JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.230.10.153

52.230.10.153 was found in our database!

This IP was reported 51 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.230.10.153

Whois 52.230.10.153

IP Abuse Reports for 52.230.10.153:

This IP address has been reported a total of 51 times from 47 distinct sources. 52.230.10.153 was first reported on September 9th 2025, and the most recent report was 10 months ago.

Old Reports: The most recent abuse report for this IP address is from 10 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇭🇺 DumaNet	2025-09-11 07:09:00 (10 months ago)	Web app attack attempts, scanning for vulnerability. Date: 2025 Sep 09. 19:40:52 Source IP: 52.230 ... show more Web app attack attempts, scanning for vulnerability. Date: 2025 Sep 09. 19:40:52 Source IP: 52.230.10.153 Portion of the log(s): 52.230.10.153 - - [09/Sep/2025:19:38:51 +0200] "GET /public/new2.php HTTP/1.1" 404 153 "-" "-" 52.230.10.153 - - [09/Sep/2025:19:38:51 +0200] "GET /ker.php HTTP/1.1" 404 153 "-" "-" 52.230.10.153 - - [09/Sep/2025:19:38:50 +0200] "GET /log.php HTTP/1.1" 404 153 "-" "-" 52.230.10.153 - - [09/Sep/2025:19:38:50 +0200] "GET /shop.php HTTP/1.1" 404 153 "-" "-" 52.230.10.153 - - [09/Sep/2025:19:38:50 +0200] "GET /gul.php HTTP/1.1" 404 153 "-" "-" 52.230.10.153 - - [09/Sep/2025:19:38:50 +0200] "GET /nbr.php HTTP/1.1" 404 153 "-" "-" 52.230.10.153 - - [09/Sep/2025:19:38:50 +0200] "GET /suy.php HTTP/1.1" 404 153 "-" "-" 52.230.10.153 - - [09/Sep/2025:19:38:50 +0200] "GET /efa4f.php HTTP/1.1" 404 153 "-" "-" 52.230.10.153 - - [09/Sep/2025:19:38:50 +0200] "GET /c451f.php HTTP/1.1" 404 153 "-" "-" 52.230.10.153 - - [09/Sep/2025:19:38:49 +0200] "GET /wrt.php HTTP/1.1" 404 153 show less	Web App Attack
🇺🇸 drodrig	2025-09-10 07:00:33 (10 months ago)	CrowdSec triggered: %!s(*string=0xc00668f180) (0 events)	Brute-Force
🇺🇸 webehostin.com	2025-09-10 06:16:40 (10 months ago)	Too Many Connections Or General Abuse	DDoS Attack Brute-Force
🇺🇸 octageeks.com	2025-09-10 04:07:00 (10 months ago)	Wordpress malicious attack:[octa404]	Web App Attack
🇩🇪 SCHAPPY	2025-09-09 20:28:47 (10 months ago)	Brute-force attack to non-existent web resources, HTTP code 404.	Brute-Force Web App Attack
🇨🇭 Mario Bretscher	2025-09-09 20:18:03 (10 months ago)	[Tue Sep 09 22:18:01.470355 2025] [php:error] [pid 375169] [client 52.230.10.153:7833] script '/var/ ... show more [Tue Sep 09 22:18:01.470355 2025] [php:error] [pid 375169] [client 52.230.10.153:7833] script '/var/www/html/tarc.php' not found or unable to stat [Tue Sep 09 22:18:01.630258 2025] [php:error] [pid 375169] [client 52.230.10.153:7833] script '/var/www/html/ed35f.php' not found or unable to stat [Tue Sep 09 22:18:01.792179 2025] [php:error] [pid 375169] [client 52.230.10.153:7833] script '/var/www/html/ula.php' not found or unable to stat ... show less	Web App Attack
Anonymous	2025-09-09 19:20:30 (10 months ago)	Probing for Open Source CMS Components	Hacking Brute-Force
Anonymous	2025-09-09 19:02:09 (10 months ago)	[Tue Sep 09 21:02:08.292513 2025] [php7:error] [pid 29406] [client 52.230.10.153:9086] script '/var/ ... show more [Tue Sep 09 21:02:08.292513 2025] [php7:error] [pid 29406] [client 52.230.10.153:9086] script '/var/www/sites/default/tarc.php' not found or unable to stat [Tue Sep 09 21:02:08.452200 2025] [php7:error] [pid 29406] [client 52.230.10.153:9086] script '/var/www/sites/default/ed35f.php' not found or unable to stat [Tue Sep 09 21:02:08.610352 2025] [php7:error] [pid 29406] [client 52.230.10.153:9086] script '/var/www/sites/default/ula.php' not found or unable to stat ... show less	Brute-Force Web App Attack
🇦🇺 advena	2025-09-09 18:46:25 (10 months ago)	52.230.10.153 (AS8075 MICROSOFT-CORP-MSN-AS-BLOCK) was intercepted at 2025-09-09T18:31:40Z after vio ... show more 52.230.10.153 (AS8075 MICROSOFT-CORP-MSN-AS-BLOCK) was intercepted at 2025-09-09T18:31:40Z after violating WAF directive: 874a3e315c344b1281ad4f00046aab6f. Pre-cautionary/corrective action applied: managed_challenge. show less	Web Spam Hacking Brute-Force Web App Attack
🇬🇧 SecondEdge	2025-09-09 18:17:31 (10 months ago)	A web attack was detected from 52.230.10.153 (Singapore) against dummy.second-edge.com (Wordpress Ad ... show more A web attack was detected from 52.230.10.153 (Singapore) against dummy.second-edge.com (Wordpress Admin) over 10s. show less	Web App Attack
🇺🇸 Eric Bellomo	2025-09-09 18:09:18 (10 months ago)	52.230.10.153 - - [09/Sep/2025:18:09:16 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 52.230.10.153 - - [09/Sep/2025:18:09:16 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 13 52.230.10.153 - - [09/Sep/2025:18:09:17 +0000] "GET /tarc.php HTTP/1.1" 403 13 52.230.10.153 - - [09/Sep/2025:18:09:17 +0000] "GET /ed35f.php HTTP/1.1" 403 13 52.230.10.153 - - [09/Sep/2025:18:09:18 +0000] "GET /ula.php HTTP/1.1" 403 13 ... show less	Port Scan Bad Web Bot
🇺🇸 rsa	2025-09-09 18:01:00 (10 months ago)	GET /public/new2.php HTTP/1.1	DDoS Attack Hacking Brute-Force Exploited Host Web App Attack
Anonymous	2025-09-09 17:54:55 (10 months ago)	attempts to hack passwords	Brute-Force Web App Attack
🇫🇮 as211431.net	2025-09-09 17:47:03 (10 months ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /tua.php UA: Empty string This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇮🇩 Burayot	2025-09-09 17:45:09 (10 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 52.230.10.153 (SG/Singapore/-): 2 i ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 52.230.10.153 (SG/Singapore/-): 2 in the last 3600 secs show less	Web App Attack

Showing 1 to 15 of 51 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 172.111.97.70

🇵🇰 144.48.135.2

🇹🇷 85.105.255.56

🇦🇷 64.76.8.21

🇫🇷 51.75.129.178

🇹🇷 92.44.25.111

🇸🇪 89.233.194.35

🇨🇦 51.222.168.48

🇳🇱 45.156.128.103

🇳🇱 45.148.10.152

🇵🇰 39.34.188.84

🇻🇳 157.66.47.83

🇺🇸 147.185.132.12

🇷🇴 92.118.39.77

🇩🇪 69.5.169.58

🇳🇿 60.234.137.215

🇨🇱 45.166.147.237

🇩🇪 43.228.157.62

🇳🇱 185.226.197.33

🇮🇳 182.95.123.102