52.250.243.97

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
17% Caution
32 reports
28 reporters · latest 2 weeks ago
ISP
Microsoft Corporation
Usage Type
Data Center/Web Hosting/Transit
ASN
AS8075
Domain Name
microsoft.com
Country
🇺🇸 United States of America
City
San Jose, California
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
32 from 28 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 2 🇯🇵 Japan 1
Most common categories Port Scan 3 Open Proxy 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 RAP
2026-10-27 10:02:40 UTC Unauthorized activity to TCP port 5900.
Port Scan
🇺🇸 xmission.com
Blocked by UFW (TCP on 5900) Source port: 22536 TTL: 242 Packet length: 40 TOS: 0x00 This report (for 52.250.243.97) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇯🇵 SentinalX by uzumaru
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: www.gstatic.com:443
Open Proxy Port Scan
🇩🇪 www.fransveldman.world
Fetched browser challenge page 10 times in <2h without solving. Likely bad bot.
Bad Web Bot
🇯🇵 SentinalX by uzumaru
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: speed.hetzner.de:443
Open Proxy Port Scan
🇫🇷 SpaceHost-Server
Brute-Force Web App Attack
🇳🇱 homeshowdomain.nl
Auto-ban: 12 malicious requests on 2026-07-03 (e.g., env/backup probes, brute-force, or error bursts).
Web App Attack SSH Hacking
🇨🇴 adalbertoreyes.org
CategoryPortScan
Port Scan
🇸🇬 securejdprop
This IP was detected by CrowdSec triggering crowdsecurity/http-probing. crowdsecurity/http-probing
Hacking Web App Attack
🇲🇽 octageeks.com
Wordpress malicious attack:[octaflood]
Web App Attack
🇫🇷 SpaceHost-Server
Brute-Force Web App Attack
🇳🇱 homeshowdomain.nl
Auto-ban: >3000 req/min op 2026-07-03
Web App Attack SSH Hacking
🇳🇴 jad-abuse
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: wp_login. Observed by 1 sensor(s); 2 hits.
Brute-Force Web App Attack
🇺🇸 WellSpring
wordpress scan on 229.today/wp/wp-login.php — WellSpr.ing/NetSentinel civic-AI security layer
Bad Web Bot Web App Attack
🇺🇸 kosada.com
Web vulnerability probing: /wp/wp-login.php
Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇫🇷 85.217.140.48
🇺🇸 67.205.191.100
🇫🇷 13.140.142.162
🇳🇱 195.178.110.217
🇦🇷 181.16.240.235
🇨🇳 117.70.94.155
🇸🇪 94.254.63.186
🇺🇿 84.54.72.51
🇺🇸 70.167.234.161
🇳🇱 45.148.10.152
🇮🇹 31.223.250.54
🇧🇷 177.101.139.36
🇳🇱 138.226.239.233
🇨🇳 114.228.29.173
🇩🇪 57.129.120.143
🇺🇸 172.206.242.255
🇧🇩 103.77.253.237
🇷🇴 92.118.39.78
🇺🇸 87.87.168.6
🇰🇿 37.150.15.109
feedback