JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.139.36.144

52.139.36.144 was found in our database!

This IP was reported 1,163 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.139.36.144

Whois 52.139.36.144

IP Abuse Reports for 52.139.36.144:

This IP address has been reported a total of 1,163 times from 577 distinct sources. 52.139.36.144 was first reported on July 20th 2026, and the most recent report was 39 seconds ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 sandap1	2026-07-26 10:10:03 (39 seconds ago)	Blocked by os-abuseipdb; 4 hits, proto=tcp, ports=80,src_ip=52.139.36.144	Port Scan Hacking
🇵🇫 www.gregorymariani.com	2026-07-26 10:02:42 (8 minutes ago)	52.139.36.144 - - [26/Jul/2026:10:02:36 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 52.139.36.144 - - [26/Jul/2026:10:02:36 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 7571 "-" "-" 403 0.001 [default-cv-service-80] [] 10.244.255.73:3000 7571 0.002 404 dad46f1152f94766506493ee0a61e020 52.139.36.144 - - [26/Jul/2026:10:02:37 +0000] "GET /wp-config-sample.php HTTP/1.1" 404 7571 "-" "-" 375 0.001 [default-cv-service-80] [] 10.244.255.73:3000 7571 0.001 404 57a9c4413b93b0ccb8d196f76e6b3cd1 52.139.36.144 - - [26/Jul/2026:10:02:40 +0000] "GET /wp-content/a.php HTTP/1.1" 404 7571 "-" "-" 371 0.001 [default-cv-service-80] [] 10.244.255.73:3000 7571 0.001 404 5d846de2294503b1e29cc7dd8cccc6c9 52.139.36.144 - - [26/Jul/2026:10:02:41 +0000] "GET //wp-includes/assets/ HTTP/1.1" 404 7571 "-" "-" 375 0.000 [default-cv-service-80] [] 10.244.255.73:3000 7571 0.001 404 50bb1f1c5b0ceb901a01c0eb6ead7071 52.139.36.144 - - [26/Jul/2026:10:02:41 +0000] "GET /wp-content/plugins/admin.php HTTP/1.1" 404 7571 "-" "-" 383 0.001 [default-cv-service-80] [] 10.244.255 ... show less	Web App Attack
🇺🇸 Charlesiv	2026-07-26 10:00:12 (10 minutes ago)	Triggered Cloudflare WAF (botFight) from CA. Action taken: MANAGED_CHALLENGE ASN: 8075 (Microsoft Co ... show more Triggered Cloudflare WAF (botFight) from CA. Action taken: MANAGED_CHALLENGE ASN: 8075 (Microsoft Corporation) Protocol: HTTP/1.1 (GET method) Endpoint: /ifrea.php Timestamp: 2026-07-26T09:43:23Z Ray ID: a21275b3bbc5ebbd UA: Empty string show less	Bad Web Bot
🇨🇿 ptlab	2026-07-26 10:00:04 (10 minutes ago)	Detected forbidden path/plugin attack from WP-host.	Hacking Web App Attack
🇺🇸 Rip	2026-07-26 09:46:38 (24 minutes ago)	WordPress fingerprinting and attack surface probing	Port Scan Web App Attack
Anonymous	2026-07-26 09:43:45 (26 minutes ago)	[Sun Jul 26 04:43:40.468911 2026] [proxy_fcgi:error] [pid 3559671:tid 3559671] [client 52.139.36.144 ... show more [Sun Jul 26 04:43:40.468911 2026] [proxy_fcgi:error] [pid 3559671:tid 3559671] [client 52.139.36.144:51789] AH01071: Got error 'Primary script unknown' [Sun Jul 26 04:43:40.633363 2026] [proxy_fcgi:error] [pid 3537754:tid 3537754] [client 52.139.36.144:56264] AH01071: Got error 'Primary script unknown' [Sun Jul 26 04:43:40.703178 2026] [proxy_fcgi:error] [pid 3537754:tid 3537754] [client 52.139.36.144:56264] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇺🇸 paulo.apoloni	2026-07-26 09:42:34 (28 minutes ago)	52.139.36.144 - - [26/Jul/2026:06:42:33 -0300] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 52.139.36.144 - - [26/Jul/2026:06:42:33 -0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 146 "-" "-" 52.139.36.144 - - [26/Jul/2026:06:42:33 -0300] "GET /wp-content/a.php HTTP/1.1" 404 146 "-" "-" 52.139.36.144 - - [26/Jul/2026:06:42:33 -0300] "GET /wp-content/plugins/admin.php HTTP/1.1" 404 146 "-" "-" 52.139.36.144 - - [26/Jul/2026:06:42:34 -0300] "GET /wp-content/uploads/ HTTP/1.1" 404 146 "-" "-" 52.139.36.144 - - [26/Jul/2026:06:42:34 -0300] "GET /wp-content.php HTTP/1.1" 404 146 "-" "-" ... show less	Web App Attack
🇨🇿 Prcek	2026-07-26 09:35:36 (35 minutes ago)	PortScan:HOST=52.139.36.144,DPORTS=80,443	Port Scan
🇦🇺 Klaverstyn	2026-07-26 09:33:05 (37 minutes ago)	Repeated 403 Forbidden responses	Web App Attack
🇩🇪 gamingkante.xyz	2026-07-26 09:30:32 (40 minutes ago)	[Sun Jul 26 11:20:24.903150 2026] [php:error] [pid 3435810:tid 3435810] [client 52.139.36.144:47985] ... show more [Sun Jul 26 11:20:24.903150 2026] [php:error] [pid 3435810:tid 3435810] [client 52.139.36.144:47985] script '/var/www/html/web/security.php' not found or unable to stat [Sun Jul 26 11:30:30.762272 2026] [php:error] [pid 3685059:tid 3685059] [client 52.139.36.144:47924] script '/var/www/html/web/mac.php' not found or unable to stat [Sun Jul 26 11:30:31.380148 2026] [php:error] [pid 3685059:tid 3685059] [client 52.139.36.144:47924] script '/var/www/html/web/jpg.php' not found or unable to stat [Sun Jul 26 11:30:31.583107 2026] [php:error] [pid 3685059:tid 3685059] [client 52.139.36.144:47924] script '/var/www/html/web/xstelth.php' not found or unable to stat [Sun Jul 26 11:30:31.784032 2026] [php:error] [pid 3685059:tid 3685059] [client 52.139.36.144:47924] script '/var/www/html/web/option.php' not found or unable to stat [Sun Jul 26 11:30:31.987478 2026] [php:error] [pid 3685059:tid 3685059] [client 52.139.36.144:47924] script '/var/www/html/web/waf.php' not found or unable to stat ... show less	Web App Attack
🇫🇮 Christopher Hughes	2026-07-26 09:23:39 (47 minutes ago)	[Sun Jul 26 10:23:37.626886 2026] [proxy_fcgi:error] [pid 2227887:tid 139826552632896] [client 52.13 ... show more [Sun Jul 26 10:23:37.626886 2026] [proxy_fcgi:error] [pid 2227887:tid 139826552632896] [client 52.139.36.144:58002] AH01071: Got error 'Primary script unknown' [Sun Jul 26 10:23:37.859539 2026] [proxy_fcgi:error] [pid 2227887:tid 139825009129024] [client 52.139.36.144:58002] AH01071: Got error 'Primary script unknown' [Sun Jul 26 10:23:38.088542 2026] [proxy_fcgi:error] [pid 2227887:tid 139826384844352] [client 52.139.36.144:58002] AH01071: Got error 'Primary script unknown' [Sun Jul 26 10:23:38.323281 2026] [proxy_fcgi:error] [pid 2227887:tid 139826510669376] [client 52.139.36.144:58002] AH01071: Got error 'Primary script unknown' [Sun Jul 26 10:23:39.009401 2026] [proxy_fcgi:error] [pid 2227887:tid 139826418415168] [client 52.139.36.144:58002] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇫🇮 NoaQT	2026-07-26 09:22:49 (47 minutes ago)	2026-07-26T09:22:48.303822+00:00 ingress-1 haproxy[265]: 52.139.36.144:64495 [26/Jul/2026:09:22:48.3 ... show more 2026-07-26T09:22:48.303822+00:00 ingress-1 haproxy[265]: 52.139.36.144:64495 [26/Jul/2026:09:22:48.302] https_in https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 45/45/0/0/0 0/0 "GET /ls.php HTTP/1.1" 2026-07-26T09:22:48.420607+00:00 ingress-1 haproxy[265]: 52.139.36.144:64495 [26/Jul/2026:09:22:48.419] https_in https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 45/45/0/0/0 0/0 "GET /backd00rshit.php HTTP/1.1" 2026-07-26T09:22:48.535615+00:00 ingress-1 haproxy[265]: 52.139.36.144:64495 [26/Jul/2026:09:22:48.535] https_in https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 45/45/0/0/0 0/0 "GET /fx.php HTTP/1.1" 2026-07-26T09:22:48.649080+00:00 ingress-1 haproxy[265]: 52.139.36.144:64495 [26/Jul/2026:09:22:48.648] https_in https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 45/45/0/0/0 0/0 "GET /bgymj.php HTTP/1.1" 2026-07-26T09:22:48.762327+00:00 ingress-1 haproxy[265]: 52.139.36.144:64495 [26/Jul/2026:09:22:48.761] https_in https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 45/45/0/0/0 0/0 "GET /mosty.php ... show less	DDoS Attack
🇩🇪 jasperedv.de	2026-07-26 09:18:06 (52 minutes ago)	Apache Login - Brutforcing	Web App Attack Brute-Force
🇩🇪 gamingkante.xyz	2026-07-26 09:10:17 (1 hour ago)	[Sun Jul 26 11:10:16.238262 2026] [php:error] [pid 3684378:tid 3684378] [client 52.139.36.144:47891] ... show more [Sun Jul 26 11:10:16.238262 2026] [php:error] [pid 3684378:tid 3684378] [client 52.139.36.144:47891] script '/var/www/html/web/this_is_a_new_hello_world.php' not found or unable to stat [Sun Jul 26 11:10:16.447506 2026] [php:error] [pid 3684378:tid 3684378] [client 52.139.36.144:47891] script '/var/www/html/web/wp-config-sample.php' not found or unable to stat [Sun Jul 26 11:10:16.658639 2026] [php:error] [pid 3684378:tid 3684378] [client 52.139.36.144:47891] script '/var/www/html/web/\xe2\x98\xbaqishi.php' not found or unable to stat [Sun Jul 26 11:10:16.867956 2026] [php:error] [pid 3684378:tid 3684378] [client 52.139.36.144:47891] script '/var/www/html/web/trusj18.php' not found or unable to stat [Sun Jul 26 11:10:17.077418 2026] [php:error] [pid 3684378:tid 3684378] [client 52.139.36.144:47891] script '/var/www/html/web/trusj15.php' not found or unable to stat [Sun Jul 26 11:10:17.298039 2026] [php:error] [pid 3684378:tid 3684378] [client 52.139.36.144:47891] script '/var/www/html/ ... show less	Web App Attack
🇩🇪 hchristo	2026-07-26 09:05:04 (1 hour ago)	[Sun Jul 26 11:05:03.488149 2026] [proxy_fcgi:error] [pid 22720:tid 22815] [client 52.139.36.144:151 ... show more [Sun Jul 26 11:05:03.488149 2026] [proxy_fcgi:error] [pid 22720:tid 22815] [client 52.139.36.144:15126] AH01071: Got error 'Primary script unknown' [Sun Jul 26 11:05:03.697709 2026] [proxy_fcgi:error] [pid 22720:tid 22802] [client 52.139.36.144:15126] AH01071: Got error 'Primary script unknown' [Sun Jul 26 11:05:03.903387 2026] [proxy_fcgi:error] [pid 22720:tid 22794] [client 52.139.36.144:15126] AH01071: Got error 'Primary script unknown' [Sun Jul 26 11:05:04.111247 2026] [proxy_fcgi:error] [pid 22720:tid 22810] [client 52.139.36.144:15126] AH01071: Got error 'Primary script unknown' [Sun Jul 26 11:05:04.314657 2026] [proxy_fcgi:error] [pid 22720:tid 22774] [client 52.139.36.144:15126] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force

Showing 1 to 15 of 1163 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇭 134.236.18.147

🇺🇸 107.20.25.33

🇺🇸 66.132.186.213

🇸🇰 46.229.233.132

🇳🇬 152.32.141.2

🇸🇪 146.70.52.206

🇱🇹 141.98.11.11

🇳🇬 102.89.23.201

🇨🇦 57.134.136.41

🇺🇸 43.162.105.23

🇧🇷 201.71.45.220

🇺🇸 172.121.159.112

🇺🇸 154.83.175.218

🇷🇺 95.215.0.144

🇫🇷 85.217.140.47

🇲🇦 81.192.46.32

🇮🇹 57.131.50.86

🇦🇺 45.133.6.75

🇺🇸 34.173.127.233

🇺🇸 34.138.135.178