52.185.157.166
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- Microsoft Corporation
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS8075
- Domain Name
- microsoft.com
- Country
- 🇯🇵 Japan
- City
- Tokyo, Tokyo
No reports in the last 60 days
52.185.157.166 has been reported 34 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
34 from
24 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇹🇷 rtbh.com.tr |
list.rtbh.com.tr report: tcp/0
|
Brute-Force | |
| 🇹🇷 rtbh.com.tr |
list.rtbh.com.tr report: tcp/0
|
Brute-Force | |
| 🇫🇷 SpaceHost-Server |
|
Brute-Force Web App Attack | |
| 🇹🇷 rtbh.com.tr |
list.rtbh.com.tr report: tcp/0
|
Brute-Force | |
| 🇺🇸 octageeks.com |
Wordpress malicious attack:[octascan]
|
Web App Attack | |
| 🇺🇸 antlac1 |
crowdsecurity/http-probing
|
Brute-Force Web App Attack | |
| 🇩🇪 macrob |
|
Web App Attack | |
| 🇮🇩 zam |
|
Web App Attack | |
| 🇺🇦 URAN Publishing Service |
52.185.157.166 - - [24/Oct/2025:01:52:00 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 278 "-" "-"
...
|
Web App Attack | |
| 🇺🇸 technojoe99 |
Exploit scan from 52.185.157.166. GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1.
|
Web App Attack | |
| Anonymous |
|
Hacking Web App Attack | |
| 🇦🇹 penguin-solutions.at |
Excessive 403/404 errors
...
|
Brute-Force Web App Attack | |
| Anonymous |
Probing for Open Source CMS Components
|
Hacking Brute-Force | |
| 🇮🇩 Burayot |
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 52.185.157.166 (JP/Japan/-): 2 in the last 3600 secs
|
Web App Attack | |
| 🇳🇱 Site.eu |
Excessive multi-domain requests
|
Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown