JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

52.231.15.198

Neutral Activity

Abuse Confidence Score

0% Low Risk

62 reports

55 reporters · latest 1 year ago

ISP: Microsoft Corporation
Usage Type: Data Center/Web Hosting/Transit
ASN: AS8075
Domain Name: microsoft.com
Country: 🇰🇷 Korea (the Republic of)
City: Seoul, Seoul

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

52.231.15.198 has been reported 62 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

62 from 55 distinct reporters

First reported

September 5th 2025

Most recent report

1 year ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇪 SkyDancer	2025-09-11 20:52:51 UTC · (1 year ago)	Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blocked by SkyDancer Ai(web-X).	Hacking Brute-Force
🇭🇺 DumaNet	2025-09-07 03:32:00 UTC · (1 year ago)	Web app attack attempts, scanning for vulnerability. Date: 2025 Sep 05. 23:36:52 Source IP: 52.231.15.198 Portion of the log(s): 52.231.15.198 - [05/Sep/2025:23:35:07 +0200] "GET /menu.php HTTP/1.1" 404 153 "-" "-" 52.231.15.198 - [05/Sep/2025 ... show more Web app attack attempts, scanning for vulnerability. Date: 2025 Sep 05. 23:36:52 Source IP: 52.231.15.198 Portion of the log(s): 52.231.15.198 - [05/Sep/2025:23:35:07 +0200] "GET /menu.php HTTP/1.1" 404 153 "-" "-" 52.231.15.198 - [05/Sep/2025:23:35:07 +0200] "GET /root.php HTTP/1.1" 404 153 "-" "-" 52.231.15.198 - [05/Sep/2025:23:35:07 +0200] "GET /inputs.php HTTP/1.1" 404 153 "-" "-" 52.231.15.198 - [05/Sep/2025:23:35:06 +0200] "GET /class_api.php HTTP/1.1" 404 153 "-" "-" 52.231.15.198 - [05/Sep/2025:23:35:06 +0200] "GET /block-bindings.php HTTP/1.1" 404 153 "-" "-" 52.231.15.198 - [05/Sep/2025:23:35:06 +0200] "GET /theme.php HTTP/1.1" 404 153 "-" "-" 52.231.15.198 - [05/Sep/2025:23:35:06 +0200] "GET /config.php HTTP/1.1" 404 153 "-" "-" 52.231.15.198 - [05/Sep/2025:23:35:05 +0200] "GET /config.php7 HTTP/1.1" 404 153 "-" "-" 52.231.15.198 - [05/Sep/2025:23:35:05 +0200] "GET /wp-contentt.php HTTP/1.1" 404 153 "-" "-" 52.231.15.198 - [05/Sep/2025:23:35:05 +0200] "GET /install.php HTTP/1.1" 404 show less	Web App Attack
🇭🇺 DumaNet	2025-09-07 02:51:00 UTC · (1 year ago)	Web app attack attempts, scanning for vulnerability. Date: 2025 Sep 05. 20:57:26 Source IP: 52.231.15.198 Portion of the log(s): 52.231.15.198 - [05/Sep/2025:20:57:25 +0200] "GET /post.php HTTP/1.1" 404 153 "-" "-" 52.231.15.198 - [05/Sep/2025 ... show more Web app attack attempts, scanning for vulnerability. Date: 2025 Sep 05. 20:57:26 Source IP: 52.231.15.198 Portion of the log(s): 52.231.15.198 - [05/Sep/2025:20:57:25 +0200] "GET /post.php HTTP/1.1" 404 153 "-" "-" 52.231.15.198 - [05/Sep/2025:20:57:25 +0200] "GET /autoload_classmap.php HTTP/1.1" 404 153 "-" "-" 52.231.15.198 - [05/Sep/2025:20:57:25 +0200] "GET /k.php HTTP/1.1" 404 153 "-" "-" 52.231.15.198 - [05/Sep/2025:20:57:25 +0200] "GET /load.php HTTP/1.1" 404 153 "-" "-" 52.231.15.198 - [05/Sep/2025:20:57:24 +0200] "GET /ioxi-o.php HTTP/1.1" 404 153 "-" "-" 52.231.15.198 - [05/Sep/2025:20:57:24 +0200] "GET /sitemaps.php HTTP/1.1" 404 153 "-" "-" 52.231.15.198 - [05/Sep/2025:20:57:24 +0200] "GET /file5.php HTTP/1.1" 404 153 "-" "-" 52.231.15.198 - [05/Sep/2025:20:57:24 +0200] "GET /anonse/lock360.php HTTP/1.1" 404 153 "-" "-" 52.231.15.198 - [05/Sep/2025:20:57:24 +0200] "GET /lock360.php HTTP/1.1" 404 153 "-" "-" 52.231.15.198 - [05/Sep/2025:20:57:23 +0200] "GET /ab.php HTTP/1.1" 404 show less	Web App Attack
🇨🇳 ThreatBook.io	2025-09-06 23:57:28 UTC · (1 year ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/52.231.15.198 2025-09-06 05:59:08 /a.php 2025-09-06 05:59:10 /sitemaps.php 2025-09-06 05:59:09 /lock360.php 2025-09-06 05:59:09 /file5.php 2025-09-06 05:59:08 /WSO.php 2025 ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/52.231.15.198 2025-09-06 05:59:08 /a.php 2025-09-06 05:59:10 /sitemaps.php 2025-09-06 05:59:09 /lock360.php 2025-09-06 05:59:09 /file5.php 2025-09-06 05:59:08 /WSO.php 2025-09-06 05:59:08 /aa.php 2025-09-06 05:59:08 /aaa.php 2025-09-06 05:59:09 /ab.php 2025-09-06 05:59:09 /anonse/lock360.php show less	Web App Attack
🇳🇱 BlueWire Hosting	2025-09-06 04:10:12 UTC · (1 year ago)	Probing for Wordpress vulnerabilities	Bad Web Bot Web App Attack
🇺🇸 octageeks.com	2025-09-06 04:07:32 UTC · (1 year ago)	Wordpress malicious attack:[octablocked]	Web App Attack
🇲🇾 Rizzy	2025-09-06 03:37:29 UTC · (1 year ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇩🇪 LRob	2025-09-06 03:15:52 UTC · (1 year ago)	Repeated 404 errors, blocked by Fail2ban in custom-404 jail	Bad Web Bot
🇺🇸 antlac1	2025-09-06 02:56:22 UTC · (1 year ago)	crowdsecurity/http-probing	Brute-Force Web App Attack
🇳🇱 ParaBug	2025-09-06 01:29:40 UTC · (1 year ago)	52.231.15.198 - - [06/Sep/2025:03:29:40 +0200] "GET /WSO.php HTTP/1.1" 301 443 "-" "-" ...	Phishing Brute-Force Web App Attack
🇺🇸 masterguru	2025-09-06 01:06:44 UTC · (1 year ago)	Too much 404 requests in 1 hour. Operator GE matched 50 at IP:block_script. (44020-124)	Hacking
🇳🇱 Site.eu	2025-09-06 00:44:21 UTC · (1 year ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 Phenix Info	2025-09-06 00:32:07 UTC · (1 year ago)	SmallGuard.fr/Prestashop Empty User Agent	Web App Attack
🇩🇪 Hazzard	2025-09-06 00:26:50 UTC · (1 year ago)	(apache-scanners) Failed apache-scanners trigger with match [redacted])	Port Scan
🇳🇱 rroethof	2025-09-06 00:10:43 UTC · (1 year ago)	(XMLRPC) WP XMLPRC Attack 52.231.15.198 (KR/South Korea/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_CUSTOMTRIGGER; Logs: 52.231.15.198 - - [06/Sep/2025:01:39:32 +0200] "GET /xmlrpc.php HTTP/1.1" 403 191 "-" "-" 52.231.15.198 - - ... show more (XMLRPC) WP XMLPRC Attack 52.231.15.198 (KR/South Korea/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_CUSTOMTRIGGER; Logs: 52.231.15.198 - - [06/Sep/2025:01:39:32 +0200] "GET /xmlrpc.php HTTP/1.1" 403 191 "-" "-" 52.231.15.198 - - [06/Sep/2025:01:39:32 +0200] "GET /xmlrpc.php0 HTTP/1.1" 403 191 "-" "-" 52.231.15.198 - - [06/Sep/2025:02:10:39 +0200] "GET /xmlrpc.php HTTP/1.1" 301 453 "-" "-" 52.231.15.198 - - [06/Sep/2025:02:10:40 +0200] "GET /xmlrpc.php HTTP/1.1" 403 220 "-" "-" 52.231.15.198 - - [06/Sep/2025:02:10:40 +0200] "GET /xmlrpc.php0 HTTP/1.1" 301 455 "-" "-" show less	Spoofing Brute-Force Bad Web Bot Web App Attack SSH

Showing 1 to 15 of 62 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇷🇴 193.32.162.84

🇺🇸 170.168.96.159

🇭🇰 165.154.43.180

🇮🇳 122.183.32.191

🇫🇷 91.231.89.138

🇺🇸 72.63.22.48

🇿🇦 4.221.162.168

🇹🇭 203.154.78.232

🇧🇷 200.50.219.173

🇺🇸 161.35.111.129

🇮🇳 152.59.55.223

🇮🇳 152.57.237.48

🇺🇸 142.93.206.207

🇮🇳 106.219.146.176

🇮🇳 103.187.158.180

🇺🇸 71.27.86.44

🇺🇸 66.228.53.204

🇮🇳 49.37.159.195

🇨🇳 39.107.136.130

🇺🇸 216.25.90.81