JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

52.169.76.76

Neutral Activity

Abuse confidence score ?

0% Low Risk

32 reports

22 reporters · latest 1 year ago

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇮🇪 Ireland
City	Dublin, Leinster

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

52.169.76.76 has been reported 32 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 52.169.76.76

Export CSV

This IP address has been reported a total of 32 times from 22 distinct sources. 52.169.76.76 was first reported on June 20th 2024, and the most recent report was 1 year ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 beruys.com	2025-04-16 07:47:25 (1 year ago)	[Wed Apr 16 09:47:23.618125 2025] [proxy_fcgi:error] [pid 1978578:tid 140170108053056] [client 52.16 ... show more [Wed Apr 16 09:47:23.618125 2025] [proxy_fcgi:error] [pid 1978578:tid 140170108053056] [client 52.169.76.76:10151] AH01071: Got error 'Primary script unknown' [Wed Apr 16 09:47:23.749183 2025] [proxy_fcgi:error] [pid 1978578:tid 140170728818240] [client 52.169.76.76:10151] AH01071: Got error 'Primary script unknown' [Wed Apr 16 09:47:23.781526 2025] [proxy_fcgi:error] [pid 1978578:tid 140170842568256] [client 52.169.76.76:10151] AH01071: Got error 'Primary script unknown' ... show less	DDoS Attack SSH
🇺🇸 WebpodsLLC	2025-04-16 06:17:16 (1 year ago)	(mod_security) mod_security (id:14203) triggered by 52.169.76.76 (IE/Ireland/-): 3 in the last 3600 ... show more (mod_security) mod_security (id:14203) triggered by 52.169.76.76 (IE/Ireland/-): 3 in the last 3600 secs (CF_ENABLE); Ports: *; Direction: 0; Trigger: LF_MODSEC; show less	Port Scan Brute-Force Web App Attack
🇫🇷 COMAITE	2025-04-16 02:25:36 (1 year ago)	Multiple web server 400 error codes from same source ip 52.169.76.76.	Web App Attack
Anonymous	2025-04-16 02:14:22 (1 year ago)	(mod_security) mod_security triggered on hostname [redacted] 52.169.76.76 (IE/Ireland/-)	SQL Injection
🇺🇸 Charlesiv	2025-04-16 00:40:45 (1 year ago)	Triggered Cloudflare WAF (botFight) from IE. Action taken: MANAGED_CHALLENGE ASN: 8075 (MICROSOFT-CO ... show more Triggered Cloudflare WAF (botFight) from IE. Action taken: MANAGED_CHALLENGE ASN: 8075 (MICROSOFT-CORP-MSN-AS-BLOCK) Protocol: HTTP/1.1 (GET method) Endpoint: /wp-includes/Requests/file.php Timestamp: 2025-04-16T00:29:18Z Ray ID: 930f914e888bbe4b UA: Empty string show less	Bad Web Bot
🇫🇷 dynamix	2025-04-16 00:34:59 (1 year ago)	Multiple WAF Violations	Web App Attack
🇳🇱 Site.eu	2025-04-16 00:26:57 (1 year ago)	Excessive multi-domain requests	Brute-Force
Anonymous	2025-04-15 12:16:59 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇩🇪 Ha1fdan	2025-04-15 06:48:54 (1 year ago)	52.169.76.76 - - [15/Apr/2025:08:48:48 +0200] "GET /cgi-bin/fm.php HTTP/2.0" 404 36 "-" "-" 52.169.7 ... show more 52.169.76.76 - - [15/Apr/2025:08:48:48 +0200] "GET /cgi-bin/fm.php HTTP/2.0" 404 36 "-" "-" 52.169.76.76 - - [15/Apr/2025:08:48:53 +0200] "GET /cgi-bin/1.php HTTP/2.0" 404 36 "-" "-" 52.169.76.76 - - [15/Apr/2025:08:48:53 +0200] "GET /cgi-bin/admin.php HTTP/2.0" 404 36 "-" "-" 52.169.76.76 - - [15/Apr/2025:08:48:53 +0200] "GET /cgi-bin/about.php HTTP/2.0" 404 36 "-" "-" 52.169.76.76 - - [15/Apr/2025:08:48:53 +0200] "GET /cgi-bin/xmrlpc.php HTTP/2.0" 404 36 "-" "-" ... show less	Bad Web Bot Web App Attack
🇫🇷 dynamix	2025-04-14 22:31:52 (1 year ago)	Multiple WAF Violations	Web App Attack
🇬🇧 Apache	2025-04-14 16:45:19 (1 year ago)	(mod_security) mod_security (id:20000010) triggered by 52.169.76.76 (IE/Ireland/-): 5 in the last 30 ... show more (mod_security) mod_security (id:20000010) triggered by 52.169.76.76 (IE/Ireland/-): 5 in the last 300 secs show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-04-14 10:59:36 (1 year ago)	(mod_security) mod_security (id:240000) triggered by 52.169.76.76 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240000) triggered by 52.169.76.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 14 06:59:33.278859 2025] [security2:error] [pid 2373723:tid 2373723] [client 52.169.76.76:13417] [client 52.169.76.76] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|warpedweed.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "warpedweed.com"] [uri "/images/stories/admin-post.php"] [unique_id "Z_zqlTdv5UcqUV1eMwP-SgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-04-14 10:25:15 (1 year ago)	(mod_security) mod_security (id:240000) triggered by 52.169.76.76 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240000) triggered by 52.169.76.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 14 06:25:11.135551 2025] [security2:error] [pid 15507:tid 15507] [client 52.169.76.76:5320] [client 52.169.76.76] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|medpact.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "medpact.net"] [uri "/images/stories/admin-post.php"] [unique_id "Z_zihzqKHSzbbRkoKn58XgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-04-14 10:09:49 (1 year ago)	(mod_security) mod_security (id:240000) triggered by 52.169.76.76 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240000) triggered by 52.169.76.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 14 06:09:46.723307 2025] [security2:error] [pid 3387893:tid 3387893] [client 52.169.76.76:10119] [client 52.169.76.76] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|afjm.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "afjm.org"] [uri "/images/stories/admin-post.php"] [unique_id "Z_ze6lNBLyngWakfuSHJzgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2025-04-14 08:05:06 (1 year ago)	Too many Status 40X (13)	Brute-Force Web App Attack

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 189.50.142.78

🇩🇪 167.94.146.62

🇫🇷 163.172.66.206

🇺🇸 162.247.52.151

🇵🇾 154.61.172.149

🇧🇷 128.201.102.71

🇸🇬 85.203.21.56

🇳🇱 81.19.216.74

🇺🇸 66.132.172.224

🇨🇭 20.250.12.24

🇫🇷 2001:41d0:303:7a2b::1

🇺🇸 216.26.224.210

🇩🇪 206.189.57.162

🇵🇾 181.126.71.74

🇧🇷 177.21.137.123

🇳🇱 176.65.149.198

🇺🇸 172.70.111.150

🇨🇦 166.48.167.105

🇸🇬 165.154.236.104

🇧🇷 143.255.253.178