JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.138.1.81

52.138.1.81 was found in our database!

This IP was reported 1,238 times. Confidence of Abuse is 85%: ?

85%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.138.1.81

Whois 52.138.1.81

IP Abuse Reports for 52.138.1.81:

This IP address has been reported a total of 1,238 times from 596 distinct sources. 52.138.1.81 was first reported on July 2nd 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Rayulcifer	2026-09-01 07:01:44 (1 day ago)	[Thu Jul 02 18:52:18.704314 2026] [authz_core:error] [pid 2071688:tid 131153748473536] [client 52.13 ... show more [Thu Jul 02 18:52:18.704314 2026] [authz_core:error] [pid 2071688:tid 131153748473536] [client 52.138.1.81:4063] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php [Thu Jul 02 18:52:18.746417 2026] [authz_core:error] [pid 2071688:tid 131152731961024] [client 52.138.1.81:4063] AH01630: client denied by server configuration: proxy:http://localhost:4000/this_is_a_new_hello_world.php [Thu Jul 02 18:52:18.794931 2026] [authz_core:error] [pid 2071688:tid 131153790437056] [client 52.138.1.81:4063] AH01630: client denied by server configuration: proxy:http://localhost:4000/x.php [Thu Jul 02 18:52:18.814888 2026] [authz_core:error] [pid 2071688:tid 131153756866240] [client 52.138.1.81:4063] AH01630: client denied by server configuration: proxy:http://localhost:4000/file.php [Thu Jul 02 18:52:18.835096 2026] [authz_core:error] [pid 2071688:tid 131153782044352] [client 52.138.1.81:4063] AH01630: client denied by server conf ... show less	Brute-Force SSH
🇺🇸 Rayulcifer	2026-08-27 06:36:12 (6 days ago)	[Thu Jul 02 18:52:18.704314 2026] [authz_core:error] [pid 2071688:tid 131153748473536] [client 52.13 ... show more [Thu Jul 02 18:52:18.704314 2026] [authz_core:error] [pid 2071688:tid 131153748473536] [client 52.138.1.81:4063] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php [Thu Jul 02 18:52:18.746417 2026] [authz_core:error] [pid 2071688:tid 131152731961024] [client 52.138.1.81:4063] AH01630: client denied by server configuration: proxy:http://localhost:4000/this_is_a_new_hello_world.php [Thu Jul 02 18:52:18.794931 2026] [authz_core:error] [pid 2071688:tid 131153790437056] [client 52.138.1.81:4063] AH01630: client denied by server configuration: proxy:http://localhost:4000/x.php [Thu Jul 02 18:52:18.814888 2026] [authz_core:error] [pid 2071688:tid 131153756866240] [client 52.138.1.81:4063] AH01630: client denied by server configuration: proxy:http://localhost:4000/file.php [Thu Jul 02 18:52:18.835096 2026] [authz_core:error] [pid 2071688:tid 131153782044352] [client 52.138.1.81:4063] AH01630: client denied by server conf ... show less	Brute-Force SSH
🇬🇧 myintarweb	2026-08-15 00:08:33 (2 weeks ago)	52.138.1.81 - - [02/Jul/2026:13:32:19 +0100] 80 "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 52.138.1.81 - - [02/Jul/2026:13:32:19 +0100] 80 "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 1694 "-" "-" ... show less	Hacking Bad Web Bot Web App Attack
🇮🇳 evicky2002	2026-08-13 17:02:52 (2 weeks ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇺🇸 1cyb3rpunk	2026-08-12 14:15:45 (3 weeks ago)	SecTrace honeypot [51 events 2026-07-07–2026-07-07]. Traps: path_not_found_probe×50, wordpress_insta ... show more SecTrace honeypot [51 events 2026-07-07–2026-07-07]. Traps: path_not_found_probe×50, wordpress_install_probe×1. Kill-chain stage: recon. Geo: CA/Toronto. ASN: Microsoft Corporation. show less	Port Scan Brute-Force Bad Web Bot Web App Attack
🇨🇦 zXero	2026-08-11 12:57:56 (3 weeks ago)	Fail2Ban automatic report - jail: no-wordpress	Brute-Force SSH DDoS Attack
🇧🇬 alnaasd	2026-08-10 13:14:53 (3 weeks ago)	WAF block action triggered by rule set "Wordpress - Broken Access Control, File Inclusion" (2 occurr ... show more WAF block action triggered by rule set "Wordpress - Broken Access Control, File Inclusion" (2 occurrences observed). show less	Web App Attack Hacking
🇨🇦 zXero	2026-08-01 12:37:35 (1 month ago)	Fail2Ban automatic report - jail: no-wordpress	Brute-Force SSH DDoS Attack
🇺🇸 Rayulcifer	2026-07-30 19:51:02 (1 month ago)	[Thu Jul 02 18:52:18.704314 2026] [authz_core:error] [pid 2071688:tid 131153748473536] [client 52.13 ... show more [Thu Jul 02 18:52:18.704314 2026] [authz_core:error] [pid 2071688:tid 131153748473536] [client 52.138.1.81:4063] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php [Thu Jul 02 18:52:18.746417 2026] [authz_core:error] [pid 2071688:tid 131152731961024] [client 52.138.1.81:4063] AH01630: client denied by server configuration: proxy:http://localhost:4000/this_is_a_new_hello_world.php [Thu Jul 02 18:52:18.794931 2026] [authz_core:error] [pid 2071688:tid 131153790437056] [client 52.138.1.81:4063] AH01630: client denied by server configuration: proxy:http://localhost:4000/x.php [Thu Jul 02 18:52:18.814888 2026] [authz_core:error] [pid 2071688:tid 131153756866240] [client 52.138.1.81:4063] AH01630: client denied by server configuration: proxy:http://localhost:4000/file.php [Thu Jul 02 18:52:18.835096 2026] [authz_core:error] [pid 2071688:tid 131153782044352] [client 52.138.1.81:4063] AH01630: client denied by server conf ... show less	Brute-Force SSH
🇨🇦 zXero	2026-07-29 07:17:26 (1 month ago)	Fail2Ban automatic report - jail: no-wordpress	Brute-Force SSH DDoS Attack
🇺🇸 Rayulcifer	2026-07-29 06:40:15 (1 month ago)	[Thu Jul 02 18:52:18.704314 2026] [authz_core:error] [pid 2071688:tid 131153748473536] [client 52.13 ... show more [Thu Jul 02 18:52:18.704314 2026] [authz_core:error] [pid 2071688:tid 131153748473536] [client 52.138.1.81:4063] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php [Thu Jul 02 18:52:18.746417 2026] [authz_core:error] [pid 2071688:tid 131152731961024] [client 52.138.1.81:4063] AH01630: client denied by server configuration: proxy:http://localhost:4000/this_is_a_new_hello_world.php [Thu Jul 02 18:52:18.794931 2026] [authz_core:error] [pid 2071688:tid 131153790437056] [client 52.138.1.81:4063] AH01630: client denied by server configuration: proxy:http://localhost:4000/x.php [Thu Jul 02 18:52:18.814888 2026] [authz_core:error] [pid 2071688:tid 131153756866240] [client 52.138.1.81:4063] AH01630: client denied by server configuration: proxy:http://localhost:4000/file.php [Thu Jul 02 18:52:18.835096 2026] [authz_core:error] [pid 2071688:tid 131153782044352] [client 52.138.1.81:4063] AH01630: client denied by server conf ... show less	Brute-Force SSH
🇨🇱 SinaiCL	2026-07-22 03:55:13 (1 month ago)	WAF Multiple Hits	Bad Web Bot Web App Attack
🇨🇦 zXero	2026-07-21 12:23:41 (1 month ago)	Fail2Ban automatic report - jail: no-wordpress	Brute-Force SSH DDoS Attack
🇺🇸 Rayulcifer	2026-07-21 06:27:28 (1 month ago)	[Thu Jul 02 18:52:18.704314 2026] [authz_core:error] [pid 2071688:tid 131153748473536] [client 52.13 ... show more [Thu Jul 02 18:52:18.704314 2026] [authz_core:error] [pid 2071688:tid 131153748473536] [client 52.138.1.81:4063] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php [Thu Jul 02 18:52:18.746417 2026] [authz_core:error] [pid 2071688:tid 131152731961024] [client 52.138.1.81:4063] AH01630: client denied by server configuration: proxy:http://localhost:4000/this_is_a_new_hello_world.php [Thu Jul 02 18:52:18.794931 2026] [authz_core:error] [pid 2071688:tid 131153790437056] [client 52.138.1.81:4063] AH01630: client denied by server configuration: proxy:http://localhost:4000/x.php [Thu Jul 02 18:52:18.814888 2026] [authz_core:error] [pid 2071688:tid 131153756866240] [client 52.138.1.81:4063] AH01630: client denied by server configuration: proxy:http://localhost:4000/file.php [Thu Jul 02 18:52:18.835096 2026] [authz_core:error] [pid 2071688:tid 131153782044352] [client 52.138.1.81:4063] AH01630: client denied by server conf ... show less	Brute-Force SSH
🇩🇪 ghostwarriors	2026-07-17 03:21:14 (1 month ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 1238 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.85

🇺🇸 2a09:bac1:7680:480::501:39

🇺🇸 216.25.89.81

🇯🇵 172.217.108.210

🇧🇷 143.208.239.82

🇨🇦 143.110.213.72

🇱🇦 115.84.82.81

🇰🇷 110.14.192.20

🇭🇰 45.194.21.5

🇺🇸 24.144.90.201

🇷🇴 2.57.122.168

🇺🇸 216.25.89.78

🇺🇸 216.25.89.75

🇺🇸 195.184.76.66

🇸🇪 158.174.210.161

🇺🇸 147.135.15.197

🇺🇸 143.198.117.153

🇺🇸 98.115.222.95

🇫🇷 92.222.102.140

🇨🇦 85.217.149.58