JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.165.223.243

52.165.223.243 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 16%: ?

16%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Des Moines, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.165.223.243

Whois 52.165.223.243

IP Abuse Reports for 52.165.223.243:

This IP address has been reported a total of 29 times from 22 distinct sources. 52.165.223.243 was first reported on March 6th 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 Elysium Security	2026-04-26 19:01:44 (1 month ago)	Mass port scanning on a whole network	Port Scan
🇺🇸 xmission.com	2026-04-26 17:06:49 (1 month ago)	Blocked by UFW (TCP on 6379) Source port: 17096 TTL: 50 Packet length: 60 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 6379) Source port: 17096 TTL: 50 Packet length: 60 TOS: 0x00 This report (for 52.165.223.243) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 essinghigh	2026-04-26 15:39:09 (1 month ago)	IPS Detection: 52.165.223.243 -> DPT: 6379	Port Scan
Anonymous	2026-04-26 12:19:13 (1 month ago)	2026-04-26T13:19:12.698506+01:00 vps kernel: [38946155.058029] [PORTSCAN DETECTED] IN=ens3 OUT= MAC= ... show more 2026-04-26T13:19:12.698506+01:00 vps kernel: [38946155.058029] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=52.165.223.243 DST=54.37.14.118 LEN=60 TOS=0x00 PREC=0x00 TTL=40 ID=50184 DF PROTO=TCP SPT=17096 DPT=6379 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇯🇵 jay hung	2026-04-26 08:36:38 (1 month ago)	2026-04-26T08:36:32.084707+00:00 quarktech kernel: [3270867.564078] [UFW BLOCK] IN=eth0 OUT= MAC=22: ... show more 2026-04-26T08:36:32.084707+00:00 quarktech kernel: [3270867.564078] [UFW BLOCK] IN=eth0 OUT= MAC=22:00:92:2e:84:93:fe:ff:ff:ff:ff:ff:08:00 SRC=52.165.223.243 DST=172.237.29.33 LEN=60 TOS=0x00 PREC=0x00 TTL=40 ID=9241 DF PROTO=TCP SPT=17096 DPT=6379 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇮🇪 RoboSOC	2026-03-24 14:14:30 (2 months ago)	SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found	Port Scan
🇨🇭 SOC [GOLINE SA]	2026-03-24 11:05:33 (2 months ago)	IDS Alert: ET CINS Active Threat Intelligence Poor Reputation IP group 95 === ATTACK === Signature: ... show more IDS Alert: ET CINS Active Threat Intelligence Poor Reputation IP group 95 === ATTACK === Signature: ET CINS Active Threat Intelligence Poor Reputation IP group 95 \| SID: 2403394 \| Severity: 2 \| Category: Misc Attack === SOURCE === IP: 52.165.223.243 (IPv4) \| Port: 8712 \| Country: United States \| ISP: Unknown \| rDNS: None === TARGET === Host: insightvm.goline.ch \| IP: 185.54.80.24 \| Port: 6379 \| Protocol: TCP \| App: N/A === RESPONSE === Time: 2026-03-24 12:05:30 \| Action: Blocked show less	Exploited Host Hacking
🇩🇪 bontekoe.technology	2026-03-24 10:58:32 (2 months ago)	Port scan or Brute-Force detected. (src_port=8712, dst_port=6379)	Brute-Force
🇬🇧 OptimusGO	2026-03-24 10:38:56 (2 months ago)	Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Time ... show more Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Timestamp: 2026-03-24 10:38:46 UTC Log evidence: 03/24/2026-10:38:45.072507 [] [1:1000090:1] POLICY Unauthorized Management Port Access [] [Classification: Attempted Administrator Privilege Gain] [Priority: 1] {TCP} 52.165.223.243:8712 -> 185.127.18.66:6379 03/24/2026-10:38:45.072507 [] [1:1000103:1] SECURITY Management Port Probe - CRITICAL [] [Classification: Attempted Administrator Privilege Gain] [Priority: 1] {TCP} 52.165.223.243:8712 -> 185.127.18.66:6379 show less	Port Scan Brute-Force
🇸🇰 GOVCERT	2026-03-24 10:19:32 (2 months ago)	Sweep Scan	Port Scan
🇺🇸 xmission.com	2026-03-22 14:58:04 (2 months ago)	Blocked by UFW (TCP on 6379) Source port: 8712 TTL: 49 Packet length: 60 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 6379) Source port: 8712 TTL: 49 Packet length: 60 TOS: 0x00 This report (for 52.165.223.243) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 LSPCCU	2026-03-22 09:35:10 (2 months ago)	TSEC Honeypot Network report. Threat score: 60/100. Categories: Port Scan, Hacking, Brute-Force, Web ... show more TSEC Honeypot Network report. Threat score: 60/100. Categories: Port Scan, Hacking, Brute-Force, Web App Attack, SSH. Honeypot: cowrie, ssh-telnet. Context: 52. show less	Port Scan Hacking Brute-Force Web App Attack SSH
🇬🇧 essinghigh	2026-03-22 08:39:20 (2 months ago)	IPS Detection: 52.165.223.243 -> DPT: 6379	Port Scan
🇬🇧 wiredalter	2026-03-21 13:42:43 (2 months ago)	Blocked by fail2ban on cVPS [6379/tcp] Source Port: 8712 TTL: 54 Packet Length: 60 TOS: 0x00 Analyz ... show more Blocked by fail2ban on cVPS [6379/tcp] Source Port: 8712 TTL: 54 Packet Length: 60 TOS: 0x00 Analyzed by https://ip.wiredalter.com show less	Brute-Force SSH
🇨🇦 polycoda	2026-03-16 15:22:06 (3 months ago)	📡 Port scan	Hacking Web App Attack

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.236.239.55

🇺🇸 172.172.196.177

🇻🇳 117.1.184.244

🇩🇪 109.91.4.177

🇨🇳 106.13.107.35

🇨🇦 85.217.149.21

🇺🇸 66.132.195.123

🇭🇰 58.152.212.239

🇭🇰 45.116.78.92

🇻🇳 2402:800:6172:7467:59b6:c48a:8e40:e781

🇺🇸 162.216.150.141

🇺🇸 162.216.149.251

🇧🇷 131.108.100.21

🇳🇱 91.92.40.6

🇷🇴 80.94.92.187

🇺🇸 73.176.157.57

🇺🇸 67.207.93.64

🇮🇳 57.159.30.22

🇳🇱 45.148.10.230

🇬🇧 35.203.211.37