52.170.253.240

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
22 reports
21 reporters · latest 1 year ago
ISP
Microsoft Corporation
Usage Type
Data Center/Web Hosting/Transit
ASN
AS8075
Domain Name
microsoft.com
Country
🇺🇸 United States of America
City
Dulles Town Center, Virginia
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

52.170.253.240 has been reported 22 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
22 from 21 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇫🇷 IRISIO
scans/SQL injection/spam posts : 188 queries
SQL Injection Web App Attack
🇳🇱 homeshowdomain.nl
Auto-ban: 223 malicious requests on 2025-10-18 (e.g., env/backup probes, brute-force, or error bursts).
Hacking Web App Attack SSH
🇩🇪 Holger
WordPress WebAttack
Brute-Force Web App Attack
🇫🇷 pm33
Unsolicited connection attempts or aggressive port scan.
Port Scan
Anonymous
Multiple web server 400 error codes from same source ip
Web App Attack
🇫🇷 COMAITE
Multiple web server 400 error codes from same source ip 52.170.253.240.
Web App Attack
🇨🇭 zynex
URL Probing: /wp-content/plugins/hellopress/wp_filemanager.php
Web App Attack
🇳🇱 Site.eu
Excessive multi-domain requests
Brute-Force
🇧🇪 cmbplf
247 requests with url.path */wp-content/plugins/hellopress/wp_filemanager.php
Brute-Force Bad Web Bot
Anonymous
(wp-php-upload-includes) Block attempt to access .php in uploads wordpress uploads or well-known 52.170.253.240 (US/United States/-)
Brute-Force
🇺🇸 mnsf
Too many Status 40X (12)
Brute-Force Web App Attack
🇫🇮 kumiko
[2025-10-18 01:45:38] Apache auth failure: brute force attempt, file probing
Brute-Force Bad Web Bot
🇫🇮 as211431.net
Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /puibr.php UA: Empty string This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
Bad Web Bot
🇮🇩 Burayot
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 52.170.253.240 (US/United States/-): 1 in the last 3600 secs
Web App Attack
🇩🇪 updown.io
DDoS Attack Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇻🇳 113.23.105.184
🇫🇷 78.120.121.242
🇮🇱 62.219.43.106
🇵🇱 45.138.12.40
🇵🇰 203.215.169.112
🇰🇪 197.248.57.11
🇺🇸 168.93.61.50
🇳🇬 152.32.141.2
🇩🇪 84.200.91.80
🇩🇴 38.147.131.28
🇨🇳 36.150.60.24
🇺🇸 35.227.99.242
🇶🇦 34.18.176.54
🇰🇷 211.58.176.42
🇺🇸 206.189.188.28
🇦🇷 190.172.156.159
🇲🇾 186.244.233.77
🇩🇪 138.68.71.196
🇮🇳 103.158.105.213
🇺🇸 74.249.131.24
feedback