JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

52.187.134.171

Neutral Activity

Abuse Confidence Score

0% Low Risk

21 reports

21 reporters · latest 1 year ago

ISP: Microsoft Corporation
Usage Type: Data Center/Web Hosting/Transit
ASN: AS8075
Domain Name: microsoft.com
Country: 🇸🇬 Singapore
City: Singapore

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

52.187.134.171 has been reported 21 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

21 from 21 distinct reporters

First reported

September 15th 2025

Most recent report

1 year ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2025-09-16 21:59:25 UTC · (1 year ago)	Auto-ban: >500 bad req/min on 2025-09-15	Hacking Web App Attack SSH
🇬🇧 openstrike.co.uk	2025-09-16 05:13:41 UTC · (1 year ago)	40 attacks on PHP URLs: GET /lc.php HTTP/1.1	Web App Attack
🇳🇱 Site.eu	2025-09-16 01:19:35 UTC · (1 year ago)	Excessive multi-domain requests	Brute-Force
Anonymous	2025-09-16 01:11:02 UTC · (1 year ago)	Bot / scanning and/or hacking attempts: GET / HTTP/1.1, GET /lo.php HTTP/1.1, GET /ahax.php HTTP/1.1, GET /cfile.php HTTP/1.1, GET /cool.php HTTP/1.1, GET /gold.php HTTP/1.1, GET /ss.php HTTP/1.1, GET /gfile.php HTTP/1.1, GET /fm.php HTTP/1.1, GET /w ... show more Bot / scanning and/or hacking attempts: GET / HTTP/1.1, GET /lo.php HTTP/1.1, GET /ahax.php HTTP/1.1, GET /cfile.php HTTP/1.1, GET /cool.php HTTP/1.1, GET /gold.php HTTP/1.1, GET /ss.php HTTP/1.1, GET /gfile.php HTTP/1.1, GET /fm.php HTTP/1.1, GET /wander.php HTTP/1.1, GET /lc.php HTTP/1.1, GET /lock360.php HTTP/1.1, GET /we.php HTTP/1.1, GET /new.php HTTP/1.1, GET /file5.php HTTP/1.1, GET /bless2.php HTTP/1.1, GET /goods.php HTTP/1.1 show less	Hacking Web App Attack
🇩🇪 london2038.com	2025-09-16 00:36:08 UTC · (1 year ago)	Probing for exploits 52.187.134.171 - - [16/Sep/2025:02:35:37 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 169 "-" "-" 52.187.134.171 - - [16/Sep/2025:02:36:03 +0200] "GET /atomlib.php HTTP/1.1" 422 0 "-" "-"	Hacking Web App Attack
🇮🇩 Burayot	2025-09-16 00:35:46 UTC · (1 year ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 52.187.134.171 (SG/Singapore/-): 1 in the last 3600 secs	Web App Attack
🇫🇷 Sklurk	2025-09-15 23:18:19 UTC · (1 year ago)	Web App Attack	Web App Attack
🇫🇮 YF	2025-09-15 23:00:26 UTC · (1 year ago)	404 errors (Vulnerability scan)	Brute-Force Web App Attack
🇧🇪 cmbplf	2025-09-15 22:26:26 UTC · (1 year ago)	225 requests with url.path /wp.php 218 requests with url.path /wp-content/plugins/hellopress/wp_filemanager.php	Brute-Force Bad Web Bot
🇩🇪 updown.io	2025-09-15 22:13:23 UTC · (1 year ago)	{"level":"info","ts":1757969843.268655,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"52.187.134.171","remote_port":"3145","client_ip":"52.187.134.171","proto":"HTTP/1.1","method":"GET","host":"3wnj.status.updown.io", ... show more {"level":"info","ts":1757969843.268655,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"52.187.134.171","remote_port":"3145","client_ip":"52.187.134.171","proto":"HTTP/1.1","method":"GET","host":"3wnj.status.updown.io","uri":"/re.php","headers":{}},"bytes_read":0,"user_id":"","duration":0.00004412,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connection":["close"],"Location":["https://3wnj.status.updown.io/re.php"],"Content-Type":[]}} {"level":"info","ts":1757969843.9720912,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"52.187.134.171","remote_port":"7841","client_ip":"52.187.134.171","proto":"HTTP/1.1","method":"GET","host":"3wnj.status.updown.io","uri":"/nc4.php","headers":{}},"bytes_read":0,"user_id":"","duration":0.00004699,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connection":["close"],"Location":["https://3wnj.status.updown.io/nc4.php"],"Content-Type":[]}} {"level":"info","ts":1757969844.6 ... show less	DDoS Attack Web App Attack
Anonymous	2025-09-15 22:05:42 UTC · (1 year ago)	Blocked: Reason='Vulnerability probing — PHP scan detected (40/60 min)'; Requests=40	Port Scan
🇺🇸 MogBox	2025-09-15 22:04:45 UTC · (1 year ago)	(RSRCTROLL) Vulnerability Trolling: GET/POST /wp.php 52.187.134.171 (SG/Singapore/-): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 52.187.134.171 - - [15/Sep/2025:18:04:32 -0400] "GET /wp.php HTTP/2.0" 200 124 ... show more (RSRCTROLL) Vulnerability Trolling: GET/POST /wp.php 52.187.134.171 (SG/Singapore/-): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 52.187.134.171 - - [15/Sep/2025:18:04:32 -0400] "GET /wp.php HTTP/2.0" 200 12438 "-" "-" show less	Hacking
Anonymous	2025-09-15 21:59:37 UTC · (1 year ago)	Multiple web server 400 error codes from same source ip	Web App Attack
Anonymous	2025-09-15 21:39:06 UTC · (1 year ago)	Ports: *; Direction: 0; Trigger: CT_LIMIT	Brute-Force SSH
🇨🇭 zynex	2025-09-15 21:11:52 UTC · (1 year ago)	URL Probing: /file8.php	Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇷🇺 78.81.178.208

🇰🇷 218.158.190.6

🇳🇱 193.47.62.69

🇺🇸 172.104.11.4

🇵🇰 162.4.32.202

🇺🇸 144.172.115.234

🇨🇳 117.50.208.11

🇳🇱 80.79.7.203

🇺🇸 72.215.46.30

🇳🇱 195.178.110.134

🇰🇭 103.253.181.224

🇮🇳 103.163.43.156

🇧🇪 35.206.151.191

🇳🇱 204.76.203.4

🇧🇷 179.51.153.37

🇧🇷 143.0.212.4

🇵🇰 125.209.111.226

🇵🇰 125.62.90.249

🇫🇷 86.201.137.171

🇳🇱 77.239.124.50