JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.255.111.122

52.255.111.122 was found in our database!

This IP was reported 258 times. Confidence of Abuse is 3%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	San Antonio, Texas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.255.111.122

Whois 52.255.111.122

IP Abuse Reports for 52.255.111.122:

This IP address has been reported a total of 258 times from 32 distinct sources. 52.255.111.122 was first reported on April 3rd 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 kosada.com	2026-07-07 12:02:59 (1 week ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-06-10 12:01:33 (1 month ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-04-16 16:50:50 (2 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇩🇪 SCHAPPY	2025-12-11 08:30:31 (7 months ago)	Bad bot identified by user agent	Bad Web Bot
🇦🇺 MAGIC	2025-11-20 01:08:37 (7 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇮🇩 hermawan	2025-10-26 21:00:41 (8 months ago)	[Mon Oct 27 04:00:10.542939 2025] [security2:error] [pid 1507514:tid 140450959713984] [client 52.255 ... show more [Mon Oct 27 04:00:10.542939 2025] [security2:error] [pid 1507514:tid 140450959713984] [client 52.255.111.122:18082] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prakiraan-musim/4330-prakiraan-musim-hujan/prakiraan-awal-musim-hujan/prakiraan-awal-musim-hujan-propinsi-jawa-timur/prediksi-6-bulanan-prediksi-awal-musim-hujan-tahun-2025-2026-zona-musim-di-provinsi-jawa-timur/555562425-prediksi-6-bulanan-awal-musim-hujan-tahun-2025-2026-zona-musim-di-provinsi-jawa-timur HTTP/..."] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prakiraan-musim/4330-prakir ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-10-22 16:31:52 (8 months ago)	[Wed Oct 22 23:27:33.894550 2025] [security2:error] [pid 2224654:tid 140576421734080] [client 52.255 ... show more [Wed Oct 22 23:27:33.894550 2025] [security2:error] [pid 2224654:tid 140576421734080] [client 52.255.111.122:53645] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-bulanan-tingkat-ketersediaan-air-bagi-tanaman/555560889-prakiraan-bulanan-tingkat-ketersediaan-air-bagi-tanaman-di-jawa-timur-untuk-bulan-mei-tahun-2024-update-dari-analisis-bulan-maret-tahun-2024 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-bulanan-tingkat-ketersediaan-air-bagi-tanaman/5555 ... show less	Hacking Web App Attack
🇺🇸 Starburst SysOp Team	2025-10-14 16:40:52 (9 months ago)	Malware host (X-Forwarded-For) detected by rbl.malware.expert. RBL lookup of 122.111.255.52.rbl.malw ... show more Malware host (X-Forwarded-For) detected by rbl.malware.expert. RBL lookup of 122.111.255.52.rbl.malware.expert succeeded at REQUEST_HEADERS:x-forwarded-for. (1001000-mnz6-3) show less	Hacking
🇦🇺 MAGIC	2025-10-06 02:06:28 (9 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇭🇳 unph	2025-09-18 01:42:25 (9 months ago)	Intento de acceso sospechoso en el login de WordPress	Brute-Force
🇮🇩 hermawan	2025-09-16 07:18:26 (9 months ago)	[Tue Sep 16 14:17:50.417100 2025] [security2:error] [pid 1273372:tid 140636165048000] [client 52.255 ... show more [Tue Sep 16 14:17:50.417100 2025] [security2:error] [pid 1273372:tid 140636165048000] [client 52.255.111.122:1642] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-curah-hujan-bulanan/3-bulan-ke-depan/555561304-prakiraan-bulanan-curah-hujan-bulan-november-tahun-2024-update-dari-analisis-bulan-juli-tahun-2024-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-curah-hujan-bulanan/3-bulan-ke-depan/555561304-prakiraan-bulanan-curah-hujan-bu ... show less	Hacking Web App Attack
🇩🇪 SCHAPPY	2025-09-13 17:03:45 (10 months ago)	Bad bot identified by user agent	Bad Web Bot
🇭🇳 unph	2025-09-12 03:17:11 (10 months ago)	Intento de acceso sospechoso en el login de WordPress	Brute-Force
🇺🇸 construct.net	2025-09-11 13:17:30 (10 months ago)	Triggered rate limiter [PRD-VM-WEB2a]	Bad Web Bot
🇭🇳 unph	2025-09-10 02:42:03 (10 months ago)	Intento de acceso sospechoso en el login de WordPress	Brute-Force

Showing 1 to 15 of 258 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 101.96.201.126

🇧🇷 205.210.31.154

🇧🇷 191.26.95.2

🇧🇷 190.111.129.107

🇺🇸 147.185.132.192

🇹🇼 114.37.88.229

🇬🇧 92.207.4.157

🇬🇧 193.176.29.19

🇩🇪 167.94.146.38

🇺🇸 147.185.132.72

🇯🇵 124.156.212.23

🇨🇳 117.164.191.217

🇮🇳 103.168.241.32

🇸🇬 68.183.230.3

🇩🇪 51.89.42.24

🇬🇧 35.203.210.75

🇺🇸 205.210.31.47

🇺🇸 205.210.31.6

🇨🇱 200.83.72.216

🇺🇸 195.184.76.37