JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.190.192.46

52.190.192.46 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 70%: ?

70%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.190.192.46

Whois 52.190.192.46

IP Abuse Reports for 52.190.192.46:

This IP address has been reported a total of 21 times from 13 distinct sources. 52.190.192.46 was first reported on August 8th 2026, and the most recent report was 15 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 claude CALVET	2026-08-24 04:09:09 (15 hours ago)	gee-17 : Block hidden directories=>/.sys-mta-ptrg.php(/)	Hacking
🇩🇪 usc-IPDB	2026-08-24 04:05:43 (15 hours ago)	52.190.192.46 - - [24/Aug/2026:06:05:41 +0200] "GET /wp-content/plugins/advanced-cache-handler-3aca0 ... show more 52.190.192.46 - - [24/Aug/2026:06:05:41 +0200] "GET /wp-content/plugins/advanced-cache-handler-3aca02/advanced-cache-handler-3aca02.php?t=c52f835a7304312cbef6dcadc4b24738&c=echo%20PROBE_RCE_OK HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.190.192.46 - - [24/Aug/2026:06:05:41 +0200] "GET /wp-content/plugins/advanced-cache-handler-3aca02/advanced-cache-handler-3aca02.php?t=c52f835a7304312cbef6dcadc4b24738&c=echo%20PROBE_RCE_OK HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.190.192.46 - - [24/Aug/2026:06:05:42 +0200] "GET /wp-content/plugins/advanced-cache-handler-3aca02/advanced-cache-handler-3aca02.php?t=c52f835a7304312cbef6dcadc4b24738&c=echo%20PROBE_RCE_OK HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Port Scan
🇫🇷 LRob	2026-08-24 04:03:55 (15 hours ago)	Malicious web request: probing for secrets, traversal or a known exploit path \| method: POST \| path: ... show more Malicious web request: probing for secrets, traversal or a known exploit path \| method: POST \| path: /wp-content/plugins/database-repair-assistant-773f25/class-wp-taxonomy-86efd4.php \| 2026-08-24 04:03 UTC show less	Hacking Web App Attack
🇮🇩 origrata	2026-08-23 14:27:03 (1 day ago)	[OGWAF] malware_upload attack blocked \| severity: critical \| POST /wp-admin/admin-ajax.php \| UA: Moz ... show more [OGWAF] malware_upload attack blocked \| severity: critical \| POST /wp-admin/admin-ajax.php \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0. \| payload: file: 61ae97c02547.php, type: blocked_extension, sig: Blocked_Extension_.php show less	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-08-23 08:37:41 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 52.190.192.46 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 52.190.192.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 04:37:35.053172 2026] [security2:error] [pid 27688:tid 27688] [client 52.190.192.46:59704] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|themadwriter.us\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "themadwriter.us"] [uri "/wp-json/wp/v2/users/me/application-passwords"] [unique_id "aoqxT1duYuZIWuqAFwSgbgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 cmbplf	2026-08-23 07:59:45 (1 day ago)	9.993 post requests in 1 hour (3d16h17m)	Brute-Force Bad Web Bot
🇳🇱 Mangelot Hosting	2026-08-23 07:44:49 (1 day ago)	(upload_shell) srv104 PHP Shell Upload 52.190.192.46 (US/United States/-): 1 in the last 3600 secs; ... show more (upload_shell) srv104 PHP Shell Upload 52.190.192.46 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇦🇺 screwlooseit.com.au	2026-08-23 07:34:05 (1 day ago)	Blocked by CSF 13 firewall - Rule: WPLOGIN US/United States/-	Web App Attack
🇺🇸 nyt	2026-08-21 02:34:10 (3 days ago)	POST to Unknown PHP	Web App Attack
🇺🇸 nyt	2026-08-18 21:56:37 (5 days ago)	POST to Unknown PHP	Web App Attack
🇺🇸 nyt	2026-08-14 20:33:47 (1 week ago)	POST to Unknown PHP	Web App Attack
🇩🇪 LRob	2026-08-14 17:30:48 (1 week ago)	Unauthorised access attempt / malicious probing \| req: /wp-content/plugins/database-repair-assistant ... show more Unauthorised access attempt / malicious probing \| req: /wp-content/plugins/database-repair-assistant-773f25/database-repair-assistant-773f25.php?t=0c1c4106fb61909d48dba3d2600208b0&c=echo%20PROBE_RCE_OK \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 show less	Hacking Web App Attack
🇫🇷 claude CALVET	2026-08-13 18:01:36 (1 week ago)	gee-17 : Block hidden directories=>/.sys-mta-ptrg.php(/)	Hacking
🇩🇪 usc-IPDB	2026-08-13 17:56:32 (1 week ago)	52.190.192.46 - - [13/Aug/2026:19:56:31 +0200] "GET /wp-content/plugins/content-delivery-helper-a519 ... show more 52.190.192.46 - - [13/Aug/2026:19:56:31 +0200] "GET /wp-content/plugins/content-delivery-helper-a5194b/content-delivery-helper-a5194b.php?t=5fb2f64a7372e2025b5285976581924c&c=echo%20PROBE_RCE_OK HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.190.192.46 - - [13/Aug/2026:19:56:31 +0200] "GET /wp-content/plugins/advanced-cache-handler-3aca02/advanced-cache-handler-3aca02.php?t=c52f835a7304312cbef6dcadc4b24738&c=echo%20PROBE_RCE_OK HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.190.192.46 - - [13/Aug/2026:19:56:31 +0200] "GET /wp-content/plugins/content-delivery-helper-a5194b/content-delivery-helper-a5194b.php?t=5fb2f64a7372e2025b5285976581924c&c=echo%20PROBE_RCE_OK HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Port Scan
🇺🇸 nyt	2026-08-13 17:50:14 (1 week ago)	POST to Unknown PHP	Web App Attack

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 192.178.119.19

🇺🇸 185.180.141.32

🇧🇬 158.173.89.136

🇨🇳 123.245.84.253

🇨🇳 117.33.242.50

🇻🇳 103.9.205.204

🇺🇸 50.217.40.11

🇨🇦 20.48.160.90

🇨🇳 223.99.212.58

🇷🇺 146.158.121.137

🇩🇪 139.59.208.49

🇭🇰 121.202.211.156

🇮🇩 103.77.107.182

🇳🇱 45.140.222.118

🇨🇦 20.104.87.97

🇱🇹 213.176.26.72

🇸🇪 171.25.158.80

🇮🇩 72.60.76.186

🇸🇬 34.87.126.196

🇸🇬 34.87.96.58