AbuseIPDB » 52.255.170.3

Check an IP Address, Domain Name, or Subnet

e.g. 3.231.29.122, microsoft.com, or 5.188.10.0/24

52.255.170.3 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 54%: ?

54%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
Domain Name	microsoft.com
Country	United States of America
City	Washington, Virginia

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 52.255.170.3

Whois 52.255.170.3

IP Abuse Reports for 52.255.170.3:

This IP address has been reported a total of 10 times from 7 distinct sources. 52.255.170.3 was first reported on February 17th 2021, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	Date	Comment	Categories
WebWizards.NZ	20 Feb 2021	Trolling for resource vulnerabilities	Web App Attack
4server	20 Feb 2021	[SatFeb2016:29:40.5146592021][:error][pid1759:tid47810550523648][client52.255.170.3:56290][client52. ... show more[SatFeb2016:29:40.5146592021][:error][pid1759:tid47810550523648][client52.255.170.3:56290][client52.255.170.3]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?:\\\\\\\\b\(\?:\\\\\\\\.\(\?:ht\(\?:access\\|passwd\\|group$\\|www_\?acl\)\\|global\\\\\\\\.asa\\|httpd\\\\\\\\.conf\\|boot\\\\\\\\.ini\\|web.config\)\\\\\\\\b\\|$\\|\^\\|\\\\\\\\.\\\\\\\\.$/etc/\\|/\\\\\\\\.$\?:history\\|bash_history\\|sh_history\\|env$\$\)\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"211\"][id\"390709\"][rev\"30\"][msg\"Atomicorp.comWAFRules:Attempttoaccessprotectedfileremotely\"][data\"/.env\"][severity\"CRITICAL\"][hostname\"81.17.25.238\"][uri\"/.env\"][unique_id\"YDEq5M3Op5NDcrlTecJOlgAAAEU\"][SatFeb2016:29:41.3657462021][:error][pid1826:tid47810592548608][client52.255.170.3:59940][client52.255.170.3]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?:\\\\\\\\b\(\?:\\\\\\\\.\(\?:ht\(\?:access\\|passwd\\|group$\\|www_\?acl\)\\|global\\\\\\\\.asa\\|httpd\\\\\\\\.conf\\|boot\\\\ show less	Blog Spam
Anonymous	20 Feb 2021	ModSecurity detections (a)	Bad Web Bot Web App Attack
IrisFlower	20 Feb 2021	Unauthorized connection attempt detected from IP address 52.255.170.3 to port 80	Hacking
IrisFlower	20 Feb 2021	Unauthorized connection attempt detected from IP address 52.255.170.3 to port 80	Hacking
4server	19 Feb 2021	[SatFeb2005:34:31.1120192021][:error][pid5107:tid47263231641344][client52.255.170.3:62357][client52. ... show more[SatFeb2005:34:31.1120192021][:error][pid5107:tid47263231641344][client52.255.170.3:62357][client52.255.170.3]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?:\\\\\\\\b\(\?:\\\\\\\\.\(\?:ht\(\?:access\\|passwd\\|group$\\|www_\?acl\)\\|global\\\\\\\\.asa\\|httpd\\\\\\\\.conf\\|boot\\\\\\\\.ini\\|web.config\)\\\\\\\\b\\|$\\|\^\\|\\\\\\\\.\\\\\\\\.$/etc/\\|/\\\\\\\\.$\?:history\\|bash_history\\|sh_history\\|env$\$\)\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"211\"][id\"390709\"][rev\"30\"][msg\"Atomicorp.comWAFRules:Attempttoaccessprotectedfileremotely\"][data\"/.env\"][severity\"CRITICAL\"][hostname\"136.243.224.51\"][uri\"/.env\"][unique_id\"YDCRVxXArXvizaibLP3WoQAAABY\"][SatFeb2005:34:31.9155182021][:error][pid5107:tid47263235843840][client52.255.170.3:62603][client52.255.170.3]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?:\\\\\\\\b\(\?:\\\\\\\\.\(\?:ht\(\?:access\\|passwd\\|group$\\|www_\?acl\)\\|global\\\\\\\\.asa\\|httpd\\\\\\\\.conf\\|boot\\ show less	Port Scan Brute-Force Web App Attack
Database.red	18 Feb 2021	[2021-02-18 09:42:15] Exploit probing - /.env	Hacking Brute-Force Web App Attack
HJ5Ss4Ju	17 Feb 2021	Forbidden directory scan :: 2021/02/17 23:14:17 [error] 1075#1075: 79768 access forbidden by rule, ... show moreForbidden directory scan :: 2021/02/17 23:14:17 [error] 1075#1075: 79768 access forbidden by rule, client: 52.255.170.3, server: [censored_1], request: "GET /.env HTTP/1.1", host: "www.[censored_1]" show less	Hacking
TheMadBeaker	17 Feb 2021	Port Scan: TCP/80	Port Scan
TheMadBeaker	17 Feb 2021	Fail2Ban Ban Triggered HTTP Exploit Attempt	Brute-Force Web App Attack