JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.250.210.67

52.250.210.67 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 69%: ?

69%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.250.210.67

Whois 52.250.210.67

IP Abuse Reports for 52.250.210.67:

This IP address has been reported a total of 17 times from 16 distinct sources. 52.250.210.67 was first reported on April 21st 2026, and the most recent report was 18 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇴 jad-abuse	2026-06-16 12:58:52 (18 hours ago)	ThreatFeed automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_exposure ... show more ThreatFeed automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_exposure, env_probe. Observed by 1 sensor(s); 30 hits. show less	Web App Attack
🇺🇸 drewf.ink	2026-06-16 09:07:35 (22 hours ago)	[09:07] Port scanning. Port(s) scanned: TCP/2096	Port Scan
🇫🇷 dynamix	2026-06-14 15:43:42 (2 days ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-06-14 15:25:39 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 52.250.210.67 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 52.250.210.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 11:25:33.305180 2026] [security2:error] [pid 15886:tid 15886] [client 52.250.210.67:20740] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.181"] [uri "/.git/config"] [unique_id "ai7H7SzuuY8X8qA-8rcXdwAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-14 14:35:07 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 52.250.210.67 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 52.250.210.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 10:35:02.336558 2026] [security2:error] [pid 17533:tid 17558] [client 52.250.210.67:21780] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.86"] [uri "/.git/HEAD"] [unique_id "ai68FnSkbD2qSnVRj5MW_QAAAFU"] show less	Brute-Force Bad Web Bot Web App Attack
🇯🇵 VXG-NET	2026-06-14 13:49:43 (2 days ago)	port=80, indicator_type=info-leak	Hacking
🇧🇾 lns.bz	2026-06-14 13:20:08 (2 days ago)	Too many 404 requests [BY]	Web App Attack
🇺🇸 aks4226	2026-06-14 12:22:11 (2 days ago)	Attacking common web applications. (n01)	Web App Attack
🇬🇧 PeravixGroup	2026-06-02 14:19:14 (2 weeks ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇺🇸 MPL	2026-06-02 07:33:54 (2 weeks ago)	tcp port scan (8 or more attempts)	Port Scan
🇩🇪 acadeova	2026-06-02 07:11:19 (2 weeks ago)	🚨 Recon detected (nft drop) SRC=52.250.210.67 Observed=TCP dpt=8080 in=enp0s6 ttl=39 Time=recent(jou ... show more 🚨 Recon detected (nft drop) SRC=52.250.210.67 Observed=TCP dpt=8080 in=enp0s6 ttl=39 Time=recent(journalctl: 10 minutes ago) Assessment=Generic scanning / reconnaissance (PORT_SCAN) show less	Port Scan
🇺🇸 xmission.com	2026-06-02 06:21:49 (2 weeks ago)	Blocked by UFW (TCP on 2087) Source port: 49558 TTL: 51 Packet length: 60 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 2087) Source port: 49558 TTL: 51 Packet length: 60 TOS: 0x00 This report (for 52.250.210.67) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇦🇷 Bruno	2026-06-02 05:45:10 (2 weeks ago)	Port Scanner: 52.250.210.67	Port Scan
🇦🇺 MAGIC	2026-06-01 00:29:03 (2 weeks ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇯🇵 demonsword	2026-04-30 04:42:51 (1 month ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: www.eastmoney.com:443 show less	Open Proxy Port Scan

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇯🇴 176.28.246.128

🇫🇷 217.113.194.123

🇩🇪 202.61.245.131

🇺🇸 162.243.8.173

🇺🇸 76.33.38.202

🇺🇸 66.93.14.85

🇮🇶 65.20.174.49

🇨🇳 58.48.53.254

🇸🇬 47.82.14.32

🇫🇷 37.187.104.215

🇧🇪 34.156.18.130

🇨🇳 218.0.56.30

🇬🇧 217.32.206.106

🇬🇧 193.163.125.252

🇺🇸 193.34.72.20

🇧🇩 182.48.68.82

🇹🇷 176.88.168.119

🇮🇶 169.224.4.184

🇮🇹 151.95.211.132

🇩🇿 105.98.35.250