JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.231.49.63

52.231.49.63 was found in our database!

This IP was reported 31 times. Confidence of Abuse is 8%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.231.49.63

Whois 52.231.49.63

IP Abuse Reports for 52.231.49.63:

This IP address has been reported a total of 31 times from 8 distinct sources. 52.231.49.63 was first reported on November 9th 2025, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 DUBREUIL	2026-08-01 00:21:00 (3 weeks ago)	As always with korea	DDoS Attack Open Proxy Port Scan Brute-Force Web App Attack SSH Hacking SQL Injection
🇺🇸 kosada.com	2026-07-15 11:25:32 (1 month ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇩🇪 Reinhard	2026-05-25 13:52:18 (2 months ago)	Unknown activity, but too many attacks with too many users.	Hacking
🇵🇰 sbk97 (https://sayor.net)	2026-05-13 03:05:04 (3 months ago)	HTTP attack observed: GET /Breach.php HTTP/2.0 \| status=200 \| response_size=197188	Port Scan
🇵🇰 sbk97 (https://sayor.net)	2026-05-13 03:05:04 (3 months ago)	HTTP attacks observed: GET /Breach.php HTTP/2.0 \| status=200	Port Scan
🇺🇸 nodepile	2026-04-25 07:53:00 (3 months ago)	UA claims known bot but FCrDNS checks do not match official ranges (tenant=82 method=GET path=/07-09 ... show more UA claims known bot but FCrDNS checks do not match official ranges (tenant=82 method=GET path=/07-09-mercedes-w221-facelift-led-s-class-afs-bi-xenon-headlights.html ua='Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot') show less	Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-04-21 07:35:24 (4 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-04-06 10:48:39 (4 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇦🇺 MAGIC	2026-03-06 02:45:43 (5 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇵🇱 IROK	2026-01-26 04:37:48 (6 months ago)	Firewall Blocked - Unauthorized Port Scanning ...	Port Scan
🇦🇺 MAGIC	2026-01-17 01:12:59 (7 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 nodepile	2026-01-13 10:25:51 (7 months ago)	UA claims known bot but FCrDNS checks do not match official ranges (tenant=82 method=GET path=/1989- ... show more UA claims known bot but FCrDNS checks do not match official ranges (tenant=82 method=GET path=/1989-1996-fit-bmw-e34-5-series-e32-7-series-depo-angel-eye-projector-glass-lens-headlights.html ua='Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot') show less	Bad Web Bot Web App Attack
🇮🇩 hermawan	2025-12-30 06:07:27 (7 months ago)	[Tue Dec 30 13:07:26.359305 2025] [security2:error] [pid 179187:tid 139850355787456] [client 52.231. ... show more [Tue Dec 30 13:07:26.359305 2025] [security2:error] [pid 179187:tid 139850355787456] [client 52.231.49.63:59438] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "253"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-curah-hujan-bulanan/6-bulan-ke-depan/555561138-prakiraan-bulanan-curah-hujan-di-kabupaten-situbondo-untuk-6-bulan-ke-depan HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-curah-hujan-bulanan/6-bulan-ke-depan/555561138-prakiraan-bulanan-curah-hujan-di-kabupaten-situbondo-untuk-6-bulan-ke-depan"] [u ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-12-02 01:09:43 (8 months ago)	[Tue Dec 02 07:47:31.838810 2025] [security2:error] [pid 321010:tid 140718321338048] [client 52.231. ... show more [Tue Dec 02 07:47:31.838810 2025] [security2:error] [pid 321010:tid 140718321338048] [client 52.231.49.63:33671] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "252"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prediksi-iklim/prediksi-dasarian/daerah-potensi-banjir-provinsi-jawa-timur/555562581-prediksi-dasarian-daerah-potensi-banjir-di-provinsi-jawa-timur-untuk-bulan-november-dasarian-iii-tahun-2025-tanggal-21-30-november-2025-update-20-november-2025 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-dasarian/daerah-potensi-banjir-provinsi-jawa-timur/555562581-prediksi ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-11-30 12:45:29 (8 months ago)	[Sun Nov 30 19:43:43.674745 2025] [security2:error] [pid 696724:tid 139859862103744] [client 52.231. ... show more [Sun Nov 30 19:43:43.674745 2025] [security2:error] [pid 696724:tid 139859862103744] [client 52.231.49.63:7759] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "252"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/profil/meteorologi/list-of-all-tags/prediksi-6-bulanan-prediksi-curah-hujan-musim-hujan-tahun-2025-2026-zona-musim-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/prediksi-6-bulanan-prediksi-curah-hujan-musim-hujan-tahun-2025-2026-zona-musim-di-provinsi-jawa-timur"] [unique_id "aSw7_834u2R9_ZM3Mk8pyAAAxwA"] [staklim-jatim.bmkg ... show less	Hacking Web App Attack

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 193.47.62.69

🇦🇺 170.64.177.80

🇵🇱 94.26.88.14

🇫🇷 92.222.108.102

🇱🇹 62.60.130.242

🇭🇰 43.128.3.201

🇸🇪 13.48.30.44

🇬🇧 188.240.59.25

🇫🇮 147.185.133.220

🇺🇸 147.185.132.130

🇨🇦 20.220.206.182

🇺🇸 20.169.104.211

🇱🇹 213.176.26.95

🇳🇱 195.178.110.218

🇵🇱 172.64.200.21

🇺🇸 147.185.132.73

🇮🇩 103.186.31.66

🇳🇱 91.92.42.147

🇰🇷 221.162.218.85

🇺🇸 166.62.41.13