AbuseIPDB » 172.203.150.142

172.203.150.142 was found in our database!

This IP was reported 772 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	United States of America
City	Alexandria, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 172.203.150.142

Whois 172.203.150.142

IP Abuse Reports for 172.203.150.142:

This IP address has been reported a total of 772 times from 364 distinct sources. 172.203.150.142 was first reported on December 4th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
AdrianT	2025-01-08 15:49:19 (1 week ago)	SSH brute force	Brute-Force SSH
Parth Maniar	2024-12-19 10:31:08 (3 weeks ago)	This IP address carried out 29 SSH credential attack (attempts) on 18-12-2024. For more information ... show moreThis IP address carried out 29 SSH credential attack (attempts) on 18-12-2024. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Brute-Force SSH
urnilxfgbez	2024-12-18 23:45:00 (4 weeks ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
marcel-knorr.de	2024-12-18 10:29:57 (4 weeks ago)	[headscale] SSH login failed	Brute-Force SSH
sverre26	2024-12-18 10:24:47 (4 weeks ago)	Bruteforce detected by fail2ban	Brute-Force SSH
SchenklServices	2024-12-18 08:49:43 (4 weeks ago)	Dec 18 09:49:28 schenklradio sshd[2258188]: Invalid user apiserver from 172.203.150.142 port 51012<b ... show moreDec 18 09:49:28 schenklradio sshd[2258188]: Invalid user apiserver from 172.203.150.142 port 51012 Dec 18 09:49:28 schenklradio sshd[2258190]: Invalid user deploy from 172.203.150.142 port 51014 Dec 18 09:49:30 schenklradio sshd[2258194]: Invalid user minecraft from 172.203.150.142 port 51020 Dec 18 09:49:42 schenklradio sshd[2258321]: Invalid user steam from 172.203.150.142 port 53110 Dec 18 09:49:43 schenklradio sshd[2258323]: Invalid user es from 172.203.150.142 port 53126 ... show less	Brute-Force SSH
BeeGeePT	2024-12-18 07:52:44 (4 weeks ago)	Invalid SSH login attempt	Brute-Force SSH
SpookReportUBro	2024-12-18 07:50:22 (4 weeks ago)	2024-12-18T02:50:19.855895-05:00 linux.430bc6.com sshd[462402]: pam_unix(sshd:auth): authentication ... show more2024-12-18T02:50:19.855895-05:00 linux.430bc6.com sshd[462402]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.203.150.142 2024-12-18T02:50:22.298934-05:00 linux.430bc6.com sshd[462402]: Failed password for invalid user deploy from 172.203.150.142 port 42726 ssh2 ... show less	Brute-Force SSH
tkhaldi	2024-12-18 07:10:14 (4 weeks ago)	2024-12-18T07:09:38.359519+00:00 tkhaldi-remote-droplet sshd[2128476]: Invalid user apiserver from 1 ... show more2024-12-18T07:09:38.359519+00:00 tkhaldi-remote-droplet sshd[2128476]: Invalid user apiserver from 172.203.150.142 port 53068 2024-12-18T07:09:57.364030+00:00 tkhaldi-remote-droplet sshd[2128500]: Invalid user prometheus from 172.203.150.142 port 58244 2024-12-18T07:10:13.432098+00:00 tkhaldi-remote-droplet sshd[2128537]: Invalid user kvm from 172.203.150.142 port 36680 ... show less	Brute-Force SSH
www.jfarjona.com	2024-12-18 06:53:43 (4 weeks ago)	$f2bV_matches	Brute-Force SSH
diego	2024-12-18 06:20:59 (4 weeks ago)	[rede-44-49] (sshd) Failed SSH login from 172.203.150.142 (US/United States/-): 5 in the last 3600 s ... show more[rede-44-49] (sshd) Failed SSH login from 172.203.150.142 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Dec 18 03:20:40 sshd[14997]: Did not receive identification string from 172.203.150.142 port 35872 Dec 18 03:20:53 sshd[15000]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.203.150.142 user=[USERNAME] Dec 18 03:20:55 sshd[15000]: Failed password for [USERNAME] from 172.203.150.142 port 59206 ssh2 Dec 18 03:20:56 sshd[15004]: Invalid user [USERNAME] from 172.203.150.142 port 58196 Dec 18 03:20:58 sshd[15004]: Failed password for invalid user [USERNA show less	Port Scan
cybergecko.de	2024-12-18 05:49:04 (4 weeks ago)	Dec 18 06:48:42 CyberGecko sshd[1381124]: Failed password for invalid user apiserver from 172.203.15 ... show moreDec 18 06:48:42 CyberGecko sshd[1381124]: Failed password for invalid user apiserver from 172.203.150.142 port 38664 ssh2 Dec 18 06:48:49 CyberGecko sshd[1381146]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.203.150.142 user=root Dec 18 06:48:51 CyberGecko sshd[1381146]: Failed password for root from 172.203.150.142 port 60414 ssh2 Dec 18 06:49:04 CyberGecko sshd[1381176]: Invalid user prometheus from 172.203.150.142 port 59936 ... show less	Brute-Force SSH
Anonymous	2024-12-18 04:34:54 (4 weeks ago)	Dec 18 04:34:53 f2b auth.info sshd[850736]: Invalid user apiserver from 172.203.150.142 port 36038<b ... show moreDec 18 04:34:53 f2b auth.info sshd[850736]: Invalid user apiserver from 172.203.150.142 port 36038 Dec 18 04:34:53 f2b auth.info sshd[850736]: Failed password for invalid user apiserver from 172.203.150.142 port 36038 ssh2 Dec 18 04:34:53 f2b auth.info sshd[850738]: Invalid user deploy from 172.203.150.142 port 36046 ... show less	Brute-Force SSH
Loren Cress	2024-12-18 04:19:24 (4 weeks ago)	$f2bV_matches	Brute-Force SSH
Click-Networks	2024-12-18 04:06:02 (4 weeks ago)	Dec 18 04:44:27 wh02 sshd[1082658]: Connection closed by 172.203.150.142 port 46810 Dec 18 04: ... show moreDec 18 04:44:27 wh02 sshd[1082658]: Connection closed by 172.203.150.142 port 46810 Dec 18 04:44:34 wh02 sshd[1082662]: Invalid user deploy from 172.203.150.142 port 56498 Dec 18 04:44:34 wh02 sshd[1082662]: Connection closed by invalid user deploy 172.203.150.142 port 56498 [preauth] Dec 18 04:44:35 wh02 sshd[1082664]: Connection closed by authenticating user root 172.203.150.142 port 56500 [preauth] Dec 18 04:44:41 wh02 sshd[1082666]: Connection closed by authenticating user root 172.203.150.142 port 56514 [preauth] Dec 18 04:44:42 wh02 sshd[1082668]: Invalid user prometheus from 172.203.150.142 port 56530 Dec 18 04:44:42 wh02 sshd[1082668]: Connection closed by invalid user prometheus 172.203.150.142 port 56530 [preauth] Dec 18 04:44:45 wh02 sshd[1082670]: Invalid user steam from 172.203.150.142 port 56544 Dec 18 04:44:45 wh02 sshd[1082670]: Connection closed by invalid user steam 172.203.150.142 port 56544 [preauth] Dec 18 04:44:46 wh02 sshd[1082672]: Invalid user es from 172.203.1 show less	Brute-Force Exploited Host SSH