AbuseIPDB » 52.178.129.74

52.178.129.74 was found in our database!

This IP was reported 90 times. Confidence of Abuse is 44%: ?

44%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
Domain Name	microsoft.com
Country	Ireland
City	Dublin, Leinster

Report 52.178.129.74

Whois 52.178.129.74

IP Abuse Reports for 52.178.129.74:

This IP address has been reported a total of 90 times from 53 distinct sources. 52.178.129.74 was first reported on October 2nd 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Ba-Yu	2024-10-08 21:38:44 (1 month ago)	WordPress hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
theEngineer	2024-10-08 20:46:03 (1 month ago)	[21:46:02] 4*: Exploit attempt against non-existent file - /defaults.php	Hacking Web App Attack
mashamal	2024-10-08 20:14:14 (1 month ago)	Vulnerability Probe ...	Web App Attack
weblite	2024-10-08 19:57:04 (1 month ago)	WP_MALWARE_PROBE	Hacking Web App Attack
COMAITE	2024-10-08 18:20:24 (1 month ago)	Multiple web server 400 error codes from same source ip 52.178.129.74.	Web App Attack
4server	2024-10-08 18:14:14 (1 month ago)	[TueOct0820:14:01.1638872024][security2:error][pid550123:tid550153][client52.178.129.74:0][client52. ... show more[TueOct0820:14:01.1638872024][security2:error][pid550123:tid550153][client52.178.129.74:0][client52.178.129.74]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"wp-content/uploads/.\\\\\\\\\.ph\(\?:p\\|tml\\|t\)\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/99_asl_jitp.conf\"][line\"5056\"][id\"382238\"][rev\"2\"][msg\"Atomicorp.comWAFRules-VirtualJustInTimePatch:PHPfileexecutioninuploadsdirectorydenied\"][data\"wp-content/uploads/cache.php\"][severity\"CRITICAL\"][hostname\"ristrutturazione-case.ch\"][uri\"/wp-content/uploads/cache.php\"][unique_id\"ZwV2acOY9WJ0Zot8B-Wj0wAAAMI\"][TueOct0820:14:08.1059122024][security2:error][pid550123:tid550153][client52.178.129.74:0][client52.178.129.74]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"wp-content/uploads/.\\\\\\\\\.ph\(\?:p\\|tml\\|t\)\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/99_asl_jitp.conf\"][line\"5056\"][id\"382238\"][rev\"2\"][msg\"Atomicorp.comWAFRules-VirtualJustInTimePatch:PHPfileexecutioninuploads show less	Blog Spam
eminovic.ba	2024-10-08 18:04:59 (1 month ago)	BRUTE FORCE: Excessive 404 hits ...	Hacking Brute-Force Web App Attack
stypr	2024-10-07 18:11:59 (1 month ago)	Malicious activity detected on HTTP/HTTPS	Hacking Brute-Force Web App Attack
FeG Deutschland	2024-10-07 18:05:02 (1 month ago)	Looking for CMS/PHP/SQL vulnerablilities - 3	Exploited Host Web App Attack
Anonymous	2024-10-06 22:49:37 (1 month ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-10-06 19:51:14 (1 month ago)	wordpress-trap	Web App Attack
URAN Publishing Service	2024-10-03 06:02:54 (2 months ago)	52.178.129.74 - - [03/Oct/2024:09:02:54 +0300] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 404 ... show more52.178.129.74 - - [03/Oct/2024:09:02:54 +0300] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 404 366 "-" "-" ... show less	Web App Attack
TPI-Abuse	2024-10-03 03:31:31 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 52.178.129.74 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:210492) triggered by 52.178.129.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 02 23:31:28.282062 2024] [security2:error] [pid 9852:tid 9852] [client 52.178.129.74:5923] [client 52.178.129.74] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "buddhas.net"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "Zv4QELRK6g_DovR8_qMKSQAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-10-03 03:18:32 (2 months ago)	Bot / scanning and/or hacking attempts: GET /.well-known/makeasmtp.php HTTP/1.1, GET /.well-known/fi ... show moreBot / scanning and/or hacking attempts: GET /.well-known/makeasmtp.php HTTP/1.1, GET /.well-known/file.php HTTP/1.1, GET /radio.php HTTP/1.1, GET /wp-admin/404.php HTTP/1.1, GET /wp-content/themes/index.php HTTP/1.1, GET /wp-includes/wp-login.php HTTP/1.1, GET /file.php HTTP/1.1, GET /wp-trackback.php HTTP/1.1, GET /cgi-bin/index.php HTTP/1.1, GET /cgi-bin/file.php HTTP/1.1, GET /wp-admin/themes.php HTTP/1.1, GET /wp-includes/index.php HTTP/1.1, GET /.well-known/acme-challenge/makeasmtp.php HTTP/1.1, GET /.well-known/acme-challenge/admin.php HTTP/1.1, GET /wp-includes/themes.php HTTP/1.1, GET /wp-includes/admin.php HTTP/1.1, GET /.well-known/wp-load.php HTTP/1.1, GET /wp-content/file.php HTTP/1.1, GET /.well-known/index.php HTTP/1.1, GET /wp-includes/SimplePie/wp-login.php HTTP/1.1, GET /wp-includes/system_log.php?p= HTTP/1.1, GET /.well-known/cloud.php HTTP/1.1, GET /.well-known/acme-challenge/autoload_classmap.php HTTP/1.1 show less	Hacking Web App Attack
TPI-Abuse	2024-10-03 02:36:28 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 52.178.129.74 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:210492) triggered by 52.178.129.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 02 22:36:22.461098 2024] [security2:error] [pid 31302:tid 31302] [client 52.178.129.74:6963] [client 52.178.129.74] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mctwholesale.com"] [uri "/.well-known/pki-validation/wp-config.php"] [unique_id "Zv4DJr-qvZ0-hcTVSwfVFQAAABY"] show less	Brute-Force Bad Web Bot Web App Attack