JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.165.250.117

52.165.250.117 was found in our database!

This IP was reported 536 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Des Moines, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.165.250.117

Whois 52.165.250.117

IP Abuse Reports for 52.165.250.117:

This IP address has been reported a total of 536 times from 338 distinct sources. 52.165.250.117 was first reported on July 20th 2026, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 www.Examensfragen.de	2026-07-25 23:15:38 (9 hours ago)		Web Spam Bad Web Bot
🇸🇬 fazar	2026-07-25 16:00:08 (17 hours ago)	wp-login-scan: 3 attempts from 52.165.250.117 on node: sgp01	Exploited Host Web App Attack
🇧🇷 Peregrine	2026-07-24 03:14:03 (2 days ago)	Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 52.165.250.117 172.69.7.22 - - [20/Jul/2026:20:46:4 ... show more Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 52.165.250.117 172.69.7.22 - - [20/Jul/2026:20:46:42 -0300] "GET /inputs.php HTTP/1.1" 404 18193 show less	Bad Web Bot
Anonymous	2026-07-24 00:55:59 (2 days ago)	Attack detected: 52.165.250.117 [2026-07-24] Categories: 21 --- webshell/admin probe (6 hits) --- 52 ... show more Attack detected: 52.165.250.117 [2026-07-24] Categories: 21 --- webshell/admin probe (6 hits) --- 52.165.250.117 - - [21/Jul/2026:00:00:32 +0000] "GET /wp-content/uploads/min.php HTTP/1.1" 404 108720 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.165.250.117 - - [20/Jul/2026:19:01:31 +0000] "GET /wp-content/uploads/index.php HTTP/1.1" 301 419 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.165.250.117 - - [20/Jul/2026:23:29:03 +0000] "GET /wp-content/uploads/min.php HTTP/1.1" 404 93394 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.165.250.117 - - [21/Jul/2026:02:32:45 +0000] "GET /wp-content/uploads/index.php HTTP/1.1" 301 419 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.165.250.117 - - [21/Jul/2026:05:35:48 +0000] " show less	Web App Attack
🇫🇷 mail.avx.gr	2026-07-23 11:32:19 (2 days ago)	Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: default-10-0-0-4:443 52.165.250.117 - - [21/Jul/2 ... show more Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: default-10-0-0-4:443 52.165.250.117 - - [21/Jul/2026:06:51:55 +0300] "GET /alfa.php HTTP/1.1" 404 2431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Web App Attack
🇧🇪 boxed-it	2026-07-22 19:24:47 (3 days ago)	GET /wp-admin/ (Tarpitted for 1d15h8m29s, wasted 8.06MB)	Web App Attack
🇧🇪 boxed-it	2026-07-22 17:59:12 (3 days ago)	GET /wp-admin/css/bolt.php (Tarpitted for 1d15h8m29s, wasted 8.06MB)	Web App Attack
🇬🇧 openstrike.co.uk	2026-07-22 05:14:14 (4 days ago)	608 attacks on PHP URLs, ACME URLs: GET /insc.php HTTP/1.1 GET /adminfuns.php/.well-known/acme-chall ... show more 608 attacks on PHP URLs, ACME URLs: GET /insc.php HTTP/1.1 GET /adminfuns.php/.well-known/acme-challenge/file.php HTTP/1.1 show less	Web App Attack
🇮🇹 paoloartone	2026-07-22 05:00:30 (4 days ago)	Reverse proxy TCO: 215 richieste malevole bloccate (scan/exploit/brute-force WordPress) il 21/07/202 ... show more Reverse proxy TCO: 215 richieste malevole bloccate (scan/exploit/brute-force WordPress) il 21/07/2026. show less	Web App Attack Hacking Port Scan
🇨🇱 SinaiCL	2026-07-22 03:55:13 (4 days ago)	WAF Multiple Hits	Bad Web Bot Web App Attack
🇧🇷 Peregrine	2026-07-22 03:15:22 (4 days ago)	Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 52.165.250.117 172.69.7.22 - - [20/Jul/2026:20:46:4 ... show more Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 52.165.250.117 172.69.7.22 - - [20/Jul/2026:20:46:42 -0300] "GET /inputs.php HTTP/1.1" 404 18193 show less	Bad Web Bot
🇩🇪 milcraft.nl	2026-07-22 03:14:48 (4 days ago)	Honeypot / Fake URL Access: Access to hidden and / or intentionally fake URLs designed to detect aut ... show more Honeypot / Fake URL Access: Access to hidden and / or intentionally fake URLs designed to detect automated scanners or malicious bots. .env, .env.local, .env.production, .htpasswd Activity is consistent with web application abuse. show less	Hacking
🇩🇪 SiyCah	2026-07-22 03:00:02 (4 days ago)	IP banned by fail2ban; banned in jail apache-modsecurity. Report generated by fail2abuseipdb.	Hacking Brute-Force Web App Attack
🇭🇺 NyaljBe	2026-07-22 01:50:00 (4 days ago)	52.165.250.117 - - [20/Jul/2026:21:41:31 +0200] "GET /php.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Wi ... show more 52.165.250.117 - - [20/Jul/2026:21:41:31 +0200] "GET /php.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.165.250.117 - - [20/Jul/2026:21:41:31 +0200] "GET /php.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.165.250.117 - - [20/Jul/2026:21:41:31 +0200] "GET /lock360.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.165.250.117 - - [20/Jul/2026:21:41:31 +0200] "GET /lock360.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.165.250.117 - - [20/Jul/2026:21:41:31 +0200] "GET /lock.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Web App Attack
🇳🇱 Site.eu	2026-07-21 22:41:41 (4 days ago)	Excessive multi-domain requests	Brute-Force

Showing 1 to 15 of 536 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2604:a880:400:d1:0:4:6c78:3001

🇧🇪 207.175.30.52

🇺🇸 172.110.223.135

🇧🇬 79.124.49.70

🇸🇾 185.216.134.126

🇨🇳 182.138.158.71

🇧🇷 177.222.196.220

🇺🇦 176.117.176.78

🇺🇸 172.253.192.18

🇺🇸 104.37.30.212

🇨🇳 101.126.54.245

🇫🇷 85.217.140.49

🇧🇬 78.128.114.174

🇹🇼 61.222.211.114

🇺🇸 45.156.129.156

🇳🇱 45.148.10.147

🇳🇱 45.148.10.141

🇮🇳 223.185.63.229

🇨🇳 153.0.85.64

🇩🇪 149.88.19.235