JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.225.75.214

52.225.75.214 was found in our database!

This IP was reported 289 times. Confidence of Abuse is 1%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.225.75.214

Whois 52.225.75.214

IP Abuse Reports for 52.225.75.214:

This IP address has been reported a total of 289 times from 25 distinct sources. 52.225.75.214 was first reported on May 15th 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 kosada.com	2026-06-21 12:07:22 (3 weeks ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇿🇦 slartybartfast69420blazit	2025-11-21 20:58:58 (7 months ago)	Fail2ban picked up 52.225.75.214 attacking nginx	Web App Attack
🇿🇦 slartybartfast69420blazit	2025-11-20 20:56:03 (7 months ago)	Fail2ban picked up 52.225.75.214 attacking nginx	Web App Attack
🇿🇦 slartybartfast69420blazit	2025-11-19 20:51:55 (7 months ago)	Fail2ban picked up 52.225.75.214 attacking nginx	Web App Attack
🇿🇦 slartybartfast69420blazit	2025-11-18 20:50:45 (7 months ago)	Fail2ban picked up 52.225.75.214 attacking nginx	Web App Attack
🇿🇦 slartybartfast69420blazit	2025-11-17 20:45:44 (7 months ago)	Fail2ban picked up 52.225.75.214 attacking nginx	Web App Attack
🇿🇦 slartybartfast69420blazit	2025-11-15 20:59:26 (8 months ago)	Fail2ban picked up 52.225.75.214 attacking nginx	Web App Attack
🇮🇩 hermawan	2025-09-03 03:01:26 (10 months ago)	[Wed Sep 03 10:00:53.844263 2025] [security2:error] [pid 967764:tid 140261058361024] [client 52.225. ... show more [Wed Sep 03 10:00:53.844263 2025] [security2:error] [pid 967764:tid 140261058361024] [client 52.225.75.214:12750] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prediksi-iklim/prediksi-bulanan/curah-hujan/3-bulan-ke-depan/555562275-prediksi-bulanan-curah-hujan-bulan-november-tahun-2025-update-dari-analisis-bulan-juli-tahun-2025-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-bulanan/curah-hujan/3-bulan-ke-depan/555562275-prediksi-bulanan-curah-hujan-bulan-november-tahun-2025-update-dari-analisi ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-09-02 00:53:07 (10 months ago)	[Tue Sep 02 07:48:52.242385 2025] [security2:error] [pid 292088:tid 139890641893056] [client 52.225. ... show more [Tue Sep 02 07:48:52.242385 2025] [security2:error] [pid 292088:tid 139890641893056] [client 52.225.75.214:23799] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/monitoring-hari-tanpa-hujan-berturut-turut/510-meteorologi/analisis-meteorologi/intensitas-curah-hujan-harian-di-wilayah-indonesia/intensitas-curah-hujan-harian-di-wilayah-indonesia-tahun-2015 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/monitoring-hari-tanpa-hujan-berturut-turut/510-meteorologi/analisis-meteorologi/intensitas-curah-hujan-harian-di-wilayah-indonesia/intensitas-cu ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-09-01 07:22:13 (10 months ago)	[Mon Sep 01 14:20:17.722182 2025] [security2:error] [pid 1064073:tid 139982825043648] [client 52.225 ... show more [Mon Sep 01 14:20:17.722182 2025] [security2:error] [pid 1064073:tid 139982825043648] [client 52.225.75.214:17367] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555560281-mengenal-fenomena-el-nino-yang-mengancam-indonesia HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555560281-mengenal-fenomena-el-nino-yang-mengancam-indonesia"] [unique_id "aLVJMXSEm67Af8uCT2bJSAADDwM"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] to ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-09-01 03:21:10 (10 months ago)	[Mon Sep 01 10:20:20.669022 2025] [security2:error] [pid 773319:tid 139982934107840] [client 52.225. ... show more [Mon Sep 01 10:20:20.669022 2025] [security2:error] [pid 773319:tid 139982934107840] [client 52.225.75.214:6195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/profil/meteorologi/list-of-all-tags/analisis-bulanan-distribusi-curah-hujan-di-provinsi-jawa-timur-tahun-2023 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/analisis-bulanan-distribusi-curah-hujan-di-provinsi-jawa-timur-tahun-2023"] [unique_id "aLUQ9Pw0E8_zFK7QPvE4QgACQQA"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[773320] [mo702b ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-08-29 13:05:22 (10 months ago)	[Fri Aug 29 19:24:46.808062 2025] [security2:error] [pid 730793:tid 140521902073536] [client 52.225. ... show more [Fri Aug 29 19:24:46.808062 2025] [security2:error] [pid 730793:tid 140521902073536] [client 52.225.75.214:17157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555560281-mengenal-fenomena-el-nino-yang-mengancam-indonesia HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555560281-mengenal-fenomena-el-nino-yang-mengancam-indonesia"] [unique_id "aLGcDoQecxx9y9AQ4ATDtAACABg"] [staklim-malang.info] [staklim-malang.info] top=[730818] [9UV9 ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-08-28 11:48:16 (10 months ago)	[Thu Aug 28 18:47:00.093840 2025] [security2:error] [pid 1450541:tid 139746373265088] [client 52.225 ... show more [Thu Aug 28 18:47:00.093840 2025] [security2:error] [pid 1450541:tid 139746373265088] [client 52.225.75.214:44591] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-curah-hujan-bulanan/6-bulan-ke-depan/555561135-prakiraan-bulanan-curah-hujan-di-kota-kabupaten-probolinggo-untuk-6-bulan-ke-depan HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-curah-hujan-bulanan/6-bulan-ke-depan/555561135-prakiraan-bulanan-curah-hujan-di-kota-kabupaten-probolinggo-untuk-6-bul ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-08-24 13:42:32 (10 months ago)	[Sun Aug 24 20:30:34.096601 2025] [security2:error] [pid 29788:tid 140090266347200] [client 52.225.7 ... show more [Sun Aug 24 20:30:34.096601 2025] [security2:error] [pid 29788:tid 140090266347200] [client 52.225.75.214:37157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET / HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "aKsT-suRE9LxKI97MlDLDwADwgM"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[29792] [rQCQcVxTV2Q] [aKsT-suRE9LxKI97MlDLDwADwgM] keep_alive=[1] [2025-08-24 20:30:34.096605] [R:aKsT-suRE9LxKI97MlDLDwADwgM] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot' Host:'staklim-j ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-08-19 15:14:10 (10 months ago)	[Tue Aug 19 22:11:42.157098 2025] [security2:error] [pid 35833:tid 139730644575936] [client 52.225.7 ... show more [Tue Aug 19 22:11:42.157098 2025] [security2:error] [pid 35833:tid 139730644575936] [client 52.225.75.214:22282] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /b/bulananjember.pdf HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/b/bulananjember.pdf"] [unique_id "aKSULtRnihPDG1-0MOUoyAAADw0"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[35847] [YAMHRvlAkqs] [aKSULtRnihPDG1-0MOUoyAAADw0] keep_alive=[1] [2025-08-19 22:11:42.157103] [R:aKSULtRnihPDG1-0MOUoyAAADw0] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +h ... show less	Hacking Web App Attack

Showing 1 to 15 of 289 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 220.88.8.117

🇧🇷 205.210.31.251

🇧🇷 200.11.122.192

🇹🇷 191.96.87.49

🇲🇽 189.147.254.64

🇬🇧 185.247.137.97

🇺🇸 172.174.46.118

🇺🇸 147.185.132.109

🇨🇳 121.199.34.107

🇮🇳 103.176.64.36

🇨🇳 101.96.200.79

🇨🇳 101.96.195.62

🇺🇸 92.204.138.58

🇨🇦 85.217.149.56

🇨🇦 85.217.149.36

🇧🇬 79.124.62.126

🇩🇪 69.5.169.75

🇮🇳 45.119.14.239

🇦🇺 40.82.214.8

🇮🇪 20.13.164.162