JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.247.210.114

52.247.210.114 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 70%: ?

70%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Moses Lake, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.247.210.114

Whois 52.247.210.114

IP Abuse Reports for 52.247.210.114:

This IP address has been reported a total of 20 times from 17 distinct sources. 52.247.210.114 was first reported on July 26th 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-09-02 04:45:47 (5 hours ago)	Blocked by UFW (TCP on 2096) Source port: 33809 TTL: 52 Packet length: 60 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 2096) Source port: 33809 TTL: 52 Packet length: 60 TOS: 0x00 This report (for 52.247.210.114) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇦🇺 LiftUp Hosting	2026-09-02 04:34:04 (5 hours ago)	Honeypot hit: Empty payload (likely service probe); 8181 [1], 2096 [1], 8081 [1], 8088 [1], 2087 [1] ... show more Honeypot hit: Empty payload (likely service probe); 8181 [1], 2096 [1], 8081 [1], 8088 [1], 2087 [1], 8888 [1] TCP show less	Port Scan
Anonymous	2026-09-02 04:19:48 (5 hours ago)	Sensitive Configuration File Disclosure.	Hacking
🇹🇼 kk_it_man	2026-09-02 03:30:13 (6 hours ago)		Port Scan
🇺🇸 RAP	2026-09-02 00:49:54 (9 hours ago)	2026-09-02 00:49:54 UTC Unauthorized activity to TCP port 8080. Web App	Port Scan Web App Attack
🇷🇸 Scan	2026-09-02 00:16:35 (9 hours ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
Anonymous	2026-08-09 06:09:44 (3 weeks ago)	Illegitimate and/or suspicious requests.	Hacking
🇺🇸 xmission.com	2026-08-08 07:39:06 (3 weeks ago)	Blocked by UFW (TCP on 2078) Source port: 33107 TTL: 52 Packet length: 60 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 2078) Source port: 33107 TTL: 52 Packet length: 60 TOS: 0x00 This report (for 52.247.210.114) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2026-08-08 07:30:07 (3 weeks ago)	tcp port scan (10 or more attempts)	Port Scan
🇺🇸 TPI-Abuse	2026-08-08 07:04:20 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 52.247.210.114 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 52.247.210.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 08 03:04:15.597917 2026] [security2:error] [pid 3916062:tid 3916062] [client 52.247.210.114:33099] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.151.28"] [uri "/.git/HEAD"] [unique_id "anbU72EU5VvPS95dCbWv8AAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-08 06:34:24 (3 weeks ago)	[Fri Aug 07 23:34:15.212358 2026] [authz_core:error] [pid 456050] [client 52.247.210.114:33104] AH01 ... show more [Fri Aug 07 23:34:15.212358 2026] [authz_core:error] [pid 456050] [client 52.247.210.114:33104] AH01630: client denied by server configuration: /home/appowner/www/sec/.git [Fri Aug 07 23:34:16.806615 2026] [authz_core:error] [pid 448186] [client 52.247.210.114:33107] AH01630: client denied by server configuration: /home/appowner/www/sec/.git [Fri Aug 07 23:34:21.258408 2026] [authz_core:error] [pid 447970] [client 52.247.210.114:33090] AH01630: client denied by server configuration: /home/appowner/www/sec/.git [Fri Aug 07 23:34:22.129281 2026] [authz_core:error] [pid 447975] [client 52.247.210.114:33106] AH01630: client denied by server configuration: /home/appowner/www/sec/.git [Fri Aug 07 23:34:23.775098 2026] [authz_core:error] [pid 447976] [client 52.247.210.114:33101] AH01630: client denied by server configuration: /home/appowner/www/sec/.git ... show less	Brute-Force SSH
🇺🇸 gu-alvareza	2026-08-08 05:05:57 (3 weeks ago)	Spring.Boot.Actuator.Unauthorized.Access	Brute-Force
🇷🇸 Scan	2026-08-03 00:07:01 (4 weeks ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇩🇪 bescared	2026-08-02 23:53:19 (4 weeks ago)	F2B - Malicious activity detected. Excessive port scans. -151302cd-	Port Scan
🇩🇪 schuh	2026-08-02 23:20:34 (4 weeks ago)	02-08-2026:23:19:43UTC [Port Scan] unique_ports:9 ports:2078,2082,2083,2096,443,2087,2077,2095,2086 ... show more 02-08-2026:23:19:43UTC [Port Scan] unique_ports:9 ports:2078,2082,2083,2096,443,2087,2077,2095,2086 (9 packets). SRC=52.247.210.114 TTL=39 DF PROTO=TCP SPT=17410 DPT=2078 SYN show less	Port Scan

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 218.13.47.83

🇧🇷 181.218.172.74

🇦🇺 173.239.250.82

🇱🇹 77.90.185.20

🇰🇷 61.72.55.130

🇬🇧 31.14.254.52

🇺🇸 23.242.28.103

🇨🇳 1.69.69.140

🇳🇱 213.177.179.139

🇳🇱 195.178.110.227

🇳🇱 195.178.110.132

🇭🇰 156.225.1.99

🇨🇲 154.70.102.114

🇧🇩 137.59.154.5

🇮🇳 122.183.48.239

🇪🇪 95.85.245.227

🇫🇷 82.121.194.164

🇺🇸 73.124.146.51

🇵🇱 57.128.239.181

🇺🇸 20.163.38.150