JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

52.230.19.0

Neutral Activity

Abuse confidence score ?

0% Low Risk

97 reports

56 reporters · latest 3 years ago

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇸🇬 Singapore
City	Singapore

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

52.230.19.0 has been reported 97 times. The most recent report is from 3 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 52.230.19.0

Export CSV

This IP address has been reported a total of 97 times from 56 distinct sources. 52.230.19.0 was first reported on September 21st 2022, and the most recent report was 3 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 geot	2022-11-16 08:55:13 (3 years ago)	POST / HTTP/1.1 GET /.env HTTP/1.1	Hacking Web App Attack
🇯🇵 HeliJP	2022-11-15 10:10:34 (3 years ago)	2022-11-15 12:38:11 - Unauthorized SFTP/SSH access attempts from IP address 52.230.19.0 on port 22 ( ... show more 2022-11-15 12:38:11 - Unauthorized SFTP/SSH access attempts from IP address 52.230.19.0 on port 22 (1 daily hits). show less	FTP Brute-Force
🇦🇺 ozisp.com.au	2022-11-14 20:20:51 (3 years ago)	US_Microsoft_<33>1668475250 [1:2031502:2] ET INFO Request to Hidden Environment File [Classification ... show more US_Microsoft_<33>1668475250 [1:2031502:2] ET INFO Request to Hidden Environment File [Classification: Misc Attack] [Priority: 2] {TCP} 52.230.19.0:60474 show less	Hacking
Anonymous	2022-11-02 16:49:05 (3 years ago)		DNS Compromise DDoS Attack
🇸🇬 Sofibox Cyberwatch	2022-11-02 15:04:22 (3 years ago)	[bad_ip: 52.230.19.0 [alert_level: High Risk [inbound(1)+outbound(0): 1 [target_port: 443 [class: Mi ... show more [bad_ip: 52.230.19.0 [alert_level: High Risk [inbound(1)+outbound(0): 1 [target_port: 443 [class: Misc Attack [msg: ET INFO Request to Hidden Environment File [csf_block_status: ok-ip-block-success [blcheck_ip_score: 96.84% (6/190) [blcheck_domain: "bl.fmb.la,dnsbl.spfbl.net,cbl.abuseat.org,sbl-xbl.spamhaus.org,xbl.spamhaus.org,zen.spamhaus.org" [blcheck_comment: "RBL scanner v0.7.8 @ github.com/sofibox/blcheck" [log_suspicious_score: 21.05% [mod_security_alert: true [has_cidr24_network: false(0) [(C) Arafat Ali @ arafatx.com show less	Web App Attack
🇨🇿 lp	2022-10-31 05:37:42 (3 years ago)	Bot webscan 52.230.19.0 - - [31/Oct/2022:10:37:42 +0100] "GET /.env HTTP/1.1" 404 5287 "-" "Mozilla/ ... show more Bot webscan 52.230.19.0 - - [31/Oct/2022:10:37:42 +0100] "GET /.env HTTP/1.1" 404 5287 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Web App Attack
🇻🇳 websase.com	2022-10-31 02:54:09 (3 years ago)	ModSecurity Brute-Forcing	Web Spam Brute-Force
🇩🇪 Gwyneth Llewelyn	2022-10-31 01:33:15 (3 years ago)	52.230.19.0 - - [31/Oct/2022:05:33:11 +0000] "GET /.env HTTP/1.1" 400 650 "-" "Mozilla/5.0 (X11; Lin ... show more 52.230.19.0 - - [31/Oct/2022:05:33:11 +0000] "GET /.env HTTP/1.1" 400 650 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 2022/10/31 05:33:12 [error] 956321#956321: *169284 access forbidden by rule, client: 52.230.19.0, server: autonomy.gwynethllewelyn.net, request: "GET /.env HTTP/1.1", host: "176.9.54.246" 52.230.19.0 - - [31/Oct/2022:05:33:12 +0000] "GET /.env HTTP/1.1" 403 1178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Web App Attack
🇳🇱 Interceptor_HQ	2022-10-30 22:28:38 (3 years ago)	request_uri: /.env -- Automatic report --	Hacking Brute-Force
🇦🇺 ozisp.com.au	2022-10-29 08:27:07 (3 years ago)	US_Microsoft_<33>1667046426 [1:2031502:2] ET INFO Request to Hidden Environment File [Classification ... show more US_Microsoft_<33>1667046426 [1:2031502:2] ET INFO Request to Hidden Environment File [Classification: Misc Attack] [Priority: 2] {TCP} 52.230.19.0:51330 show less	Hacking
🇳🇱 tmiland	2022-10-29 01:07:21 (3 years ago)	(mysql) Failed MySQL authentication 52.230.19.0 (SG/Singapore/-): 1 in the last 3600 secs	Brute-Force
🇫🇷 LRNP	2022-10-29 00:43:04 (3 years ago)	_ 52.230.19.0 - - [29/Oct/2022:04:43:02 +0000] "GET /.env HTTP/1.1" 404 181 "-" "Mozilla/5.0 (X11; L ... show more _ 52.230.19.0 - - [29/Oct/2022:04:43:02 +0000] "GET /.env HTTP/1.1" 404 181 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇺🇸 xyz.rip	2022-10-28 23:11:03 (3 years ago)	WAF Violation...	Web App Attack
🇪🇪 Unwasted	2022-10-27 00:02:53 (3 years ago)	No request method on web server	Port Scan
🇨🇱 ifiguero	2022-10-26 23:34:28 (3 years ago)	Web Attack (\x00\x00\x00\x00\x00). 7d ban	Web App Attack

Showing 1 to 15 of 97 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 220.179.138.197

🇹🇷 212.253.216.240

🇬🇷 172.69.110.146

🇳🇱 143.179.24.53

🇺🇸 104.152.52.232

🇳🇱 94.154.43.138

🇧🇪 34.62.25.61

🇳🇱 34.12.180.122

🇳🇱 34.7.95.108

🇫🇷 2001:41d0:303:9d49::1

🇷🇴 193.46.255.86

🇧🇷 172.69.11.124

🇮🇹 155.185.13.49

🇺🇸 104.152.52.244

🇺🇸 104.152.52.240

🇺🇸 104.152.52.238

🇷🇴 80.94.92.128

🇮🇹 34.154.1.46

🇧🇪 34.62.189.80

🇷🇺 31.173.7.121