JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.247.12.127

52.247.12.127 was found in our database!

This IP was reported 33 times. Confidence of Abuse is 48%: ?

48%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Boydton, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.247.12.127

Whois 52.247.12.127

IP Abuse Reports for 52.247.12.127:

This IP address has been reported a total of 33 times from 22 distinct sources. 52.247.12.127 was first reported on August 4th 2026, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Victor López	2026-08-22 01:13:02 (4 weeks ago)	test.buscaempresas.co 52.247.12.127 - - [21/Aug/2026:20:13:01 -0500] "GET / HTTP/1.1" 444 0 "https:/ ... show more test.buscaempresas.co 52.247.12.127 - - [21/Aug/2026:20:13:01 -0500] "GET / HTTP/1.1" 444 0 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Mobile Safari/537.36" - test.buscaempresas.co 52.247.12.127 - - [21/Aug/2026:20:13:01 -0500] "GET / HTTP/1.1" 444 0 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Mobile Safari/537.36" - test.buscaempresas.co 52.247.12.127 - - [21/Aug/2026:20:13:01 -0500] "GET / HTTP/1.1" 444 0 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Mobile Safari/537.36" - ... show less	Hacking Web App Attack
🇫🇷 EDSL	2026-08-21 00:22:29 (4 weeks ago)	[gps.edsl.fr] Blocked by SysWarden Firewall (Web Attack Port 443)	Web App Attack Port Scan Hacking
🇩🇪 ddobko	2026-08-20 22:28:50 (4 weeks ago)		Bad Web Bot Web App Attack
🇬🇧 neo101	2026-08-20 18:27:25 (4 weeks ago)	Repeat Offender: Previously banned host 52.247.12.127 resumed unauthorized scanning/crawling on path ... show more Repeat Offender: Previously banned host 52.247.12.127 resumed unauthorized scanning/crawling on path '/low-confidence.html'. Intercepted via MEGA CRUSHER (Banned Return #1) counter-measure. show less	Hacking Web App Attack
Anonymous	2026-08-19 16:59:12 (1 month ago)	Bot / seems abusive / Apache connections: 22	DDoS Attack Web Spam Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-08-19 16:47:16 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 52.247.12.127 (US/United States/-): 1 in the l ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 52.247.12.127 (US/United States/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇫🇷 masterguru	2026-08-19 12:47:21 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 52.247.12.127 (US/United States/-): 1 in the l ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 52.247.12.127 (US/United States/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇩🇪 iNetWorker	2026-08-19 03:50:54 (1 month ago)	firewall-block, port(s): 443/tcp	Port Scan
🇳🇱 Site.eu	2026-08-18 22:46:45 (1 month ago)	Excessive multi-domain requests	Brute-Force
🇫🇷 polido	2026-08-18 18:42:10 (1 month ago)	[instance-20240404-1611] Unauthorized connection attempt to port 443 from 52.247.12.127	Port Scan
🇩🇪 Vegascosmetics	2026-08-15 17:01:55 (1 month ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): IP auto-blocked by local security policy.	Hacking Web App Attack
🇵🇱 Budyn	2026-08-15 15:49:13 (1 month ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: budyn.ovh \| URI: /actuator/env \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-08-15 08:37:18 (1 month ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 TPI-Abuse	2026-08-14 22:38:36 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 52.247.12.127 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 52.247.12.127 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 14 18:38:28.806048 2026] [security2:error] [pid 1217085:tid 1217096] [client 52.247.12.127:42526] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.financejob.org.aafm.us\|F\|2"] [data ".financialcertified.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.financejob.org.aafm.us"] [uri "/http;/www.financialcertified.com"] [unique_id "an-Y5FNj0gOzBa2U51JEjQAAAMY"], referer: https://www.financejob.org.aafm.us/ show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-14 22:31:47 (1 month ago)	Http Port:80 (http_status:403) - Agent:Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/5 ... show more Http Port:80 (http_status:403) - Agent:Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 show less	Web App Attack

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 192.144.91.139

🇲🇾 47.250.95.153

🇺🇸 23.125.164.245

🇲🇦 197.153.57.103

🇸🇬 143.198.196.251

🇨🇳 120.40.161.23

🇺🇸 103.250.80.231

🇺🇸 66.249.84.32

🇷🇺 62.84.120.152

🇧🇷 45.164.245.54

🇭🇰 45.138.12.16

🇩🇪 43.228.157.211

🇬🇧 193.163.125.173

🇩🇿 154.253.237.22

🇺🇸 147.185.132.225

🇦🇹 89.144.210.167

🇺🇸 64.62.197.201

🇨🇳 58.42.8.7

🇳🇱 45.148.10.151

🇲🇦 41.141.223.189