JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.182.188.239

52.182.188.239 was found in our database!

This IP was reported 371 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Des Moines, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.182.188.239

Whois 52.182.188.239

IP Abuse Reports for 52.182.188.239:

This IP address has been reported a total of 371 times from 297 distinct sources. 52.182.188.239 was first reported on June 1st 2026, and the most recent report was 21 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 i-turnradio.nl	2026-06-02 03:48:15 (2 days ago)	2026-06-02 @ 05:48:15 (CET) ~ Blocked for trying to access: /wp-content/plugins/hellopress/wp_filema ... show more 2026-06-02 @ 05:48:15 (CET) ~ Blocked for trying to access: /wp-content/plugins/hellopress/wp_filemanager.php show less	Web App Attack
🇹🇭 thaizone.com	2026-06-02 03:39:17 (2 days ago)	Brute Force Attack on a Web Resources (repeated 404) #1	DDoS Attack Web Spam Brute-Force Web App Attack
🇩🇪 MusicLibrary	2026-06-02 03:29:20 (2 days ago)	Probing for non-existent scripts or executables	Bad Web Bot Web App Attack
Anonymous	2026-06-02 03:24:39 (2 days ago)	Portscan: TCP/80 (7x)	Port Scan
🇫🇷 solution.it	2026-06-02 03:19:52 (2 days ago)	[Tue Jun 02 05:19:51.830754 2026] [php7:error] [pid 319052:tid 319052] [client 52.182.188.239:10093] ... show more [Tue Jun 02 05:19:51.830754 2026] [php7:error] [pid 319052:tid 319052] [client 52.182.188.239:10093] script '/var/www/html/this_is_a_new_hello_world.php' not found or unable to stat show less	Web App Attack
🇺🇸 ph	2026-06-02 03:16:11 (2 days ago)	Bad web bot attempting to run wp-content on non-WP site	Hacking Bad Web Bot Web App Attack
🇺🇸 slay3r9903	2026-06-02 03:10:20 (2 days ago)	IP address blocked by Cloudflare Rate Limiting rule due to suspicious activity and security violatio ... show more IP address blocked by Cloudflare Rate Limiting rule due to suspicious activity and security violations. show less	Hacking Bad Web Bot
Anonymous	2026-06-02 03:09:10 (2 days ago)	[01-Jun-2026 23:09:08 America/New_York] Page Not Found: wp_filemanager.php [52.182.188.239] [01-Jun- ... show more [01-Jun-2026 23:09:08 America/New_York] Page Not Found: wp_filemanager.php [52.182.188.239] [01-Jun-2026 23:09:08 America/New_York] Page Not Found: this_is_a_new_hello_world.php [52.182.188.239] ... show less	Brute-Force
🇺🇸 technojoe99	2026-06-02 02:58:51 (2 days ago)	Exploit scan from 52.182.188.239. GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1.	Web App Attack
🇩🇪 itsolon	2026-06-02 02:55:25 (2 days ago)	[02/Jun/2026:04:55:22 +0200] 178036892241.960000 52.182.188.239 17893 217.154.7.177 443 [02/Jun/2026 ... show more [02/Jun/2026:04:55:22 +0200] 178036892241.960000 52.182.188.239 17893 217.154.7.177 443 [02/Jun/2026:04:55:23 +0200] 178036892352.163208 52.182.188.239 17895 217.154.7.177 80 [02/Jun/2026:04:55:23 +0200] 178036892390.960549 52.182.188.239 17893 217.154.7.177 443 [02/Jun/2026:04:55:24 +0200] 17803689245.914082 52.182.188.239 17893 217.154.7.177 443 [02/Jun/2026:04:55:25 +0200] 178036892571.386377 52.182.188.239 17895 217.154.7.177 80 ... show less	Port Scan Hacking Brute-Force Web App Attack
🇺🇸 Epimetheus	2026-06-02 02:42:32 (2 days ago)	Unauthorized access attempts: [GET] /check.php [GET] /222.php [GET] /inputs.php [GET] /file9.php [G ... show more Unauthorized access attempts: [GET] /check.php [GET] /222.php [GET] /inputs.php [GET] /file9.php [GET] /astab.php [GET] /law.php [GET] /t.php [GET] /999.php [GET] /bless.php [GET] /gfile.php [GET] /av.php [GET] /lock6.php [GET] /this_is_a_new_hello_world.php [GET] /1.php [GET] /wp-content/plugins/hellopress/wp_filemanager.php UA: Unknown show less	Web App Attack
🇫🇮 Christopher Hughes	2026-06-02 02:41:15 (2 days ago)	[Tue Jun 02 03:41:13.452924 2026] [proxy_fcgi:error] [pid 315209:tid 139775025616448] [client 52.182 ... show more [Tue Jun 02 03:41:13.452924 2026] [proxy_fcgi:error] [pid 315209:tid 139775025616448] [client 52.182.188.239:45875] AH01071: Got error 'Primary script unknown' [Tue Jun 02 03:41:13.799021 2026] [proxy_fcgi:error] [pid 315209:tid 139774761342528] [client 52.182.188.239:45875] AH01071: Got error 'Primary script unknown' [Tue Jun 02 03:41:14.523867 2026] [proxy_fcgi:error] [pid 315209:tid 139773654062656] [client 52.182.188.239:45875] AH01071: Got error 'Primary script unknown' [Tue Jun 02 03:41:14.862265 2026] [proxy_fcgi:error] [pid 315209:tid 139775034009152] [client 52.182.188.239:45875] AH01071: Got error 'Primary script unknown' [Tue Jun 02 03:41:15.195096 2026] [proxy_fcgi:error] [pid 315209:tid 139773645669952] [client 52.182.188.239:45875] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
Anonymous	2026-06-02 02:39:02 (2 days ago)	Unauthorized SSH login attempts	Brute-Force SSH
🇺🇸 lavnet.net	2026-06-02 02:29:48 (2 days ago)	[Tue Jun 02 02:29:47.961876 2026] [authz_core:error] [pid 540679:tid 540842] [client 52.182.188.239: ... show more [Tue Jun 02 02:29:47.961876 2026] [authz_core:error] [pid 540679:tid 540842] [client 52.182.188.239:15939] AH01630: client denied by server configuration: /var/www/a0a0.org/web/this_is_a_new_hello_world.php [Tue Jun 02 02:29:47.976976 2026] [authz_core:error] [pid 540679:tid 540843] [client 52.182.188.239:15939] AH01630: client denied by server configuration: /var/www/a0a0.org/web/c99.php [Tue Jun 02 02:29:48.023239 2026] [authz_core:error] [pid 540679:tid 540844] [client 52.182.188.239:15939] AH01630: client denied by server configuration: /var/www/a0a0.org/web/CLA.php ... show less	Brute-Force
🇩🇰 ScamAware	2026-06-02 02:24:40 (2 days ago)	Detected by Cloudflare Security Events via WordPress automation. Detection: sensitive_files (Sensiti ... show more Detected by Cloudflare Security Events via WordPress automation. Detection: sensitive_files (Sensitive files, source control, config, and backups). Hits from same IP in last 60 minutes: 1. Unique request paths counted internally: 1. Cloudflare action: managed_challenge. Cloudflare source: botFight. show less	Web App Attack

Showing 211 to 225 of 371 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇴 181.234.29.66

🇮🇳 103.93.37.178

🇧🇷 43.157.142.101

🇨🇳 221.235.197.210

🇩🇪 213.209.159.228

🇧🇪 213.118.56.177

🇮🇩 202.155.143.247

🇷🇴 193.32.162.13

🇸🇬 167.172.89.248

🇸🇬 146.190.80.154

🇮🇳 122.168.198.68

🇨🇳 112.123.185.188

🇷🇸 109.207.45.29

🇩🇪 102.220.160.153

🇺🇸 74.82.47.3

🇩🇪 69.5.169.31

🇺🇸 46.253.131.156

🇮🇪 20.191.45.212

🇺🇸 3.82.104.190

🇵🇱 185.241.208.74