JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.255.111.119

52.255.111.119 was found in our database!

This IP was reported 302 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	San Antonio, Texas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.255.111.119

Whois 52.255.111.119

IP Abuse Reports for 52.255.111.119:

This IP address has been reported a total of 302 times from 30 distinct sources. 52.255.111.119 was first reported on April 3rd 2025, and the most recent report was 7 months ago.

Old Reports: The most recent abuse report for this IP address is from 7 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 MAGIC	2025-11-23 00:01:50 (7 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇿🇦 slartybartfast69420blazit	2025-11-21 20:59:19 (7 months ago)	Fail2ban picked up 52.255.111.119 attacking nginx	Web App Attack
🇿🇦 slartybartfast69420blazit	2025-11-20 20:56:24 (7 months ago)	Fail2ban picked up 52.255.111.119 attacking nginx	Web App Attack
🇿🇦 slartybartfast69420blazit	2025-11-19 20:52:16 (7 months ago)	Fail2ban picked up 52.255.111.119 attacking nginx	Web App Attack
🇿🇦 slartybartfast69420blazit	2025-11-18 20:51:05 (7 months ago)	Fail2ban picked up 52.255.111.119 attacking nginx	Web App Attack
🇿🇦 slartybartfast69420blazit	2025-11-17 20:46:05 (7 months ago)	Fail2ban picked up 52.255.111.119 attacking nginx	Web App Attack
🇿🇦 slartybartfast69420blazit	2025-11-15 20:59:45 (8 months ago)	Fail2ban picked up 52.255.111.119 attacking nginx	Web App Attack
🇮🇩 hermawan	2025-11-12 18:12:23 (8 months ago)	[Thu Nov 13 01:11:48.452146 2025] [security2:error] [pid 363683:tid 140634000516800] [client 52.255. ... show more [Thu Nov 13 01:11:48.452146 2025] [security2:error] [pid 363683:tid 140634000516800] [client 52.255.111.119:21270] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "247"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-curah-hujan-bulanan/6-bulan-ke-depan/555561129-prakiraan-bulanan-curah-hujan-di-kabupaten-nganjuk-untuk-6-bulan-ke-depan HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-curah-hujan-bulanan/6-bulan-ke-depan/555561129-prakiraan-bulanan-curah-hujan-di-kabupaten-nganjuk-untuk-6-bulan-ke-depan"] [uni ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-11-11 14:09:00 (8 months ago)	[Tue Nov 11 20:43:23.430693 2025] [security2:error] [pid 150022:tid 139672490600128] [client 52.255. ... show more [Tue Nov 11 20:43:23.430693 2025] [security2:error] [pid 150022:tid 139672490600128] [client 52.255.111.119:36329] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "247"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/profil/meteorologi/list-of-all-tags/infografis-bulanan-iklim-ekstrim-tahun-2024 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/infografis-bulanan-iklim-ekstrim-tahun-2024"] [unique_id "aRM9e1PfcYzqrwKwcNbolwACSQE"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[150024] [pfzg1NF2ZR0] [aRM9e1PfcYzqrwKwcNbolwACSQE] keep_alive=[1] [2025- ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-11-02 16:56:12 (8 months ago)	[Sun Nov 02 23:55:41.402627 2025] [security2:error] [pid 938571:tid 140527677720256] [client 52.255. ... show more [Sun Nov 02 23:55:41.402627 2025] [security2:error] [pid 938571:tid 140527677720256] [client 52.255.111.119:59695] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.19.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "231"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/551-klimatologi/prakiraan-klimatologi/peringatan-dini HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/551-klimatologi/prakiraan-klimatologi/peringatan-dini"] [unique_id "aQeNDYqB4LPPS3izRtUecAADVwM"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[938575] [RmYGeB+OJDc] [aQeNDYqB4LPPS3izRtUecAADVwM] keep_alive=[1] [2025-11-02 23:55:41.402631] [R:aQeNDYqB4LPPS3izRtUecAADVw ... show less	Hacking Web App Attack
🇺🇸 nodepile	2025-10-28 07:37:21 (8 months ago)	Requests denied due to active blacklist hits on umnitza.com (method=GET path=/fits-05-06-acura-rsx-d ... show more Requests denied due to active blacklist hits on umnitza.com (method=GET path=/fits-05-06-acura-rsx-dc5-mugen-style-front-bumper-lip-urethane.html). UA='Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot'. NodeFleet Edge. show less	Exploited Host Web App Attack
🇮🇩 hermawan	2025-10-26 21:00:41 (8 months ago)	[Mon Oct 27 04:00:10.546827 2025] [security2:error] [pid 1507408:tid 140450758289088] [client 52.255 ... show more [Mon Oct 27 04:00:10.546827 2025] [security2:error] [pid 1507408:tid 140450758289088] [client 52.255.111.119:15913] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/profil/meteorologi/list-all-categories/4326-konferensi-pers/rilis-prediksi-musim-hujan-tahun-2025-2026-provinsi-jawa-timur/555562378-rilis-prediksi-musim-hujan-tahun-2025-2026-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories/4326-konferensi-pers/rilis-prediksi-musim-hujan-tahun-2025-2026-provinsi-jawa-timur/555562378-rilis- ... show less	Hacking Web App Attack
🇺🇸 Starburst SysOp Team	2025-10-14 16:42:57 (9 months ago)	Malware host (X-Forwarded-For) detected by rbl.malware.expert. RBL lookup of 119.111.255.52.rbl.malw ... show more Malware host (X-Forwarded-For) detected by rbl.malware.expert. RBL lookup of 119.111.255.52.rbl.malware.expert succeeded at REQUEST_HEADERS:x-forwarded-for. (1001000-mnz6-3) show less	Hacking
🇫🇷 MaxSmartCode	2025-10-14 03:06:29 (9 months ago)	Credential brute-force attacks on webpage.	Brute-Force SSH
🇦🇺 clapper	2025-09-22 01:11:04 (9 months ago)	(mod_security) mod_security (id:980001) triggered by 52.255.111.119 (US/United States/-): 5 in the l ... show more (mod_security) mod_security (id:980001) triggered by 52.255.111.119 (US/United States/-): 5 in the last 3600 secs; ID: Clar show less	Brute-Force Bad Web Bot

Showing 1 to 15 of 302 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2604:a880:400:d1:0:4:6c7e:e001

🇺🇸 2600:1f14:1285:4502:1e3:7cfb:32fa:2890

🇺🇸 2607:f8b0:4001:c0e::123

🇬🇧 185.247.137.24

🇺🇸 154.222.102.197

🇬🇧 87.236.176.12

🇷🇴 80.94.92.234

🇱🇹 77.90.185.248

🇬🇧 35.203.210.179

🇸🇬 18.141.147.171

🇦🇷 186.189.233.163

🇨🇳 180.153.236.16

🇫🇮 147.185.133.246

🇫🇮 147.185.133.185

🇺🇸 216.25.89.71

🇩🇪 194.164.57.119

🇵🇹 193.0.235.190

🇲🇴 182.93.7.194

🇯🇵 175.41.220.159

🇮🇳 160.187.251.155