JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.141.58.175

52.141.58.175 was found in our database!

This IP was reported 332 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.141.58.175

Whois 52.141.58.175

IP Abuse Reports for 52.141.58.175:

This IP address has been reported a total of 332 times from 189 distinct sources. 52.141.58.175 was first reported on August 15th 2026, and the most recent report was 33 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 el-brujo	2026-08-18 11:57:49 (33 minutes ago)	Cloudflare WAF: Request Path: /phpinfo.php Request Query: Host: www.elhacker.net userAgent: Mozilla ... show more Cloudflare WAF: Request Path: /phpinfo.php Request Query: Host: www.elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Action: block Source: firewallManaged ASN Description: Microsoft Corporation Country: KR Method: GET Timestamp: 2026-08-18T11:57:49Z ruleId: c2a2f414a67c409f90cccb6c5bba0215. Report generated by Cloudflare-WAF-to-AbuseIPDB. show less	Hacking SQL Injection Web App Attack
Anonymous	2026-08-18 11:09:08 (1 hour ago)	52.141.58.175 - - [18/Aug/2026:13:08:43 +0200] "GET /nine2code.php HTTP/1.1" 404 34965 "-" "Mozilla/ ... show more 52.141.58.175 - - [18/Aug/2026:13:08:43 +0200] "GET /nine2code.php HTTP/1.1" 404 34965 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.58.175 - - [18/Aug/2026:13:08:45 +0200] "GET /num.php HTTP/1.1" 404 29863 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.58.175 - - [18/Aug/2026:13:08:47 +0200] "GET /odf7udtspqtpxzyxmw2rccdefault.php HTTP/1.1" 404 29863 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.58.175 - - [18/Aug/2026:13:08:49 +0200] "GET /option.php HTTP/1.1" 404 29862 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.58.175 - - [18/Aug/2026:13:08:52 +0200] "GET /p.php HTTP/1.1" 404 29862 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chro ... show less	Web Spam Web App Attack
🇩🇪 ramazan	2026-08-18 10:58:11 (1 hour ago)	Fail2Ban: nginx-4xx \| Failures: 4 \| Log: /img/class-wp-http-client.php /in.php	Web App Attack Hacking
🇵🇱 sledzik1984	2026-08-18 10:52:40 (1 hour ago)	52.141.58.175 - - [18/Aug/2026:08:40:35 +0200] "GET /images/index.php HTTP/1.1" 404 47 "-" "Mozilla/ ... show more 52.141.58.175 - - [18/Aug/2026:08:40:35 +0200] "GET /images/index.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.58.175 - - [18/Aug/2026:12:52:37 +0200] "GET /img/class-wp-http-client.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.58.175 - - [18/Aug/2026:12:52:39 +0200] "GET /index/function.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇳🇱 CryptoYakari	2026-08-18 10:34:29 (1 hour ago)	[Tue Aug 18 13:34:24.977954 2026] [proxy_fcgi:error] [pid 783398:tid 783449] [client 52.141.58.175:0 ... show more [Tue Aug 18 13:34:24.977954 2026] [proxy_fcgi:error] [pid 783398:tid 783449] [client 52.141.58.175:0] AH01071: Got error 'Primary script unknown' [Tue Aug 18 13:34:25.307498 2026] [proxy_fcgi:error] [pid 783398:tid 783446] [client 52.141.58.175:0] AH01071: Got error 'Primary script unknown' [Tue Aug 18 13:34:25.628263 2026] [proxy_fcgi:error] [pid 783398:tid 783435] [client 52.141.58.175:0] AH01071: Got error 'Primary script unknown' ... show less	Web Spam Blog Spam Web App Attack Bad Web Bot
🇩🇪 thesimonmanuel	2026-08-18 09:39:59 (2 hours ago)	52.141.58.175 - - [18/Aug/2026:15:09:58 +0530] "GET /info.php HTTP/2.0" 403 130 "-" "Mozilla/5.0 (Wi ... show more 52.141.58.175 - - [18/Aug/2026:15:09:58 +0530] "GET /info.php HTTP/2.0" 403 130 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.141.58.175" show less	Web App Attack
🇳🇱 ConsulHosting	2026-08-18 09:21:44 (3 hours ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack
🇺🇸 peaceharbor	2026-08-18 09:15:13 (3 hours ago)	Swatter: score=81 intel=abuseipdb:confidence100(100) rule=scanner_profile recidivism=3/7d	Web App Attack Port Scan
🇹🇷 zadmind	2026-08-18 09:12:43 (3 hours ago)	Blocked by automated 404 tracking monitoring system.	Hacking Web App Attack
🇩🇪 london2038.com	2026-08-18 08:38:14 (3 hours ago)	Probing for exploits 52.141.58.175 - - [18/Aug/2026:10:38:10 +0200] "GET /ioxi-o.php HTTP/1.1" 422 0 ... show more Probing for exploits 52.141.58.175 - - [18/Aug/2026:10:38:10 +0200] "GET /ioxi-o.php HTTP/1.1" 422 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.58.175 - - [18/Aug/2026:10:38:12 +0200] "GET /k.php HTTP/1.1" 422 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Hacking Web App Attack
🇺🇸 ambor	2026-08-18 08:19:40 (4 hours ago)	L0ss Honeypot: phpinfo disclosure attempt. Path: /info.php	Web App Attack
🇩🇪 macrob	2026-08-18 07:18:59 (5 hours ago)	2026/08/18 07:18:51 [error] 3653904#3653904: 492244653 access forbidden by rule, client: 52.141.58. ... show more 2026/08/18 07:18:51 [error] 3653904#3653904: 492244653 access forbidden by rule, client: 52.141.58.175, server: binixo.mx, request: "GET /install.php HTTP/1.1", host: "binixo.mx" 2026/08/18 07:18:58 [error] 3653904#3653904: 492244653 access forbidden by rule, client: 52.141.58.175, server: binixo.mx, request: "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1", host: "binixo.mx" 2026/08/18 07:18:58 [error] 3653904#3653904: 492244653 access forbidden by rule, client: 52.141.58.175, server: binixo.mx, request: "GET /modules/mod_simplefileuploadv1.3/elements/i8hqok6nr.php HTTP/1.1", host: "binixo.mx" ... show less	Web App Attack
Anonymous	2026-08-18 06:55:10 (5 hours ago)	52.141.58.175 - - [18/Aug/2026:08:54:45 +0200] "GET /img/class-wp-http-client.php HTTP/1.1" 404 3496 ... show more 52.141.58.175 - - [18/Aug/2026:08:54:45 +0200] "GET /img/class-wp-http-client.php HTTP/1.1" 404 34964 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.58.175 - - [18/Aug/2026:08:54:48 +0200] "GET /in.php HTTP/1.1" 404 29862 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.58.175 - - [18/Aug/2026:08:54:50 +0200] "GET /inc.php HTTP/1.1" 404 29862 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.58.175 - - [18/Aug/2026:08:54:54 +0200] "GET /index/function.php HTTP/1.1" 404 29864 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.58.175 - - [18/Aug/2026:08:54:56 +0200] "GET /index4.php HTTP/1.1" 404 29862 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chr ... show less	Web Spam Web App Attack
🇩🇪 ramazan	2026-08-18 06:43:41 (5 hours ago)	Fail2Ban: nginx-4xx \| Failures: 7 \| Log: /content.php /cream1.php /css.php /css/class-wp-http-client ... show more Fail2Ban: nginx-4xx \| Failures: 7 \| Log: /content.php /cream1.php /css.php /css/class-wp-http-client.php show less	Web App Attack Hacking
🇵🇱 sledzik1984	2026-08-18 06:40:19 (5 hours ago)	52.141.58.175 - - [18/Aug/2026:04:36:14 +0200] "GET /cgi-bin/class-wp-http-client.php HTTP/1.1" 404 ... show more 52.141.58.175 - - [18/Aug/2026:04:36:14 +0200] "GET /cgi-bin/class-wp-http-client.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.58.175 - - [18/Aug/2026:04:36:16 +0200] "GET /config.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.58.175 - - [18/Aug/2026:08:40:18 +0200] "GET /css/class-wp-http-client.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack

Showing 1 to 15 of 332 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 213.177.179.24

🇺🇸 172.3.132.73

🇦🇷 149.107.240.72

🇮🇳 103.78.167.150

🇳🇱 89.21.67.135

🇺🇸 66.132.172.186

🇧🇷 45.187.33.147

🇳🇱 45.148.10.157

🇱🇰 220.247.224.226

🇺🇦 217.196.163.48

🇨🇱 201.215.30.59

🇿🇦 197.184.68.141

🇦🇷 186.23.28.233

🇧🇷 181.192.117.106

🇧🇷 179.97.24.138

🇺🇸 162.216.149.144

🇭🇰 150.109.105.121

🇫🇮 147.185.133.123

🇩🇪 139.19.117.130

🇮🇳 117.211.212.129