AbuseIPDB » 185.213.173.52

185.213.173.52 was found in our database!

This IP was reported 1,751 times. Confidence of Abuse is 100%: ?

100%

ISP	NextGenWebs, S.L.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS41608
Domain Name	nextgenwebs.es
Country	Netherlands
City	Lelystad, Flevoland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 185.213.173.52

Whois 185.213.173.52

IP Abuse Reports for 185.213.173.52:

This IP address has been reported a total of 1,751 times from 601 distinct sources. 185.213.173.52 was first reported on February 10th 2025, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
rtbh.com.tr	2025-04-03 20:05:55 (3 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
rtbh.com.tr	2025-04-02 20:05:53 (3 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
rtbh.com.tr	2025-04-01 20:05:51 (3 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
KosmiK2001	2025-04-01 14:31:11 (3 weeks ago)	Apr 1 17:26:26 Xenoserver sshd[3462614]: Invalid user mcserver from 185.213.173.52 port 43126 ... show moreApr 1 17:26:26 Xenoserver sshd[3462614]: Invalid user mcserver from 185.213.173.52 port 43126 Apr 1 17:28:45 Xenoserver sshd[3463376]: Invalid user kiosk from 185.213.173.52 port 44670 Apr 1 17:31:10 Xenoserver sshd[3465537]: Invalid user ec2-user from 185.213.173.52 port 51718 ... show less	Brute-Force SSH
h3st4k3r	2025-04-01 14:26:53 (3 weeks ago)	Malicious activity detected from this IP during SSH attempts. VPN: No, Datacenter: No, Organization: ... show moreMalicious activity detected from this IP during SSH attempts. VPN: No, Datacenter: No, Organization: AS41608 NextGenWebs, S.L., Region: Flevoland, Log: 2025-04-01T16:26:51.761013 02:00 Administracion sshd[264231]: Failed password for invalid user kiosk from 185.213.173.52 port 46624 ssh2, Abuse Score: 100, Total Reports: 1742 show less	SSH
NetWatch	2025-04-01 14:19:19 (3 weeks ago)	The IP 185.213.173.52 tried multiple SSH logins	Brute-Force SSH
Anonymous	2025-04-01 13:16:59 (3 weeks ago)	Trying to login	Brute-Force SSH
arch3rek	2025-04-01 12:32:34 (3 weeks ago)	2025-04-01T13:32:33.110232+01:00 Node4-XEON sshd[737844]: Invalid user master from 185.213.173.52 po ... show more2025-04-01T13:32:33.110232+01:00 Node4-XEON sshd[737844]: Invalid user master from 185.213.173.52 port 49780 ... show less	Brute-Force SSH
arch3rek	2025-04-01 12:00:08 (3 weeks ago)	2025-04-01T13:00:04.857885+01:00 Node4-XEON sshd[737387]: pam_unix(sshd:auth): authentication failur ... show more2025-04-01T13:00:04.857885+01:00 Node4-XEON sshd[737387]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.213.173.52 user=root 2025-04-01T13:00:06.860500+01:00 Node4-XEON sshd[737387]: Failed password for root from 185.213.173.52 port 35904 ssh2 ... show less	Brute-Force SSH
arch3rek	2025-04-01 11:29:37 (3 weeks ago)	2025-04-01T12:29:36.496307+01:00 Node4-XEON sshd[737020]: Invalid user test12 from 185.213.173.52 po ... show more2025-04-01T12:29:36.496307+01:00 Node4-XEON sshd[737020]: Invalid user test12 from 185.213.173.52 port 53572 ... show less	Brute-Force SSH
VHosting	2025-04-01 08:54:08 (3 weeks ago)	Attempt from 185.213.173.52	Brute-Force SSH
applemooz	2025-04-01 08:41:29 (3 weeks ago)	Apr 1 10:41:29 ns41 sshd[3200703]: Invalid user deamon from 185.213.173.52 port 44400 ...	Brute-Force SSH
oof	2025-04-01 08:37:19 (3 weeks ago)	Apr 1 03:37:17 124388 sshd[877351]: Invalid user system from 185.213.173.52 port 34062 Apr 1 ... show moreApr 1 03:37:17 124388 sshd[877351]: Invalid user system from 185.213.173.52 port 34062 Apr 1 03:37:18 124388 sshd[877351]: Failed password for invalid user system from 185.213.173.52 port 34062 ssh2 Apr 1 03:37:17 124388 sshd[877351]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.213.173.52 Apr 1 03:37:17 124388 sshd[877351]: Invalid user system from 185.213.173.52 port 34062 Apr 1 03:37:18 124388 sshd[877351]: Failed password for invalid user system from 185.213.173.52 port 34062 ssh2 ... show less	Brute-Force SSH
applemooz	2025-04-01 07:59:39 (3 weeks ago)	Apr 1 09:59:38 ns41 sshd[3197479]: Invalid user teste from 185.213.173.52 port 54248 Apr 1 0 ... show moreApr 1 09:59:38 ns41 sshd[3197479]: Invalid user teste from 185.213.173.52 port 54248 Apr 1 09:59:38 ns41 sshd[3197479]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.213.173.52 Apr 1 09:59:38 ns41 sshd[3197479]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.213.173.52 ... show less	Brute-Force SSH
Anonymous	2025-04-01 07:34:51 (3 weeks ago)	Apr 1 07:27:45 ubuntu sshd[2547848]: Invalid user hasan from 185.213.173.52 port 58288 Apr 1 ... show moreApr 1 07:27:45 ubuntu sshd[2547848]: Invalid user hasan from 185.213.173.52 port 58288 Apr 1 07:32:32 ubuntu sshd[2551323]: Invalid user sysadmin from 185.213.173.52 port 40018 Apr 1 07:34:50 ubuntu sshd[2553056]: Invalid user will from 185.213.173.52 port 32800 ... show less	Brute-Force SSH

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩