52.165.251.245
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- Microsoft Corporation
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS8075
- Domain Name
- microsoft.com
- Country
- 🇺🇸 United States of America
- City
- Des Moines, Iowa
No reports in the last 60 days
52.165.251.245 has been reported 85 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
85 from
40 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇩🇪 www.fransveldman.world |
Fetched browser challenge page 10 times in <2h without solving. Likely bad bot.
|
Bad Web Bot | |
| 🇬🇧 Nov |
Unauthorized access attempt (tcp/2087)
|
Port Scan | |
| Anonymous |
Repeated unauthorized connection attempts to restricted service observed.
|
Port Scan Hacking Bad Web Bot | |
| 🇹🇷 SeczarSecureOps |
Auto-blocked by Seczar SecureOps — Port Scan Detection (7 events in 10min) at 2026-06-03 05:28
|
Port Scan | |
| 🇬🇧 PeravixGroup |
Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud
|
Port Scan Bad Web Bot | |
| 🇬🇧 PeravixGroup |
Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. Aaran.cloud
|
Port Scan Bad Web Bot | |
| 🇮🇩 hermawan |
1780396669.258955 52.165.251.245 103.166.156.58 64240_2-4-8-1-3_1440_10 2026-06-02 17:37:49 WIB
...
|
Email Spam Hacking | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 2087)
Source port: 57472
TTL: 53
Packet length: 60
TOS: 0x00
This report (for 52.165.251.245) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇺🇸 sumnone |
Port probing on unauthorized port 2087
|
Port Scan Hacking Exploited Host | |
| 🇺🇸 Rayulcifer |
52.165.251.245 - - [14/Apr/2026:20:41:17 -0500] "CONNECT speed.cloudflare.com:443 HTTP/1.1" 502 488 "-" "-"
52.165.251.245 - - [14/Apr/2026:20:41:17 -0500] "CONNECT speed.hetzner.de:443 HTTP/1.1" 502 488 "-" "-"
...
|
Open Proxy Port Scan Hacking Web App Attack SSH | |
| 🇮🇱 spd.co.il |
Web application attack detected
|
Hacking Web App Attack | |
| 🇳🇱 homeshowdomain.nl |
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-04-06.
|
Web App Attack SSH Hacking | |
| 🇺🇸 TPI-Abuse |
|
Brute-Force Bad Web Bot Web App Attack | |
| 🇩🇪 dklueh79 |
Probe for vulnerabilities. Path attempted: /.git/config
|
Web App Attack | |
| 🇩🇪 Blexyel |
52.165.251.245 - - [07/Apr/2026:06:33:15 +0200] "GET /.git/config HTTP/1.1" 200 265 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0" "pingusmc.org"
...
|
Brute-Force Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown