JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.251.123.65

52.251.123.65

Neutral Activity

56 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Microsoft Corporation

Usage Type

Data Center/Web Hosting/Transit

ASN

AS8075

Domain Name

microsoft.com

Country

🇺🇸 United States of America

City

Boydton, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

52.251.123.65 has been reported 56 times. The most recent report is from 3 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 52.251.123.65:

This IP address has been reported a total of 56 times from 27 distinct sources. 52.251.123.65 was first reported on July 6th 2023, and the most recent report was 3 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 findlab	2023-07-18 02:10:25 (3 years ago)	Backdrop CMS module - Request: /wp-content/plugins/fix/up.php	Bad Web Bot Web App Attack
🇩🇪 HERA - Operations	2023-07-17 22:30:26 (3 years ago)	club-herrmann - searching for vulnerable scripts: up.php 2023/07/18 00:30:26	Web App Attack
🇬🇧 findlab	2023-07-17 11:27:02 (3 years ago)	Backdrop CMS module - Request: /wordpress	Bad Web Bot Web App Attack
Anonymous	2023-07-17 09:40:01 (3 years ago)		Web App Attack
🇬🇷 Staging	2023-07-17 08:02:09 (3 years ago)	FAAAAAAAAAAST Scraper	Bad Web Bot Web App Attack
🇦🇺 advena	2023-07-16 17:30:56 (3 years ago)	52.251.123.65 (AS8075 MICROSOFT-CORP-MSN-AS-BLOCK) was intercepted at 2023-07-16T17:18:19Z after vio ... show more 52.251.123.65 (AS8075 MICROSOFT-CORP-MSN-AS-BLOCK) was intercepted at 2023-07-16T17:18:19Z after violating WAF directive: 7deac62381044a1a91c2dd4a4d048ece. Pre-cautionary/corrective action applied: managed_challenge. show less	Web Spam Hacking Brute-Force Web App Attack
🇩🇪 niceshops.com	2023-07-15 22:35:34 (3 years ago)	Web Attack ([16/Jul/2023:00:35:33.511] GET /wordpress)	Web App Attack
🇳🇱 CryptoYakari	2023-07-15 14:05:47 (3 years ago)	52.251.123.65 - - [15/Jul/2023:17:05:41 +0300] "GET /wordpress HTTP/1.0" 404 3252 "-" "-" 52.251.123 ... show more 52.251.123.65 - - [15/Jul/2023:17:05:41 +0300] "GET /wordpress HTTP/1.0" 404 3252 "-" "-" 52.251.123.65 - - [15/Jul/2023:17:05:42 +0300] "GET /wp HTTP/1.0" 404 3252 "-" "-" 52.251.123.65 - - [15/Jul/2023:17:05:42 +0300] "GET /blog HTTP/1.0" 404 3252 "-" "-" 52.251.123.65 - - [15/Jul/2023:17:05:43 +0300] "GET /new HTTP/1.0" 404 3252 "-" "-" 52.251.123.65 - - [15/Jul/2023:17:05:43 +0300] "GET /old HTTP/1.0" 404 3252 "-" "-" ... show less	Web Spam Blog Spam Bad Web Bot Web App Attack
🇺🇸 sumnone	2023-07-15 06:47:36 (3 years ago)	Vulnerability probing: Error 404. The requested page (/wordpress) was not found	Bad Web Bot Exploited Host Web App Attack
🇬🇧 Buster	2023-07-14 15:24:13 (3 years ago)	Repeated distributed attack attempts on multiple sites from Perm Blocked ASN & country	DDoS Attack Open Proxy Hacking Web App Attack
🇳🇱 CryptoYakari	2023-07-13 23:14:46 (3 years ago)	52.251.123.65 - - [14/Jul/2023:02:14:40 +0300] "GET /wordpress HTTP/1.0" 404 3594 "-" "-" 52.251.123 ... show more 52.251.123.65 - - [14/Jul/2023:02:14:40 +0300] "GET /wordpress HTTP/1.0" 404 3594 "-" "-" 52.251.123.65 - - [14/Jul/2023:02:14:41 +0300] "GET /wp HTTP/1.0" 404 3594 "-" "-" 52.251.123.65 - - [14/Jul/2023:02:14:41 +0300] "GET /blog HTTP/1.0" 404 3594 "-" "-" 52.251.123.65 - - [14/Jul/2023:02:14:41 +0300] "GET /new HTTP/1.0" 404 3594 "-" "-" 52.251.123.65 - - [14/Jul/2023:02:14:41 +0300] "GET /old HTTP/1.0" 404 3594 "-" "-" ... show less	Web Spam Blog Spam Bad Web Bot Web App Attack
Anonymous	2023-07-13 19:17:15 (3 years ago)	bot activity intercepted	Bad Web Bot
🇦🇺 advena	2023-07-13 14:00:58 (3 years ago)	52.251.123.65 (AS8075 MICROSOFT-CORP-MSN-AS-BLOCK) was intercepted at 2023-07-13T13:57:19Z after vio ... show more 52.251.123.65 (AS8075 MICROSOFT-CORP-MSN-AS-BLOCK) was intercepted at 2023-07-13T13:57:19Z after violating WAF directive: 7deac62381044a1a91c2dd4a4d048ece. Pre-cautionary/corrective action applied: managed_challenge. show less	Web Spam Hacking Brute-Force Web App Attack
🇧🇪 DAILYKANBAN.COM	2023-07-13 08:37:05 (3 years ago)	(mod_security) mod_security (id:1000001) triggered by 52.251.123.65 (US/United States/-): 2 in the l ... show more (mod_security) mod_security (id:1000001) triggered by 52.251.123.65 (US/United States/-): 2 in the last 600 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Thu Jul 13 08:36:59.951177 2023] [security2:error] [pid 2217691:tid 23326793045760] [client 52.251.123.65:0] [client 52.251.123.65] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/blog" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "9"] [id "1000001"] [msg "Restricted File Probe"] [data "Matched Data: /blog found within REQUEST_URI"] [severity "CRITICAL"] [tag "paranoia-level/2"] [hostname "bertelschmitt.org"] [uri "/blog"] [unique_id "ZK-3q-0MaQBOTTJR4yepTAAAAA8"] [Thu Jul 13 08:37:00.205823 2023] [security2:error] [pid 2217691:tid 23326807754496] [client 52.251.123.65:0] [client 52.251.123.65] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/old" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "9"] [id "1000001"] [msg "Restricte show less	Web App Attack
🇦🇺 advena	2023-07-12 21:30:56 (3 years ago)	52.251.123.65 (AS8075 MICROSOFT-CORP-MSN-AS-BLOCK) was intercepted at 2023-07-12T21:20:01Z after vio ... show more 52.251.123.65 (AS8075 MICROSOFT-CORP-MSN-AS-BLOCK) was intercepted at 2023-07-12T21:20:01Z after violating WAF directive: bot_fight_mode. Pre-cautionary/corrective action applied: managed_challenge. show less	Web Spam Hacking Brute-Force Web App Attack

Showing 1 to 15 of 56 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 2804:d41:a299:b00:cd36:1671:6679:5b73

🇨🇳 121.22.99.2

🇷🇺 81.200.153.183

🇸🇬 188.166.233.195

🇳🇱 185.223.235.49

🇳🇱 185.136.15.90

🇧🇩 182.48.65.234

🇺🇸 104.236.68.24

🇲🇽 68.155.159.216

🇱🇻 62.60.130.242

🇧🇷 187.87.244.247

🇺🇸 147.185.132.153

🇨🇳 117.158.166.73

🇰🇷 115.178.75.243

🇺🇸 107.155.48.46

🇻🇳 103.142.26.97

🇮🇷 85.133.193.72

🇺🇸 45.8.19.217

🇬🇧 193.163.125.97

🇨🇱 186.174.41.173