52.188.58.15
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- Microsoft Corporation
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS8075
- Domain Name
- microsoft.com
- Country
- 🇺🇸 United States of America
- City
- Dulles Town Center, Virginia
No reports in the last 60 days
52.188.58.15 has been reported 169 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
169 from
96 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇦🇺 SCSIPHP |
6 attempts using PHP / OWA / CGI-BIN/PHP exploitation, direct code hacks, logj4, general hacking of web access on port 80 and 443
|
Phishing Web Spam Hacking | |
| 🇩🇪 nextweb |
(mod_security) mod_security (id:244600) triggered by 52.188.58.15 (US/United States/Virginia/Tappahannock/-/[AS8075 MICROSOFT-CORP-MSN-AS-BLOCK]): 5 in the last 3600 secs (CF_ENABLE)
|
Brute-Force | |
| Anonymous |
Detected abusive req: GET /.env User Agent: Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30. Reason: AID hint
|
Hacking Bad Web Bot | |
| 🇳🇱 NSCA-ISEU |
e.g PHPUnit Command Injection (CVE-2017-9841)
|
Web App Attack | |
| 🇩🇪 ISPLtd |
52.188.58.15 - - [06/Apr/2022:05:56:04 -0300] "GET /.env
52.188.58.15 - - [06/Apr/2022:05:56:05 -0300] "GET /.env
...
|
Hacking Web App Attack | |
| 🇬🇧 myintarweb |
|
Hacking Bad Web Bot Web App Attack | |
| 🇫🇷 jk jk |
WAF_blocked
|
Hacking Web App Attack | |
| 🇺🇸 koinkash.org |
$f2bV_matches
|
Hacking | |
| Anonymous |
Detected abusive req: GET /.env User Agent: Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30. Reason: AID hint
|
Hacking Bad Web Bot | |
| 🇨🇿 Daniel Tlamka |
Blacklisted ABUSEIPD
|
Bad Web Bot | |
| Anonymous |
$f2bV_matches
|
Web App Attack | |
| 🇸🇪 Per-Erik Runebert |
Malicious vulnerability hacking attacks
|
Hacking Web App Attack | |
| 🇳🇱 AutoBlockIP |
Suspicious behaviour detected (!!tcp/80)
|
Port Scan Hacking Brute-Force | |
| Anonymous |
Fail2Ban triggered
|
Web App Attack | |
| Anonymous |
PHPunit sniffing:
52.188.58.15 - - [04/Apr/2022:18:53:30 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 234 "-" "python-requests/2.24.0"
|
Hacking Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown