AbuseIPDB » 52.178.139.208

52.178.139.208 was found in our database!

This IP was reported 166 times. Confidence of Abuse is 42%: ?

42%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
Domain Name	microsoft.com
Country	Ireland
City	Dublin, Leinster

Report 52.178.139.208

Whois 52.178.139.208

IP Abuse Reports for 52.178.139.208:

This IP address has been reported a total of 166 times from 80 distinct sources. 52.178.139.208 was first reported on October 2nd 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
strefapi_com	2024-10-10 19:15:12 (2 months ago)	Brute-force web ...	Hacking Brute-Force Web App Attack
mnsf	2024-10-09 22:11:07 (2 months ago)	Too many Status 40X (47) Request Overload (116)	Brute-Force Web App Attack
ph	2024-10-09 19:54:33 (2 months ago)	Bad web bot attempting to run wp-login.php on non-WP site	Hacking Bad Web Bot Web App Attack
leolemos	2024-10-09 07:18:26 (2 months ago)	[Wed Oct 09 04:18:24.266436 2024] [proxy_fcgi:error] [pid 2418310:tid 266762154930368] [client 52.17 ... show more[Wed Oct 09 04:18:24.266436 2024] [proxy_fcgi:error] [pid 2418310:tid 266762154930368] [client 52.178.139.208:4366] AH01071: Got error 'Primary script unknown' [Wed Oct 09 04:18:25.098855 2024] [proxy_fcgi:error] [pid 2418310:tid 266762171838656] [client 52.178.139.208:4366] AH01071: Got error 'Primary script unknown' [Wed Oct 09 04:18:25.716694 2024] [proxy_fcgi:error] [pid 2418311:tid 266760854696128] [client 52.178.139.208:0] AH01071: Got error 'Primary script unknown' show less	Brute-Force Web App Attack
QT	2024-10-09 02:26:56 (2 months ago)	Website hack attempted at 2024-10-09 12:26:52 +1000	Web App Attack
weblite	2024-10-09 01:05:24 (2 months ago)	WP_EXPLOIT_PROBE WP_MALWARE_PROBE	Hacking Web App Attack
Anonymous	2024-10-09 00:18:10 (2 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
doll.gl	2024-10-09 00:13:03 (2 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-admin-interface-probing	Hacking Web App Attack
4server	2024-10-08 19:22:47 (2 months ago)	[TueOct0821:22:28.5553522024][security2:error][pid549952:tid549987][client52.178.139.208:0][client52 ... show more[TueOct0821:22:28.5553522024][security2:error][pid549952:tid549987][client52.178.139.208:0][client52.178.139.208]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"wp-content/uploads/.\\\\\\\\\.ph\(\?:p\\|tml\\|t\)\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/99_asl_jitp.conf\"][line\"5056\"][id\"382238\"][rev\"2\"][msg\"Atomicorp.comWAFRules-VirtualJustInTimePatch:PHPfileexecutioninuploadsdirectorydenied\"][data\"wp-content/uploads/upload_handler.php\"][severity\"CRITICAL\"][hostname\"fimka-icp.com\"][uri\"/wp-content/uploads/upload_handler.php\"][unique_id\"ZwWGdFp5VCIxgMd__ZLqrgAAAIc\"][TueOct0821:22:29.8042342024][security2:error][pid549952:tid549987][client52.178.139.208:0][client52.178.139.208]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"wp-content/uploads/.\\\\\\\\\.ph\(\?:p\\|tml\\|t\)\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/99_asl_jitp.conf\"][line\"5056\"][id\"382238\"][rev\"2\"][msg\"Atomicorp.comWAFRules-VirtualJustInTimePatch:PHPfileexecuti show less	Blog Spam
noxtec GmbH	2024-10-08 18:52:53 (2 months ago)	(apache-scanners) Failed apache-scanners trigger with match [redacted] from 52.178.139.208 (IE/Irela ... show more(apache-scanners) Failed apache-scanners trigger with match [redacted] from 52.178.139.208 (IE/Ireland/-) show less	Port Scan
catalink.com	2024-10-08 17:02:02 (2 months ago)	Brute forcing Wordpress login	Exploited Host Web App Attack
sefinek.net	2024-10-08 03:51:08 (2 months ago)	Triggered Cloudflare WAF (firewallCustom) from IE. Action taken: BLOCK ASN: 8075 (MICROS ... show moreTriggered Cloudflare WAF (firewallCustom) from IE. Action taken: BLOCK ASN: 8075 (MICROSOFT-CORP-MSN-AS-BLOCK) Protocol: HTTP/1.1 (method GET) Domain: sefinek.net Endpoint: /wp-content/themes/wp-classic/inc/index.php Timestamp: 2024-10-07T18:53:53Z Ray ID: 8cf018b80820bdea Rule ID: 28ce88ae31c84d638aec7f360a4f64af UA: Empty string Report generated by Node-Cloudflare-WAF-AbuseIPDB https://github.com/sefinek24/Node-Cloudflare-WAF-AbuseIPDB show less	Bad Web Bot
QT	2024-10-07 22:06:48 (2 months ago)	Website hack attempted at 2024-10-08 08:06:44 +1000	Web App Attack
eminovic.ba	2024-10-07 18:18:58 (2 months ago)	BRUTE FORCE: Excessive 404 hits ...	Hacking Brute-Force Web App Attack
theEngineer	2024-10-07 06:53:38 (2 months ago)	[07:53:37] 4: Exploit attempt against non-existent file - /wp-includes/wp-load.php (Repeat abuser, ... show more[07:53:37] 4: Exploit attempt against non-existent file - /wp-includes/wp-load.php (Repeat abuser, 453 other attacks previously recorded.) show less	Hacking Web App Attack