JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.164.229.170

52.164.229.170 was found in our database!

This IP was reported 360 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇮🇪 Ireland
City	Dublin, Leinster

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.164.229.170

Whois 52.164.229.170

IP Abuse Reports for 52.164.229.170:

This IP address has been reported a total of 360 times from 163 distinct sources. 52.164.229.170 was first reported on May 9th 2025, and the most recent report was 9 months ago.

Old Reports: The most recent abuse report for this IP address is from 9 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 skunkworks_ca	2025-08-22 17:18:00 (9 months ago)	31 attempts for exploit paths	Web App Attack
🇺🇸 octageeks.com	2025-08-22 04:06:06 (9 months ago)	Wordpress malicious attack:[octascan]	Web App Attack
🇺🇸 mnsf	2025-08-22 03:05:23 (9 months ago)	Too many Status 40X (14)	Brute-Force Web App Attack
🇦🇺 advena	2025-08-21 19:16:13 (9 months ago)	52.164.229.170 (AS8075 MICROSOFT-CORP-MSN-AS-BLOCK) was intercepted at 2025-08-21T19:14:55Z after vi ... show more 52.164.229.170 (AS8075 MICROSOFT-CORP-MSN-AS-BLOCK) was intercepted at 2025-08-21T19:14:55Z after violating WAF directive: bot_fight_mode. Pre-cautionary/corrective action applied: managed_challenge. show less	Web Spam Hacking Brute-Force Web App Attack
🇬🇧 Xiaohack	2025-08-21 18:30:45 (9 months ago)	2025-08-21 20:30:43 WARNING: 404 list at URL: /wp-content/plugins/hellopress/wp_filemanager.php - Re ... show more 2025-08-21 20:30:43 WARNING: 404 list at URL: /wp-content/plugins/hellopress/wp_filemanager.php - Referrer: No referrer - List: 404 Not Found: The requested URL was not found on the server. If you entered the URL manually please check your spelling and try again. - IP: 52.164.229.170 - User-Agent: None [in routes : not_found_error : 30] 2025-08-21 20:30:43 WARNING: 404 list at URL: /orm.php - Referrer: No referrer - List: 404 Not Found: The requested URL was not found on the server. If you entered the URL manually please check your spelling and try again. - IP: 52.164.229.170 - User-Agent: None [in routes : not_found_error : 30] 2025-08-21 20:30:43 WARNING: 404 list at URL: /nx.php - Referrer: No referrer - List: 404 Not Found: The requested URL was not found on the server. If you entered the URL manually please check your spelling and try again. - IP: 52.164.229.170 - User-Agent: None [in routes : not_found_error : 30] 2025-08-21 20:30:43 WARNING: 404 list at URL: /php.php - Referrer: ... show less	Open Proxy Bad Web Bot
🇩🇪 dwmp	2025-08-21 17:30:31 (9 months ago)	Url probing: /orm.php/	Web App Attack
🇫🇮 YF	2025-08-21 16:01:05 (9 months ago)	404 errors (Vulnerability scan)	Brute-Force Web App Attack
🇮🇩 Burayot	2025-08-21 15:20:44 (9 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 52.164.229.170 (IE/Ireland/-): 1 in ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 52.164.229.170 (IE/Ireland/-): 1 in the last 3600 secs show less	Web App Attack
🇪🇸 loadsoporte	2025-08-21 15:20:05 (9 months ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force
🇺🇸 technojoe99	2025-08-21 14:31:11 (9 months ago)	Exploit scan from 52.164.229.170. GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1.	Web App Attack
🇳🇱 ISPLtd	2025-08-21 13:19:41 (9 months ago)	52.164.229.170 - /wp-content/plugins/hellopress/wp_filemanager.php [21/Aug/2025:10:19:39 -0300] "GET ... show more 52.164.229.170 - /wp-content/plugins/hellopress/wp_filemanager.php [21/Aug/2025:10:19:39 -0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php 52.164.229.170 - /wp-content/plugins/hellopress/wp_filemanager.php [21/Aug/2025:10:19:39 -0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show less	Hacking Web App Attack
🇮🇩 securejdprop	2025-08-21 12:47:46 (9 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/crowdsec-appsec-outofband. Ip 52.164.229.1 ... show more This IP was detected by CrowdSec triggering crowdsecurity/crowdsec-appsec-outofband. Ip 52.164.229.170 performed 'crowdsecurity/crowdsec-appsec-outofband' (6 events over 3.676007749s) at 2025-08-21 12:47:44.805343714 +0000 UTC show less	Web App Attack
🇦🇺 aranguren.org	2025-08-21 12:43:41 (9 months ago)	52.164.229.170 - - [21/Aug/2025:22:43:39 +1000] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 52.164.229.170 - - [21/Aug/2025:22:43:39 +1000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 995 "-" "-" 52.164.229.170 - - [21/Aug/2025:22:43:40 +1000] "GET /jp.php HTTP/1.1" 404 16 "-" "-" 52.164.229.170 - - [21/Aug/2025:22:43:40 +1000] "GET /orm.php HTTP/1.1" 404 16 "-" "-" 52.164.229.170 - - [21/Aug/2025:22:43:40 +1000] "GET /nx.php HTTP/1.1" 404 16 "-" "-" 52.164.229.170 - - [21/Aug/2025:22:43:40 +1000] "GET /php.php HTTP/1.1" 404 16 "-" "-" 52.164.229.170 - - [21/Aug/2025:22:43:41 +1000] "GET /sx21_1.php HTTP/1.1" 404 16 "-" "-" ... show less	Bad Web Bot
🇫🇷 Sklurk	2025-08-21 12:41:37 (9 months ago)	Web App Attack	Web App Attack
🇳🇱 artificialred.nl	2025-08-21 12:32:02 (9 months ago)	[Server probing] access_ssl_log:52.164.229.170 - - [21/Aug/2025:14:31:48 +0200] GET /bluejackets.php ... show more [Server probing] access_ssl_log:52.164.229.170 - - [21/Aug/2025:14:31:48 +0200] GET /bluejackets.php HTTP/1.0" 404 30402 "-" "-" access_ssl_log:52.164.229.170 - - [21/Aug/2025:14:31:49 +0200] "GET /file17.php HTTP/1.0" 404 30402 "-" "-" access_ssl_log:52.164.229.170 - - [21/Aug/2025:14:31:50 +0200] "GET /pop.php HTTP/1.0" 404 30402 "-" "-" access_ssl_log:52.164.229.170 - - [21/Aug/2025:14:31:50 +0200] "GET /nx9.php HTTP/1.0" 404 30402 "-" "-" access_ssl_log:52.164.229.170 - - [21/Aug/2025:14:31:51 +0200] "GET /kwm4.php HTTP/1.0" 404 30402 "-" "-" " show less	Port Scan Web App Attack

Showing 1 to 15 of 360 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 220.119.37.141

🇮🇳 139.59.59.165

🇨🇩 102.216.240.61

🇺🇸 70.179.133.166

🇩🇪 69.5.169.99

🇺🇸 43.153.13.30

🇹🇼 104.199.234.191

🇫🇮 80.66.83.216

🇧🇬 79.124.62.178

🇵🇱 51.68.151.167

🇮🇩 34.101.74.91

🇸🇬 212.73.148.38

🇰🇷 115.140.161.61

🇨🇳 106.75.169.25

🇨🇦 104.255.152.19

🇺🇸 66.132.172.48

🇮🇳 40.81.224.160

🇹🇷 5.11.162.163

🇻🇳 222.252.25.166

🇩🇪 193.36.85.91