JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.237.251.117

52.237.251.117 was found in our database!

This IP was reported 490 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇦🇺 Australia
City	Sydney, New South Wales

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.237.251.117

Whois 52.237.251.117

IP Abuse Reports for 52.237.251.117:

This IP address has been reported a total of 490 times from 168 distinct sources. 52.237.251.117 was first reported on July 13th 2024, and the most recent report was 7 months ago.

Old Reports: The most recent abuse report for this IP address is from 7 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 bazter.pro	2025-11-25 20:24:29 (7 months ago)	Banned by nginx-ip-monitor. AbuseIPDB check unavailable, but critical attack detected (sensitive pat ... show more Banned by nginx-ip-monitor. AbuseIPDB check unavailable, but critical attack detected (sensitive path + 403). Total requests: 71. 404 errors: 0. Unique paths: 68. Sensitive paths: //wp-content/plugins/classic-editor/wp-login.php, //.tmb/wp-login.php, //.well-known/acme-challenge/wp-login.php. show less	Web App Attack
🇵🇹 Dolutech.com	2024-08-13 21:57:00 (1 year ago)	- Blocked due to mod_security rule 7	Brute-Force SSH
🇩🇪 jasperedv.de	2024-08-10 00:22:16 (1 year ago)	Apache Login - Brutforcing	Brute-Force Web App Attack
Anonymous	2024-08-09 19:15:48 (1 year ago)	52.237.251.117 - - [09/Aug/2024:21:15:40 +0200] "GET //wp-content/plugins/classic-editor/wp-login.ph ... show more 52.237.251.117 - - [09/Aug/2024:21:15:40 +0200] "GET //wp-content/plugins/classic-editor/wp-login.php HTTP/1.1" 404 442 "-" "Go-http-client/1.1" 52.237.251.117 - - [09/Aug/2024:21:15:40 +0200] "GET //.tmb/wp-login.php HTTP/1.1" 404 442 "-" "Go-http-client/1.1" 52.237.251.117 - - [09/Aug/2024:21:15:41 +0200] "GET //.well-known/acme-challenge/wp-login.php HTTP/1.1" 200 2911 "-" "Go-http-client/1.1" 52.237.251.117 - - [09/Aug/2024:21:15:41 +0200] "GET //.well-known/pki-validation/wp-login.php HTTP/1.1" 200 2911 "-" "Go-http-client/1.1" 52.237.251.117 - - [09/Aug/2024:21:15:46 +0200] "GET //cgi-bin/wp-login.php HTTP/1.1" 404 442 "-" "Go-http-client/1.1" 52.237.251.117 - - [09/Aug/2024:21:15:46 +0200] "GET //images/wp-login.php HTTP/1.1" 404 442 "-" "Go-http-client/1.1" 52.237.251.117 - - [09/Aug/2024:21:15:47 +0200] "GET //wp-admin/css/wp-login.php HTTP/1.1" 404 442 "-" "Go-http-client/1.1" ... show less	Brute-Force
🇭🇰 dwmp	2024-08-09 18:01:47 (1 year ago)	Url probing: /.tmb/wp-login.php	Web App Attack
Anonymous	2024-08-09 17:57:00 (1 year ago)	File vulnerability probing. Excessive crawling.	Brute-Force Bad Web Bot Web App Attack
🇪🇸 el-brujo	2024-08-09 17:48:23 (1 year ago)	09/Aug/2024:19:48:23.274306 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ... show more 09/Aug/2024:19:48:23.274306 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 52.237.251.117] ModSecurity: Warning. Pattern match "(?:;\|\\\\\\\\{\|\\\\\\\\\|\|\\\\\\\\\|\\\\\\\\\|\|&\|&&\|\\\\\\\\n\|\\\\\\\\r\|\\\\\\\\$\\\\\\\$\|\\\\\\\\$\\\\\\\\(\\\\\\\\(\|`\|\\\\\\\\${\|<\\\\\\\\(\|>\\\\\\\\(\|\\\\\\\\(\\\\\\\\s\\\\\\\$)\\\\\\\\s(?:{\|\\\\\\\\s\\\\\\\$\\\\\\\\s\|\\\\\\\\w+=(?:[^\\\\\\\\s]\|\\\\\\\\$.\|\\\\\\\\$.\|<.\|>.\|\\\\\\\\'.\\\\\\\\'\|\\\\".\\\\")\\\\\\\\s+\|!\\\\\\\\s\|\\\\\\\\$)\\\\\\\\s(?:'\|\\\\")(?:[\\\\\\\\?\\\\\\\\\\\\\\\\[\\\\\\\\]\\\\\\\\(\\\\\\\$\\\\\\\\-\\\\\\\\\|+\\\\\\\\w'\\\\"\\\\\\\\./\\\\\\\\\\\\\\\\]+/)?[\\\\\\\\\\\\\\\\'\\\\"](?:l[\\\\\\\\\\\\\\\\'\\\\"] ..." at ARGS:sfilecontent. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "123"] [id "932100"] [msg "Remote Command Execution: Unix Command Injection"] [data "Matched Data: ; eval found within ARGS:sfilecontent: <?php function get($url) { $ch = ... show less	Hacking Web App Attack
Anonymous	2024-08-09 15:43:03 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇬🇧 adnscom.net	2024-08-09 14:57:23 (1 year ago)	IPS trigger: Brute force WebApp/CMS scanning/attack	Brute-Force Web App Attack
Anonymous	2024-08-09 13:55:49 (1 year ago)	52.237.251.117 - - [09/Aug/2024:15:55:45 +0200] "GET //wp-content/plugins/classic-editor/wp-login.ph ... show more 52.237.251.117 - - [09/Aug/2024:15:55:45 +0200] "GET //wp-content/plugins/classic-editor/wp-login.php HTTP/1.1" 404 442 "-" "Go-http-client/1.1" 52.237.251.117 - - [09/Aug/2024:15:55:47 +0200] "GET //.tmb/wp-login.php HTTP/1.1" 404 442 "-" "Go-http-client/1.1" 52.237.251.117 - - [09/Aug/2024:15:55:47 +0200] "GET //.well-known/acme-challenge/wp-login.php HTTP/1.1" 200 2911 "-" "Go-http-client/1.1" 52.237.251.117 - - [09/Aug/2024:15:55:47 +0200] "GET //.well-known/pki-validation/wp-login.php HTTP/1.1" 200 2911 "-" "Go-http-client/1.1" 52.237.251.117 - - [09/Aug/2024:15:55:48 +0200] "GET //cgi-bin/wp-login.php HTTP/1.1" 404 442 "-" "Go-http-client/1.1" 52.237.251.117 - - [09/Aug/2024:15:55:48 +0200] "GET //images/wp-login.php HTTP/1.1" 404 442 "-" "Go-http-client/1.1" 52.237.251.117 - - [09/Aug/2024:15:55:48 +0200] "GET //wp-admin/css/wp-login.php HTTP/1.1" 404 442 "-" "Go-http-client/1.1" ... show less	Brute-Force
🇭🇺 HoneyPotEu	2024-08-09 12:30:07 (1 year ago)	52.237.251.117 [redacted].[redacted] (8075-MICROSOFT-CORP-MSN-AS-BLOCK Australia Sydney) - - [09/Aug ... show more 52.237.251.117 [redacted].[redacted] (8075-MICROSOFT-CORP-MSN-AS-BLOCK Australia Sydney) - - [09/Aug/2024:14:30:04 +0200] "GET //wp-content/plugins/classic-editor/wp-login.php HTTP/1.1" 404 118 "-" "Go- ... show less	Bad Web Bot Web App Attack
Anonymous	2024-08-09 11:40:56 (1 year ago)	52.237.251.117 - - [09/Aug/2024:13:40:52 +0200] "GET //wp-content/plugins/classic-editor/wp-login.ph ... show more 52.237.251.117 - - [09/Aug/2024:13:40:52 +0200] "GET //wp-content/plugins/classic-editor/wp-login.php HTTP/1.1" 404 446 "-" "Go-http-client/1.1" 52.237.251.117 - - [09/Aug/2024:13:40:53 +0200] "GET //.tmb/wp-login.php HTTP/1.1" 404 446 "-" "Go-http-client/1.1" 52.237.251.117 - - [09/Aug/2024:13:40:53 +0200] "GET //.well-known/acme-challenge/wp-login.php HTTP/1.1" 200 2911 "-" "Go-http-client/1.1" 52.237.251.117 - - [09/Aug/2024:13:40:53 +0200] "GET //.well-known/pki-validation/wp-login.php HTTP/1.1" 200 2911 "-" "Go-http-client/1.1" 52.237.251.117 - - [09/Aug/2024:13:40:54 +0200] "GET //cgi-bin/wp-login.php HTTP/1.1" 404 446 "-" "Go-http-client/1.1" 52.237.251.117 - - [09/Aug/2024:13:40:55 +0200] "GET //images/wp-login.php HTTP/1.1" 404 446 "-" "Go-http-client/1.1" 52.237.251.117 - - [09/Aug/2024:13:40:55 +0200] "GET //wp-admin/css/wp-login.php HTTP/1.1" 404 446 "-" "Go-http-client/1.1" ... show less	Brute-Force
🇲🇾 Rizzy	2024-08-09 10:17:53 (1 year ago)	Multiple WAF Violations	Brute-Force Web App Attack
Anonymous	2024-08-09 07:56:37 (1 year ago)	wordpress-trap	Web App Attack
🇺🇸 gu-alvareza	2024-08-09 07:05:21 (1 year ago)	PHP.URI.Code.Injection	SQL Injection Web App Attack

Showing 1 to 15 of 490 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 220.181.1.163

🇬🇹 190.151.130.5

🇵🇱 31.179.197.26

🇧🇷 200.232.114.71

🇧🇴 190.129.122.12

🇷🇺 188.128.118.186

🇧🇷 181.224.42.162

🇭🇰 118.193.36.220

🇳🇱 94.154.35.122

🇺🇸 64.62.156.162

🇸🇪 192.178.93.149

🇨🇳 182.119.230.142

🇨🇳 182.119.230.141

🇨🇴 179.1.210.98

🇺🇸 57.132.175.132

🇧🇷 45.205.1.246

🇧🇷 45.172.162.153

🇳🇱 45.148.10.200

🇺🇸 20.163.61.136

🇩🇪 162.158.94.113