JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.238.210.254

52.238.210.254 was found in our database!

This IP was reported 1,089 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Des Moines, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.238.210.254

Whois 52.238.210.254

IP Abuse Reports for 52.238.210.254:

This IP address has been reported a total of 1,089 times from 564 distinct sources. 52.238.210.254 was first reported on August 9th 2026, and the most recent report was 8 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Campus France	2026-08-20 16:04:22 (8 minutes ago)	[Thu Aug 20 18:04:21.928001 2026] [php:error] [pid 3754326] [client 52.238.210.254:20280] script '/v ... show more [Thu Aug 20 18:04:21.928001 2026] [php:error] [pid 3754326] [client 52.238.210.254:20280] script '/var/www/html/desk.radio-campus.org/desk/www/this_is_a_new_hello_world.php' not found or unable to stat ... show less	Brute-Force Web App Attack
🇬🇧 Yosi	2026-08-20 15:37:05 (35 minutes ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force
🇩🇪 Phenix Info	2026-08-20 15:30:46 (42 minutes ago)	SmallGuard.fr - Empty User Agent	Web App Attack
🇩🇪 psauxit	2026-08-20 15:26:55 (46 minutes ago)	Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrp ... show more Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrpc_attack, wp-login brute force, excessive crawling/scraping show less	Web App Attack Hacking
Anonymous	2026-08-20 15:20:39 (52 minutes ago)	52.238.210.254 - - [20/Aug/2026:15:20:30 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 52.238.210.254 - - [20/Aug/2026:15:20:30 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 302 612 "-" "-" 52.238.210.254 - - [20/Aug/2026:15:20:30 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 14022 "-" "-" 52.238.210.254 - - [20/Aug/2026:15:20:31 +0000] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 302 584 "-" "-" 52.238.210.254 - - [20/Aug/2026:15:20:31 +0000] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 404 9188 "-" "-" 52.238.21 ... show less	Web App Attack
🇫🇮 mnazibo	2026-08-20 15:15:09 (57 minutes ago)	Date: Aug 20 18:04:40 2026 EAT \| Reported IP: 52.238.210.254 mod_security \| id: 953100 959100 \| US/u ... show more Date: Aug 20 18:04:40 2026 EAT \| Reported IP: 52.238.210.254 mod_security \| id: 953100 959100 \| US/usernameab.my_domain/- \| Connections: 1 \| Blocked: Permanent Block: [LF_MODSEC] \| Logs: ; PHP Information Leakage; Outbound Anomaly Score Exceeded (Total Score: 4) show less	SQL Injection Brute-Force Bad Web Bot
🇨🇭 🇨🇭 Hosting	2026-08-20 15:10:03 (1 hour ago)	Automated security scanning detected: WordPress Login Brute-Force / Probing. Systematic reconnaissan ... show more Automated security scanning detected: WordPress Login Brute-Force / Probing. Systematic reconnaissance using automated tools. show less	Brute-Force Web App Attack
Anonymous	2026-08-20 14:54:43 (1 hour ago)	$f2bV_matches	Port Scan Hacking
🇮🇹 VHosting	2026-08-20 14:50:07 (1 hour ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇵🇱 itsvic.dev	2026-08-20 14:44:28 (1 hour ago)	52.238.210.254 - - [20/Aug/2026:14:44:26 +0000] "wings.itsvic.dev" "GET /wp-content/plugins/hellopre ... show more 52.238.210.254 - - [20/Aug/2026:14:44:26 +0000] "wings.itsvic.dev" "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 14 "-" "-" 52.238.210.254 - - [20/Aug/2026:14:44:26 +0000] "wings.itsvic.dev" "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 14 "-" "-" 52.238.210.254 - - [20/Aug/2026:14:44:27 +0000] "wings.itsvic.dev" "GET /class-t.api.php HTTP/1.1" 404 14 "-" "-" ... show less	Brute-Force Web App Attack
🇫🇮 6kilowatti	2026-08-20 14:41:13 (1 hour ago)	2026/08/20 17:41:12 [error] 1073#1073: 22819 FastCGI sent in stderr: "Primary script unknown" while ... show more 2026/08/20 17:41:12 [error] 1073#1073: 22819 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 52.238.210.254, server: backup.oh6ah.fi, request: "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/backup.oh6ah.fi.sock:", host: "backup.oh6ah.fi" 2026/08/20 17:41:12 [error] 1073#1073: *22819 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 52.238.210.254, server: backup.oh6ah.fi, request: "GET /this_is_a_new_hello_world.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/backup.oh6ah.fi.sock:", host: "backup.oh6ah.fi" ... show less	Web App Attack
Anonymous	2026-08-20 14:39:02 (1 hour ago)	Unauthorized SSH login attempts	Brute-Force SSH
Anonymous	2026-08-20 14:28:12 (1 hour ago)	52.238.210.254 - - [20/Aug/2026:14:28:12 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 52.238.210.254 - - [20/Aug/2026:14:28:12 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 302 513 "-" "-" ... show less	Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-08-20 14:20:07 (1 hour ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
Anonymous	2026-08-20 14:18:29 (1 hour ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack

Showing 1 to 15 of 1089 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇳 181.119.190.113

🇸🇦 169.148.34.65

🇱🇾 154.127.69.6

🇫🇷 85.217.140.45

🇸🇪 83.177.240.182

🇷🇴 80.94.92.179

🇳🇱 172.235.165.68

🇺🇸 162.241.130.19

🇮🇷 109.122.247.86

🇮🇳 20.193.153.215

🇨🇳 116.230.66.189

🇫🇷 91.196.152.187

🇩🇪 213.209.159.236

🇵🇱 194.180.48.7

🇺🇸 66.132.186.253

🇩🇪 47.245.142.218

🇸🇬 47.79.201.80

🇺🇸 34.73.173.47

🇧🇪 34.62.67.70

🇵🇱 194.180.49.220