JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.247.125.210

52.247.125.210 was found in our database!

This IP was reported 59 times. Confidence of Abuse is 3%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Boydton, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.247.125.210

Whois 52.247.125.210

IP Abuse Reports for 52.247.125.210:

This IP address has been reported a total of 59 times from 9 distinct sources. 52.247.125.210 was first reported on February 1st 2023, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-12 23:00:01 (1 week ago)	(mod_security) mod_security (id:217210) triggered by 52.247.125.210 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:217210) triggered by 52.247.125.210 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 18:59:56.822940 2026] [security2:error] [pid 7455:tid 7455] [client 52.247.125.210:26770] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./](?::\\\\d+)?)?/[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S])?\|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?\|options \\\\)\\\\s+[\\\\w\\\\./]+\|get /[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line\|\|keysenterprise.com\|F\|4"] [data "GET ?msg=please+try+adding+a+site+to+the+url HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "keysenterprise.com"] [uri "/"] [unique_id "as1mbB9iSSB0GaX-ogdzLQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-06 23:25:45 (1 month ago)	(mod_security) mod_security (id:217210) triggered by 52.247.125.210 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:217210) triggered by 52.247.125.210 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 06 19:25:38.466205 2026] [security2:error] [pid 32580:tid 32580] [client 52.247.125.210:21627] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./](?::\\\\d+)?)?/[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S])?\|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?\|options \\\\)\\\\s+[\\\\w\\\\./]+\|get /[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line\|\|keysenterprise.com\|F\|4"] [data "GET ?msg=please+try+adding+a+site+to+the+url HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "keysenterprise.com"] [uri "/"] [unique_id "ap32cnyc11THA2oq84SdtAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 4server	2026-06-25 03:51:36 (3 months ago)	[ThuJun2505:51:29.4913212026][security2:error][pid2048564:tid2048581][client52.247.125.210:0]ModSecu ... show more [ThuJun2505:51:29.4913212026][security2:error][pid2048564:tid2048581][client52.247.125.210:0]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?i$$10\\\\\\\\.\\\\\\\\d{1\,3}\\\\\\\\.\\\\\\\\d{1\,3}\\\\\\\\.\\\\\\\\d{1\,3}\\|192\\\\\\\\.168\\\\\\\\.\\\\\\\\d{1\,3}\\\\\\\\.\\\\\\\\d{1\,3}\\|172\\\\\\\\.\(1[6-9]\\|2[0-9]\\|3[0-1]$\\\\\\\\.\\\\\\\\d{1\,3}\\\\\\\\.\\\\\\\\d{1\,3}\\|fe80::\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"25\"][id\"990004\"][msg\"SSRFattempttoprivate/internalnetworkdetected\"][hostname\"www.vetreriaperletti.ch\"][uri\"/\"][unique_id\"ajylwXmQy3veRn9ePus3mAAAAM4\"] show less	Hacking Web App Attack
🇦🇺 MAGIC	2026-05-31 00:18:47 (4 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇫🇷 mrcrassi	2026-05-30 21:45:34 (4 months ago)	Triggered Cloudflare WAF (botFight) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET ... show more Triggered Cloudflare WAF (botFight) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇦🇺 MAGIC	2026-04-20 02:17:37 (6 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇨🇭 4server	2026-04-17 04:27:04 (6 months ago)	[FriApr1706:26:57.7450752026][security2:error][pid398346:tid398369][client52.247.125.210:0]ModSecuri ... show more [FriApr1706:26:57.7450752026][security2:error][pid398346:tid398369][client52.247.125.210:0]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?i$$10\\\\\\\\.\\\\\\\\d{1\,3}\\\\\\\\.\\\\\\\\d{1\,3}\\\\\\\\.\\\\\\\\d{1\,3}\\|192\\\\\\\\.168\\\\\\\\.\\\\\\\\d{1\,3}\\\\\\\\.\\\\\\\\d{1\,3}\\|172\\\\\\\\.\(1[6-9]\\|2[0-9]\\|3[0-1]$\\\\\\\\.\\\\\\\\d{1\,3}\\\\\\\\.\\\\\\\\d{1\,3}\\|fe80::\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"24\"][id\"990004\"][msg\"SSRFattempttoprivate/internalnetworkdetected\"][hostname\"www.vetreriaperletti.ch\"][uri\"/\"][unique_id\"aeG2kcoO-z7qXO0u47DhKgAAABU\"] show less	Hacking Web App Attack
🇨🇦 ISPLtd	2026-02-27 14:42:39 (7 months ago)	Varying user agents. Does not honour robots.txt.	Hacking Bad Web Bot
Anonymous	2025-11-11 21:53:03 (11 months ago)	Malicious activity detected	Hacking Web App Attack
Anonymous	2025-11-03 23:57:03 (11 months ago)	Malicious activity detected	Hacking Web App Attack
Anonymous	2025-10-29 00:16:34 (11 months ago)	Malicious activity detected	Hacking Web App Attack
Anonymous	2025-10-27 22:07:19 (11 months ago)	Malicious activity detected	Hacking Web App Attack
Anonymous	2025-07-16 21:58:19 (1 year ago)	Malicious activity detected	Hacking Web App Attack
🇦🇺 MAGIC	2025-07-12 00:07:50 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2025-07-09 22:39:18 (1 year ago)	Malicious activity detected	Hacking Web App Attack

Showing 1 to 15 of 59 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇰 223.123.104.116

🇺🇸 66.206.39.42

🇺🇦 213.111.148.10

🇿🇦 197.89.157.9

🇪🇸 185.183.106.3

🇳🇱 176.65.148.167

🇺🇸 162.216.149.237

🇬🇧 86.38.187.239

🇷🇺 80.247.110.206

🇬🇧 77.67.26.165

🇸🇦 51.39.60.21

🇬🇧 46.101.41.55

🇮🇳 42.104.155.135

🇨🇳 42.52.219.118

🇬🇧 35.203.211.150

🇬🇧 200.138.46.199

🇳🇱 93.123.109.178

🇬🇧 86.38.187.156

🇬🇧 64.205.72.179

🇮🇳 13.203.210.157