JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.165.156.84

52.165.156.84 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Des Moines, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.165.156.84

Whois 52.165.156.84

IP Abuse Reports for 52.165.156.84:

This IP address has been reported a total of 15 times from 14 distinct sources. 52.165.156.84 was first reported on November 24th 2025, and the most recent report was 7 months ago.

Old Reports: The most recent abuse report for this IP address is from 7 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2025-11-25 23:03:23 (7 months ago)	Auto-ban: 223 malicious requests on 2025-11-24 (e.g., env/backup probes, brute-force, or error burst ... show more Auto-ban: 223 malicious requests on 2025-11-24 (e.g., env/backup probes, brute-force, or error bursts). show less	Hacking Web App Attack SSH
🇨🇳 haiqingheyan	2025-11-24 14:34:00 (7 months ago)	Rate limit exceeded	Bad Web Bot
🇦🇺 clapper	2025-11-24 14:32:24 (7 months ago)	52.165.156.84 (US/United States/-), more than 100 Apache 404 hits in the last 3600 secs; ID: rub	Brute-Force Bad Web Bot
🇦🇺 paulshipley.com.au	2025-11-24 14:25:34 (7 months ago)	bermanfamily.com.au:80 52.165.156.84 - - [25/Nov/2025:01:25:27 +1100] "GET /ink.php HTTP/1.1" 404 42 ... show more bermanfamily.com.au:80 52.165.156.84 - - [25/Nov/2025:01:25:27 +1100] "GET /ink.php HTTP/1.1" 404 425 "-" "-" bermanfamily.com.au:80 52.165.156.84 - - [25/Nov/2025:01:25:27 +1100] "GET /z58.php HTTP/1.1" 404 425 "-" "-" bermanfamily.com.au:80 52.165.156.84 - - [25/Nov/2025:01:25:27 +1100] "GET /led.php HTTP/1.1" 404 425 "-" "-" bermanfamily.com.au:80 52.165.156.84 - - [25/Nov/2025:01:25:28 +1100] "GET /klwc.php HTTP/1.1" 404 425 "-" "-" bermanfamily.com.au:80 52.165.156.84 - - [25/Nov/2025:01:25:28 +1100] "GET /fresh3.php HTTP/1.1" 404 425 "-" "-" bermanfamily.com.au:80 52.165.156.84 - - [25/Nov/2025:01:25:28 +1100] "GET /ula.php HTTP/1.1" 404 425 "-" "-" bermanfamily.com.au:80 52.165.156.84 - - [25/Nov/2025:01:25:28 +1100] "GET /thoms.php HTTP/1.1" 404 425 "-" "-" bermanfamily.com.au:80 52.165.156.84 - - [25/Nov/2025:01:25:28 +1100] "GET /wolv2.php HTTP/1.1" 404 425 "-" "-" bermanfamily.com.au:80 52.165.156.84 - - [25/Nov/2025:01:25:29 +1100] "GET /xex.php HTTP/1.1" 404 425 "-" "-" be ... show less	Web App Attack
🇺🇸 snappic	2025-11-24 14:13:27 (7 months ago)	Malicious URI path & NULL user agent [GET /alfa-rex.php] [NULL user agent]	Bad Web Bot Web App Attack
🇦🇺 paulshipley.com.au	2025-11-24 14:05:11 (7 months ago)	bermanfamily.com.au:80 52.165.156.84 - - [25/Nov/2025:01:05:03 +1100] "GET /shoha.php HTTP/1.1" 404 ... show more bermanfamily.com.au:80 52.165.156.84 - - [25/Nov/2025:01:05:03 +1100] "GET /shoha.php HTTP/1.1" 404 425 "-" "-" bermanfamily.com.au:80 52.165.156.84 - - [25/Nov/2025:01:05:03 +1100] "GET /yyy.php HTTP/1.1" 404 425 "-" "-" bermanfamily.com.au:80 52.165.156.84 - - [25/Nov/2025:01:05:04 +1100] "GET /ooj.php HTTP/1.1" 404 425 "-" "-" bermanfamily.com.au:80 52.165.156.84 - - [25/Nov/2025:01:05:04 +1100] "GET /0.php HTTP/1.1" 404 425 "-" "-" bermanfamily.com.au:80 52.165.156.84 - - [25/Nov/2025:01:05:04 +1100] "GET /x3.php HTTP/1.1" 404 425 "-" "-" bermanfamily.com.au:80 52.165.156.84 - - [25/Nov/2025:01:05:04 +1100] "GET /hzz.php HTTP/1.1" 404 425 "-" "-" bermanfamily.com.au:80 52.165.156.84 - - [25/Nov/2025:01:05:04 +1100] "GET /dom.php HTTP/1.1" 404 425 "-" "-" bermanfamily.com.au:80 52.165.156.84 - - [25/Nov/2025:01:05:05 +1100] "GET /dds.php HTTP/1.1" 404 425 "-" "-" bermanfamily.com.au:80 52.165.156.84 - - [25/Nov/2025:01:05:05 +1100] "GET /gg.php HTTP/1.1" 404 425 "-" "-" bermanfamily ... show less	Web App Attack
🇺🇸 mnsf	2025-11-24 13:05:42 (7 months ago)	Too many Status 40X (13)	Brute-Force Web App Attack
🇫🇷 IRISIO	2025-11-24 12:36:10 (7 months ago)	scans/SQL injection/spam posts : 446 queries	SQL Injection Web App Attack
🇫🇷 dynamix	2025-11-24 11:59:50 (7 months ago)	Multiple WAF Violations	Web App Attack
🇨🇭 Origon	2025-11-24 10:34:17 (7 months ago)	http-probing - IP: 52.165.156.84 - time="2025-11-24T11:34:17+01:00" level=info msg="(555f66b4f6a745 ... show more http-probing - IP: 52.165.156.84 - time="2025-11-24T11:34:17+01:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 52.165.156.84 (US/8075) : 4h ban on Ip 52.165.156.84" show less	Web App Attack
🇳🇱 Site.eu	2025-11-24 10:30:05 (7 months ago)	Excessive 404/403 errors	Brute-Force
🇨🇦 Mediashaker	2025-11-24 08:46:07 (7 months ago)	(apache-scanners) Failed apache-scanners trigger with match [redacted] from 52.165.156.84 (US/United ... show more (apache-scanners) Failed apache-scanners trigger with match [redacted] from 52.165.156.84 (US/United States/-) show less	Port Scan
🇮🇹 VHosting	2025-11-24 08:15:04 (7 months ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇫🇷 masterguru	2025-11-24 07:16:56 (7 months ago)	Too much 404 requests in 1 minute. Operator GE matched 10 at IP:block_script. (46020-193)	Hacking
Anonymous	2025-11-24 06:28:39 (7 months ago)	Multiple web server 400 error codes from same source ip	Web App Attack

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 187.8.64.94

🇷🇺 154.90.70.254

🇨🇳 8.130.161.237

🇩🇪 69.5.169.11

🇰🇷 222.98.122.37

🇨🇦 209.50.176.179

🇹🇷 194.146.47.161

🇨🇷 190.112.222.22

🇬🇧 165.154.128.17

🇯🇵 160.251.233.37

🇮🇳 135.13.28.35

🇨🇳 123.13.12.31

🇨🇳 120.230.23.10

🇨🇳 101.76.248.214

🇷🇺 84.53.238.67

🇸🇳 41.208.191.231

🇲🇽 187.190.35.163

🇺🇸 172.185.40.47

🇧🇷 152.241.36.18

🇭🇰 124.156.129.246