JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.237.167.19

52.237.167.19 was found in our database!

This IP was reported 33 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.237.167.19

Whois 52.237.167.19

IP Abuse Reports for 52.237.167.19:

This IP address has been reported a total of 33 times from 25 distinct sources. 52.237.167.19 was first reported on June 29th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 taivas.nl	2026-07-01 04:32:45 (2 hours ago)	Many_bad_calls	Web App Attack
🇫🇷 France Artisanat	2026-06-30 20:41:44 (10 hours ago)	ATTAQUE BRUTEFORCE EN COURS	Web Spam
🇺🇸 interbiznw.com	2026-06-30 18:46:08 (12 hours ago)	malicious-web-requests-vulnerability-scanning	Hacking Brute-Force Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-06-30 18:45:28 (12 hours ago)	(mod_security) mod_security (id:210492) triggered by 52.237.167.19 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 52.237.167.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 14:45:24.053334 2026] [security2:error] [pid 14438:tid 14438] [client 52.237.167.19:65224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nomanszone.com"] [uri "/.env"] [unique_id "akQOxLtn_6k1f6WgAXZJiwAAAC8"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇹 Erpelstolz	2026-06-30 17:16:07 (13 hours ago)	VM 131: 52.237.167.19 - - [30/Jun/2026:19:16:06 +0200] "GET /api/v1/swagger.json HTTP/2.0" 404 5446	Web App Attack
🇩🇪 london2038.com	2026-06-30 15:36:48 (15 hours ago)	Probing for exploits 52.237.167.19 - - [30/Jun/2026:17:36:45 +0200] "GET /.env HTTP/2.0" 422 0 "-" " ... show more Probing for exploits 52.237.167.19 - - [30/Jun/2026:17:36:45 +0200] "GET /.env HTTP/2.0" 422 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 26_2_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/145.0.7632.55 Mobile/15E148 Safari/604.1" 52.237.167.19 - - [30/Jun/2026:17:36:45 +0200] "GET /index.php?go=Go&go=..%252F..%252F..%252F..%252F..%252F..%252F..%252F..%252F..%252Fetc%252Fpasswd&search=baker%27s&title=Special%3ASearch HTTP/2.0" 422 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 26_2_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/145.0.7632.55 Mobile/15E148 Safari/604.1" show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-06-30 15:10:21 (15 hours ago)	(mod_security) mod_security (id:210492) triggered by 52.237.167.19 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 52.237.167.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 11:10:16.506710 2026] [security2:error] [pid 21724:tid 21724] [client 52.237.167.19:56967] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fiyaplatform.com"] [uri "/.env"] [unique_id "akPcWPQbbbTUTz0Ww7AmiQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 raph	2026-06-30 15:01:33 (15 hours ago)	[DOT FILES] crawler .env, .git, .config, etc.	Bad Web Bot Web App Attack
🇷🇺 OK	2026-06-30 14:26:06 (16 hours ago)	HTTP/HTTPS	Hacking Web App Attack
🇮🇪 RoboSOC	2026-06-30 14:07:47 (16 hours ago)	HTTP Directory Traversal Vulnerability , PTR: PTR record not found	Hacking
🇧🇪 taivas.nl	2026-06-30 13:32:15 (17 hours ago)	Bad_requests	Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-30 12:21:43 (18 hours ago)	(mod_security) mod_security (id:210580) triggered by 52.237.167.19 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210580) triggered by 52.237.167.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 08:21:39.034332 2026] [security2:error] [pid 3247:tid 3247] [client 52.237.167.19:56724] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "etc/passwd" at ARGS:print. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt\|\|chatgptfrance.net\|F\|2"] [data "Matched Data: etc/passwd found within ARGS:print: ../../../../../../../../../etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "chatgptfrance.net"] [uri "/author/the_ai_advantage/"] [unique_id "akO00-gzITRYvsAv3lLAVQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Lunix	2026-06-30 10:56:07 (19 hours ago)		Brute-Force Web App Attack
🇳🇱 wlt-blocker	2026-06-30 10:33:30 (20 hours ago)	SQL injection attempt	SQL Injection
Anonymous	2026-06-30 10:23:17 (20 hours ago)	"GET /.env HTTP/1.1"	Hacking Web App Attack

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 2a09:bac5:3805:1f19::319:33

🇮🇳 2402:a00:173:6ecc:b45e:6646:79b6:55ff

🇲🇾 2001:e68:6811:4000:dc46:22dd:497a:e327

🇨🇳 218.94.25.243

🇺🇸 216.73.161.158

🇺🇸 216.73.161.152

🇮🇹 212.66.99.54

🇰🇷 211.240.117.71

🇺🇸 207.246.254.206

🇯🇵 194.5.48.215

🇷🇴 193.32.162.60

🇸🇬 185.227.135.59

🇹🇷 185.87.252.116

🇬🇧 185.53.58.204

🇸🇦 185.22.228.25

🇮🇩 182.8.229.243

🇧🇷 179.127.11.105

🇩🇪 178.63.100.238

🇺🇸 172.202.117.223

🇸🇬 172.188.89.41