JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.175.121.142

52.175.121.142 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.175.121.142

Whois 52.175.121.142

IP Abuse Reports for 52.175.121.142:

This IP address has been reported a total of 37 times from 34 distinct sources. 52.175.121.142 was first reported on September 21st 2021, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-02 19:05:03 (1 week ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: HK, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: HK, Attack patterns: WordPress scanning, Webshell probing, Malicious User-Agent show less	Bad Web Bot Web App Attack
🇧🇪 taivas.nl	2026-07-02 04:32:25 (1 week ago)	Many_bad_calls	Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-01 22:01:17 (1 week ago)	Auto-ban: >3000 req/min op 2026-07-01	Web App Attack SSH Hacking
🇮🇹 [email protected]	2026-07-01 19:26:42 (1 week ago)	2026-07-01 21:26:42,179 fail2ban.actions [3626245]: NOTICE [apache-webshell] Ban 52.175.121. ... show more 2026-07-01 21:26:42,179 fail2ban.actions [3626245]: NOTICE [apache-webshell] Ban 52.175.121.1422026-07-01 21:26:42,439 fail2ban.actions [3626245]: NOTICE [apache-scanner] Ban 52.175.121.142 show less	Brute-Force
Anonymous	2026-07-01 19:20:50 (1 week ago)	(caddyscan) Scanner path probe from 52.175.121.142 (HK/Hong Kong/-): 5 in the last 3600 secs; Ports: ... show more (caddyscan) Scanner path probe from 52.175.121.142 (HK/Hong Kong/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 52.175.121.142 - - [01/Jul/2026:19:18:17 +0000] "GET /wp-admin/ HTTP/1.1" [REDACTED] 200 2627 52.175.121.142 - - [01/Jul/2026:19:19:00 +0000] "GET /wp-admin/wp.php HTTP/1.1" [REDACTED] 200 2627 52.175.121.142 - - [01/Jul/2026:19:19:51 +0000] "GET /wp-login.php HTTP/1.1" [REDACTED] 200 2627 52.175.121.142 - - [01/Jul/2026:19:20:25 +0000] "GET /wp-admin/js/ HTTP/1.1" [REDACTED] 200 2627 52.175.121.142 - - [01/Jul/2026:19:20:50 +0000] "GET /wp-admin/js/index.php HTTP/1.1" show less	Port Scan
Anonymous	2026-07-01 19:05:57 (1 week ago)	Blocked: Reason='Vulnerability probing — PHP scan detected (109/60 min)'; Requests=109	Port Scan
🇺🇸 mnsf	2026-07-01 19:05:40 (1 week ago)	Too many Status 40X (11)	Brute-Force Web App Attack
Anonymous	2026-07-01 19:04:36 (1 week ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: HK, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: HK, Attack patterns: WordPress scanning, Webshell probing, Malicious User-Agent show less	Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-07-01 18:34:16 (1 week ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇩🇪 raph	2026-07-01 18:33:29 (1 week ago)	[Wordpress] crawler /wp-admin/, /wp-content/, etc.	Bad Web Bot Web App Attack
🇳🇱 wlt-blocker	2026-07-01 18:25:25 (1 week ago)	Unauthorized access to webpage admin	Web App Attack
Anonymous	2026-07-01 18:22:02 (1 week ago)	Bot / scanning and/or hacking attempts: GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1 ... show more Bot / scanning and/or hacking attempts: GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1, GET /admin.php HTTP/1.1, GET /file.php HTTP/1.1, GET /goods.php HTTP/1.1, GET /this_is_a_new_hello_world.php HTTP/1.1, GET /404.php HTTP/1.1, GET /adminfuns.php HTTP/1.1, GET /wk/index.php HTTP/1.1, GET /about.php HTTP/1.1, GET /1.php HTTP/1.1, GET /inputs.php HTTP/1.1, GET /term.php HTTP/1.1, GET /ioxi-o.php HTTP/1.1 show less	Hacking Web App Attack
🇨🇭 backslash	2026-07-01 18:18:00 (1 week ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇩🇪 barbarella	2026-07-01 18:14:49 (1 week ago)	Multiple (112) times attack on https port 443: unauthorized access to Wordpress files (GET /wp-conte ... show more Multiple (112) times attack on https port 443: unauthorized access to Wordpress files (GET /wp-content/plugins/hellopress/wp_filemanager.php) 20:14:50 Hacking attempt of vulnerable PHP Script (GET /this_is_a_new_hello_world.php) 20:14:50 Hacking attempt of vulnerable PHP Script (GET /inputs.php) 20:14:51 Hacking attempt (GET /admin.php) 20:14:52 Hacking attempt of vulnerable PHP Script (GET /goods.php) 20:14:52 Hacking attempt of vulnerable PHP Script (GET /file.php) 20:14:53 Hacking attempt of vulnerable PHP Script (GET /adminfuns.php) 20:14:54 Hacking attempt of vulnerable PHP Script (GET /404.php) 20:14:54 Hacking attempt (GET /wk/index.php) show less	Hacking Web App Attack
🇲🇾 Rizzy	2026-07-01 18:13:27 (1 week ago)	Multiple WAF Violations	Brute-Force Web App Attack

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2607:f8b0:4001:c0f::125

🇧🇪 198.235.24.218

🇪🇨 186.33.187.53

🇵🇱 176.53.159.197

🇮🇳 122.185.65.150

🇮🇳 103.255.73.229

🇫🇷 85.217.140.43

🇧🇬 79.124.62.230

🇺🇸 20.40.210.26

🇰🇷 222.116.59.144

🇳🇱 185.223.235.34

🇯🇵 172.253.236.154

🇩🇪 167.233.109.10

🇰🇷 121.135.133.43

🇮🇩 114.141.59.195

🇺🇸 107.175.94.125

🇨🇳 106.117.108.4

🇱🇹 62.60.130.219

🇺🇸 44.159.206.68

🇺🇸 44.118.59.191