JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

52.167.161.215

Neutral Activity

Abuse Confidence Score

0% Low Risk

40 reports

38 reporters · latest 11 months ago

ISP: Microsoft Corporation
Usage Type: Data Center/Web Hosting/Transit
ASN: AS8075
Domain Name: microsoft.com
Country: 🇺🇸 United States of America
City: Boydton, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

52.167.161.215 has been reported 40 times. The most recent report is from 11 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

40 from 38 distinct reporters

First reported

November 14th 2025

Most recent report

11 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 rtbh.com.tr	2025-11-17 20:09:58 UTC · (11 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-11-16 20:09:57 UTC · (11 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 cassidycamp.work	2025-11-16 00:59:19 UTC · (11 months ago)	Requested /wp-content/plugins	Web App Attack
🇬🇧 [email protected]	2025-11-16 00:52:42 UTC · (11 months ago)	...	Brute-Force SSH
🇬🇧 ISPLtd	2025-11-16 00:17:22 UTC · (11 months ago)	52.167.161.215 [15/Nov/2025:20:17:16 -0400] claire.target.domain:80 URL:/wp-content/plugins/hellopress/wp_filemanager.php "GET /wp-content/plugins/hellopress/wp_filemanager.php 52.167.161.215 [15/Nov/2025:20:17:22 -0400] claire.target.domain:80 URL:/ ... show more 52.167.161.215 [15/Nov/2025:20:17:16 -0400] claire.target.domain:80 URL:/wp-content/plugins/hellopress/wp_filemanager.php "GET /wp-content/plugins/hellopress/wp_filemanager.php 52.167.161.215 [15/Nov/2025:20:17:22 -0400] claire.target.domain:80 URL:/wp-content/plugins/hellopress/wp_filemanager.php "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show less	Hacking Web App Attack
🇺🇸 mnsf	2025-11-15 23:05:47 UTC · (11 months ago)	Too many Status 40X (13)	Brute-Force Web App Attack
🇳🇱 homeshowdomain.nl	2025-11-15 22:59:34 UTC · (11 months ago)	Auto-ban: >3000 req/min op 2025-11-15	Hacking Web App Attack SSH
Anonymous	2025-11-15 21:33:41 UTC · (11 months ago)	52.167.161.215 - - [15/Nov/2025:21:33:40 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.0" 404 4369 "-" "-" 52.167.161.215 - - [15/Nov/2025:21:33:41 +0000] "GET /abcd.php HTTP/1.0" 404 3476 "-" "-" 52.167.161.215 - - [15/Nov/202 ... show more 52.167.161.215 - - [15/Nov/2025:21:33:40 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.0" 404 4369 "-" "-" 52.167.161.215 - - [15/Nov/2025:21:33:41 +0000] "GET /abcd.php HTTP/1.0" 404 3476 "-" "-" 52.167.161.215 - - [15/Nov/2025:21:33:41 +0000] "GET /file17.php HTTP/1.0" 404 3476 "-" "-" 52.167.161.215 - - [15/Nov/2025:21:33:41 +0000] "GET /goods.php HTTP/1.0" 404 3476 "-" "-" ... show less	Web App Attack
Anonymous	2025-11-15 21:21:12 UTC · (11 months ago)	52.167.161.215 - - [15/Nov/2025:22:20:42 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 446 "-" "-" 52.167.161.215 - - [15/Nov/2025:22:20:42 +0100] "GET /abcd.php HTTP/1.1" 404 446 "-" "-" 52.167.161.215 - - [15/Nov/2025: ... show more 52.167.161.215 - - [15/Nov/2025:22:20:42 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 446 "-" "-" 52.167.161.215 - - [15/Nov/2025:22:20:42 +0100] "GET /abcd.php HTTP/1.1" 404 446 "-" "-" 52.167.161.215 - - [15/Nov/2025:22:20:42 +0100] "GET /file17.php HTTP/1.1" 404 446 "-" "-" 52.167.161.215 - - [15/Nov/2025:22:20:42 +0100] "GET /goods.php HTTP/1.1" 404 446 "-" "-" 52.167.161.215 - - [15/Nov/2025:22:20:43 +0100] "GET /blue.php HTTP/1.1" 404 446 "-" "-" 52.167.161.215 - - [15/Nov/2025:22:20:43 +0100] "GET /num.php HTTP/1.1" 404 446 "-" "-" 52.167.161.215 - - [15/Nov/2025:22:20:43 +0100] "GET /rh.php HTTP/1.1" 404 446 "-" "-" 52.167.161.215 - - [15/Nov/2025:22:20:43 +0100] "GET /222.php HTTP/1.1" 404 446 "-" "-" 52.167.161.215 - - [15/Nov/2025:22:20:43 +0100] "GET /sh.php HTTP/1.1" 404 446 "-" "-" 52.167.161.215 - - [15/Nov/2025:22:20:43 +0100] "GET /css.php HTTP/1.1" 404 446 "-" "-" 52.167.161.215 - - [15/Nov/2025:22:20:44 +0100] "GET /thai.php HTTP/1.1" 4 ... show less	DDoS Attack
🇲🇾 Rizzy	2025-11-15 17:01:39 UTC · (11 months ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇨🇭 zynex	2025-11-15 16:30:32 UTC · (11 months ago)	URL Probing: /wp-content/plugins/hellopress/wp_filemanager.php	Web App Attack
🇩🇪 ghostwarriors	2025-11-15 16:20:03 UTC · (11 months ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
🇦🇺 aranguren.org	2025-11-15 13:11:04 UTC · (11 months ago)	52.167.161.215 - - [16/Nov/2025:00:11:02 +1100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 993 "-" "-" 52.167.161.215 - - [16/Nov/2025:00:11:02 +1100] "GET /abcd.php HTTP/1.1" 404 16 "-" "-" 52.167.161.215 - - [16/Nov/2025:0 ... show more 52.167.161.215 - - [16/Nov/2025:00:11:02 +1100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 993 "-" "-" 52.167.161.215 - - [16/Nov/2025:00:11:02 +1100] "GET /abcd.php HTTP/1.1" 404 16 "-" "-" 52.167.161.215 - - [16/Nov/2025:00:11:02 +1100] "GET /file17.php HTTP/1.1" 404 16 "-" "-" 52.167.161.215 - - [16/Nov/2025:00:11:03 +1100] "GET /goods.php HTTP/1.1" 404 16 "-" "-" 52.167.161.215 - - [16/Nov/2025:00:11:03 +1100] "GET /blue.php HTTP/1.1" 404 16 "-" "-" 52.167.161.215 - - [16/Nov/2025:00:11:03 +1100] "GET /num.php HTTP/1.1" 404 16 "-" "-" ... show less	Bad Web Bot
🇮🇪 Jim Keir	2025-11-15 08:35:39 UTC · (11 months ago)	2025-11-15 08:35:37 52.167.161.215 Too many redirects/missing files, blocking 52.167.161.215 for 5 minutes	Web App Attack
🇧🇾 lns.bz	2025-11-15 07:19:48 UTC · (11 months ago)	Too many 404 requests [BY]	Web App Attack

Showing 1 to 15 of 40 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 216.25.89.101

🇺🇸 199.165.159.53

🇺🇸 195.184.76.155

🇺🇸 185.59.235.172

🇬🇷 166.0.203.147

🇺🇸 158.94.187.35

🇸🇬 114.119.137.184

🇺🇸 104.243.42.159

🇵🇱 95.135.121.49

🇸🇪 46.59.91.85

🇰🇷 34.50.52.24

🇺🇸 2001:470:1:c84::14

🇮🇳 203.129.225.146

🇵🇾 181.121.177.222

🇨🇭 170.231.236.98

🇩🇪 134.94.0.133

🇮🇷 87.107.195.51

🇺🇸 75.153.87.14

🇧🇷 50.114.224.183

🇳🇱 45.153.34.119