JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.238.198.168

52.238.198.168 was found in our database!

This IP was reported 193 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Des Moines, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.238.198.168

Whois 52.238.198.168

IP Abuse Reports for 52.238.198.168:

This IP address has been reported a total of 193 times from 176 distinct sources. 52.238.198.168 was first reported on July 28th 2026, and the most recent report was 3 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 Christopher Hughes	2026-07-28 15:24:05 (3 minutes ago)	[Tue Jul 28 16:24:03.659312 2026] [proxy_fcgi:error] [pid 2305579:tid 139826133194304] [client 52.23 ... show more [Tue Jul 28 16:24:03.659312 2026] [proxy_fcgi:error] [pid 2305579:tid 139826133194304] [client 52.238.198.168:41241] AH01071: Got error 'Primary script unknown' [Tue Jul 28 16:24:03.957278 2026] [proxy_fcgi:error] [pid 2305579:tid 139825529214528] [client 52.238.198.168:41241] AH01071: Got error 'Primary script unknown' [Tue Jul 28 16:24:04.283830 2026] [proxy_fcgi:error] [pid 2305579:tid 139825520821824] [client 52.238.198.168:41241] AH01071: Got error 'Primary script unknown' [Tue Jul 28 16:24:04.557208 2026] [proxy_fcgi:error] [pid 2305579:tid 139825504036416] [client 52.238.198.168:41241] AH01071: Got error 'Primary script unknown' [Tue Jul 28 16:24:04.852247 2026] [proxy_fcgi:error] [pid 2305579:tid 139826149979712] [client 52.238.198.168:41241] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇬🇧 venus.launch.bz	2026-07-28 15:22:29 (4 minutes ago)	(wpscan) WordPress probe detected from 52.238.198.168 (US/United States/-)	Hacking
🇫🇮 JLKnoch Software GmbH	2026-07-28 15:19:43 (7 minutes ago)	CrowdSec crowdsecurity/http-probing	Brute-Force Web App Attack
🇦🇺 paulshipley.com.au	2026-07-28 15:19:35 (7 minutes ago)	valueaddedpromotions.com.au:443 52.238.198.168 - - [29/Jul/2026:01:19:32 +1000] "GET /admin.php HTTP ... show more valueaddedpromotions.com.au:443 52.238.198.168 - - [29/Jul/2026:01:19:32 +1000] "GET /admin.php HTTP/1.1" 404 155467 "-" "-" ... show less	Web App Attack
Anonymous	2026-07-28 15:19:08 (7 minutes ago)	Attempt to scan vulnerabilities	Hacking
🇫🇮 etasoft	2026-07-28 15:14:58 (12 minutes ago)	Auto-blocked by WP Security AI: Honeypot: /admin.php	Hacking
🇫🇷 MatStef132	2026-07-28 15:13:28 (13 minutes ago)	MatShield L7: blocked on protection-core-01-panel.mathost.eu (cache-bust-detected)	DDoS Attack Bad Web Bot
🇪🇸 Francisco Vallejo	2026-07-28 15:12:10 (14 minutes ago)	[Tue Jul 28 17:12:09.450303 2026] [core:info] [pid 1983015:tid 127818671310528] [client 52.238.198.1 ... show more [Tue Jul 28 17:12:09.450303 2026] [core:info] [pid 1983015:tid 127818671310528] [client 52.238.198.168:46277] AH00128: File does not exist: /var/www/franvallejo/wp-content/plugins/hellopress/wp_filemanager.php [Tue Jul 28 17:12:09.668030 2026] [core:info] [pid 1983015:tid 127818277050048] [client 52.238.198.168:46277] AH00128: File does not exist: /var/www/franvallejo/this_is_a_new_hello_world.php [Tue Jul 28 17:12:09.884446 2026] [core:info] [pid 1983015:tid 127819761837760] [client 52.238.198.168:46277] AH00128: File does not exist: /var/www/franvallejo/x.php [Tue Jul 28 17:12:10.099846 2026] [core:info] [pid 1983015:tid 127818268657344] [client 52.238.198.168:46277] AH00128: File does not exist: /var/www/franvallejo/mgrr.php [Tue Jul 28 17:12:10.316290 2026] [core:info] [pid 1983015:tid 127819585656512] [client 52.238.198.168:46277] AH00128: File does not exist: /var/www/franvallejo/stdin.php ... show less	Brute-Force SSH
Anonymous	2026-07-28 15:11:23 (15 minutes ago)	Aggressive web scan	Bad Web Bot Web App Attack
🇮🇹 mediarama.com	2026-07-28 15:06:16 (20 minutes ago)	Banned by Fail2Ban	Web App Attack
🇫🇮 Christopher Hughes	2026-07-28 15:03:54 (23 minutes ago)	[Tue Jul 28 16:03:52.666984 2026] [proxy_fcgi:error] [pid 2305579:tid 139825520821824] [client 52.23 ... show more [Tue Jul 28 16:03:52.666984 2026] [proxy_fcgi:error] [pid 2305579:tid 139825520821824] [client 52.238.198.168:41288] AH01071: Got error 'Primary script unknown' [Tue Jul 28 16:03:53.156281 2026] [proxy_fcgi:error] [pid 2305685:tid 139826634544704] [client 52.238.198.168:41246] AH01071: Got error 'Primary script unknown' [Tue Jul 28 16:03:53.161618 2026] [proxy_fcgi:error] [pid 2305579:tid 139826149979712] [client 52.238.198.168:41288] AH01071: Got error 'Primary script unknown' [Tue Jul 28 16:03:53.641039 2026] [proxy_fcgi:error] [pid 2305685:tid 139826099623488] [client 52.238.198.168:41246] AH01071: Got error 'Primary script unknown' [Tue Jul 28 16:03:53.649762 2026] [proxy_fcgi:error] [pid 2305579:tid 139824925234752] [client 52.238.198.168:41288] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇩🇪 SCHAPPY	2026-07-28 15:02:45 (24 minutes ago)	Brute-force attack to identify web exploits	Brute-Force Web App Attack
🇮🇪 AutosOnShow	2026-07-28 14:59:05 (28 minutes ago)	blocked for webapp attack \| path requested: /kir.php \| seen at 2026-07-28 14:58:52.840 \|	Web App Attack
🇫🇮 habs	2026-07-28 14:41:45 (45 minutes ago)	52.238.198.168 - - [28/Jul/2026:17:41:44 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 52.238.198.168 - - [28/Jul/2026:17:41:44 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 52.238.198.168 - - [28/Jul/2026:17:41:44 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 146 "-" "-" 52.238.198.168 - - [28/Jul/2026:17:41:45 +0300] "GET /this_is_a_new_hello_world.php HTTP/1.1" 301 162 "-" "-" ... show less	Web App Attack
🇵🇱 Kitki30.com	2026-07-28 14:41:34 (45 minutes ago)	HTTP Probing. Log: 52.238.198.168 - - [28/Jul/2026:14:41:34 +0000] "GET /.well-known/about.php HTTP/ ... show more HTTP Probing. Log: 52.238.198.168 - - [28/Jul/2026:14:41:34 +0000] "GET /.well-known/about.php HTTP/1.1" 301 162 "-" "-" show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 193 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 223.171.94.26

🇨🇳 180.111.30.233

🇯🇵 114.156.131.158

🇺🇸 44.215.73.188

🇺🇸 3.129.187.38

🇬🇧 198.244.183.230

🇱🇻 185.113.139.51

🇨🇳 101.126.89.35

🇨🇳 14.23.77.27

🇺🇸 162.216.150.211

🇻🇳 123.25.235.106

🇺🇸 107.174.137.235

🇲🇲 103.121.230.146

🇺🇸 74.48.79.235

🇬🇧 35.203.211.163

🇩🇪 213.209.159.238

🇹🇭 203.154.158.195

🇧🇷 200.175.61.207

🇬🇧 198.244.242.51

🇮🇷 185.112.33.84