52.231.15.100

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
58 reports
46 reporters · latest 1 year ago
ISP
Microsoft Corporation
Usage Type
Data Center/Web Hosting/Transit
ASN
AS8075
Domain Name
microsoft.com
Country
🇰🇷 Korea (the Republic of)
City
Seoul, Seoul
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

52.231.15.100 has been reported 58 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
58 from 46 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇸🇪 SkyDancer
Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blocked by SkyDancer Ai(web-X).
Hacking Brute-Force
🇫🇷 geot
GET /<<removed>>.php HTTP/1.1 GET /lock360.php HTTP/1.1 GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1
Web App Attack
🇬🇧 openstrike.co.uk
9 attacks on PHP URLs: GET /ioxi-o.php HTTP/1.1
Web App Attack
🇳🇱 homeshowdomain.nl
Auto-ban: >500 bad req/min on 2025-09-07
Hacking Web App Attack SSH
🇩🇪 Vegascosmetics
Kingcopy(AI-IDS): IP is wandering around the site and acting suspiciously.
Bad Web Bot
🇺🇸 mnsf
Too many Status 40X (13)
Brute-Force Web App Attack
🇩🇪 Phenix Info
SmallGuard.fr - Empty User Agent
Web App Attack
Anonymous
[Drupal AbuseIPDB module] Request path is blacklisted. /wp-content/plugins/hellopress/wp_filemanager.php
Web App Attack
🇫🇷 conseilgouz
ame-Direct access to plugin not allowed
Hacking
Anonymous
52.231.15.100 - - [08/Sep/2025:11:24:25 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 341 "-" "-" ...
Bad Web Bot Web App Attack
🇫🇷 pm33
Unauthorized connections HTTP 403
Web App Attack
Anonymous
wordpress-trap
Web App Attack
🇩🇪 on-com
URL scan
Brute-Force Web App Attack
🇩🇪 london2038.com
Probing for exploits 52.231.15.100 - - [08/Sep/2025:12:06:21 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 169 "-" "-" 52.231.15.100 - - [08/Sep/2025:12:06:44 +0200] "GET /ioxi-o.php HTTP/1.1" 422 0 "-" "-"
Hacking Web App Attack
🇦🇺 weblite
WP_EXPLOIT_PROBE WP_MALWARE_PROBE
Hacking Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇩 103.170.140.2
🇫🇷 212.83.166.73
🇹🇷 185.103.198.66
🇮🇩 160.191.180.105
🇫🇮 147.185.133.39
🇺🇸 129.121.115.239
🇺🇦 91.214.138.109
🇳🇱 81.19.216.74
🇧🇷 45.4.144.56
🇿🇦 41.78.201.179
🇵🇾 186.17.49.71
🇵🇱 172.69.155.176
🇵🇱 162.158.102.253
🇷🇴 92.118.39.14
🇺🇸 73.74.17.115
🇲🇾 49.125.203.167
🇪🇹 196.190.52.24
🇨🇳 123.122.34.225
🇨🇦 85.217.149.52
🇳🇱 81.19.216.96
feedback