173.252.70.16

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted. Whitelisted Subnet

Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who may use them for search engine spiders. However, these same entities sometimes also provide cloud servers and mail services which are easily abused. Pay special attention when trusting or distrusting these IPs.

Abuse Confidence Score
0% Low Risk
131 reports
67 reporters · latest 1 hour ago

173.252.70.16 is on our whitelist as Facebook via the subnet 173.252.64.0/19.

ISP
Facebook, Inc.
Usage Type
Commercial
ASN
AS32934
Hostname(s)
fwdproxy-gtn-016.fbsv.net
Domain Name
facebook.com
Country
🇺🇸 United States of America
City
Gallatin, Tennessee
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
131 from 67 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 6 🇫🇷 France 5 🇨🇦 Canada 2
Most common categories Hacking 10 Web App Attack 8 Bad Web Bot 5 Port Scan 4 SQL Injection 1
Recent reports We have received reports of abusive activity from this IP address within the last week. This IP is on our whitelist as Facebook. Shared services like this are often reported for traffic that is not abuse, so review the reports before blocking.
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
FortiWeb WAF: 33 attacks detected. Threat Score: 3633900. Types: HTTP Protocol Constraints(17), Client Management(16). Origin: United States.
Web App Attack
🇳🇱 Cloud86 B.V.
categories: DDoS Attack
DDoS Attack
🇫🇷 conseilgouz
ave-88 : Bloc AI bots=>/robots.txt(facebookexternalhit)
Hacking
🇫🇷 Sorgin Informatique
nee-88 : Bloc AI bots=>/robots.txt(facebookexternalhit)
Hacking
🇫🇷 conseilgouz
upe-88 : Bloc AI bots=>/images/template/up-logo-70x300.png(facebookexternalhit)
Hacking
🇫🇷 sbocquet
Port 443 scanned from 173.252.70.16:54248.
Port Scan
🇩🇪 Vegascosmetics
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after locale-probe / error-handler fuzzing against ASP.NET shop. Evidence: LOCALE-PROBE: Cluster /24 173.252.70 (3 IPs/15 Min), Cluster Berater lu52422 (49 IPs/15 Min)
Hacking Bad Web Bot Web App Attack
🇰🇿 ramiil
NALA pattern: (?i)^/(?:autodiscover/autodiscover\.json|owa/auth/(?:logon\.aspx|x\.js)|\.well-known/security\.txt|robots\.txt|sitemap\.xml)(?:$|[/?])
Web App Attack
🇫🇷 fmomo3143
cie-88 : Bloc AI bots=>/robots.txt(facebookexternalhit)
Hacking
🇦🇹 services.org.pl
connect() failed (111: Connection refused) while connecting to upstream, client: 173.252.70.16, server: keycloak.services.org.pl, request: "GET /robots.txt HTTP/1.1", upstream: "https://127.0.0.1:8443/robots.txt", host: "keycloak.services.org.pl"
Bad Web Bot Web App Attack
🇨🇦 csnavarro2020
Automated scan for known vulnerable/nonexistent path: /meta.json
Web App Attack Hacking
🇦🇺 crispi
Port scan from 173.252.70.16
Port Scan
🇮🇪 Coolnagour
already banned
Web App Attack
🇧🇪 micmor_asbl
ase-88 : Bloc AI bots=>/robots.txt(facebookexternalhit)
Hacking
🇳🇱 Tsumugi Kotobuki
Port Scan on Honeypot | Ports: 80/HTTP | Proto: TCP(1) | Flags: all SYN | TTL: 68 | Len: 60B | Win: 65535(1) | rDNS: fwdproxy-gtn-016.fbsv.net | F2B/ufw-honeypot@2026-10-19T22:51:13Z
Port Scan Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 185.61.222.49
🇺🇸 51.8.102.13
🇺🇸 199.165.159.205
🇦🇱 193.187.101.221
🇹🇷 185.231.227.116
🇨🇳 183.13.78.77
🇩🇪 172.68.192.184
🇸🇬 161.118.226.106
🇮🇳 118.91.176.212
🇻🇳 113.169.77.212
🇳🇱 109.160.32.165
🇫🇷 85.217.140.48
🇮🇷 78.109.200.147
🇺🇸 70.182.173.218
🇺🇸 20.84.99.255
🇫🇷 13.140.162.10
🇮🇹 188.215.94.140
🇧🇷 187.0.232.186
🇨🇦 85.217.149.70
🇺🇸 57.141.20.70
feedback