JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.141.35.48

52.141.35.48 was found in our database!

This IP was reported 1,755 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.141.35.48

Whois 52.141.35.48

IP Abuse Reports for 52.141.35.48:

This IP address has been reported a total of 1,755 times from 359 distinct sources. 52.141.35.48 was first reported on April 27th 2026, and the most recent report was 12 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 ipblock.com	2026-05-15 13:26:00 (2 weeks ago)	IPBlock protected site ID [4055-d][s=07]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-05-15 13:09:53 (2 weeks ago)	Multiple WAF Violations	Web App Attack
🇩🇪 NewGastroline	2026-05-15 13:06:28 (2 weeks ago)	Malicious request blocked by CrowdSec on gastro-prod1.boreus.de	Bad Web Bot Web App Attack
🇩🇪 Hary74656	2026-05-15 11:39:35 (2 weeks ago)	[Fri May 15 13:39:27.759153 2026] [core:info] [pid 257094:tid 257280] [client 52.141.35.48:9152] AH0 ... show more [Fri May 15 13:39:27.759153 2026] [core:info] [pid 257094:tid 257280] [client 52.141.35.48:9152] AH00128: File does not exist: /home/harald/www/wp-content/admin.php ... show less	Bad Web Bot
Anonymous	2026-05-15 11:25:03 (2 weeks ago)	52.141.35.48 - - [15/May/2026:13:24:38 +0200] "GET /inputs.php HTTP/1.1" 404 4886 "-" "Mozilla/5.0 ( ... show more 52.141.35.48 - - [15/May/2026:13:24:38 +0200] "GET /inputs.php HTTP/1.1" 404 4886 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [15/May/2026:13:24:40 +0200] "GET /admin.php HTTP/1.1" 404 360 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [15/May/2026:13:24:40 +0200] "GET /goods.php HTTP/1.1" 404 360 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [15/May/2026:13:24:41 +0200] "GET /file.php HTTP/1.1" 404 360 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.141.35.48 - - [15/May/2026:13:24:41 +0200] "GET /adminfuns.php HTTP/1.1" 404 360 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.14 ... show less	DDoS Attack
Anonymous	2026-05-15 10:49:29 (2 weeks ago)	$f2bV_matches	Brute-Force Web App Attack
🇺🇸 Epimetheus	2026-05-15 09:58:55 (2 weeks ago)	Zombie network / Bot scanner detected: [GET] /sleepster/ [GET] /wp-admin/maint/about.php [GET] /wp- ... show more Zombie network / Bot scanner detected: [GET] /sleepster/ [GET] /wp-admin/maint/about.php [GET] /wp-content/uploads/de_fb_uploads/b.php [GET] /wp-admin/users.php [GET] /byp.php [GET] /wp-admin/wp-admin.php [GET] /.well-known/acme-challenge/doc.php [GET] /wp-includes/install.php [GET] /info.php [GET] /file5.php [GET] /kk.php [GET] /wp-login.php [GET] /gc.php [GET] /wp-includes/js/codemirror/ [GET] /wp-includes/pomo/about.php [GET] /m.php [GET] /wp-content/admin-header.php [GET] /nc4.php [GET] /wp-includes/customize/ [GET] /an.php [GET] /new.php [GET] /classwithtostring.phpl [GET] /radio.php [GET] /wp-admin/js/index.php [GET] /wp-admin/images/admin.php [GET] /wp-includes/rest-api/ [GET] /wp-includes/css/index.php [GET] /wp-includes/Requests/library/index.php [GET] /wp-includes/IXR/wp-login.php [GET] /wp-the.php [GET] /wp-config-sample.php [GET] /randkeyword.PhP7 [GET] /fx.php [GET] /ws.php [GET] /wp-admin/js/about.php [GET] /wp-content/uploads/2022/ [GET] /wp-includes/js/c ...(Truncated) show less	Bad Web Bot Exploited Host Web App Attack
🇩🇪 FeG Deutschland	2026-05-15 09:49:12 (2 weeks ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇩🇪 big-cloud.nl	2026-05-15 09:34:07 (2 weeks ago)	Try to access /wp-content/plugins/hellopress/wp_filemanager.php	Web App Attack
🇩🇪 macrob	2026-05-15 07:40:40 (2 weeks ago)	2026/05/15 07:40:37 [error] 1539456#1539456: 228841236 access forbidden by rule, client: 52.141.35. ... show more 2026/05/15 07:40:37 [error] 1539456#1539456: 228841236 access forbidden by rule, client: 52.141.35.48, server: finami.ph, request: "GET /wp-includes/sitemaps/providers/ HTTP/2.0", host: "finami.ph" 2026/05/15 07:40:38 [error] 1539454#1539454: 228840509 access forbidden by rule, client: 52.141.35.48, server: finami.ph, request: "GET /wp-includes/pomo/ HTTP/2.0", host: "finami.ph" 2026/05/15 07:40:38 [error] 1539454#1539454: 228843314 access forbidden by rule, client: 52.141.35.48, server: finami.ph, request: "GET /wp-includes/css/dist/widgets/ HTTP/2.0", host: "finami.ph" ... show less	Web App Attack
🇳🇱 Site.eu	2026-05-15 07:12:55 (2 weeks ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 octageeks.com	2026-05-15 04:08:33 (2 weeks ago)	Wordpress malicious attack:[octablocked]	Web App Attack
🇬🇧 consul.to	2026-05-15 02:57:49 (2 weeks ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 Mundo Bueno	2026-05-15 02:31:12 (2 weeks ago)	[ISILIA Protection v2.1] Tentative d'accès: /wp-admin/install.php \| Pays: KR \| UA: Mozilla/5.0 (Wind ... show more [ISILIA Protection v2.1] Tentative d'accès: /wp-admin/install.php \| Pays: KR \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Sa show less	Hacking Web App Attack
Anonymous	2026-05-15 01:19:36 (2 weeks ago)	Aggressive web scan	Web App Attack

Showing 46 to 60 of 1755 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 108.181.2.243

🇮🇩 202.152.201.166

🇧🇪 198.235.24.219

🇹🇼 198.235.24.80

🇭🇳 181.115.120.78

🇺🇸 172.245.106.34

🇺🇸 162.216.150.53

🇮🇳 139.59.83.32

🇨🇳 123.160.174.136

🇺🇸 104.232.79.58

🇮🇳 103.67.152.201

🇫🇷 91.231.89.226

🇮🇱 84.94.112.217

🇺🇸 74.94.234.151

🇩🇪 47.245.132.125

🇺🇸 43.159.177.40

🇬🇧 35.203.211.149

🇬🇧 35.203.211.92

🇬🇧 35.203.210.196

🇧🇬 5.188.206.46