AbuseIPDB » 52.169.67.40

52.169.67.40 was found in our database!

This IP was reported 208 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
Domain Name	microsoft.com
Country	Ireland
City	Dublin, Leinster

Report 52.169.67.40

Whois 52.169.67.40

IP Abuse Reports for 52.169.67.40:

This IP address has been reported a total of 208 times from 79 distinct sources. 52.169.67.40 was first reported on November 7th 2024, and the most recent report was 17 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
threatx	2024-11-27 22:58:38 (4 days ago)	Common blacklisted IPs across tenants	DDoS Attack Bad Web Bot Web App Attack
threatx	2024-11-26 08:22:06 (5 days ago)	Common blacklisted IPs across tenants	DDoS Attack Bad Web Bot Web App Attack
LRob.fr	2024-11-25 23:01:05 (6 days ago)	Repeated attacks detected by Fail2Ban in recidive jail	Hacking
LRob.fr	2024-11-23 23:02:16 (1 week ago)	Repeated attacks detected by Fail2Ban in recidive jail	Hacking
LRob.fr	2024-11-21 23:03:15 (1 week ago)	Repeated attacks detected by Fail2Ban in recidive jail	Hacking
rtbh.com.tr	2024-11-21 20:53:13 (1 week ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
robotstxt	2024-11-21 17:12:14 (1 week ago)	52.169.67.40 - - [21/Nov/2024:17:11:23 +0000] "GET /cgi-bin/about.php HTTP/1.1" 404 27964 "-" rt="0. ... show more52.169.67.40 - - [21/Nov/2024:17:11:23 +0000] "GET /cgi-bin/about.php HTTP/1.1" 404 27964 "-" rt="0.201" "-" "-" h="www.legir.cat" sn="www.legir.cat" ru="/cgi-bin/about.php" u="/index.php" ucs="-" ua="unix:/var/run/php/legir74.sock" us="404" uct="0.000" urt="0.202" 52.169.67.40 - - [21/Nov/2024:17:11:26 +0000] "GET /cgi-bin/cloud.php HTTP/1.1" 404 27940 "-" rt="0.184" "-" "-" h="www.legir.cat" sn="www.legir.cat" ru="/cgi-bin/cloud.php" u="/index.php" ucs="-" ua="unix:/var/run/php/legir74.sock" us="404" uct="0.000" urt="0.184" 52.169.67.40 - - [21/Nov/2024:17:11:45 +0000] "GET /cgi-bin/xmrlpc.php?p= HTTP/1.1" 404 5 "-" rt="0.145" "-" "-" h="www.legir.cat" sn="www.legir.cat" ru="/cgi-bin/xmrlpc.php?p=" u="/index.php" ucs="-" ua="unix:/var/run/php/legir74.sock" us="301" uct="0.000" urt="0.144" 52.169.67.40 - - [21/Nov/2024:17:11:49 +0000] "GET /mail.php HTTP/1.1" 404 27955 "-" rt="0.188" "-" "-" h="www.legir.cat" sn="www.legir.cat" ru="/mail.php" u="/index.php" ucs="-" ua="unix:/var/run/p ... show less	Bad Web Bot
Anonymous	2024-11-21 15:25:30 (1 week ago)	Aggressive web scan	Web App Attack
openstrike.co.uk	2024-11-21 06:12:52 (1 week ago)	172 attacks on PHP URLs: GET /wp-2019.php HTTP/1.1	Web App Attack
niceshops.com	2024-11-21 01:49:47 (1 week ago)	Large amount of http-requests in short time ([21/Nov/2024:02:45:19.844] )	Bad Web Bot
Anonymous	2024-11-21 01:34:00 (1 week ago)	(mod_security) mod_security triggered on hostname [redacted] 52.169.67.40 (IE/Ireland/-)	SQL Injection
Floofie	2024-11-21 00:47:23 (1 week ago)	52.169.67.40 - - [20/Nov/2024:19:47:18 -0500] "GET /.well-known/acme-challenge/install.php HTTP/2.0" ... show more52.169.67.40 - - [20/Nov/2024:19:47:18 -0500] "GET /.well-known/acme-challenge/install.php HTTP/2.0" 403 106 "-" "-" 52.169.67.40 - - [20/Nov/2024:19:47:20 -0500] "GET /.well-known/acme-challenge/file.php HTTP/2.0" 403 106 "-" "-" 52.169.67.40 - - [20/Nov/2024:19:47:22 -0500] "GET /.well-known/acme-challenge/mariju.php HTTP/2.0" 403 106 "-" "-" ... show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-11-20 22:45:56 (1 week ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
rtbh.com.tr	2024-11-20 20:53:13 (1 week ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Rizzy	2024-11-20 18:59:14 (1 week ago)	Multiple WAF Violations	Brute-Force Web App Attack