JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.231.64.83

52.231.64.83 was found in our database!

This IP was reported 152 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.231.64.83

Whois 52.231.64.83

IP Abuse Reports for 52.231.64.83:

This IP address has been reported a total of 152 times from 118 distinct sources. 52.231.64.83 was first reported on March 27th 2026, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-04-30 13:04:29 (3 months ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇺🇸 bazter.pro	2026-04-05 21:20:11 (4 months ago)	Auto-Ban [2026-04-06 00:19:56]: CRITICAL: Sensitive files (13); DC: Microsoft Corporation [Paths: 83 ... show more Auto-Ban [2026-04-06 00:19:56]: CRITICAL: Sensitive files (13); DC: Microsoft Corporation [Paths: 83] \| Details: Sensitive files/paths: /admin.php, /admin/admin.php, /admin/function.php, /admin/index.php, /adminfuns.php \| 404 errors (81): /alfa.php, /infos.php, /images/class-config.php, /pages.php, /k.php, /mini, /images/admin.php, /system_log.php, /m.php, /composer.php (and 71 more) \| Other paths: /wp-admin/admin.php, /wp-admin/ show less	Web App Attack Hacking
🇩🇪 ghostwarriors	2026-04-01 00:55:45 (4 months ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇹🇷 rtbh.com.tr	2026-03-30 20:12:19 (4 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 chronos	2026-03-30 06:57:55 (4 months ago)	[AUTORAVALT][[30/03/2026 - 03:57:55 -03:00 UTC] Attack from [Microsoft Corporation] [52.231.64.83] A ... show more [AUTORAVALT][[30/03/2026 - 03:57:55 -03:00 UTC] Attack from [Microsoft Corporation] [52.231.64.83] Action: BLocKed Hacking... Unauthorized attempts to access the server. Web App Attack -> Attempts to probe for or exploit installed web applications such as a CMS like WordPress/Drupal, e-commerce solutions, forum software, phpMyAdmin and various other software p] ... show less	Hacking Web App Attack
🇺🇸 chronos	2026-03-30 06:17:09 (4 months ago)	[AUTORAVALT][[30/03/2026 - 03:17:09 -03:00 UTC] Attack from [Microsoft Corporation] [52.231.64.83] A ... show more [AUTORAVALT][[30/03/2026 - 03:17:09 -03:00 UTC] Attack from [Microsoft Corporation] [52.231.64.83] Action: BLocKed Hacking... Unauthorized attempts to access the server. Web App Attack -> Attempts to probe for or exploit installed web applications such as a CMS like WordPress/Drupal, e-commerce solutions, forum software, phpMyAdmin and various other software p] ... show less	Hacking Web App Attack
🇫🇷 SpaceHost-Server	2026-03-29 22:35:22 (4 months ago)		Brute-Force Web App Attack
🇳🇱 homeshowdomain.nl	2026-03-29 21:59:05 (4 months ago)	Auto-ban: 12 malicious requests on 2026-03-28 (e.g., env/backup probes, brute-force, or error bursts ... show more Auto-ban: 12 malicious requests on 2026-03-28 (e.g., env/backup probes, brute-force, or error bursts). show less	Web App Attack SSH Hacking
🇩🇪 MBombeck	2026-03-29 06:01:01 (4 months ago)	Fail2Ban/traefik-botsearch on apps-01: banned after 5 failures	Web App Attack
🇬🇧 openstrike.co.uk	2026-03-29 05:13:47 (4 months ago)	405 attacks on PHP URLs: GET /wp-admin/css/colors/light/wp-login.php HTTP/1.1	Web App Attack
🇭🇺 DumaNet	2026-03-29 00:33:00 (5 months ago)	Web app attack attempts, scanning for vulnerability. Date: 2026 Mar 27. 21:53:15 Source IP: 52.231 ... show more Web app attack attempts, scanning for vulnerability. Date: 2026 Mar 27. 21:53:15 Source IP: 52.231.64.83 Portion of the log(s): 52.231.64.83 - [27/Mar/2026:21:53:14 +0100] "GET /atomlib.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.231.64.83 - [27/Mar/2026:21:53:14 +0100] "GET /assets/images/doc.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.231.64.83 - [27/Mar/2026:21:53:14 +0100] "GET /asasx.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.231.64.83 - [27/Mar/2026:21:53:14 +0100] "GET /as.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.231.64.83 - [27/Mar/2026:21:53:13 +0100] "GET /alfa.php HTTP/1.1" 404 555 "-" "Mozilla show less	Web App Attack
Anonymous	2026-03-28 23:04:59 (5 months ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: KR, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: KR, Attack patterns: WordPress scanning, Webshell probing, Backup file probing show less	Bad Web Bot Web App Attack
🇹🇷 rtbh.com.tr	2026-03-28 20:12:18 (5 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇳🇱 CryptoYakari	2026-03-28 15:26:43 (5 months ago)	52.231.64.83 - - [28/Mar/2026:18:26:39 +0300] "GET /about.php HTTP/1.0" 404 531 "-" "Mozilla/5.0 (Wi ... show more 52.231.64.83 - - [28/Mar/2026:18:26:39 +0300] "GET /about.php HTTP/1.0" 404 531 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.231.64.83 - - [28/Mar/2026:18:26:39 +0300] "GET /about/function.php HTTP/1.0" 404 3515 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.231.64.83 - - [28/Mar/2026:18:26:39 +0300] "GET /admin.php HTTP/1.0" 404 531 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.231.64.83 - - [28/Mar/2026:18:26:40 +0300] "GET /admin/admin.php HTTP/1.0" 404 3515 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.231.64.83 - - [28/Mar/2026:18:26:40 +0300] "GET /admin/function.php HTTP/1.0" 404 3515 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0. ... show less	Web Spam Blog Spam Web App Attack Bad Web Bot
🇺🇸 oralunal	2026-03-28 14:11:12 (5 months ago)	IP banned by Fail2Ban in jail ente-suss ente.com-ssl_log mvfnds ...	Bad Web Bot Web App Attack

Showing 1 to 15 of 152 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 212.32.207.125

🇲🇽 187.192.86.212

🇩🇪 167.94.146.40

🇺🇸 165.154.172.73

🇩🇪 151.243.11.12

🇺🇸 136.116.168.121

🇰🇷 112.164.196.45

🇮🇩 103.46.186.105

🇮🇷 80.210.22.164

🇺🇸 64.62.156.165

🇨🇳 61.52.171.193

🇺🇸 24.234.89.2

🇺🇸 20.14.93.141

🇮🇳 14.99.61.248

🇨🇳 220.197.85.234

🇰🇷 220.124.218.76

🇨🇴 186.80.54.226

🇺🇦 185.151.84.117

🇦🇷 170.238.9.84

🇧🇷 170.80.55.78