JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.231.76.116

52.231.76.116

Recent Activity

167 reports found in our database

100% ▲ ▲ ▲ Critical

Abuse confidence score ?

ISP

Microsoft Corporation

Usage Type

Data Center/Web Hosting/Transit

ASN

AS8075

Domain Name

microsoft.com

Country

🇰🇷 Korea (the Republic of)

City

Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 52.231.76.116:

This IP address has been reported a total of 167 times from 135 distinct sources. 52.231.76.116 was first reported on September 7th 2026, and the most recent report was 5 minutes ago. In the last 60 days, the top reporter locations were: Germany with 55 reports; United States of America with 27 reports; France with 11 reports. The most common categories in these recent reports were: Web App Attack 129 times; Brute-Force 39 times; Bad Web Bot 35 times; Hacking 35 times; Port Scan 12 times; Other 18 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 magnetosphere-tarpit	2026-09-08 02:38:07 (5 minutes ago)	Automated web scanner: repeatedly probed for .env, .git, wp-admin and PHP webshell paths that do not ... show more Automated web scanner: repeatedly probed for .env, .git, wp-admin and PHP webshell paths that do not exist on this host. Tarpitted, then banned: 10 requests within 24h0m0s show less	Port Scan Bad Web Bot Web App Attack
🇩🇪 botreporter	2026-09-08 02:33:38 (10 minutes ago)	CMS vulnerability/installation scanning	Brute-Force Web App Attack
🇺🇸 Mundo Bueno	2026-09-08 02:29:54 (14 minutes ago)	[ISILIA Protection v2.1] Tentative d'accès: /alfa-rex.php \| Pays: KR \| UA: Mozilla/5.0 (Windows NT 1 ... show more [ISILIA Protection v2.1] Tentative d'accès: /alfa-rex.php \| Pays: KR \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Sa show less	Hacking Web App Attack
🇦🇹 penguin-solutions.at	2026-09-08 02:14:26 (29 minutes ago)	Excessive 403/404 errors ...	Brute-Force Web App Attack
🇩🇪 hchristo	2026-09-08 01:52:38 (51 minutes ago)	[Tue Sep 08 03:52:37.509261 2026] [proxy_fcgi:error] [pid 20842:tid 20898] [client 52.231.76.116:133 ... show more [Tue Sep 08 03:52:37.509261 2026] [proxy_fcgi:error] [pid 20842:tid 20898] [client 52.231.76.116:13377] AH01071: Got error 'Primary script unknown' [Tue Sep 08 03:52:37.736179 2026] [proxy_fcgi:error] [pid 20842:tid 20921] [client 52.231.76.116:13377] AH01071: Got error 'Primary script unknown' [Tue Sep 08 03:52:37.962535 2026] [proxy_fcgi:error] [pid 20842:tid 20923] [client 52.231.76.116:13377] AH01071: Got error 'Primary script unknown' [Tue Sep 08 03:52:38.190007 2026] [proxy_fcgi:error] [pid 20842:tid 20922] [client 52.231.76.116:13377] AH01071: Got error 'Primary script unknown' [Tue Sep 08 03:52:38.415843 2026] [proxy_fcgi:error] [pid 20842:tid 20937] [client 52.231.76.116:13377] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force
🇹🇷 oalver	2026-09-08 01:25:19 (1 hour ago)	Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_404_flood, ... show more Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_404_flood, nginx_rate_flood, nginx_path_signature. Sources: nginx. Details: 404_flood: 10 requests to /about.php (HTTP 404) within 60s; rate_flood: 30 requests to /autoload_classmap.php (HTTP 404) within 10s; path_signature: request to /shell.php (HTTP 404). First seen: 2026-09-07. Risk score: 100/100. show less	Web App Attack
🇺🇸 Major Hostility	2026-09-08 01:17:06 (1 hour ago)	"GET /1.php HTTP/1.1" 404 "GET /new.php HTTP/1.1" 404 "GET /num.php HTTP/1.1" 404 "GET /wp-includes/ ... show more "GET /1.php HTTP/1.1" 404 "GET /new.php HTTP/1.1" 404 "GET /num.php HTTP/1.1" 404 "GET /wp-includes/fonts/ HTTP/1.1" 404 "GET /admin.php HTTP/1.1" 404 "GET /13.php HTTP/1.1" 404 "GET /222.php HTTP/1.1" 404 "GET /aa.php HTTP/1.1" 404 "GET /abcd.php HTTP/1.1" 404 "GET /about.php HTTP/1.1" 404 "GET /admin.php HTTP/1.1" 404 "GET /adminfuns.php HTTP/1.1" 404 "GET /adminfuns.php/.well-known/acme-challenge/file.php HTTP/1.1" 404 "GET /ae.php HTTP/1.1" 404 "GET /akcc.php HTTP/1.1" 404 "GET /bak.php HTTP/1.1" 404 "GET /cc.php HTTP/1.1" 404 "GET /chosen.php HTTP/1.1" 404 "GET /classwithtostring.php HTTP/1.1" 404 "GET /wp-signup.php HTTP/1.1" 404 "GET /doc.php HTTP show less	Web App Attack
🇩🇪 Gwyneth Llewelyn	2026-09-08 01:12:55 (1 hour ago)	52.231.76.116 - - [08/Sep/2026:02:12:52 +0100] "GET /wp-admin.php HTTP/1.1" 404 1006 "-" "Mozilla/5. ... show more 52.231.76.116 - - [08/Sep/2026:02:12:52 +0100] "GET /wp-admin.php HTTP/1.1" 404 1006 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Bad Web Bot
🇩🇪 BlueWire Hosting	2026-09-08 00:52:56 (1 hour ago)	Probing websites for vulnerabilities	Web App Attack SQL Injection
🇫🇮 Christopher Hughes	2026-09-08 00:47:17 (1 hour ago)	[Tue Sep 08 01:47:16.173224 2026] [proxy_fcgi:error] [pid 3834249:tid 140113694676544] [client 52.23 ... show more [Tue Sep 08 01:47:16.173224 2026] [proxy_fcgi:error] [pid 3834249:tid 140113694676544] [client 52.231.76.116:10284] AH01071: Got error 'Primary script unknown' [Tue Sep 08 01:47:16.432203 2026] [proxy_fcgi:error] [pid 3834249:tid 140112084063808] [client 52.231.76.116:10284] AH01071: Got error 'Primary script unknown' [Tue Sep 08 01:47:16.692078 2026] [proxy_fcgi:error] [pid 3834249:tid 140113794946624] [client 52.231.76.116:10284] AH01071: Got error 'Primary script unknown' [Tue Sep 08 01:47:16.951283 2026] [proxy_fcgi:error] [pid 3834249:tid 140113166198336] [client 52.231.76.116:10284] AH01071: Got error 'Primary script unknown' [Tue Sep 08 01:47:17.211170 2026] [proxy_fcgi:error] [pid 3834249:tid 140113686283840] [client 52.231.76.116:10284] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇫🇷 rellik	2026-09-08 00:06:00 (2 hours ago)	Mass Scanning Critical Files	Hacking Brute-Force Web App Attack
🇫🇮 Christopher Hughes	2026-09-08 00:00:11 (2 hours ago)	[Tue Sep 08 01:00:07.546295 2026] [proxy_fcgi:error] [pid 3832064:tid 140113543673408] [client 52.23 ... show more [Tue Sep 08 01:00:07.546295 2026] [proxy_fcgi:error] [pid 3832064:tid 140113543673408] [client 52.231.76.116:3291] AH01071: Got error 'Primary script unknown' [Tue Sep 08 01:00:07.839296 2026] [proxy_fcgi:error] [pid 3832064:tid 140112587363904] [client 52.231.76.116:3291] AH01071: Got error 'Primary script unknown' [Tue Sep 08 01:00:08.109348 2026] [proxy_fcgi:error] [pid 3832064:tid 140112620934720] [client 52.231.76.116:3291] AH01071: Got error 'Primary script unknown' [Tue Sep 08 01:00:08.379646 2026] [proxy_fcgi:error] [pid 3832064:tid 140113794946624] [client 52.231.76.116:3291] AH01071: Got error 'Primary script unknown' [Tue Sep 08 01:00:08.649865 2026] [proxy_fcgi:error] [pid 3832064:tid 140113694676544] [client 52.231.76.116:3291] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
Anonymous	2026-09-07 23:29:37 (3 hours ago)	52.231.76.116 - - [08/Sep/2026:01:29:33 +0200] "GET /autoload_classmap.php HTTP/1.1" 404 184 "-" "Mo ... show more 52.231.76.116 - - [08/Sep/2026:01:29:33 +0200] "GET /autoload_classmap.php HTTP/1.1" 404 184 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.231.76.116 - - [08/Sep/2026:01:29:33 +0200] "GET /post.php HTTP/1.1" 404 184 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.231.76.116 - - [08/Sep/2026:01:29:33 +0200] "GET /1.php HTTP/1.1" 404 184 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.231.76.116 - - [08/Sep/2026:01:29:33 +0200] "GET /flower.php HTTP/1.1" 404 184 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.231.76.116 - - [08/Sep/2026:01:29:34 +0200] "GET /meta.php HTTP/1.1" 404 184 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 ... show less	Bad Web Bot Web App Attack
🇩🇪 macrob	2026-09-07 22:32:05 (4 hours ago)	2026/09/07 22:32:01 [error] 3493794#3493794: 568350714 access forbidden by rule, client: 52.231.76. ... show more 2026/09/07 22:32:01 [error] 3493794#3493794: 568350714 access forbidden by rule, client: 52.231.76.116, server: binixo.ro, request: "GET /xmlrpc.php HTTP/2.0", host: "www.binixo.ro" 2026/09/07 22:32:02 [error] 3493797#3493797: 568350674 access forbidden by rule, client: 52.231.76.116, server: binixo.ro, request: "GET /wp-admin.php HTTP/2.0", host: "www.binixo.ro" 2026/09/07 22:32:03 [error] 3493791#3493791: 568350645 access forbidden by rule, client: 52.231.76.116, server: binixo.ro, request: "GET /install.php HTTP/2.0", host: "www.binixo.ro" ... show less	Web App Attack
🇩🇪 hchristo	2026-09-07 22:31:30 (4 hours ago)	[Tue Sep 08 00:31:29.231518 2026] [proxy_fcgi:error] [pid 29113:tid 29384] [client 52.231.76.116:107 ... show more [Tue Sep 08 00:31:29.231518 2026] [proxy_fcgi:error] [pid 29113:tid 29384] [client 52.231.76.116:10783] AH01071: Got error 'Primary script unknown' [Tue Sep 08 00:31:29.465988 2026] [proxy_fcgi:error] [pid 29113:tid 29316] [client 52.231.76.116:10783] AH01071: Got error 'Primary script unknown' [Tue Sep 08 00:31:29.700296 2026] [proxy_fcgi:error] [pid 29113:tid 29336] [client 52.231.76.116:10783] AH01071: Got error 'Primary script unknown' [Tue Sep 08 00:31:29.935049 2026] [proxy_fcgi:error] [pid 29113:tid 29311] [client 52.231.76.116:10783] AH01071: Got error 'Primary script unknown' [Tue Sep 08 00:31:30.168945 2026] [proxy_fcgi:error] [pid 29113:tid 29353] [client 52.231.76.116:10783] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force

Showing 1 to 15 of 167 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 210.79.191.174

🇧🇷 205.210.31.213

🇧🇪 198.235.24.220

🇧🇷 177.133.168.202

🇰🇷 175.207.255.161

🇵🇰 175.107.0.8

🇨🇳 116.135.67.93

🇧🇫 102.180.198.12

🇩🇪 93.152.221.37

🇮🇹 88.147.30.59

🇨🇿 88.86.102.107

🇫🇷 85.217.140.40

🇳🇱 77.239.124.206

🇺🇸 64.62.197.17

🇺🇸 40.83.182.122

🇭🇰 220.246.183.78

🇺🇸 205.210.31.40

🇦🇷 190.177.238.232

🇷🇺 185.94.111.1

🇨🇴 181.61.204.1