JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.231.68.76

52.231.68.76 was found in our database!

This IP was reported 162 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.231.68.76

Whois 52.231.68.76

IP Abuse Reports for 52.231.68.76:

This IP address has been reported a total of 162 times from 122 distinct sources. 52.231.68.76 was first reported on July 3rd 2026, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ghostwarriors	2026-07-06 08:56:08 (13 hours ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-05 19:48:25 (1 day ago)	$f2bV_matches	Brute-Force
🇫🇷 SpaceHost-Server	2026-07-04 22:33:43 (1 day ago)		Brute-Force Web App Attack
Anonymous	2026-07-04 14:03:22 (2 days ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: KR, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: KR, Attack patterns: WordPress scanning, Webshell probing show less	Bad Web Bot Web App Attack
🇬🇧 openstrike.co.uk	2026-07-04 05:14:50 (2 days ago)	2155 attacks on ACME URLs, PHP URLs: GET /.well-known/acme-challenge/makeasmtp.php HTTP/1.1 GET /wp- ... show more 2155 attacks on ACME URLs, PHP URLs: GET /.well-known/acme-challenge/makeasmtp.php HTTP/1.1 GET /wp-content/plugins/atomlib.php HTTP/1.1 show less	Web App Attack
🇧🇪 taivas.nl	2026-07-04 04:32:53 (2 days ago)	Many_bad_calls	Web App Attack
🇲🇽 octageeks.com	2026-07-04 04:10:12 (2 days ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇩🇪 Admin-Gito	2026-07-04 02:08:25 (2 days ago)	52.231.68.76 - - [04/Jul/2026:04:03:51 +0200] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" ... show more 52.231.68.76 - - [04/Jul/2026:04:03:51 +0200] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 404 358313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.231.68.76 - - [04/Jul/2026:04:04:05 +0200] "GET /wp-includes/pomo/about.php HTTP/1.1" 404 358301 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.231.68.76 - - [04/Jul/2026:04:04:07 +0200] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 404 358305 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.231.68.76 - - [04/Jul/2026:04:04:12 +0200] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 404 358313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.231.68.76 - - [04/Jul/2026:04:04:17 +0200] "GET /wp-includes/customize/chosen.php HTTP/1.1" 404 3 ... show less	Web App Attack
🇹🇭 thaizone.com	2026-07-04 01:58:45 (2 days ago)	Hacking attempts against websites (D1) #2	Web App Attack Hacking
🇩🇪 conseilgouz	2026-07-04 01:46:54 (2 days ago)	ave-7 : Trying access unauthorized files/dir=>/wp-admin/js/index.php	Hacking
🇩🇪 AetherFox	2026-07-04 01:29:51 (2 days ago)	AetherFox VoidGuard detected: [Sat Jul 04 01:29:50.471289 2026] [authz_core:error] [pid 3529442:tid ... show more AetherFox VoidGuard detected: [Sat Jul 04 01:29:50.471289 2026] [authz_core:error] [pid 3529442:tid 3529461] [client 52.231.68.76:11900] AH01630: client denied by server configuration: proxy:https://hq.draconigen.net.dedivirt4209.your-server.de/wp-admin/js/index.php [Sat Jul 04 01:29:50.471445 2026] [authz_core:error] [pid 3529442:tid 3529461] [client 52.231.68.76:11900] AH01630: client denied by server configuration: /var/www/html/ERRORpages/403.html [Sat Jul 04 01:29:50.690697 2026] [authz_core:error] [pid 3529442:tid 3529460] [client 52.231.68.76:11900] AH01630: client denied by server configuration: proxy:https://hq.draconigen.net.dedivirt4209.your-server.de/.well-known/gecko-litespeed.php [Sat Jul 04 01:29:50.690888 2026] [authz_core:error] [pid 3529442:tid 3529460] [client 52.231.68.76:11900] AH01630: client denied by server configuration: /var/www/html/ERRORpages/403.html [Sat Jul 04 01:29:50.910009 2026] [authz_core:error] [pid 3529442:tid 3529467] [client 5 ... show less	Bad Web Bot Web App Attack
🇺🇸 Lee Daniel	2026-07-04 01:18:12 (2 days ago)	52.231.68.76 - - [03/Jul/2026:21:18:11 -0400] "GET /settings.php HTTP/1.1" 404 34452 "-" "Mozilla/5. ... show more 52.231.68.76 - - [03/Jul/2026:21:18:11 -0400] "GET /settings.php HTTP/1.1" 404 34452 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	DDoS Attack Web Spam Email Spam Port Scan Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2026-07-04 00:58:02 (2 days ago)	Attempted access to sensitive endpoint (/wp-admin/js/index.php) detected. Automated scan or unauthor ... show more Attempted access to sensitive endpoint (/wp-admin/js/index.php) detected. Automated scan or unauthorized probing. show less	Web App Attack
🇧🇬 HighWay	2026-07-04 00:48:13 (2 days ago)	52.231.68.76 - - [04/Jul/2026:00:48:10 +0000] "GET /wp-admin/js/index.php HTTP/1.1" 404 4686 "-" "Mo ... show more 52.231.68.76 - - [04/Jul/2026:00:48:10 +0000] "GET /wp-admin/js/index.php HTTP/1.1" 404 4686 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.231.68.76 - - [04/Jul/2026:00:48:11 +0000] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 404 696 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.231.68.76 - - [04/Jul/2026:00:48:11 +0000] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 404 696 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.231.68.76 - - [04/Jul/2026:00:48:12 +0000] "GET /admin/controller/extension/extension/ HTTP/1.1" 404 4685 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Port Scan Bad Web Bot
🇩🇪 Philister11	2026-07-04 00:34:44 (2 days ago)	CrowdSec: crowdsecurity/http-probing (KR/AS8075)	Web App Attack Hacking

Showing 1 to 15 of 162 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇯🇵 203.25.124.106

🇨🇦 85.217.149.61

🇺🇸 52.188.189.7

🇯🇵 20.89.48.223

🇺🇸 20.9.44.210

🇧🇷 177.87.170.138

🇳🇱 91.92.40.10

🇮🇹 79.0.5.138

🇭🇰 45.142.154.93

🇺🇸 38.141.62.23

🇯🇵 20.89.253.25

🇯🇵 20.89.250.108

🇯🇵 20.89.233.37

🇺🇸 2600:1f18:3120:f503:8468:b985:bab9:8a33

🇺🇸 216.25.89.94

🇩🇪 185.65.202.199

🇷🇺 176.77.8.56

🇸🇬 103.189.234.96

🇩🇪 88.217.161.151

🇯🇵 20.89.111.206