52.167.167.52
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- Microsoft Corporation
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS8075
- Domain Name
- microsoft.com
- Country
- 🇺🇸 United States of America
- City
- Boydton, Virginia
No reports in the last 60 days
52.167.167.52 has been reported 39 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
39 from
34 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇳🇱 homeshowdomain.nl |
Auto-ban: 328 malicious requests on 2025-11-15 (e.g., env/backup probes, brute-force, or error bursts).
|
Hacking Web App Attack SSH | |
| 🇫🇷 service Informatique |
index.php
|
Web App Attack | |
| 🇫🇷 COMAITE |
Multiple web server 400 error codes from same source ip 52.167.167.52.
|
Web App Attack | |
| 🇬🇧 [email protected] |
...
|
Brute-Force SSH | |
| 🇸🇪 SkyDancer |
Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blocked by SkyDancer Ai(web-X).
|
Hacking Brute-Force | |
| 🇩🇪 on-com |
URL scan
|
Brute-Force Web App Attack | |
| 🇩🇪 Mr-Money |
scenario: crowdsecurity/http-probing - events: 11
|
Hacking Web App Attack | |
| 🇺🇸 mnsf |
Too many Status 40X (13)
Too many Status 50X (13)
|
Brute-Force Web App Attack | |
| 🇳🇱 homeshowdomain.nl |
Auto-ban: >3000 req/min op 2025-11-15
|
Hacking Web App Attack SSH | |
| 🇦🇺 paulshipley.com.au |
|
Web App Attack | |
| 🇦🇺 paulshipley.com.au |
|
Web App Attack | |
| 🇦🇺 nzhost.co.nz |
$f2bV_matches
|
Hacking Brute-Force | |
| 🇬🇧 Mendip_Defender |
|
Hacking Web App Attack | |
| 🇬🇧 cybersteve99 |
Too many 4xx Requests -
|
Brute-Force Web App Attack | |
| 🇮🇩 securejdprop |
This IP was detected by CrowdSec triggering crowdsecurity/crowdsec-appsec-outofband. Ip 52.167.167.52 performed 'crowdsecurity/crowdsec-appsec-outofband' (6 events over 3.708880907s) at 2025-11-15 13:41:33.674673967 +0000 UTC
|
Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown