JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.186.174.144

52.186.174.144 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 34%: ?

34%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Washington, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.186.174.144

Whois 52.186.174.144

IP Abuse Reports for 52.186.174.144:

This IP address has been reported a total of 20 times from 18 distinct sources. 52.186.174.144 was first reported on June 2nd 2026, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 TOCE	2026-07-04 22:43:15 (3 weeks ago)	16 hits seen on 2026-07-04, ports 3389 (RDP) on a honeypot from www.toce.ch	Brute-Force
🇧🇪 boxed-it	2026-06-16 01:52:08 (1 month ago)	GET /.git/HEAD (Tarpitted for 1d15h8m27s, wasted 8.06MB)	Web App Attack
🇺🇸 GreekCity	2026-06-14 10:48:35 (1 month ago)	[Sun Jun 14 05:48:35.136793 2026] [proxy_fcgi:error] [pid 1690456:tid 1690456] [client 52.186.174.14 ... show more [Sun Jun 14 05:48:35.136793 2026] [proxy_fcgi:error] [pid 1690456:tid 1690456] [client 52.186.174.144:63272] AH01071: Got error 'Primary script unknown' ... show less	Hacking
🇦🇷 Bruno	2026-06-14 09:58:00 (1 month ago)	Port Scanner: 52.186.174.144	Port Scan
🇫🇮 stinpriza	2026-06-14 09:27:02 (1 month ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2026-06-14 09:24:55 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 52.186.174.144 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 52.186.174.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 05:24:51.394575 2026] [security2:error] [pid 31105:tid 31105] [client 52.186.174.144:63621] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.230"] [uri "/.env.production"] [unique_id "ai5zY3uOZNRNs6YJ-TuV5QAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Mantene	2026-06-14 09:12:25 (1 month ago)	52.186.174.144 - - [14/Jun/2026:05:12:22 -0400] "GET /.git/config HTTP/1.1" 404 150 "-" "Mozilla/5.0 ... show more 52.186.174.144 - - [14/Jun/2026:05:12:22 -0400] "GET /.git/config HTTP/1.1" 404 150 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 52.186.174.144 - - [14/Jun/2026:05:12:25 -0400] "GET /.env.production HTTP/1.1" 404 154 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" ... show less	Brute-Force SSH
🇩🇪 strxmpp	2026-06-14 08:24:11 (1 month ago)	52.186.174.144 - - [14/Jun/2026:10:24:10 +0200] "GET /.env.local HTTP/1.1" 404 495 "-" "Mozilla/5.0 ... show more 52.186.174.144 - - [14/Jun/2026:10:24:10 +0200] "GET /.env.local HTTP/1.1" 404 495 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" ... show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-14 08:10:32 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 52.186.174.144 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 52.186.174.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 04:10:26.692638 2026] [security2:error] [pid 17094:tid 17094] [client 52.186.174.144:63736] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.184"] [uri "/.env"] [unique_id "ai5h8gFywKnfOQus7NSd1gAAAC8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 drewf.ink	2026-06-14 07:47:49 (1 month ago)	[07:47] Port scanning. Port(s) scanned: TCP/2086, TCP/2087	Port Scan
🇺🇸 Axel	2026-06-14 05:59:22 (1 month ago)	Blocked by UFW on MVI [8443/tcp] \| SPT: 63380 \| TTL: 48 \| LEN: 60 \| TOS: 0x00 • Reported by: github. ... show more Blocked by UFW on MVI [8443/tcp] \| SPT: 63380 \| TTL: 48 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 GreekCity	2026-06-14 05:48:35 (1 month ago)	bad-bot hacking for vulnerable links.	Hacking Exploited Host
🇩🇪 psauxit	2026-06-14 05:22:44 (1 month ago)	Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrp ... show more Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrpc_attack, wp-login brute force, excessive crawling/scraping show less	Web App Attack Hacking
🇷🇸 Scan	2026-06-03 02:04:53 (1 month ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇩🇪 KPS	2026-06-03 00:02:25 (1 month ago)	PortscanM	Port Scan

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇴 194.102.73.93

🇨🇴 190.108.78.151

🇷🇺 151.252.84.225

🇺🇸 144.31.143.114

🇭🇰 128.1.131.221

🇫🇷 91.231.89.114

🇫🇷 91.231.89.105

🇭🇰 46.247.61.102

🇳🇱 45.148.10.147

🇫🇷 13.140.147.33

🇨🇳 1.95.172.30

🇳🇱 176.65.149.230

🇩🇪 172.252.8.176

🇺🇸 165.154.163.146

🇺🇸 137.184.224.12

🇰🇷 110.46.245.62

🇺🇸 50.6.228.32

🇹🇭 45.194.70.250

🇺🇸 20.64.105.25

🇪🇬 197.36.108.243