JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.230.89.71

52.230.89.71 was found in our database!

This IP was reported 486 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.230.89.71

Whois 52.230.89.71

IP Abuse Reports for 52.230.89.71:

This IP address has been reported a total of 486 times from 240 distinct sources. 52.230.89.71 was first reported on December 30th 2025, and the most recent report was 5 months ago.

Old Reports: The most recent abuse report for this IP address is from 5 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 John Critchley	2026-01-11 19:11:12 (5 months ago)	Automated ban for 52.230.89.71 after 5+ hits.	Brute-Force Web App Attack
🇺🇸 bazter.pro	2026-01-09 22:26:36 (5 months ago)	Auto-Ban [2026-01-10 00:26:29]: CRITICAL: Sensitive files (32) [Paths: 73] \| Details: Sensitive file ... show more Auto-Ban [2026-01-10 00:26:29]: CRITICAL: Sensitive files (32) [Paths: 73] \| Details: Sensitive files/paths: /admin.php, /admin-header.php, /adminfuns.php, /alfashell.php, /shell.php \| 404 errors (140): /0.php, /404.php, /13.php, /gel4y.php, /fx.php, /file.php, /wp-trackback.php, /favicon.php, /wp-admin.php, /a.php (and 60 more) \| 403 errors (16): /admin.php, /admin-header.php, /shell.php, /wp-admin.php, /alfashell.php, /adminfuns.php, /wso.php, /xmlrpc.php \| Other paths: /index.php, / show less	Hacking Web App Attack
🇳🇱 JCB	2026-01-07 14:10:00 (5 months ago)	52.230.89.71 - - [07/Jan/2026:02:34:11 +0200] "GET /wp-admin/network/ HTTP/1.1" 404 236 "https://www ... show more 52.230.89.71 - - [07/Jan/2026:02:34:11 +0200] "GET /wp-admin/network/ HTTP/1.1" 404 236 "https://www.google.de/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 52.230.89.71 - - [07/Jan/2026:02:34:11 +0200] "GET /wp-content/ HTTP/1.1" 404 236 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" ... show less	Hacking Web App Attack
Anonymous	2026-01-07 10:21:56 (5 months ago)	FortiWeb WAF: 68 attacks detected. Threat Score: 23400. Types: Client Management(34), GEO IP(34). Or ... show more FortiWeb WAF: 68 attacks detected. Threat Score: 23400. Types: Client Management(34), GEO IP(34). Origin: Singapore. show less	Web App Attack
🇩🇪 Viveronese	2026-01-07 07:48:09 (5 months ago)	HTTP vulnerability scanning	Web App Attack
🇫🇷 Quarks Solutions	2026-01-07 07:31:48 (5 months ago)	crowdsecurity/http-admin-interface-probing	Hacking Web App Attack
🇩🇪 ps-center	2026-01-07 06:16:43 (5 months ago)	C1: Web Attack GET //wp-includes/fonts/	Web Spam Hacking Bad Web Bot Web App Attack
Anonymous	2026-01-07 05:49:33 (5 months ago)	52.230.89.71 - - [07/Jan/2026:06:44:34 +0100] "GET /0.php HTTP/1.1" 404 451 "https://www.yahoo.com/" ... show more 52.230.89.71 - - [07/Jan/2026:06:44:34 +0100] "GET /0.php HTTP/1.1" 404 451 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 52.230.89.71 - - [07/Jan/2026:06:44:34 +0100] "GET /1.php HTTP/1.1" 404 451 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 52.230.89.71 - - [07/Jan/2026:06:44:34 +0100] "GET /2.php HTTP/1.1" 404 451 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 52.230.89.71 - - [07/Jan/2026:06:44:34 +0100] "GET /12.php HTTP/1.1" 404 451 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 52.230.89.71 - - [07/Jan/2026:06:44:34 +0100] "GET /13.php HTTP/1.1" 404 4 ... show less	DDoS Attack
🇺🇸 ipblock.com	2026-01-07 05:13:00 (5 months ago)	IPBlock protected site ID [3192-af][s=06]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
Anonymous	2026-01-07 04:38:16 (5 months ago)	52.230.89.71 - - [07/Jan/2026:04:38:15 +0000] "GET //wp-includes/fonts/ HTTP/1.1" 302 413 "https://w ... show more 52.230.89.71 - - [07/Jan/2026:04:38:15 +0000] "GET //wp-includes/fonts/ HTTP/1.1" 302 413 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇺🇸 chrisj	2026-01-07 04:31:29 (5 months ago)	[Wed Jan 07 04:31:27.753121 2026] [proxy_fcgi:error] [pid 1138447:tid 1138447] [client 52.230.89.71: ... show more [Wed Jan 07 04:31:27.753121 2026] [proxy_fcgi:error] [pid 1138447:tid 1138447] [client 52.230.89.71:9497] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/ [Wed Jan 07 04:31:28.189396 2026] [proxy_fcgi:error] [pid 1138447:tid 1138447] [client 52.230.89.71:9497] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/ [Wed Jan 07 04:31:28.619090 2026] [proxy_fcgi:error] [pid 1138447:tid 1138447] [client 52.230.89.71:9497] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/ ... show less	Brute-Force
🇩🇪 jasperedv.de	2026-01-07 04:03:35 (5 months ago)	Apache Login - Brutforcing	Brute-Force Web App Attack
🇳🇱 Site.eu	2026-01-07 04:02:18 (5 months ago)	Excessive 404/403 errors	Brute-Force
🇺🇸 Penny Packer	2026-01-07 03:32:45 (5 months ago)	Fail2Ban apache-404	Web App Attack
Anonymous	2026-01-07 02:27:28 (5 months ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack

Showing 1 to 15 of 486 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇪 165.154.12.139

🇺🇸 143.198.69.160

🇨🇳 122.97.209.248

🇰🇷 121.165.36.99

🇰🇷 119.207.83.89

🇨🇳 112.94.252.208

🇺🇸 91.230.168.14

🇧🇬 79.124.62.134

🇫🇷 51.178.215.45

🇱🇹 45.227.254.170

🇳🇱 45.148.10.157

🇫🇷 45.81.243.62

🇨🇳 220.202.112.19

🇨🇳 182.119.227.64

🇳🇱 176.65.139.215

🇺🇸 170.106.174.205

🇺🇸 162.216.150.125

🇨🇳 122.51.73.24

🇰🇷 121.183.240.55

🇨🇳 120.48.80.70