JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.172.225.211

52.172.225.211 was found in our database!

This IP was reported 161 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇮🇳 India
City	Pune, Maharashtra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.172.225.211

Whois 52.172.225.211

IP Abuse Reports for 52.172.225.211:

This IP address has been reported a total of 161 times from 128 distinct sources. 52.172.225.211 was first reported on July 5th 2026, and the most recent report was 21 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Epimetheus	2026-07-05 20:14:04 (21 minutes ago)	Unauthorized access attempts: [GET] /assets/jquery-ui/images/lock2.php [GET] /wp-includes/style-eng ... show more Unauthorized access attempts: [GET] /assets/jquery-ui/images/lock2.php [GET] /wp-includes/style-engine/ [GET] /wp-includes/js/crop/cropper.php [GET] /assets/bootstrap-fileupload/lock2.php [GET] /.well-known/ [GET] /wp-includes/Text/Diff/index.php [GET] /man.php [GET] /wp-content/plugins/up/main.php [GET] /an.php [GET] /rip.php [GET] /wp-admin/user/cloud.php [GET] /wp-logs.php [GET] /wp-conf.php [GET] /wp-content/plugins/atomlib.php [GET] /main.php [GET] /errorlog.php [GET] /static/files/index.php [GET] /01.php [GET] /wp-admin/css/colors/ectoplasm/admin.php [GET] /wp-admin/js/about.php7 [GET] /calculatingamortgageloan.com/manager.php [GET] /images/k.php [GET] //classwithtostring.php [GET] /wp-includes/html-api/about.php [GET] /wp-index.php [GET] /byp.php [GET] /wp-includes/js/tinymce/utils/index.php [GET] /gel4y.php [GET] /.well-known/pki-validation/admin.php [GET] /settings.php [GET] /mini [GET] /baxa1.phP8 [GET] /wp-admin/wp.php [GET] /wp-includes/js/tinymce/utils/admi ...(Truncated) show less	Web App Attack
Anonymous	2026-07-05 20:07:32 (27 minutes ago)	[Sun Jul 05 22:07:21.631590 2026] [authz_core:error] [pid 44585:tid 44720] [client 52.172.225.211:34 ... show more [Sun Jul 05 22:07:21.631590 2026] [authz_core:error] [pid 44585:tid 44720] [client 52.172.225.211:34558] AH01630: client denied by server configuration: /var/www/cimt-precision/wp-admin/images/admin.php [Sun Jul 05 22:07:23.459577 2026] [authz_core:error] [pid 44585:tid 44755] [client 52.172.225.211:34558] AH01630: client denied by server configuration: /var/www/cimt-precision/wp-admin/css/ [Sun Jul 05 22:07:27.054561 2026] [authz_core:error] [pid 44585:tid 44739] [client 52.172.225.211:34558] AH01630: client denied by server configuration: /var/www/cimt-precision/wp-admin/css/colors/index.php [Sun Jul 05 22:07:30.872219 2026] [authz_core:error] [pid 44585:tid 44757] [client 52.172.225.211:34558] AH01630: client denied by server configuration: /var/www/cimt-precision/wp-admin/css/colors/ ... show less	Brute-Force Web App Attack
🇫🇮 Christopher Hughes	2026-07-05 19:17:42 (1 hour ago)	[Sun Jul 05 20:17:40.465852 2026] [proxy_fcgi:error] [pid 1520407:tid 139822257665600] [client 52.17 ... show more [Sun Jul 05 20:17:40.465852 2026] [proxy_fcgi:error] [pid 1520407:tid 139822257665600] [client 52.172.225.211:11733] AH01071: Got error 'Primary script unknown' [Sun Jul 05 20:17:40.616003 2026] [proxy_fcgi:error] [pid 1520407:tid 139821695616576] [client 52.172.225.211:11733] AH01071: Got error 'Primary script unknown' [Sun Jul 05 20:17:40.920642 2026] [proxy_fcgi:error] [pid 1520407:tid 139821720794688] [client 52.172.225.211:11733] AH01071: Got error 'Primary script unknown' [Sun Jul 05 20:17:41.380498 2026] [proxy_fcgi:error] [pid 1520407:tid 139822767470144] [client 52.172.225.211:11733] AH01071: Got error 'Primary script unknown' [Sun Jul 05 20:17:41.692422 2026] [proxy_fcgi:error] [pid 1520407:tid 139822759077440] [client 52.172.225.211:11733] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇫🇷 conseilgouz	2026-07-05 19:15:15 (1 hour ago)	sae-7 : Trying access unauthorized files/dir=>/wp-admin/js/index.php	Hacking
🇹🇭 thaizone.com	2026-07-05 19:06:44 (1 hour ago)	Hacking attempts against websites (D1) #3	Web App Attack Hacking
🇸🇪 sweplox.se	2026-07-05 18:59:08 (1 hour ago)	52.172.225.211 - - [05/Jul/2026:18:59:05 +0000] "GET /admin.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 ( ... show more 52.172.225.211 - - [05/Jul/2026:18:59:05 +0000] "GET /admin.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.172.225.211 - - [05/Jul/2026:18:59:05 +0000] "GET /public/css.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.172.225.211 - - [05/Jul/2026:18:59:06 +0000] "GET /classwithtostring.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.172.225.211 - - [05/Jul/2026:18:59:07 +0000] "GET /wp-content/admin.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.172.225.211 - - [05/Jul/2026:18:59:07 +0000] "GET /gelay.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chro ... show less	Bad Web Bot SSH
🇨🇭 zynex	2026-07-05 18:57:40 (1 hour ago)	URL Probing: /admin.php	Web App Attack
🇸🇬 wulan17	2026-07-05 18:51:46 (1 hour ago)	Fail2ban: Web bot/vulnerability scanning detected.	Bad Web Bot
🇮🇩 soc-yk	2026-07-05 18:30:15 (2 hours ago)	Type: suspicious_network_activity Risk: 100 Events: 920 Evidence: - Persistent suspicious network a ... show more Type: suspicious_network_activity Risk: 100 Events: 920 Evidence: - Persistent suspicious network activity detected - Repeated hostile operational behavior observed - Multi-event operational persistence identified - Threat escalation behavior observed show less	Port Scan Hacking
🇩🇪 Starburst SysOp Team	2026-07-05 18:25:35 (2 hours ago)	Malware host (X-Forwarded-For) detected by rbl.malware.expert. RBL lookup of 211.225.172.52.rbl.malw ... show more Malware host (X-Forwarded-For) detected by rbl.malware.expert. RBL lookup of 211.225.172.52.rbl.malware.expert succeeded at REQUEST_HEADERS:X-Forwarded-For. (1001000-nue6-2) show less	Hacking
🇩🇪 JLKnoch.com	2026-07-05 18:01:46 (2 hours ago)	CrowdSec crowdsecurity/http-admin-interface-probing	Brute-Force Web App Attack
🇮🇳 dineshskt4all	2026-07-05 18:00:13 (2 hours ago)	[Sun Jul 05 18:00:09.000572 2026] [proxy_fcgi:error] [pid 796520:tid 133422521497280] [client 52.172 ... show more [Sun Jul 05 18:00:09.000572 2026] [proxy_fcgi:error] [pid 796520:tid 133422521497280] [client 52.172.225.211:0] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force
🇸🇬 Cloudkul Cloudkul	2026-07-05 17:53:03 (2 hours ago)	Attempted Not Found (404 status code) requests on our application, more than 30% of their total requ ... show more Attempted Not Found (404 status code) requests on our application, more than 30% of their total requests. show less	Brute-Force Web App Attack
🇫🇷 bazter.pro	2026-07-05 17:49:35 (2 hours ago)	Fail2Ban: plesk-bot-aggressive - 15 failures	Port Scan Bad Web Bot Web App Attack
🇺🇸 antlac1	2026-07-05 17:48:27 (2 hours ago)	crowdsecurity/http-probing	Brute-Force Web App Attack

Showing 1 to 15 of 161 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 182.95.106.138

🇳🇱 178.128.245.160

🇻🇳 113.172.233.233

🇨🇭 209.99.190.200

🇧🇷 191.210.72.37

🇲🇴 182.93.7.194

🇺🇸 178.128.152.250

🇺🇸 178.128.146.10

🇸🇬 161.118.218.103

🇮🇳 161.118.169.38

🇧🇬 136.175.82.7

🇻🇳 113.160.82.122

🇹🇷 95.70.198.158

🇳🇱 82.24.19.158

🇷🇺 78.138.168.46

🇮🇩 16.78.21.156

🇸🇬 8.222.242.233

🇯🇵 8.221.139.229

🇧🇷 177.87.33.201

🇧🇷 177.73.11.79