JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

52.175.53.236

Neutral Activity

Abuse Confidence Score

0% Low Risk

63 reports

49 reporters · latest 4 months ago

ISP: Microsoft Corporation
Usage Type: Data Center/Web Hosting/Transit
ASN: AS8075
Domain Name: microsoft.com
Country: 🇭🇰 Hong Kong
City: Hong Kong

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

52.175.53.236 has been reported 63 times. The most recent report is from 4 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

63 from 49 distinct reporters

First reported

May 19th 2026

Most recent report

4 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-07-06 15:38:20 UTC · (4 months ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇫🇷 SpaceHost-Server	2026-05-21 22:31:48 UTC · (5 months ago)		Brute-Force Web App Attack
🇬🇧 openstrike.co.uk	2026-05-21 05:13:25 UTC · (5 months ago)	85 attacks on PHP URLs: GET /y.php HTTP/1.1	Web App Attack
🇳🇱 Site.eu	2026-05-20 23:40:57 UTC · (5 months ago)	Excessive multi-domain requests	Brute-Force
Anonymous	2026-05-20 20:04:24 UTC · (5 months ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: HK, Attack patterns: WordPress scanning, Webshell probing	Bad Web Bot Web App Attack
🇩🇪 macrob	2026-05-20 11:11:29 UTC · (5 months ago)	2026/05/20 11:11:10 [error] 2857916#2857916: 242685981 access forbidden by rule, client: 52.175.53.236, server: finami.es, request: "GET /adminfuns.php HTTP/2.0", host: "finami.es" 2026/05/20 11:11:23 [error] 2857916#2857916: 242686012 access forbi ... show more 2026/05/20 11:11:10 [error] 2857916#2857916: 242685981 access forbidden by rule, client: 52.175.53.236, server: finami.es, request: "GET /adminfuns.php HTTP/2.0", host: "finami.es" 2026/05/20 11:11:23 [error] 2857916#2857916: 242686012 access forbidden by rule, client: 52.175.53.236, server: finami.es, request: "GET /setup-config.php HTTP/2.0", host: "finami.es" 2026/05/20 11:11:27 [error] 2857916#2857916: *242686020 access forbidden by rule, client: 52.175.53.236, server: finami.es, request: "GET /xmlrpc.php HTTP/2.0", host: "finami.es" ... show less	Web App Attack
🇮🇪 Jim Keir	2026-05-20 10:20:25 UTC · (5 months ago)	2026-05-20 10:20:24 52.175.53.236 File scanning, blocking 52.175.53.236 for 5 minutes	Web App Attack
🇷🇺 DZBOT	2026-05-20 07:41:19 UTC · (5 months ago)	DZBOT: Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇬🇧 openstrike.co.uk	2026-05-20 05:13:50 UTC · (5 months ago)	90 attacks on PHP URLs: GET /y.php HTTP/1.1	Web App Attack
🇦🇹 mindrider	2026-05-20 01:45:27 UTC · (5 months ago)	52.175.53.236 - - [20/May/2026:03:45:24 +0200] "GET /1.php HTTP/1.1" 404 2968 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-" 52.175.53.236 - - [20/May/2026:03:45:25 +0200] "GE ... show more 52.175.53.236 - - [20/May/2026:03:45:24 +0200] "GET /1.php HTTP/1.1" 404 2968 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-" 52.175.53.236 - - [20/May/2026:03:45:25 +0200] "GET /2.php HTTP/1.1" 404 2968 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-" 52.175.53.236 - - [20/May/2026:03:45:25 +0200] "GET /7.php HTTP/1.1" 404 2968 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-" 52.175.53.236 - - [20/May/2026:03:45:25 +0200] "GET /10.php HTTP/1.1" 404 2968 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-" 52.175.53.236 - - [20/May/2026:03:45:25 +0200] "GET /13.php HTTP/1.1" 404 2968 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "- ... show less	Bad Web Bot
🇫🇷 ✨	2026-05-20 01:45:10 UTC · (5 months ago)	Domain : redirect.netenergy.uk Rule : hack 2026-05-20 01:43:13 217.194.210.152 GET /file.php - 443 - 52.175.53.236 HTTP/1.1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 - theplannerma ... show more Domain : redirect.netenergy.uk Rule : hack 2026-05-20 01:43:13 217.194.210.152 GET /file.php - 443 - 52.175.53.236 HTTP/1.1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 - theplannermagazine.com 404 0 2 1509 708 195 - - show less	Hacking SQL Injection Brute-Force
🇮🇹 Inartis	2026-05-20 01:16:01 UTC · (5 months ago)	[Wed May 20 03:16:00.408940 2026] [proxy_fcgi:error] [pid 2893163:tid 2893163] [client 52.175.53.236:11110] AH01071: Got error 'Primary script unknown' [Wed May 20 03:16:00.640216 2026] [proxy_fcgi:error] [pid 2893163:tid 2893163] [client 52.175.53.2 ... show more [Wed May 20 03:16:00.408940 2026] [proxy_fcgi:error] [pid 2893163:tid 2893163] [client 52.175.53.236:11110] AH01071: Got error 'Primary script unknown' [Wed May 20 03:16:00.640216 2026] [proxy_fcgi:error] [pid 2893163:tid 2893163] [client 52.175.53.236:11110] AH01071: Got error 'Primary script unknown' [Wed May 20 03:16:00.871451 2026] [proxy_fcgi:error] [pid 2893163:tid 2893163] [client 52.175.53.236:11110] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-05-20 00:48:16 UTC · (5 months ago)	Web attack/malicious scanning detected	Web App Attack
🇨🇦 polycoda	2026-05-20 00:39:16 UTC · (5 months ago)	🔥 VERY AGGRESSIVE SCANNER probed over 200 inexistent files and PHP scripts in less than an hour.	Hacking Web App Attack
🇬🇧 poundawebsiteltd	2026-05-19 23:13:17 UTC · (5 months ago)	Apache 403 Forbidden Access. Evidence: [REDACTED_DOMAIN]:443 52.175.53.236 - - [20/May/2026:00:13:16 +0100] GET /.dj/index.php HTTP/1.1 403 236 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari ... show more Apache 403 Forbidden Access. Evidence: [REDACTED_DOMAIN]:443 52.175.53.236 - - [20/May/2026:00:13:16 +0100] GET /.dj/index.php HTTP/1.1 403 236 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 show less	Web App Attack

Showing 1 to 15 of 63 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇦🇷 181.228.28.253

🇵🇭 165.101.154.38

🇷🇺 94.25.40.30

🇺🇸 70.167.235.169

🇮🇳 49.207.9.39

🇺🇸 20.106.103.160

🇷🇴 2.57.121.112

🇳🇱 204.76.203.44

🇪🇹 196.191.187.216

🇬🇪 185.99.5.176

🇨🇳 139.189.164.166

🇩🇪 138.68.75.43

🇨🇳 124.31.105.142

🇰🇷 112.168.162.4

🇺🇸 96.56.228.149

🇺🇸 209.139.114.16

🇭🇰 118.193.32.119

🇺🇸 24.191.120.21

🇸🇪 207.189.206.228

🇮🇳 168.144.157.130