52.231.15.54

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
24 reports
22 reporters · latest 1 year ago
ISP
Microsoft Corporation
Usage Type
Data Center/Web Hosting/Transit
ASN
AS8075
Domain Name
microsoft.com
Country
🇰🇷 Korea (the Republic of)
City
Seoul, Seoul
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

52.231.15.54 has been reported 24 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
24 from 22 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇹🇷 rtbh.com.tr
list.rtbh.com.tr report: tcp/0
Brute-Force
🇹🇷 rtbh.com.tr
list.rtbh.com.tr report: tcp/0
Brute-Force
🇪🇸 Gem
Unauthorized web scan.
Web App Attack
🇹🇷 rtbh.com.tr
list.rtbh.com.tr report: tcp/0
Brute-Force
Anonymous
Backdrop CMS module - malicious activity detected
Bad Web Bot Web App Attack
🇳🇱 Lentini
visuitslagen.nl: malicious request:/wordpress
Web App Attack
Anonymous
Bot / seems abusive / Apache connections: 21
DDoS Attack Web Spam Bad Web Bot Web App Attack
Anonymous
Exploit scanner detected on NON existing URI:/wp | User Agent:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 va
Web Spam Web App Attack
🇳🇱 BlueWire Hosting
Probing for application vulnerabilities
Brute-Force Web App Attack
🇺🇸 SiliSoftware
/wordpress
Web App Attack
🇺🇸 COMPLEX
Triggered Cloudflare WAF (firewallCustom) from KR. Action taken: BLOCK ASN: 8075 (MICROSOFT-CORP-MSN-AS-BLOCK) Protocol: HTTP/1.1 (HEAD method) Endpoint: /wordpress
Bad Web Bot
🇩🇪 ghostwarriors
Attempts against non-existent wp-login
Brute-Force Web App Attack
Anonymous
Web App Attack
🇩🇪 FeG Deutschland
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
Exploited Host Web App Attack
🇫🇷 COMAITE
Multiple web server 400 error codes from same source ip 52.231.15.54.
Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 184.186.97.40
🇺🇸 136.108.91.79
🇬🇧 109.158.15.210
🇳🇱 193.47.62.69
🇨🇭 170.231.236.98
🇸🇬 159.223.40.135
🇮🇷 62.220.104.155
🇮🇳 49.43.248.239
🇳🇱 45.148.10.141
🇩🇪 109.160.32.49
🇸🇪 13.60.55.16
🇳🇱 195.178.110.217
🇻🇪 190.6.18.3
🇳🇱 138.226.239.234
🇺🇸 136.109.129.46
🇩🇪 69.5.169.136
🇺🇸 52.88.13.227
🇺🇸 166.1.252.169
🇰🇷 61.76.112.4
feedback