/wp-login.php HTTP/1.1" 404 156473 "-" "-" "-" 52.169.50.79 - - [19/Nov/2024:22:33:09 +0000] "GET /cgi-bin/themes.php HTTP/1.1" 404 156465 "-" "-" "-" 52.169.50.79 - - [19/Nov/2024:22:33:20 +0000] "GET /cgi-bin/file.php HTTP/1.1" 404 156465 "-" "-" "-" ... show less	Bad Web Bot
🇪🇸 el-brujo	2024-11-19 21:39:58 (1 year ago)	Cloudflare WAF: Request Path: /wp-content/plugins/ioptimization/IOptimize.php Request Query: ?rchk H ... show more Cloudflare WAF: Request Path: /wp-content/plugins/ioptimization/IOptimize.php Request Query: ?rchk Host: elhacker.net userAgent: Action: log Source: firewallManaged ASN Description: MICROSOFT-CORP-MSN-AS-BLOCK Country: IE Method: GET Timestamp: 2024-11-19T21:39:58Z ruleId: 9f35644b7f734c87a57cfd6d8b036974. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇹🇷 rtbh.com.tr	2024-11-19 20:53:12 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇪🇸 el-brujo	2024-11-19 19:23:14 (1 year ago)	Cloudflare WAF: Request Path: /wp-content/plugins/ioptimization/IOptimize.php Request Query: ?rchk H ... show more Cloudflare WAF: Request Path: /wp-content/plugins/ioptimization/IOptimize.php Request Query: ?rchk Host: ns2.elhacker.net userAgent: Action: log Source: firewallManaged ASN Description: MICROSOFT-CORP-MSN-AS-BLOCK Country: IE Method: GET Timestamp: 2024-11-19T19:23:14Z ruleId: 9f35644b7f734c87a57cfd6d8b036974. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇪🇸 el-brujo	2024-11-19 19:22:35 (1 year ago)	19/Nov/2024:20:22:35.430836 +0100Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ... show more 19/Nov/2024:20:22:35.430836 +0100Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 52.169.50.79] ModSecurity: Warning. Matched phrase "gzdecode" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "295"] [id "933150"] [msg "PHP Injection Attack: High-Risk PHP Function Name Found"] [data "Matched Data: gzdecode found within REQUEST_FILENAME: /wp-includes/simplepie/gzdecodes.php.suspected"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/152/242"] [hostname "ns2.elhacker.net"] [uri "/wp-includes/SimplePie/gzdecodes.php.suspected"] [unique_id "Zzzle19Vj3YOXlp0_5dloQACajM"] ... show less	Hacking Web App Attack
🇺🇸 hostseries	2024-11-19 18:30:39 (1 year ago)	Trigger: LF_MODSEC	Brute-Force
🇳🇱 hostio.solutions	2024-11-19 14:23:12 (1 year ago)	Failed login attempt detected by Fail2Ban in recidive jail	Brute-Force
🇩🇪 botreporter	2024-11-19 11:48:01 (1 year ago)	CMS vulnerability/installation scanning	Brute-Force Web App Attack

Showing 1 to 15 of 154 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇶 185.27.219.146

🇳🇱 89.149.242.130

🇭🇰 43.132.207.83

🇧🇷 31.56.44.38

🇺🇸 2001:470:1:c84::12b

🇲🇽 189.161.43.93

🇧🇷 187.45.95.66

🇳🇱 173.194.169.84

🇫🇷 141.95.242.9

🇵🇱 109.205.211.215

🇿🇦 102.129.54.139

🇨🇳 101.71.221.247

🇫🇷 85.204.70.112

🇷🇺 79.174.63.130

🇺🇸 70.120.203.193

🇺🇸 66.132.195.119

🇺🇸 66.132.172.225

🇰🇷 52.102.202.63

🇮🇳 20.235.155.104

🇸🇬 208.109.11.76