JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

52.178.208.158

Neutral Activity

Abuse Confidence Score

0% Low Risk

105 reports

84 reporters · latest 1 year ago

ISP: Microsoft Corporation
Usage Type: Data Center/Web Hosting/Transit
ASN: AS8075
Domain Name: microsoft.com
Country: 🇮🇪 Ireland
City: Dublin, Leinster

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

52.178.208.158 has been reported 105 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

105 from 84 distinct reporters

First reported

September 5th 2025

Most recent report

1 year ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇭🇺 NyaljBe	2025-09-08 08:58:00 UTC · (1 year ago)	52.178.208.158 - - [06/Sep/2025:02:03:41 +0200] "GET /backup.php HTTP/1.1" 404 153 "-" "-" 52.178.208.158 - - [06/Sep/2025:02:03:41 +0200] "GET /cgi-bin/file.php HTTP/1.1" 404 153 "-" "-" 52.178.208.158 - - [06/Sep/2025:02:03:41 +0200] "GET /cgi-bi ... show more 52.178.208.158 - - [06/Sep/2025:02:03:41 +0200] "GET /backup.php HTTP/1.1" 404 153 "-" "-" 52.178.208.158 - - [06/Sep/2025:02:03:41 +0200] "GET /cgi-bin/file.php HTTP/1.1" 404 153 "-" "-" 52.178.208.158 - - [06/Sep/2025:02:03:41 +0200] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 404 153 "-" "-" 52.178.208.158 - - [06/Sep/2025:02:03:41 +0200] "GET /autoload_classmap/function.php HTTP/1.1" 404 153 "-" "-" 52.178.208.158 - - [06/Sep/2025:02:03:41 +0200] "GET /autoload_classmap.php HTTP/1.1" 404 153 "-" "-" 52.178.208.158 - - [06/Sep/2025:02:03:41 +0200] "GET /atomlib.php HTTP/1.1" 404 153 "-" "-" 52.178.208.158 - - [06/Sep/2025:02:03:41 +0200] "GET /assets/atomlib.php HTTP/1.1" 404 153 "-" "-" 52.178.208.158 - - [06/Sep/2025:02:03:41 +0200] "GET /wp-signup.php HTTP/1.1" 404 153 "-" "-" 52.178.208.158 - - [06/Sep/2025:02:03:41 +0200] "GET /browse.php HTTP/1.1" 404 153 "-" "-" 52.178.208.158 - - [06/Sep/2025:02:03:41 +0200] "GET /about.php HTTP/1.1" 404 153 "-" "-" show less	Web App Attack
🇹🇷 rtbh.com.tr	2025-09-07 20:08:40 UTC · (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 kjaerulff	2025-09-07 15:42:02 UTC · (1 year ago)	Probed for 101 PHP files	Web App Attack
🇭🇺 DumaNet	2025-09-07 04:08:00 UTC · (1 year ago)	WordPress plugin attack attempts. Date: 2025 Sep 06. 00:15:50 Source IP: 52.178.208.158 Portion of the log(s): 52.178.208.158 - [06/Sep/2025:00:15:44 +0200] "GET /wp-admin/css/ HTTP/1.1" 404 153 "-" "-" 52.178.208.158 - [06/Sep/2025:00:15:44 + ... show more WordPress plugin attack attempts. Date: 2025 Sep 06. 00:15:50 Source IP: 52.178.208.158 Portion of the log(s): 52.178.208.158 - [06/Sep/2025:00:15:44 +0200] "GET /wp-admin/css/ HTTP/1.1" 404 153 "-" "-" 52.178.208.158 - [06/Sep/2025:00:15:44 +0200] "GET /wp-admin/ HTTP/1.1" 404 153 "-" "-" 52.178.208.158 - [06/Sep/2025:00:15:44 +0200] "GET /shop/ HTTP/1.1" 404 153 "-" "-" 52.178.208.158 - [06/Sep/2025:00:15:44 +0200] "GET /.tmb/ HTTP/1.1" 404 153 "-" "-" 52.178.208.158 - [06/Sep/2025:00:15:44 +0200] "GET /admin/uploads/ HTTP/1.1" 404 153 "-" "-" 52.178.208.158 - [06/Sep/2025:00:15:44 +0200] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 404 153 "-" "-" 52.178.208.158 - [06/Sep/2025:00:15:44 +0200] "GET /wp-includes/404.php HTTP/1.1" 404 153 "-" "-" 52.178.208.158 - [06/Sep/2025:00:15:44 +0200] "GET /wp-includes/IXR/admin.php HTTP/1.1" 404 153 "-" "-" 52.178.208.158 - [06/Sep/2025:00:15:44 +0200] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 404 153 "-" "-" show less	Hacking Web App Attack
🇭🇺 DumaNet	2025-09-07 03:50:00 UTC · (1 year ago)	WordPress plugin attack attempts. Date: 2025 Sep 06. 00:03:46 Source IP: 52.178.208.158 Portion of the log(s): 52.178.208.158 - [06/Sep/2025:00:03:44 +0200] "GET /wp-content/themes/index.php HTTP/1.1" 404 153 "-" "-" 52.178.208.158 - [06/Sep/2 ... show more WordPress plugin attack attempts. Date: 2025 Sep 06. 00:03:46 Source IP: 52.178.208.158 Portion of the log(s): 52.178.208.158 - [06/Sep/2025:00:03:44 +0200] "GET /wp-content/themes/index.php HTTP/1.1" 404 153 "-" "-" 52.178.208.158 - [06/Sep/2025:00:03:44 +0200] "GET /wp-content/themes/admin.php HTTP/1.1" 404 153 "-" "-" 52.178.208.158 - [06/Sep/2025:00:03:44 +0200] "GET /wp-content/themes/about.php HTTP/1.1" 404 153 "-" "-" 52.178.208.158 - [06/Sep/2025:00:03:44 +0200] "GET /wp-content/index.php HTTP/1.1" 404 153 "-" "-" 52.178.208.158 - [06/Sep/2025:00:03:44 +0200] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 404 153 "-" "-" 52.178.208.158 - [06/Sep/2025:00:03:44 +0200] "GET /wp-content/plugins/index.php HTTP/1.1" 404 153 "-" "-" 52.178.208.158 - [06/Sep/2025:00:03:44 +0200] "GET /wp-content/admin.php HTTP/1.1" 404 153 "-" "-" 52.178.208.158 - [06/Sep/2025:00:03:43 +0200] "GET /wp-content/plugins/WordPressCore/cong.php HTTP/1.1" 404 153 "-" "-" 52.178.208.158 - [06/Sep/2025:00:03:43 show less	Hacking Web App Attack
🇹🇷 rtbh.com.tr	2025-09-06 20:08:39 UTC · (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇬🇧 openstrike.co.uk	2025-09-06 05:13:55 UTC · (1 year ago)	108 attacks on PHP URLs: GET /wp-includes/404.php HTTP/1.1	Web App Attack
🇺🇸 octageeks.com	2025-09-06 04:06:02 UTC · (1 year ago)	Wordpress malicious attack:[octa404]	Web App Attack
🇹🇷 rtbh.com.tr	2025-09-06 00:08:37 UTC · (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 Vegascosmetics	2025-09-05 21:50:41 UTC · (1 year ago)	Kingcopy(AI-IDS):IP is Probing for Wordpress vulnerabilities WTF:Banned	Hacking Bad Web Bot Web App Attack
🇺🇸 jormaster3k	2025-09-05 21:43:58 UTC · (1 year ago)	Attack against Apache (too many 404s)	Web App Attack
🇬🇧 Mendip_Defender	2025-09-05 21:30:42 UTC · (1 year ago)	52.178.208.158 - - [05/Sep/2025:22:30:23 +0100] "GET /gmo.php HTTP/1.0" 404 206 "-" "-" 52.178.208.158 - - [05/Sep/2025:22:30:23 +0100] "GET /elp.php HTTP/1.0" 404 206 "-" "-" 52.178.208.158 - - [05/Sep/2025:22:30:23 +0100] "GET /aa.php HTTP/1.0" 404 ... show more 52.178.208.158 - - [05/Sep/2025:22:30:23 +0100] "GET /gmo.php HTTP/1.0" 404 206 "-" "-" 52.178.208.158 - - [05/Sep/2025:22:30:23 +0100] "GET /elp.php HTTP/1.0" 404 206 "-" "-" 52.178.208.158 - - [05/Sep/2025:22:30:23 +0100] "GET /aa.php HTTP/1.0" 404 206 "-" "-" ... show less	Hacking Web App Attack
🇺🇸 chronos	2025-09-05 21:12:29 UTC · (1 year ago)	[AUTORAVALT][[05/09/2025 - 18:12:28 -03:00 UTC] Attack from [Microsoft Corporation] [52.178.208.158] Action: BLocKed DDoS Attack -> Participating in distributed denial-of-service. Phishing -> Phishing websites and/or email. Web Spam -> Comment/forum ... show more [AUTORAVALT][[05/09/2025 - 18:12:28 -03:00 UTC] Attack from [Microsoft Corporation] [52.178.208.158] Action: BLocKed DDoS Attack -> Participating in distributed denial-of-service. Phishing -> Phishing websites and/or email. Web Spam -> Comment/forum spam, HTTP referer spam, or other CMS spam. Blog Spam -> CMS blog comment spam. Web App Attack -> Attempts to pr] ... show less	DDoS Attack Phishing Web Spam Blog Spam Web App Attack
🇺🇸 Jason Howell	2025-09-05 21:09:32 UTC · (1 year ago)	52.178.208.158 - - [05/Sep/2025:16:09:11 -0500] "GET /wp-login.php?action=register HTTP/1.1" 302 530 "-" "-" 52.178.208.158 - - [05/Sep/2025:16:09:11 -0500] "GET /wp-login.php?registration=disabled HTTP/1.1" 200 3777 "-" "-" 52.178.208.158 - - [05/Se ... show more 52.178.208.158 - - [05/Sep/2025:16:09:11 -0500] "GET /wp-login.php?action=register HTTP/1.1" 302 530 "-" "-" 52.178.208.158 - - [05/Sep/2025:16:09:11 -0500] "GET /wp-login.php?registration=disabled HTTP/1.1" 200 3777 "-" "-" 52.178.208.158 - - [05/Sep/2025:16:09:32 -0500] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 602 "-" "-" 52.178.208.158 - - [05/Sep/2025:16:09:32 -0500] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 386 "-" "-" 52.178.208.158 - - [05/Sep/2025:16:09:32 -0500] "GET /wp-admin/js/wp-login.php HTTP/1.1" 404 75391 "-" "-" ... show less	Web App Attack
🇩🇪 Ba-Yu	2025-09-05 20:51:09 UTC · (1 year ago)	WordPress bruteforce	Web Spam Hacking Brute-Force Exploited Host Web App Attack

Showing 1 to 15 of 105 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 204.76.203.221

🇺🇸 198.211.115.12

🇩🇪 185.168.30.192

🇺🇸 70.60.65.138

🇺🇸 52.39.108.143

🇸🇬 47.82.53.88

🇺🇸 147.182.133.69

🇵🇰 124.109.50.206

🇨🇳 119.98.12.242

🇷🇴 92.118.39.50

🇩🇪 91.217.249.42

🇸🇬 47.82.54.42

🇸🇬 47.82.50.144

🇸🇬 47.82.48.128

🇳🇱 45.74.28.2

🇬🇧 35.203.211.76

🇧🇪 34.52.234.95

🇨🇭 20.203.184.59

🇿🇦 20.87.107.163

🇺🇸 16.216.88.228