JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.243.57.32

52.243.57.32 was found in our database!

This IP was reported 107 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.243.57.32

Whois 52.243.57.32

IP Abuse Reports for 52.243.57.32:

This IP address has been reported a total of 107 times from 97 distinct sources. 52.243.57.32 was first reported on June 30th 2026, and the most recent report was 1 minute ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇺 DZBOT	2026-06-30 16:09:06 (1 minute ago)	DZBOT: Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇫🇷 Jimbo67	2026-06-30 16:06:48 (3 minutes ago)	Cloudflare WAF: 34 hits in 30s \| action=block \| abuse=suspicious_probe \| categories=19,21 \| rule_id= ... show more Cloudflare WAF: 34 hits in 30s \| action=block \| abuse=suspicious_probe \| categories=19,21 \| rule_id=a8325d956f104d2194269f1386e09ef1 \| URIs=//abcd.php,//cgi-bin/index.php,//themes.php,/199.php,/als.php \| confidence=0.82 show less	Bad Web Bot Web App Attack
🇧🇪 taivas.nl	2026-06-30 16:02:12 (8 minutes ago)	Site scraper	Web App Attack
🇺🇸 Moby	2026-06-30 15:50:57 (19 minutes ago)	52.243.57.32 - - [30/Jun/2026:10:50:55 -0500] "GET /rawwp-content/plugins/hellopress/wp_filemanager. ... show more 52.243.57.32 - - [30/Jun/2026:10:50:55 -0500] "GET /rawwp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 988 52.243.57.32 - - [30/Jun/2026:10:50:55 -0500] "GET /rawthis_is_a_new_hello_world.php HTTP/1.1" 404 988 Tue Jun 30 10:50:55.981433 202652.243.57.32 - - [30/Jun/2026:10:50:55 -0500] "GET /rawx.php HTTP/1.1" 404 988 ... show less	Web App Attack
🇩🇪 Skyrider	2026-06-30 15:34:26 (35 minutes ago)	Nginx: HTTP 4xx probe/scan attempts. Automated fail2ban report.	Bad Web Bot Web App Attack
🇩🇰 SaltySoftworks	2026-06-30 15:33:47 (36 minutes ago)	User agent spoofing Page: /wp-content/plugins/hellopress/wp_filemanager.php	Spoofing Brute-Force Web App Attack Hacking
🇩🇪 XYCoderXY	2026-06-30 15:30:02 (40 minutes ago)	SSH/web brute-force & exploit scanning against lumerux.com (automated report).	Brute-Force SSH
🇮🇩 zam	2026-06-30 15:29:11 (41 minutes ago)	52.243.57.32 - - [30/Jun/2026:15:29:08 +0000] "GET /wander.php HTTP/1.1" 301 285	Web App Attack
🇺🇸 jkhorvath.com	2026-06-30 15:25:38 (44 minutes ago)	Request for URL /wp-content/plugins/hellopress/wp_filemanager.php	Phishing Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-30 15:23:09 (47 minutes ago)	(mod_security) mod_security (id:210730) triggered by 52.243.57.32 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 52.243.57.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 11:23:05.489148 2026] [security2:error] [pid 21699:tid 21699] [client 52.243.57.32:65063] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|new-bethel-baptist-church.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "new-bethel-baptist-church.com"] [uri "/home/tancedi1/new-bethel-baptist-church.com"] [unique_id "akPfWVAoM_RuaTj2wP2VKQAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-06-30 15:22:13 (48 minutes ago)	52.243.57.32 - - [30/Jun/2026:18:22:12 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 52.243.57.32 - - [30/Jun/2026:18:22:12 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 702 "-" "-" ... show less	Web App Attack
🇳🇱 Roderic	2026-06-30 15:21:43 (48 minutes ago)	52.243.57.32 (JP/Japan/Tokyo/Tokyo/-/[redacted]), more than 30 Apache 403 hits	Hacking
Anonymous	2026-06-30 15:18:40 (51 minutes ago)	(caddyscan) Scanner path probe from 52.243.57.32 (JP/Japan/-): 5 in the last 3600 secs; Ports: ; Di ... show more (caddyscan) Scanner path probe from 52.243.57.32 (JP/Japan/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 52.243.57.32 - - [30/Jun/2026:15:17:51 +0000] "GET /wp-admin/css/colors/coffee/wp-adochan.php HTTP/1.1" [REDACTED] 200 2627 52.243.57.32 - - [30/Jun/2026:15:18:31 +0000] "GET /wp-admin/js/ HTTP/1.1" [REDACTED] 200 2627 52.243.57.32 - - [30/Jun/2026:15:18:32 +0000] "GET /wp-admin/css/colour.php HTTP/1.1" [REDACTED] 200 2627 52.243.57.32 - - [30/Jun/2026:15:18:34 +0000] "GET /wordpress/wp-admin/maint/ HTTP/1.1" [REDACTED] 200 2627 52.243.57.32 - - [30/Jun/2026:15:18:38 +0000] "GET /wp-admin/css/ HTTP/1.1" show less	Port Scan
🇩🇪 Dennis	2026-06-30 15:18:37 (51 minutes ago)	52.243.57.32 has been banned for triggering http-probing (11 events over 2.86775695s).	Brute-Force Web App Attack
🇰🇷 MW	2026-06-30 15:16:44 (53 minutes ago)	52.243.57.32 - - [01/Jul/2026:00:16:42 +0900] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 52.243.57.32 - - [01/Jul/2026:00:16:42 +0900] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 4232 "-" "-" 52.243.57.32 - - [01/Jul/2026:00:16:42 +0900] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 459 "-" "-" 52.243.57.32 - - [01/Jul/2026:00:16:42 +0900] "GET /x.php HTTP/1.1" 404 459 "-" "-" show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 107 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 179.43.9.2

🇺🇸 100.29.192.104

🇱🇹 62.60.130.219

🇧🇷 45.175.123.254

🇺🇸 207.46.13.31

🇺🇸 162.216.150.133

🇺🇸 104.152.52.242

🇮🇩 103.97.101.25

🇳🇱 93.123.109.214

🇮🇹 93.63.237.36

🇪🇸 90.162.116.66

🇫🇷 85.204.70.118

🇺🇸 63.245.45.135

🇸🇬 47.236.172.167

🇳🇱 213.21.248.43

🇳🇱 176.65.148.30

🇩🇪 128.14.225.164

🇮🇹 78.134.49.171

🇹🇼 61.231.226.182

🇪🇸 46.24.47.94