JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.175.53.64

52.175.53.64 was found in our database!

This IP was reported 40 times. Confidence of Abuse is 35%: ?

35%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.175.53.64

Whois 52.175.53.64

IP Abuse Reports for 52.175.53.64:

This IP address has been reported a total of 40 times from 34 distinct sources. 52.175.53.64 was first reported on May 26th 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 Peregrine	2026-05-30 03:13:57 (1 month ago)	Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 52.175.53.64 172.71.218.192 - - [26/May/2026:00:22: ... show more Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 52.175.53.64 172.71.218.192 - - [26/May/2026:00:22:10 -0300] "GET /100.php HTTP/1.1" 404 18193 show less	Bad Web Bot
🇧🇷 Peregrine	2026-05-28 03:14:06 (1 month ago)	Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 52.175.53.64 172.71.218.192 - - [26/May/2026:00:22: ... show more Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 52.175.53.64 172.71.218.192 - - [26/May/2026:00:22:10 -0300] "GET /100.php HTTP/1.1" 404 18193 show less	Bad Web Bot
🇳🇱 Site.eu	2026-05-28 00:56:19 (1 month ago)	Excessive multi-domain requests	Brute-Force
🇧🇷 Peregrine	2026-05-27 03:12:10 (1 month ago)	Fail2Ban ct101 Jail: tomcat-404 \| Evidence: 52.175.53.64 172.71.219.58 - - [26/May/2026:00:22:13 -03 ... show more Fail2Ban ct101 Jail: tomcat-404 \| Evidence: 52.175.53.64 172.71.219.58 - - [26/May/2026:00:22:13 -0300] "GET /abcd.php HTTP/1.1" 404 18193 52.175.53.64 172.71.218.192 - - [26/May/2026:00:22:13 -0300] "GET /al.php HTTP/1.1" 404 18193 52.175.53.64 172.71.219.58 - - [26/May/2026:00:22:14 -0300] "GET /alfa.php HTTP/1.1" 404 18193 52.175.53.64 172.71.218.192 - - [26/May/2026:00:22:15 -0300] "GET /as.php HTTP/1.1" 404 18193 52.175.53.64 172.71.219.58 - - [26/May/2026:00:22:15 -0300] "GET /aa.php HTTP/1.1" 404 18193 show less	Bad Web Bot Web App Attack
🇫🇮 Christopher Hughes	2026-05-26 06:36:09 (1 month ago)	[Tue May 26 07:36:08.549434 2026] [proxy_fcgi:error] [pid 30884:tid 139774048323136] [client 52.175. ... show more [Tue May 26 07:36:08.549434 2026] [proxy_fcgi:error] [pid 30884:tid 139774048323136] [client 52.175.53.64:9083] AH01071: Got error 'Primary script unknown' [Tue May 26 07:36:08.807952 2026] [proxy_fcgi:error] [pid 30884:tid 139774023145024] [client 52.175.53.64:9083] AH01071: Got error 'Primary script unknown' [Tue May 26 07:36:09.097639 2026] [proxy_fcgi:error] [pid 30884:tid 139775042401856] [client 52.175.53.64:9083] AH01071: Got error 'Primary script unknown' [Tue May 26 07:36:09.356141 2026] [proxy_fcgi:error] [pid 30884:tid 139774056715840] [client 52.175.53.64:9083] AH01071: Got error 'Primary script unknown' [Tue May 26 07:36:09.614634 2026] [proxy_fcgi:error] [pid 30884:tid 139774761342528] [client 52.175.53.64:9083] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇫🇮 as211431.net	2026-05-26 06:13:01 (1 month ago)	Triggered Cloudflare WAF (firewallCustom) from HK. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from HK. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /wp-links-opml UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇦🇹 penguin-solutions.at	2026-05-26 06:11:07 (1 month ago)	Excessive 403/404 errors ...	Brute-Force Web App Attack
🇺🇸 mc4bbs	2026-05-26 05:34:13 (1 month ago)	Automated Apache detection on Windows host. 5 suspicious HTTP requests within 300 seconds. Examples: ... show more Automated Apache detection on Windows host. 5 suspicious HTTP requests within 300 seconds. Examples: GET /wp-user.php -> 404 UA=""; GET /wp-blog.php -> 404 UA=""; GET /wp-themes.php -> 404 UA=""; GET /wp-signin.php -> 404 UA=""; GET /wp-blog-header.php -> 404 UA="" show less	Web App Attack Hacking
🇩🇪 LRob	2026-05-26 05:30:11 (1 month ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot
Anonymous	2026-05-26 05:30:03 (1 month ago)	\| [Dangerous/Hong Kong] Aggressive IP 52.175.53.64 (~30 hits). Type: DoS Defender- Web server 400 er ... show more \| [Dangerous/Hong Kong] Aggressive IP 52.175.53.64 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
🇬🇧 openstrike.co.uk	2026-05-26 05:13:49 (1 month ago)	85 attacks on PHP URLs: GET /y.php HTTP/1.1	Web App Attack
🇨🇭 4server	2026-05-26 04:56:34 (1 month ago)	[TueMay2606:56:29.3094532026][security2:error][pid158540:tid158774][client52.175.53.64:0]ModSecurity ... show more [TueMay2606:56:29.3094532026][security2:error][pid158540:tid158774][client52.175.53.64:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"367\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"shakary.com\"][uri\"/xmlrpc.php\"][unique_id\"ahUn_Wd_A046xJhwLr11vwAAAQk\"] show less	Hacking Web App Attack
🇺🇸 jcbriar	2026-05-26 04:54:08 (1 month ago)	Searching for vulnerable scripts	Hacking Web App Attack
🇮🇪 Jim Keir	2026-05-26 04:27:51 (1 month ago)	2026-05-26 04:27:50 52.175.53.64 Too many redirects/missing files, blocking 52.175.53.64 for 5 minut ... show more 2026-05-26 04:27:50 52.175.53.64 Too many redirects/missing files, blocking 52.175.53.64 for 5 minutes show less	Web App Attack
🇩🇪 FeG Deutschland	2026-05-26 04:06:28 (1 month ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack

Showing 1 to 15 of 40 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇿 172.204.17.66

🇺🇸 172.202.26.222

🇺🇸 64.18.11.11

🇮🇪 3.252.216.74

🇺🇸 3.15.28.49

🇨🇳 222.186.68.154

🇬🇧 176.58.108.144

🇵🇱 176.53.159.198

🇺🇸 168.158.51.172

🇺🇸 165.22.185.115

🇺🇸 104.207.43.203

🇩🇪 69.5.169.229

🇺🇸 51.81.171.148

🇳🇱 45.153.34.165

🇳🇱 45.148.10.35

🇮🇪 34.249.16.102

🇵🇰 175.107.205.211

🇵🇰 175.107.3.45

🇹🇭 171.6.239.167

🇰🇷 121.184.144.232