JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.165.92.140

52.165.92.140 was found in our database!

This IP was reported 124 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Hostname(s)	azpdcgkwlmos.stretchoid.com
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Des Moines, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.165.92.140

Whois 52.165.92.140

IP Abuse Reports for 52.165.92.140:

This IP address has been reported a total of 124 times from 56 distinct sources. 52.165.92.140 was first reported on August 27th 2026, and the most recent report was 1 minute ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 SOC-BR	2026-09-03 06:33:19 (1 minute ago)	Trying access in non-authorized port - Source Port 37107 - Destination Port 445 - Time 2026-09-02 23 ... show more Trying access in non-authorized port - Source Port 37107 - Destination Port 445 - Time 2026-09-02 23:40:17 (UTC-3) show less	Port Scan Hacking
🇧🇷 diego	2026-09-03 06:03:07 (31 minutes ago)	[rede-44-49] 09/03/2026-03:03:07.079930, 52.165.92.140, Protocol: 6, ET CINS Active Threat Intellige ... show more [rede-44-49] 09/03/2026-03:03:07.079930, 52.165.92.140, Protocol: 6, ET CINS Active Threat Intelligence Poor Reputation IP group 94 show less	Hacking
🇫🇷 Petre 21_ip	2026-09-03 04:39:05 (1 hour ago)	2026-09-03T06:39:04.040423+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c ... show more 2026-09-03T06:39:04.040423+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=52.165.92.140 DST=155.133.26.57 LEN=52 TOS=0x00 PREC=0x00 TTL=53 ID=19384 PROTO=TCP SPT=47251 DPT=5660 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
Anonymous	2026-09-02 23:05:50 (7 hours ago)	2026-09-03T01:05:49.880615+02:00 vps kernel: [4761164.826227] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=f ... show more 2026-09-03T01:05:49.880615+02:00 vps kernel: [4761164.826227] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=52.165.92.140 DST=54.37.14.118 LEN=52 TOS=0x00 PREC=0x00 TTL=37 ID=65137 PROTO=TCP SPT=40935 DPT=3389 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇺🇸 MPL	2026-09-02 22:48:24 (7 hours ago)	tcp/8581	Port Scan
Anonymous	2026-09-02 20:17:31 (10 hours ago)	Blocked by firewall on hugin [81/tcp] \| Rule: UFW \| SPT: 45620 \| TTL: 46 \| LEN: 52 \| TOS: 0x00 • Rep ... show more Blocked by firewall on hugin [81/tcp] \| Rule: UFW \| SPT: 45620 \| TTL: 46 \| LEN: 52 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-09-02 19:57:08 (10 hours ago)	Blocked by UFW (TCP on 7199) Source port: 43257 TTL: 51 Packet length: 52 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 7199) Source port: 43257 TTL: 51 Packet length: 52 TOS: 0x00 This report (for 52.165.92.140) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2026-09-02 16:47:01 (13 hours ago)	tcp/2000	Port Scan
🇯🇵 VXG-NET	2026-09-02 16:42:26 (13 hours ago)	port=53, indicator_type=info-leak	Hacking
🇫🇷 vtchost.com	2026-09-02 16:21:07 (14 hours ago)	2026-09-02T18:21:07.197120+02:00 vmi3491693 kernel: PORTSCAN: IN=eth0 OUT= MAC=00:50:56:66:3e:63:c0: ... show more 2026-09-02T18:21:07.197120+02:00 vmi3491693 kernel: PORTSCAN: IN=eth0 OUT= MAC=00:50:56:66:3e:63:c0:69:11:b3:a9:ed:08:00 SRC=52.165.92.140 DST=169.58.138.2 LEN=52 TOS=0x00 PREC=0x00 TTL=53 ID=31196 PROTO=TCP SPT=38290 DPT=808 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 dispaisyenterprises	2026-09-02 16:15:55 (14 hours ago)	Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 8098 [2] TCP Reported by DisPaisy ... show more Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 8098 [2] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
Anonymous	2026-09-02 15:05:52 (15 hours ago)	unsolicited connect TCP dport 8088 (sport 46495)	Hacking
🇳🇵 radheykrishna.com.np	2026-09-02 12:39:07 (17 hours ago)	Sep 2 18:24:07 kernel: [2068919.114576] [UFW BLOCK] IN=ens160 OUT= SRC=52.165.92.140 LEN=52 TOS=0x0 ... show more Sep 2 18:24:07 kernel: [2068919.114576] [UFW BLOCK] IN=ens160 OUT= SRC=52.165.92.140 LEN=52 TOS=0x00 PREC=0x00 TTL=45 ID=26084 PROTO=TCP SPT=59989 DPT=2052 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 MPL	2026-09-02 12:00:46 (18 hours ago)	tcp/8888	Port Scan
🇫🇷 id2i	2026-09-02 10:02:45 (20 hours ago)	2026-09-02T12:02:45.142533+02:00 coraza-spoa[262622]: [client "52.165.92.140"] Coraza: Access denied ... show more 2026-09-02T12:02:45.142533+02:00 coraza-spoa[262622]: [client "52.165.92.140"] Coraza: Access denied (phase 2). Inbound Anomaly Score Exceeded (Total Score: 8) show less	Hacking Web App Attack

Showing 1 to 15 of 124 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 196.251.121.70

🇧🇷 177.124.60.19

🇷🇺 176.57.220.240

🇰🇷 119.199.160.42

🇦🇺 115.131.84.140

🇺🇸 64.62.197.138

🇧🇪 35.240.126.74

🇫🇮 35.228.173.197

🇺🇸 35.225.224.166

🇵🇰 202.163.102.66

🇳🇱 192.253.248.215

🇻🇳 171.244.5.210

🇳🇱 160.119.76.64

🇺🇸 104.248.226.231

🇸🇬 103.106.229.104

🇷🇴 92.118.39.234

🇷🇴 92.118.39.233

🇫🇷 91.196.152.237

🇸🇬 84.75.150.120

🇧🇬 77.76.184.110