AbuseIPDB » 52.187.211.134

52.187.211.134 was found in our database!

This IP was reported 68 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
Domain Name	microsoft.com
Country	Australia
City	Sydney, New South Wales

Report 52.187.211.134

Whois 52.187.211.134

IP Abuse Reports for 52.187.211.134:

This IP address has been reported a total of 68 times from 39 distinct sources. 52.187.211.134 was first reported on November 10th 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Gem	2024-11-15 23:07:10 (2 weeks ago)	Unauthorized web scan.	Web App Attack
Short-legs-Spider	2024-11-13 12:32:00 (2 weeks ago)	Test on existence -- 52.187.211.134 - - [13/Nov/2024:21:32:50 +0900] "HEAD /wordpress ... show moreTest on existence -- 52.187.211.134 - - [13/Nov/2024:21:32:50 +0900] "HEAD /wordpress HTTP/1.1" 403 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 52.187.211.134 - - [13/Nov/2024:21:32:50 +0900] "HEAD /wp HTTP/1.1" 403 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 52.187.211.134 - - [13/Nov/2024:21:32:51 +0900] "HEAD /bc HTTP/1.1" 403 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 52.187.211.134 - - [13/Nov/2024:21:32:51 +0900] "HEAD /bk HTTP/1.1" 403 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 52.187.211.134 - - [13/Nov/2024:21:32:51 +0900] "HEAD /backup HTTP/1.1" 403 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" ... show less	Bad Web Bot
OiledAmoeba	2024-11-13 10:41:44 (2 weeks ago)	2024/11/13 11:41:43 [error] 767#767: 55130 open() "/etc/nginx/html/wordpress" failed (2: No such fi ... show more2024/11/13 11:41:43 [error] 767#767: 55130 open() "/etc/nginx/html/wordpress" failed (2: No such file or directory), client: 52.187.211.134, server: fhem.ruhnke.cloud, request: "HEAD /wordpress HTTP/1.1", host: "fhem.ruhnke.cloud", referrer: "http://fhem.ruhnke.cloud/wordpress" ... show less	Brute-Force
Anonymous	2024-11-13 09:49:04 (2 weeks ago)	Probing to gain illegal access	Web App Attack
barbarella	2024-11-13 07:07:58 (2 weeks ago)	Multiple (7) times attack on https port 443: Hacking attempt (HEAD /wp) 07:07:59 Hacking at ... show moreMultiple (7) times attack on https port 443: Hacking attempt (HEAD /wp) 07:07:59 Hacking attempt (HEAD /bc) 07:07:59 Hacking attempt (HEAD /bk) 07:08:00 Hacking attempt (HEAD /old) 07:08:01 Hacking attempt (HEAD /new) 07:08:01 searching for Cobalt Strike server beacon (HEAD /main) 07:08:02 searching for Cobalt Strike server beacon (HEAD /home) show less	Hacking Web App Attack
Stefan Dreher	2024-11-13 07:01:56 (2 weeks ago)	52.187.211.134 - - [13/Nov/2024:08:01:53 +0100] "HEAD /wordpress HTTP/1.1" 404 0 "-" "Mozilla/5.0 (W ... show more52.187.211.134 - - [13/Nov/2024:08:01:53 +0100] "HEAD /wordpress HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 52.187.211.134 - - [13/Nov/2024:08:01:53 +0100] "HEAD /wp HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 52.187.211.134 - - [13/Nov/2024:08:01:54 +0100] "HEAD /bc HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 52.187.211.134 - - [13/Nov/2024:08:01:54 +0100] "HEAD /bk HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 52.187.211.134 - - [13/Nov/2024:08:01:54 +0100] "HEAD /backup HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" ... show less	Hacking Brute-Force
FeG Deutschland	2024-11-13 04:27:02 (2 weeks ago)	Looking for CMS/PHP/SQL vulnerablilities - 13	Exploited Host Web App Attack
eminovic.ba	2024-11-13 04:09:10 (2 weeks ago)	BRUTE FORCE: Excessive 404 hits ...	Hacking Brute-Force Web App Attack
dzpk	2024-11-13 03:33:18 (2 weeks ago)	52.187.211.134 - - [13/Nov/2024:04:33:17 +0100] "HEAD /wordpress HTTP/1.1" 404 0 "-" "Mozilla/5.0 (W ... show more52.187.211.134 - - [13/Nov/2024:04:33:17 +0100] "HEAD /wordpress HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" show less	Bad Web Bot Web App Attack
Anonymous	2024-11-13 03:19:46 (2 weeks ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
guillaume illien	2024-11-13 01:58:40 (2 weeks ago)	52.187.211.134 - - [13/Nov/2024:01:58:35 +0000] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (W ... show more52.187.211.134 - - [13/Nov/2024:01:58:35 +0000] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 52.187.211.134 - - [13/Nov/2024:01:58:36 +0000] "HEAD /wordpress HTTP/1.1" 301 0 "http://fr-fr.worders.net/wordpress" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 52.187.211.134 - - [13/Nov/2024:01:58:38 +0000] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 52.187.211.134 - - [13/Nov/2024:01:58:38 +0000] "HEAD / HTTP/1.1" 301 0 "http://fr-fr.worders.net/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 52.187.211.134 - - [13/Nov/2024:01:58:38 +0000] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, l ... show less	Hacking Brute-Force Web App Attack SSH
webbie	2024-11-12 23:50:48 (2 weeks ago)	52.187.211.134 - - [13/Nov/2024:00:50:45 +0100] "HEAD /wordpress HTTP/1.1" 404 124 "Mozilla/5.0 (Win ... show more52.187.211.134 - - [13/Nov/2024:00:50:45 +0100] "HEAD /wordpress HTTP/1.1" 404 124 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 52.187.211.134 - - [13/Nov/2024:00:50:46 +0100] "HEAD /wp HTTP/1.1" 404 124 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 52.187.211.134 - - [13/Nov/2024:00:50:46 +0100] "HEAD /bc HTTP/1.1" 404 124 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 52.187.211.134 - - [13/Nov/2024:00:50:47 +0100] "HEAD /bk HTTP/1.1" 404 124 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 52.187.211.134 - - [13/Nov/2024:00:50:47 +0100] "HEAD /backup HTTP/1.1" 404 124 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" ... show less	Brute-Force Web App Attack
Study Bitcoin 🤗	2024-11-12 22:40:18 (2 weeks ago)	Port probe to tcp/80 (http) [srv124]	Port Scan Bad Web Bot Web App Attack
el-brujo	2024-11-12 22:10:15 (2 weeks ago)	Cloudflare WAF: Request Path: /home Request Query: Host: foro.elhacker.net userAgent: Mozilla/5.0 ( ... show moreCloudflare WAF: Request Path: /home Request Query: Host: foro.elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Action: block Source: ratelimit ASN Description: MICROSOFT-CORP-MSN-AS-BLOCK Country: AU Method: HEAD Timestamp: 2024-11-12T22:10:15Z ruleId: 11a71ad4659e48b29b5173e3bcc61b4a. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
Anonymous	2024-11-12 16:35:06 (2 weeks ago)	Automatic report - Vulnerability scan /wordpress	Web App Attack