JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.190.190.24

52.190.190.24 was found in our database!

This IP was reported 257 times. Confidence of Abuse is 3%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.190.190.24

Whois 52.190.190.24

IP Abuse Reports for 52.190.190.24:

This IP address has been reported a total of 257 times from 19 distinct sources. 52.190.190.24 was first reported on March 21st 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 lakered	2026-08-28 02:28:31 (1 day ago)	Detectors: [NGINX-TRIAGE] \| Reasons: Nginx: Proactive Triage \| Evidence: URL-Found-In-UA, High-Crimi ... show more Detectors: [NGINX-TRIAGE] \| Reasons: Nginx: Proactive Triage \| Evidence: URL-Found-In-UA, High-Criminality-Signature (ja4:t13d1712h2 - Ratio:0.98), High-Criminality-Signature (ja4h:465d03b97508af071dc1604b72f7d362 - Ratio:0.98), High-Criminality-Signature (p0f::64:0::mss*44,9:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.96) \| UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot \| TCP Fingerprint: Android Modern Android (Cellular) (Link:Unknown, Uptime:0m) show less	Port Scan
🇺🇸 kosada.com	2026-04-29 13:02:48 (3 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇺🇸 nodepile	2026-01-21 17:04:14 (7 months ago)	UA claims known bot but FCrDNS checks do not match official ranges (tenant=82 method=GET path=/fits- ... show more UA claims known bot but FCrDNS checks do not match official ranges (tenant=82 method=GET path=/fits-98-02-honda-accord-4dr-sedan-mugen-style-front-bumper-lip-spoiler-pp.html ua='Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot') show less	Bad Web Bot Web App Attack
🇺🇸 nodepile	2026-01-11 09:47:06 (7 months ago)	UA claims known bot but FCrDNS checks do not match official ranges (tenant=82 method=GET path=/2001- ... show more UA claims known bot but FCrDNS checks do not match official ranges (tenant=82 method=GET path=/2001-2007-mercedes-c-class-w203-4d-5d-for-factory-bi-xenon-model-with-auto-leveling-projector-headlight-made-by-depo.html ua='Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot') show less	Bad Web Bot Web App Attack
🇺🇸 nodepile	2026-01-03 23:08:28 (7 months ago)	UA claims known bot but FCrDNS checks do not match official ranges (tenant=82 method=GET path=/04-05 ... show more UA claims known bot but FCrDNS checks do not match official ranges (tenant=82 method=GET path=/04-05-toyota-rav4-black-headlights-w-clear-turn-signals.html ua='Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot') show less	Bad Web Bot Web App Attack
🇺🇸 nodepile	2025-12-23 05:58:55 (8 months ago)	UA claims known bot but FCrDNS checks do not match official ranges (tenant=82 method=GET path=/orion ... show more UA claims known bot but FCrDNS checks do not match official ranges (tenant=82 method=GET path=/orion-v2-led-angel-eyes-for-mercedes-benz-s-class-w221.html ua='Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot') show less	Bad Web Bot Web App Attack
🇺🇸 nodepile	2025-11-28 21:16:10 (9 months ago)	UA claims known bot but FCrDNS checks do not match official ranges (tenant=82 method=GET path=/06-09 ... show more UA claims known bot but FCrDNS checks do not match official ranges (tenant=82 method=GET path=/06-09-vw-mk5-rabbit-gti-jetta-e-code-projector-headlights-black.html ua='Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot') show less	Bad Web Bot Web App Attack
🇺🇸 nodepile	2025-11-24 07:07:01 (9 months ago)	UA claims known bot but FCrDNS checks do not match official ranges (tenant=82 method=GET path=/fits- ... show more UA claims known bot but FCrDNS checks do not match official ranges (tenant=82 method=GET path=/fits-honda-civic-92-95-pu-2pc-valance-spats-rear-bumper-lip-spoiler.html ua='Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot') show less	Bad Web Bot Web App Attack
🇺🇸 nodepile	2025-11-21 01:57:57 (9 months ago)	UA claims known bot but FCrDNS checks do not match official ranges (tenant=82 method=GET path=/ ua=' ... show more UA claims known bot but FCrDNS checks do not match official ranges (tenant=82 method=GET path=/ ua='Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot') show less	Bad Web Bot Web App Attack
🇮🇩 hermawan	2025-10-30 01:56:54 (9 months ago)	[Thu Oct 30 08:56:24.296635 2025] [security2:error] [pid 68795:tid 140586244892352] [client 52.190.1 ... show more [Thu Oct 30 08:56:24.296635 2025] [security2:error] [pid 68795:tid 140586244892352] [client 52.190.190.24:8017] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.19.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "227"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prakiraan-musim/4330-prakiraan-musim-hujan/prakiraan-awal-musim-hujan/prakiraan-awal-musim-hujan-propinsi-jawa-timur/prediksi-6-bulanan-prediksi-awal-musim-hujan-tahun-2025-2026-zona-musim-di-provinsi-jawa-timur/555562425-prediksi-6-bulanan-awal-musim-hujan-tahun-2025-2026-zona-musim-di-provinsi-jawa-timur HTTP/..."] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prakiraan-musim/4330-prakiraan- ... show less	Hacking Web App Attack
🇺🇸 rsa	2025-10-08 19:33:00 (10 months ago)	excessive crawling	DDoS Attack Web App Attack
🇮🇩 hermawan	2025-10-01 02:54:59 (10 months ago)	[Wed Oct 01 09:54:28.483727 2025] [security2:error] [pid 285887:tid 140132748351168] [client 52.190. ... show more [Wed Oct 01 09:54:28.483727 2025] [security2:error] [pid 285887:tid 140132748351168] [client 52.190.190.24:4626] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/profil/meteorologi/geofisika/555560458-gempa-terkini HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/geofisika/555560458-gempa-terkini"] [unique_id "aNyX5MVi8oG0gmFvP00pfgADhgM"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[285891] [uzWv/A9cy0g] [aNyX5MVi8oG0gmFvP00pfgADhgM] keep_alive=[1] [2025-10-01 09:54:28.483731] [R:aNyX5MVi8oG0gmFvP00pfgADhgM] U ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-09-22 11:00:33 (11 months ago)	[Mon Sep 22 17:04:48.463573 2025] [security2:error] [pid 1007840:tid 139669489477312] [client 52.190 ... show more [Mon Sep 22 17:04:48.463573 2025] [security2:error] [pid 1007840:tid 139669489477312] [client 52.190.190.24:63732] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /tentang-kami-v1.html HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/tentang-kami-v1.html"] [unique_id "aNEfQEbDusMD28pyLQHVXwACgRg"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1007865] [z0ca86CuFnM] [aNEfQEbDusMD28pyLQHVXwACgRg] keep_alive=[1] [2025-09-22 17:04:48.463578] [R:aNEfQEbDusMD28pyLQHVXwACgRg] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1 ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-09-21 07:24:54 (11 months ago)	[Sun Sep 21 14:22:47.302913 2025] [security2:error] [pid 779142:tid 139919321171648] [client 52.190. ... show more [Sun Sep 21 14:22:47.302913 2025] [security2:error] [pid 779142:tid 139919321171648] [client 52.190.190.24:2155] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/108-sumber-daya-manusia/struktur-organisasi/77-selamat-datang-di-stasiun-klimatologi-karangploso-malang HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/108-sumber-daya-manusia/struktur-organisasi/77-selamat-datang-di-stasiun-klimatologi-karangploso-malang"] [unique_id "aM-nx3djnV8Yyta8ifuhrQAAgwY"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[779149] [rnbVkcprUcE] [aM-n ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-09-19 06:47:28 (11 months ago)	[Fri Sep 19 13:46:55.552171 2025] [security2:error] [pid 99718:tid 140408423167680] [client 52.190.1 ... show more [Fri Sep 19 13:46:55.552171 2025] [security2:error] [pid 99718:tid 140408423167680] [client 52.190.190.24:15495] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-curah-hujan-bulanan/555560632-prakiraan-bulanan-curah-hujan-bulan-januari-tahun-2024-update-dari-analisis-bulan-november-tahun-2023-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-curah-hujan-bulanan/555560632-prakiraan-bulanan-curah-hujan-bulan-januari-tahun-2024-update-dari-ana ... show less	Hacking Web App Attack

Showing 1 to 15 of 257 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.241.194.11

🇫🇮 95.217.139.229

🇺🇸 65.49.1.38

🇭🇰 42.200.158.230

🇺🇸 34.125.78.220

🇧🇷 2804:14d:54a3:81aa:f4f3:e0c7:ecdc:ad8

🇷🇴 212.93.150.153

🇳🇱 195.178.110.26

🇷🇴 193.46.255.86

🇧🇴 192.223.103.171

🇬🇧 185.247.137.25

🇳🇱 176.65.148.71

🇹🇭 118.172.43.114

🇺🇸 107.173.79.229

🇮🇳 103.241.225.224

🇮🇳 103.68.11.237

🇭🇷 89.164.118.118

🇺🇸 66.36.226.250

🇨🇳 60.188.112.158

🇳🇱 45.148.10.183