JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 173.252.70.59

173.252.70.59 was found in our database!

This IP was reported 40 times. Confidence of Abuse is 0%: ?

ISP	Facebook, Inc.
Usage Type	Commercial
ASN	AS32934
Hostname(s)	fwdproxy-gtn-059.fbsv.net
Domain Name	facebook.com
Country	🇺🇸 United States of America
City	Gallatin, Tennessee

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Important Note: 173.252.70.59 is an IP address from within our whitelist belonging to the subnet 173.252.64.0/19, which we identify as: "Facebook".

Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who may use them for search engine spiders. However, these same entities sometimes also provide cloud servers and mail services which are easily abused. Pay special attention when trusting or distrusting these IPs.

Report 173.252.70.59

Whois 173.252.70.59

IP Abuse Reports for 173.252.70.59:

This IP address has been reported a total of 40 times from 27 distinct sources. 173.252.70.59 was first reported on February 15th 2026, and the most recent report was 16 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 netclix.gr	2026-09-23 23:08:43 (16 hours ago)	(PERMBLOCK) 173.252.70.59 (US/United States/fwdproxy-gtn-059.fbsv.net) has had more than 2 temp bloc ... show more (PERMBLOCK) 173.252.70.59 (US/United States/fwdproxy-gtn-059.fbsv.net) has had more than 2 temp blocks in the last 604800 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Port Scan
🇩🇪 iNetWorker	2026-09-22 11:55:08 (2 days ago)	trolling for resource vulnerabilities	Web App Attack
🇨🇦 Kacelly Nima	2026-09-19 18:03:25 (4 days ago)		Bad Web Bot Blog Spam Brute-Force DDoS Attack DNS Compromise DNS Poisoning Email Spam Exploited Host Fraud Orders Fraud VoIP FTP Brute-Force Hacking IoT Targeted Open Proxy Phishing Ping of Death Port Scan Spoofing SQL Injection SSH VPN IP Web App Attack Web Spam
🇺🇸 IndigoRidge	2026-09-19 16:44:13 (4 days ago)	[Sat Sep 19 12:44:12.959883 2026] [authz_core:error] [pid 2646469:tid 139766221764352] [client 173.2 ... show more [Sat Sep 19 12:44:12.959883 2026] [authz_core:error] [pid 2646469:tid 139766221764352] [client 173.252.70.59:0] AH01630: client denied by server configuration: /var/www/vhosts/livingdownsouth.com/error_docs/forbidden.html, referer: https://properties.livingdownsouth.com/ [Sat Sep 19 12:44:13.279232 2026] [authz_core:error] [pid 2646469:tid 139764745369344] [client 173.252.70.59:0] AH01630: client denied by server configuration: /var/www/vhosts/livingdownsouth.com/httpdocs/wp-content/themes/livingdownsouth/inc/lib/js/jquery.cycle2.min.js, referer: https://properties.livingdownsouth.com/ [Sat Sep 19 12:44:13.279296 2026] [authz_core:error] [pid 2646469:tid 139764745369344] [client 173.252.70.59:0] AH01630: client denied by server configuration: /var/www/vhosts/livingdownsouth.com/error_docs/forbidden.html, referer: https://properties.livingdownsouth.com/ [Sat Sep 19 12:44:13.280720 2026] [authz_core:error] [pid 2646729:tid 139766498395904] [client 173.252.70.59:0] AH01630: client denied ... show less	Web App Attack
🇺🇸 IndigoRidge	2026-09-19 14:29:13 (5 days ago)	[Sat Sep 19 10:29:12.474100 2026] [authz_core:error] [pid 2646469:tid 139766196586240] [client 173.2 ... show more [Sat Sep 19 10:29:12.474100 2026] [authz_core:error] [pid 2646469:tid 139766196586240] [client 173.252.70.59:0] AH01630: client denied by server configuration: /var/www/vhosts/livingdownsouth.com/error_docs/forbidden.html, referer: https://properties.livingdownsouth.com/ [Sat Sep 19 10:29:12.505835 2026] [authz_core:error] [pid 3091000:tid 139765802325760] [client 173.252.70.59:0] AH01630: client denied by server configuration: /var/www/vhosts/livingdownsouth.com/httpdocs/wp-includes/js/jquery/jquery.min.js, referer: https://properties.livingdownsouth.com/ [Sat Sep 19 10:29:12.505890 2026] [authz_core:error] [pid 3091000:tid 139765802325760] [client 173.252.70.59:0] AH01630: client denied by server configuration: /var/www/vhosts/livingdownsouth.com/error_docs/forbidden.html, referer: https://properties.livingdownsouth.com/ [Sat Sep 19 10:29:13.035665 2026] [authz_core:error] [pid 2646471:tid 139765793933056] [client 173.252.70.59:0] AH01630: client denied by server configuration: /var/ ... show less	Web App Attack
🇺🇸 IndigoRidge	2026-09-19 14:02:39 (5 days ago)	[Sat Sep 19 10:02:38.725631 2026] [authz_core:error] [pid 111260:tid 139765911365376] [client 173.25 ... show more [Sat Sep 19 10:02:38.725631 2026] [authz_core:error] [pid 111260:tid 139765911365376] [client 173.252.70.59:0] AH01630: client denied by server configuration: /var/www/vhosts/livingdownsouth.com/error_docs/forbidden.html, referer: https://properties.livingdownsouth.com/ [Sat Sep 19 10:02:38.726016 2026] [authz_core:error] [pid 111333:tid 139766531966720] [client 173.252.70.59:0] AH01630: client denied by server configuration: /var/www/vhosts/livingdownsouth.com/httpdocs/wp-includes/js/jquery/jquery.min.js, referer: https://properties.livingdownsouth.com/ [Sat Sep 19 10:02:38.726094 2026] [authz_core:error] [pid 111333:tid 139766531966720] [client 173.252.70.59:0] AH01630: client denied by server configuration: /var/www/vhosts/livingdownsouth.com/error_docs/forbidden.html, referer: https://properties.livingdownsouth.com/ [Sat Sep 19 10:02:39.187304 2026] [authz_core:error] [pid 2646471:tid 139766481807104] [client 173.252.70.59:0] AH01630: client denied by server configuration: /var/www ... show less	Web App Attack
🇮🇩 Burayot	2026-09-17 20:35:25 (6 days ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 173.252.70.59 (US/United States/fwdp ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 173.252.70.59 (US/United States/fwdproxy-gtn-059.fbsv.net): 1 in the last 3600 secs show less	Web App Attack
Anonymous	2026-09-15 21:06:23 (1 week ago)	Trying to access config files	Web App Attack
Anonymous	2026-09-15 07:27:35 (1 week ago)	173.252.70.59 - - [15/Sep/2026:09:27:35 +0200] "GET /wp-content/uploads/2026/09/ HTTP/2.0" 200 5400 ... show more 173.252.70.59 - - [15/Sep/2026:09:27:35 +0200] "GET /wp-content/uploads/2026/09/ HTTP/2.0" 200 5400 "-" "facebookexternalhit/1.1 (+http:///externalhit_uatext.php)" show less	Web App Attack
🇵🇱 bmino.pl	2026-09-11 10:55:33 (1 week ago)	Autoban IP(2): 173.252.70.59 - Hostname: Facebook, Inc. - City: Gallatin - Region: Tennessee - Count ... show more Autoban IP(2): 173.252.70.59 - Hostname: Facebook, Inc. - City: Gallatin - Region: Tennessee - Country: United States - Location: - Organization: Facebook, Inc. - failed attempts. show less	Bad Web Bot
🇺🇸 fortypoundhead	2026-08-31 22:31:39 (3 weeks ago)	Banned IP Address	Hacking Web App Attack
🇺🇸 fortypoundhead	2026-08-26 07:14:45 (4 weeks ago)	Banned IP Address	Hacking Web App Attack
Anonymous	2026-08-25 20:34:33 (4 weeks ago)	Malicious inbound activity detected by IPS and blocked.	Hacking
🇵🇱 bmino.pl	2026-08-23 19:18:06 (1 month ago)	Autoban IP(2): 173.252.70.59 - Hostname: Facebook, Inc. - City: Gallatin - Region: Tennessee - Count ... show more Autoban IP(2): 173.252.70.59 - Hostname: Facebook, Inc. - City: Gallatin - Region: Tennessee - Country: United States - Location: - Organization: Facebook, Inc. - failed attempts. show less	Bad Web Bot
🇩🇪 Vegascosmetics	2026-08-23 07:55:46 (1 month ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after PHP/CMS/webshell exploit probe (possi ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after PHP/CMS/webshell exploit probe (possible exploited host). Evidence: AttackPattern: /de[0-9]{4,}/.*\.php (Match: /de41928/robots.txt - 443 - 173.252.70.59 facebookexternalhit/1.1+(+http://www.facebook.com/e... show less	Hacking Exploited Host Web App Attack

Showing 1 to 15 of 40 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 213.35.101.27

🇳🇱 34.7.160.114

🇺🇸 216.180.246.78

🇩🇪 209.38.251.85

🇳🇱 195.178.110.3

🇩🇪 194.88.98.92

🇬🇧 193.163.125.120

🇲🇽 187.189.68.243

🇦🇷 181.10.138.162

🇸🇬 172.217.44.226

🇺🇸 172.210.9.220

🇺🇸 172.86.73.137

🇨🇳 116.148.226.140

🇺🇸 65.49.1.123

🇺🇦 46.98.61.30

🇰🇿 37.208.46.134

🇬🇧 35.203.211.236

🇺🇸 20.15.203.85

🇿🇦 16.28.84.0

🇯🇵 8.216.14.28