JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

52.254.82.201

Neutral Activity

Abuse Confidence Score

0% Low Risk

36 reports

23 reporters · latest 10 months ago

ISP: Microsoft Corporation
Usage Type: Data Center/Web Hosting/Transit
ASN: AS8075
Domain Name: microsoft.com
Country: 🇺🇸 United States of America
City: Boydton, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

52.254.82.201 has been reported 36 times. The most recent report is from 10 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

36 from 23 distinct reporters

First reported

November 25th 2025

Most recent report

10 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2025-12-15 08:28:12 UTC · (10 months ago)	Blocked: Reason='Auto-block via DW'; Requests=0	Hacking
🇳🇱 debestelapp	2025-11-27 03:20:04 UTC · (11 months ago)		Web App Attack
🇺🇸 mnsf	2025-11-27 02:05:26 UTC · (11 months ago)	Too many Status 40X (11)	Brute-Force Web App Attack
🇲🇾 Rizzy	2025-11-27 01:15:21 UTC · (11 months ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇬🇧 [email protected]	2025-11-27 00:53:13 UTC · (11 months ago)	...	Brute-Force SSH
🇩🇪 mk-dizajn.hr	2025-11-27 00:17:53 UTC · (11 months ago)	$f2bV_matches	Brute-Force Web App Attack
🇨🇭 zynex	2025-11-26 23:07:23 UTC · (11 months ago)	URL Probing: /cgi-bin/bypass.php	Web App Attack
🇳🇱 homeshowdomain.nl	2025-11-26 23:01:37 UTC · (11 months ago)	Auto-ban: >3000 req/min op 2025-11-26	Hacking Web App Attack SSH
🇺🇸 TPI-Abuse	2025-11-26 22:47:08 UTC · (11 months ago)	(mod_security) mod_security (id:210492) triggered by 52.254.82.201 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 17:47:00.951500 2025] [security2:error] [pid 16468:tid 16468] [client 52.254.82.201:3741] Mo ... show more (mod_security) mod_security (id:210492) triggered by 52.254.82.201 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 17:47:00.951500 2025] [security2:error] [pid 16468:tid 16468] [client 52.254.82.201:3741] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sguard.co"] [uri "/user/.env"] [unique_id "aSeDZE_lYJk9_XxN1tcxtwAAAAs"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 Some Body	2025-11-26 22:42:28 UTC · (11 months ago)	Aggressive web scan	Brute-Force Web App Attack
🇩🇪 Mr-Money	2025-11-26 22:04:51 UTC · (11 months ago)	scenario: crowdsecurity/http-probing - events: 11	Hacking Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 22:03:29 UTC · (11 months ago)	(mod_security) mod_security (id:210492) triggered by 52.254.82.201 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 17:03:26.745919 2025] [security2:error] [pid 16689:tid 16689] [client 52.254.82.201:7351] Mo ... show more (mod_security) mod_security (id:210492) triggered by 52.254.82.201 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 17:03:26.745919 2025] [security2:error] [pid 16689:tid 16689] [client 52.254.82.201:7351] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "citati.net"] [uri "/user/.env"] [unique_id "aSd5LlUaKs0UQKbGQdfcGgAAAAY"], referer: https://www.bing.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 21:21:53 UTC · (11 months ago)	(mod_security) mod_security (id:210492) triggered by 52.254.82.201 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 16:21:48.598466 2025] [security2:error] [pid 22859:tid 22859] [client 52.254.82.201:10833] M ... show more (mod_security) mod_security (id:210492) triggered by 52.254.82.201 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 16:21:48.598466 2025] [security2:error] [pid 22859:tid 22859] [client 52.254.82.201:10833] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.custominktees.us"] [uri "/user/.env"] [unique_id "aSdvbJcVi9zzs97SHvKJcAAAAAU"], referer: https://www.bing.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇦🇹 penguin-solutions.at	2025-11-26 21:12:29 UTC · (11 months ago)	Excessive 403/404 errors ...	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 19:48:57 UTC · (11 months ago)	(mod_security) mod_security (id:210492) triggered by 52.254.82.201 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 14:48:51.483324 2025] [security2:error] [pid 3879:tid 3879] [client 52.254.82.201:4936] ModS ... show more (mod_security) mod_security (id:210492) triggered by 52.254.82.201 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 14:48:51.483324 2025] [security2:error] [pid 3879:tid 3879] [client 52.254.82.201:4936] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jjhfamily.com"] [uri "/user/.env"] [unique_id "aSdZoyUjPrGAkv_krKy7IQAAAAA"], referer: https://www.google.de/ show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 139.212.70.218

🇺🇸 91.230.168.149

🇧🇬 79.124.40.186

🇳🇱 213.209.159.241

🇺🇦 194.44.96.52

🇳🇱 193.176.31.219

🇷🇺 188.187.214.44

🇺🇸 186.244.247.27

🇭🇰 154.92.17.128

🇦🇪 139.185.55.154

🇸🇦 138.113.188.35

🇨🇳 116.172.251.35

🇸🇮 102.220.161.86

🇷🇴 92.118.39.71

🇷🇴 80.94.95.83

🇮🇳 45.116.112.212

🇨🇳 36.35.165.139

🇬🇧 35.203.210.3

🇵🇰 202.47.44.49

🇹🇳 197.14.201.122