JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.241.24.215

52.241.24.215 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 91%: ?

91%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.241.24.215

Whois 52.241.24.215

IP Abuse Reports for 52.241.24.215:

This IP address has been reported a total of 17 times from 16 distinct sources. 52.241.24.215 was first reported on July 25th 2026, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Tman111	2026-07-29 04:36:01 (8 hours ago)	Unsolicited connection attempt to web ports (80/443). No service is offered to direct-to-IP traffic; ... show more Unsolicited connection attempt to web ports (80/443). No service is offered to direct-to-IP traffic; connection dropped. Scanner/bot behavior. show less	Port Scan
🇺🇸 xmission.com	2026-07-29 04:34:58 (8 hours ago)	Blocked by UFW (TCP on 80) Source port: 24640 TTL: 52 Packet length: 60 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 80) Source port: 24640 TTL: 52 Packet length: 60 TOS: 0x00 This report (for 52.241.24.215) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇩🇪 LRob	2026-07-27 22:56:49 (1 day ago)	CrowdSec: crowdsecurity/http-sensitive-files \| req: /.git/HEAD \| 5 distinct paths \| UA: Mozilla/5.0 ... show more CrowdSec: crowdsecurity/http-sensitive-files \| req: /.git/HEAD \| 5 distinct paths \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 show less	Hacking
🇹🇷 muratkaya665	2026-07-27 17:37:55 (1 day ago)	IPS Attack Blocked by server.mura****.com.tr Fortigate-80E. Attack Name: HTPasswd.Access. Dest Por ... show more IPS Attack Blocked by server.mura****.com.tr Fortigate-80E. Attack Name: HTPasswd.Access. Dest Port: 80. Service: HTTP. Message: web_server: HTPasswd.Access. show less	Hacking
🇵🇱 webadmin	2026-07-27 17:29:14 (1 day ago)	2026-07-27T19:28:53.168470+02:00 tytan mobile-sai-api[4129]: [error] client: 52.241.24.215 server: 2 ... show more 2026-07-27T19:28:53.168470+02:00 tytan mobile-sai-api[4129]: [error] client: 52.241.24.215 server: 213.25.105.152, request: "GET", url: http://213.25.105.152/.git/HEAD [404]: Not Found 2026-07-27T19:28:56.534906+02:00 tytan mobile-sai-api[4129]: [error] client: 52.241.24.215 server: 213.25.105.152, request: "GET", url: http://213.25.105.152/.git/config [404]: Not Found 2026-07-27T19:29:13.084541+02:00 tytan mobile-sai-api[4129]: [error] client: 52.241.24.215 server: 213.25.105.152, request: "GET", url: http://213.25.105.152/.git/logs/HEAD [404]: Not Found 2026-07-27T19:29:13.084541+02:00 tytan mobile-sai-api[4129]: [error] client: 52.241.24.215 server: 213.25.105.152, request: "GET", url: http://213.25.105.152/.git/refs/heads/master [404]: Not Found show less	Web App Attack
🇮🇹 Progetto1	2026-07-27 15:30:05 (1 day ago)	Multiple exploit attempts	Hacking Brute-Force Exploited Host Web App Attack
🇩🇪 Admins@FBN	2026-07-27 15:00:41 (1 day ago)	FW-PortScan: Traffic Blocked srcport=51408 dstport=2087	Port Scan
🇮🇩 sockominfo	2026-07-27 15:00:28 (1 day ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Hacking Web App Attack
🇩🇪 Admins@FBN	2026-07-27 14:02:05 (1 day ago)	FW-PortScan: Traffic Blocked srcport=51464 dstport=443	Port Scan
🇺🇸 RAP	2026-07-27 13:56:00 (1 day ago)	2026-07-27 13:56:00 UTC Unauthorized activity to TCP port 8080. Web App	Port Scan Web App Attack
🇭🇰 sandra361	2026-07-27 13:03:17 (2 days ago)	Port scan detected: 15 attempts across 8 ports (80,443,2082,2083,2086,2087,8080,8443). \| Evidence: G ... show more Port scan detected: 15 attempts across 8 ports (80,443,2082,2083,2086,2087,8080,8443). \| Evidence: GHOST_SCAN: IN=eth0 SRC=52.241.24.215 LEN=60 TOS=0x14 PREC=0x00 TTL=46 ID=2 DF PROTO=TCP SPT=51676 DPT=2086 WINDOW=64240 RES=0x00 SYN URGP=0 show less	Port Scan
🇺🇸 gu-alvareza	2026-07-27 07:05:27 (2 days ago)	Spring.Boot.Actuator.Unauthorized.Access	Brute-Force
🇺🇸 schematics.cc	2026-07-25 01:36:49 (4 days ago)	Blocked by on honeypot2 [2095/tcp] \| SPT: 25235 \| TTL: 117 \| LEN: 40 \| TOS: 0x00 • Reported by: abus ... show more Blocked by on honeypot2 [2095/tcp] \| SPT: 25235 \| TTL: 117 \| LEN: 40 \| TOS: 0x00 • Reported by: abuse.terraforge.fun show less	Port Scan
🇺🇸 TPI-Abuse	2026-07-25 01:23:49 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 52.241.24.215 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 52.241.24.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 21:23:45.258955 2026] [security2:error] [pid 2243104:tid 2243110] [client 52.241.24.215:24850] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.123"] [uri "/.git/config"] [unique_id "amQQId6j2zrGEN9-CfBhOAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-25 01:14:28 (4 days ago)	denied traffic to a non-approved destination port. destination port 2082.	Port Scan

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2604:a880:400:d1:0:4:c25a:3001

🇭🇳 190.92.15.10

🇩🇪 165.22.70.229

🇩🇪 159.65.126.241

🇩🇪 134.209.229.174

🇨🇳 114.98.63.18

🇨🇳 111.229.212.37

🇺🇸 104.28.219.195

🇿🇦 102.64.33.164

🇨🇳 101.126.129.127

🇺🇸 64.62.156.116

🇺🇸 50.188.204.213

🇳🇱 45.198.224.59

🇨🇳 36.106.166.30

🇺🇸 2604:a880:400:d1:0:4:c25b:1001

🇧🇼 168.167.228.123

🇩🇪 167.172.104.129

🇮🇩 152.32.155.14

🇺🇸 47.252.16.44

🇺🇸 34.24.73.154