AbuseIPDB » 52.169.71.117

52.169.71.117 was found in our database!

This IP was reported 236 times. Confidence of Abuse is 14%: ?

14%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	Ireland
City	Dublin, Leinster

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 52.169.71.117

Whois 52.169.71.117

IP Abuse Reports for 52.169.71.117:

This IP address has been reported a total of 236 times from 84 distinct sources. 52.169.71.117 was first reported on November 8th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Anonymous	2024-11-15 08:13:30 (2 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
N3ilawx	2024-11-15 05:21:37 (2 months ago)	Fail2Ban detect something wrong with this ip 52.169.71.117 - GET - 404 - [15/Nov/2024:05:21:35 +0000 ... show moreFail2Ban detect something wrong with this ip 52.169.71.117 - GET - 404 - [15/Nov/2024:05:21:35 +0000] 52.169.71.117 - GET - 404 - [15/Nov/2024:05:21:35 +0000] 52.169.71.117 - GET - 404 - [15/Nov/2024:05:21:35 +0000] 52.169.71.117 - GET - 404 - [15/Nov/2024:05:21:35 +0000] 52.169.71.117 - GET - 404 - [15/Nov/2024:05:21:35 +0000] 52.169.71.117 - GET - 404 - [15/Nov/2024:05:21:35 +0000] 52.169.71.117 - GET - 404 - [15/Nov/2024:05:21:35 +0000] 52.169.71.117 - GET - 404 - [15/Nov/2024:05:21:35 +0000] 52.169.71.117 - GET - 404 - [15/Nov/2024:05:21:35 +0000] 52.169.71.117 - GET - 404 - [15/Nov/2024:05:21:35 +0000] ... show less	Brute-Force Web App Attack
VHosting	2024-11-15 04:15:44 (2 months ago)	Attempt from 52.169.71.117, reason: OverConnLimit	DDoS Attack Bad Web Bot
Anonymous	2024-11-15 02:16:50 (2 months ago)	wordpress-trap	Web App Attack
Epimetheus	2024-11-14 23:54:16 (2 months ago)	Unauthorized access attempts: From: 52.169.71.117 Method: HT ... show moreUnauthorized access attempts: From: 52.169.71.117 Method: HTTP GET URI Path: /.well-known/admin.php UA: "" show less	Web App Attack
tecnicorioja	2024-11-14 23:00:57 (2 months ago)	wp-login attack [14/Nov/2024:08:23:36	Brute-Force Web App Attack
rtbh.com.tr	2024-11-14 20:53:19 (2 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
robotstxt	2024-11-14 02:05:26 (2 months ago)	52.169.71.117 - - [14/Nov/2024:02:04:24 +0000] "GET /cgi-bin/about.php HTTP/1.1" 404 61297 "-" rt="0 ... show more52.169.71.117 - - [14/Nov/2024:02:04:24 +0000] "GET /cgi-bin/about.php HTTP/1.1" 404 61297 "-" rt="0.370" "-" "-" h="mamafermenta.com" sn="mamafermenta.com" ru="/cgi-bin/about.php" u="/index.php" ucs="-" ua="unix:/var/run/php/mamafermenta82.sock" us="404" uct="0.000" urt="0.371" 52.169.71.117 - - [14/Nov/2024:02:04:24 +0000] "GET /cgi-bin/about.php HTTP/1.1" 404 61297 "-" "-" "-" 52.169.71.117 - - [14/Nov/2024:02:04:29 +0000] "GET /cgi-bin/cloud.php HTTP/1.1" 404 61297 "-" rt="0.374" "-" "-" h="mamafermenta.com" sn="mamafermenta.com" ru="/cgi-bin/cloud.php" u="/index.php" ucs="-" ua="unix:/var/run/php/mamafermenta82.sock" us="404" uct="0.000" urt="0.374" 52.169.71.117 - - [14/Nov/2024:02:05:01 +0000] "GET /cgi-bin/xmrlpc.php?p= HTTP/1.1" 404 5 "-" rt="0.579" "-" "-" h="mamafermenta.com" sn="mamafermenta.com" ru="/cgi-bin/xmrlpc.php?p=" u="/index.php" ucs="-" ua="unix:/var/run/php/mamafermenta82.sock" us="301" uct="0.000" urt="0.580" 52.169.71.117 - - [14/Nov/2024:02:05:21 +0000] "GET / ... show less	Bad Web Bot
Hirte	2024-11-14 01:53:37 (2 months ago)	C2: Web Attack GET /wp-includes/Requests/about.php GET /wp-includes/style-engine/about.php<br ... show moreC2: Web Attack GET /wp-includes/Requests/about.php GET /wp-includes/style-engine/about.php GET /wp-includes/rest-api/about.php GET /wp-includes/SimplePie/about.php show less	Web Spam Hacking Bad Web Bot Web App Attack
LRob.fr	2024-11-13 23:01:33 (2 months ago)	Repeated attacks detected by Fail2Ban in recidive jail	Hacking
advena	2024-11-13 21:45:56 (2 months ago)	52.169.71.117 (AS8075 MICROSOFT-CORP-MSN-AS-BLOCK) was intercepted at 2024-11-13T21:35:57Z after vio ... show more52.169.71.117 (AS8075 MICROSOFT-CORP-MSN-AS-BLOCK) was intercepted at 2024-11-13T21:35:57Z after violating WAF directive: 874a3e315c344b1281ad4f00046aab6f. Pre-cautionary/corrective action applied: block. show less	Web Spam Hacking Brute-Force Web App Attack
rtbh.com.tr	2024-11-13 20:53:19 (2 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
robotstxt	2024-11-13 19:08:28 (2 months ago)	52.169.71.117 - - [13/Nov/2024:19:07:34 +0000] "GET /cgi-bin/about.php HTTP/1.1" 404 36570 "-" rt="0 ... show more52.169.71.117 - - [13/Nov/2024:19:07:34 +0000] "GET /cgi-bin/about.php HTTP/1.1" 404 36570 "-" rt="0.125" "-" "-" h="www.cosasdelinux.com" sn="www.cosasdelinux.com" ru="/cgi-bin/about.php" u="/index.php" ucs="-" ua="unix:/var/run/php/cosasdelinux82.sock" us="404" uct="0.000" urt="0.125" 52.169.71.117 - - [13/Nov/2024:19:07:35 +0000] "GET /cgi-bin/cloud.php HTTP/1.1" 404 36570 "-" rt="0.117" "-" "-" h="www.cosasdelinux.com" sn="www.cosasdelinux.com" ru="/cgi-bin/cloud.php" u="/index.php" ucs="-" ua="unix:/var/run/php/cosasdelinux82.sock" us="404" uct="0.000" urt="0.117" 52.169.71.117 - - [13/Nov/2024:19:07:47 +0000] "GET /cgi-bin/xmrlpc.php?p= HTTP/1.1" 404 5 "-" rt="0.063" "-" "-" h="www.cosasdelinux.com" sn="www.cosasdelinux.com" ru="/cgi-bin/xmrlpc.php?p=" u="/index.php" ucs="-" ua="unix:/var/run/php/cosasdelinux82.sock" us="301" uct="0.000" urt="0.062" 52.169.71.117 - - [13/Nov/2024:19:07:53 +0000] "GET /cgi-bin/sx.php HTTP/1.1" 404 36570 "-" rt="0.113" "-" "-" h="www.cosasdelinux.c ... show less	Bad Web Bot
4server	2024-11-13 18:55:03 (2 months ago)	[WedNov1319:54:54.4799052024][security2:error][pid928226:tid928298][client52.169.71.117:0][client52. ... show more[WedNov1319:54:54.4799052024][security2:error][pid928226:tid928298][client52.169.71.117:0][client52.169.71.117]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"wp-content/uploads/.\\\\\\\\\.ph\(\?:p\\|tml\\|t\)\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/99_asl_jitp.conf\"][line\"5056\"][id\"382238\"][rev\"2\"][msg\"Atomicorp.comWAFRules-VirtualJustInTimePatch:PHPfileexecutioninuploadsdirectorydenied\"][data\"wp-content/uploads/cache.php\"][severity\"CRITICAL\"][hostname\"bianchitecno.ch\"][uri\"/wp-content/uploads/cache.php\"][unique_id\"ZzT1_rAyHXmGB06l0JyJmQAAAIQ\"][WedNov1319:54:56.8783652024][security2:error][pid928226:tid928298][client52.169.71.117:0][client52.169.71.117]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"wp-content/uploads/.\\\\\\\\\.ph\(\?:p\\|tml\\|t\)\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/99_asl_jitp.conf\"][line\"5056\"][id\"382238\"][rev\"2\"][msg\"Atomicorp.comWAFRules-VirtualJustInTimePatch:PHPfileexecutioninuploadsdirectory show less	Port Scan Brute-Force Web App Attack
Roderic	2024-11-13 17:55:04 (2 months ago)	(apache_scanners-2) Failed apache-scanners trigger with match [redacted] from 52.169.71.117 (IE/Irel ... show more(apache_scanners-2) Failed apache-scanners trigger with match [redacted] from 52.169.71.117 (IE/Ireland/-) show less	Port Scan