JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.165.198.204

52.165.198.204 was found in our database!

This IP was reported 316 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Des Moines, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.165.198.204

Whois 52.165.198.204

IP Abuse Reports for 52.165.198.204:

This IP address has been reported a total of 316 times from 153 distinct sources. 52.165.198.204 was first reported on May 3rd 2026, and the most recent report was 22 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 paulshipley.com.au	2026-05-04 10:39:07 (1 month ago)	stkildashule.org.au:443 52.165.198.204 - - [04/May/2026:20:38:09 +1000] "GET /wp-good.php HTTP/1.1" ... show more stkildashule.org.au:443 52.165.198.204 - - [04/May/2026:20:38:09 +1000] "GET /wp-good.php HTTP/1.1" 404 50694 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" stkildashule.org.au:443 52.165.198.204 - - [04/May/2026:20:38:11 +1000] "GET /file.php HTTP/1.1" 404 47688 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" stkildashule.org.au:443 52.165.198.204 - - [04/May/2026:20:38:13 +1000] "GET /bless.php HTTP/1.1" 404 47695 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" stkildashule.org.au:443 52.165.198.204 - - [04/May/2026:20:38:15 +1000] "GET /admin.php HTTP/1.1" 404 47695 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" stkildashule.org.au:443 52.165.198.204 - - [04/May/2026:20:38:16 +1000] "GET /ioxi-o.php HTTP/1 ... show less	Web App Attack
🇺🇸 deskpass.com	2026-05-04 10:32:31 (1 month ago)	GET /wp-includes/IXR/test1.php	Web App Attack
🇩🇪 patrisei	2026-05-04 10:32:26 (1 month ago)	You are now banned for 10 years by Schiffdorf-West Patrol. Trigger: crowdsecurity/http-admin-interfa ... show more You are now banned for 10 years by Schiffdorf-West Patrol. Trigger: crowdsecurity/http-admin-interface-probing show less	Port Scan Web App Attack
🇺🇸 Epimetheus	2026-05-04 10:26:51 (1 month ago)	Unauthorized access attempts: [GET] /wp-includes/ID3/ [GET] /222.php [GET] /file.php [GET] /god4m.p ... show more Unauthorized access attempts: [GET] /wp-includes/ID3/ [GET] /222.php [GET] /file.php [GET] /god4m.php [GET] /tmp.php [GET] /about.php [GET] /classwithtostring.php [GET] /ioxi-o.php [GET] /wp-admin/a.php [GET] /bb.php [GET] /css/autoload_classmap.php [GET] /class.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 show less	Web App Attack
🇺🇸 Epimetheus	2026-05-04 10:08:48 (1 month ago)	Unauthorized access attempts: [GET] /wp-content/plugins/core-plugin/include.php [GET] /wp-admin/css ... show more Unauthorized access attempts: [GET] /wp-content/plugins/core-plugin/include.php [GET] /wp-admin/css/colors [GET] /wp-admin/alfa.php [GET] /tmp.php [GET] /god4m.php [GET] /aw.php [GET] /info.php [GET] /xmrlpc.php [GET] /as.php [GET] /fx.php [GET] /goods.php [GET] /gelay.php [GET] /classwithtostring.php [GET] /wp-good.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 show less	Web App Attack
🇫🇮 Christopher Hughes	2026-05-04 09:54:38 (1 month ago)	[Mon May 04 10:54:36.634675 2026] [proxy_fcgi:error] [pid 2936831:tid 140446168774208] [client 52.16 ... show more [Mon May 04 10:54:36.634675 2026] [proxy_fcgi:error] [pid 2936831:tid 140446168774208] [client 52.165.198.204:7007] AH01071: Got error 'Primary script unknown' [Mon May 04 10:54:36.879832 2026] [proxy_fcgi:error] [pid 2936831:tid 140447548446272] [client 52.165.198.204:7007] AH01071: Got error 'Primary script unknown' [Mon May 04 10:54:37.024264 2026] [proxy_fcgi:error] [pid 2936831:tid 140446143596096] [client 52.165.198.204:7007] AH01071: Got error 'Primary script unknown' [Mon May 04 10:54:37.170971 2026] [proxy_fcgi:error] [pid 2936831:tid 140446797899328] [client 52.165.198.204:7007] AH01071: Got error 'Primary script unknown' [Mon May 04 10:54:37.373069 2026] [proxy_fcgi:error] [pid 2936831:tid 140446831470144] [client 52.165.198.204:7007] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇦🇺 paulshipley.com.au	2026-05-04 09:54:18 (1 month ago)	underconstruction.paulshipley.info:443 52.165.198.204 - - [04/May/2026:19:54:11 +1000] "GET /wp-good ... show more underconstruction.paulshipley.info:443 52.165.198.204 - - [04/May/2026:19:54:11 +1000] "GET /wp-good.php HTTP/1.1" 404 3451 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" underconstruction.paulshipley.info:443 52.165.198.204 - - [04/May/2026:19:54:11 +1000] "GET /file.php HTTP/1.1" 404 521 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" underconstruction.paulshipley.info:443 52.165.198.204 - - [04/May/2026:19:54:11 +1000] "GET /bless.php HTTP/1.1" 404 521 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" underconstruction.paulshipley.info:443 52.165.198.204 - - [04/May/2026:19:54:12 +1000] "GET /admin.php HTTP/1.1" 404 521 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" underconstruction.paulshipley.info:443 52. ... show less	Web App Attack
🇮🇹 mgarofano80	2026-05-04 09:24:17 (1 month ago)		Brute-Force Web App Attack
🇫🇮 Christopher Hughes	2026-05-04 08:26:58 (1 month ago)	[Mon May 04 09:26:57.726071 2026] [proxy_fcgi:error] [pid 2935042:tid 140446823077440] [client 52.16 ... show more [Mon May 04 09:26:57.726071 2026] [proxy_fcgi:error] [pid 2935042:tid 140446823077440] [client 52.165.198.204:12354] AH01071: Got error 'Primary script unknown' [Mon May 04 09:26:57.967455 2026] [proxy_fcgi:error] [pid 2935042:tid 140446814684736] [client 52.165.198.204:12354] AH01071: Got error 'Primary script unknown' [Mon May 04 09:26:58.115535 2026] [proxy_fcgi:error] [pid 2935042:tid 140447523268160] [client 52.165.198.204:12354] AH01071: Got error 'Primary script unknown' [Mon May 04 09:26:58.260144 2026] [proxy_fcgi:error] [pid 2935042:tid 140447548446272] [client 52.165.198.204:12354] AH01071: Got error 'Primary script unknown' [Mon May 04 09:26:58.404990 2026] [proxy_fcgi:error] [pid 2935042:tid 140446806292032] [client 52.165.198.204:12354] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇮🇩 zam	2026-05-04 08:19:10 (1 month ago)	52.165.198.204 - - [04/May/2026:08:19:06 +0000] "GET /wp-admin/alfa.php HTTP/1.1" 302 278	Web App Attack
🇩🇪 macrob	2026-05-04 07:44:10 (1 month ago)	2026/05/04 07:44:07 [error] 3998072#3998072: 199450886 access forbidden by rule, client: 52.165.198 ... show more 2026/05/04 07:44:07 [error] 3998072#3998072: 199450886 access forbidden by rule, client: 52.165.198.204, server: binixo.com, request: "GET /admin.php HTTP/2.0", host: "binixo.com" 2026/05/04 07:44:08 [error] 3998073#3998073: 199451335 access forbidden by rule, client: 52.165.198.204, server: binixo.com, request: "GET /adminfuns.php HTTP/2.0", host: "binixo.com" 2026/05/04 07:44:08 [error] 3998072#3998072: 199450886 access forbidden by rule, client: 52.165.198.204, server: binixo.com, request: "GET /wp-content/admin.php HTTP/2.0", host: "binixo.com" ... show less	Web App Attack
🇦🇺 paulshipley.com.au	2026-05-04 07:29:46 (1 month ago)	paulshipley.com.au:443 52.165.198.204 - - [04/May/2026:17:28:44 +1000] "GET /wp-good.php HTTP/1.1" 4 ... show more paulshipley.com.au:443 52.165.198.204 - - [04/May/2026:17:28:44 +1000] "GET /wp-good.php HTTP/1.1" 404 73694 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" paulshipley.com.au:443 52.165.198.204 - - [04/May/2026:17:28:46 +1000] "GET /file.php HTTP/1.1" 404 70760 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" paulshipley.com.au:443 52.165.198.204 - - [04/May/2026:17:28:48 +1000] "GET /bless.php HTTP/1.1" 404 70761 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" paulshipley.com.au:443 52.165.198.204 - - [04/May/2026:17:28:50 +1000] "GET /admin.php HTTP/1.1" 404 70761 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" paulshipley.com.au:443 52.165.198.204 - - [04/May/2026:17:28:52 +1000] "GET /ioxi-o.php HTTP/1.1" 4 ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-05-04 07:28:46 (1 month ago)	52.165.198.204 - - [04/May/2026:10:28:46 +0300] "GET /wp-content/admin.php HTTP/1.1" 404 1109 "-" "M ... show more 52.165.198.204 - - [04/May/2026:10:28:46 +0300] "GET /wp-content/admin.php HTTP/1.1" 404 1109 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇦🇺 afleventoffice.com.au	2026-05-04 06:30:01 (1 month ago)	GET /wk/index.php HTTP/1.1	Web App Attack
🇬🇧 pinguin	2026-05-04 05:58:12 (1 month ago)	Triggered Cloudflare WAF (firewallManaged) from US. Action taken: LOG Protocol: HTTP/1.1 (GET method ... show more Triggered Cloudflare WAF (firewallManaged) from US. Action taken: LOG Protocol: HTTP/1.1 (GET method) Endpoint: /wp-admin/network/index.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot

Showing 151 to 165 of 316 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 181.41.194.250

🇵🇱 172.253.1.150

🇻🇳 171.231.195.192

🇮🇳 103.248.120.6

🇺🇸 91.230.168.252

🇺🇿 82.215.97.204

🇺🇸 66.132.195.54

🇧🇷 45.185.226.168

🇹🇳 41.227.24.195

🇮🇳 34.47.150.230

🇳🇱 195.178.110.30

🇺🇸 165.154.182.230

🇮🇱 147.235.197.91

🇧🇩 103.231.238.154

🇪🇸 92.118.211.38

🇸🇪 91.240.194.15

🇮🇳 74.125.16.183

🇺🇸 35.185.224.232

🇺🇸 18.191.151.62

🇩🇪 8.209.68.199