JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 5.252.226.149

5.252.226.149 was found in our database!

This IP was reported 266 times. Confidence of Abuse is 0%: ?

ISP	netcup GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS197540
Hostname(s)	v2202311171075242169.ultrasrv.de
Domain Name	netcup.de
Country	🇩🇪 Germany
City	Nuremberg, Bavaria

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 5.252.226.149

Whois 5.252.226.149

IP Abuse Reports for 5.252.226.149:

This IP address has been reported a total of 266 times from 192 distinct sources. 5.252.226.149 was first reported on March 2nd 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-04-29 18:28:29 (1 month ago)	Confirmed malicious by STILWaters CTI (score=100)	Hacking Brute-Force SSH
🇫🇷 SpaceHost-Server	2026-03-27 23:40:49 (2 months ago)		Brute-Force Web App Attack
🇹🇷 rtbh.com.tr	2026-03-27 20:12:17 (2 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2026-03-26 20:12:16 (2 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇫🇮 misfit	2026-03-26 16:34:12 (2 months ago)	SSH brute-force (5 attempts). Org: AS197540 netcup GmbH, Nürnberg, DE.	Brute-Force SSH
🇨🇭 Modules	2026-03-26 11:00:00 (2 months ago)	Cowrie honeypot: cowrie.session.connect, Protocol: ssh \| Cowrie honeypot: cowrie.client.version, Pro ... show more Cowrie honeypot: cowrie.session.connect, Protocol: ssh \| Cowrie honeypot: cowrie.client.version, Protocol: ssh \| Cowrie honeypot: cowrie.client.kex, Protocol: ssh \| Cowrie honeypot: cowrie.login.success - user: contact - password: 1234, Protocol: ssh \| Cowrie honeypot: cowrie.session.params, Protocol: ssh \| Cowrie honeypot: cowrie.command.input, Protocol: ssh \| Cowrie honeypot: cowrie.command.failed, Protocol: ssh \| Cowrie honeypot: cowrie.log.closed, Protocol: ssh \| Cowrie honeypot: cowrie.session.file_download, Protocol: ssh \| Cowrie honeypot: cowrie.session.closed, Protocol: ssh \| Cowrie honeypot: cowrie.login.failed - user: contact - password: 3245gs5662d34, Protocol: ssh (23 events, first: 2026-03-26T05:05:54.032Z, last: 2026-03-26T05:05:54.421Z) show less	Port Scan SSH
🇨🇦 KIsmay	2026-03-26 06:27:07 (2 months ago)	Mar 25 23:23:02 ismay sshd[783219]: Failed password for invalid user ocs from 5.252.226.149 port 598 ... show more Mar 25 23:23:02 ismay sshd[783219]: Failed password for invalid user ocs from 5.252.226.149 port 59836 ssh2 Mar 25 23:25:23 ismay sshd[783383]: Invalid user test from 5.252.226.149 port 47570 Mar 25 23:25:23 ismay sshd[783383]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.252.226.149 Mar 25 23:25:25 ismay sshd[783383]: Failed password for invalid user test from 5.252.226.149 port 47570 ssh2 Mar 25 23:27:06 ismay sshd[783611]: Invalid user public from 5.252.226.149 port 48088 ... show less	Brute-Force SSH
🇨🇳 kipfel★	2026-03-26 06:26:40 (2 months ago)	2026-03-26T14:21:09.411057+08:00 localhost sshd-session[3326482]: Invalid user ocs from 5.252.226.14 ... show more 2026-03-26T14:21:09.411057+08:00 localhost sshd-session[3326482]: Invalid user ocs from 5.252.226.149 port 52670 2026-03-26T14:24:58.196029+08:00 localhost sshd-session[3327495]: Invalid user test from 5.252.226.149 port 54672 2026-03-26T14:26:39.161344+08:00 localhost sshd-session[3327997]: Invalid user public from 5.252.226.149 port 45540 ... show less	Brute-Force SSH
🇺🇸 oof	2026-03-26 06:13:37 (2 months ago)	Mar 26 01:11:56 124388 sshd[3491225]: Invalid user pm2user from 5.252.226.149 port 59826 Mar 26 01:1 ... show more Mar 26 01:11:56 124388 sshd[3491225]: Invalid user pm2user from 5.252.226.149 port 59826 Mar 26 01:11:56 124388 sshd[3491225]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.252.226.149 Mar 26 01:11:56 124388 sshd[3491225]: Invalid user pm2user from 5.252.226.149 port 59826 Mar 26 01:11:58 124388 sshd[3491225]: Failed password for invalid user pm2user from 5.252.226.149 port 59826 ssh2 Mar 26 01:13:36 124388 sshd[3491277]: Invalid user juan from 5.252.226.149 port 47226 ... show less	Brute-Force SSH
🇩🇪 ipcop.net	2026-03-26 06:12:11 (2 months ago)	2026-03-26T07:03:58.911481+01:00 sso-host-01.sso.srvfarm.net sshd-session[30615]: Invalid user harry ... show more 2026-03-26T07:03:58.911481+01:00 sso-host-01.sso.srvfarm.net sshd-session[30615]: Invalid user harry from 5.252.226.149 port 37802 2026-03-26T07:03:58.942404+01:00 sso-host-01.sso.srvfarm.net sshd-session[30615]: Disconnected from invalid user harry 5.252.226.149 port 37802 [preauth] 2026-03-26T07:10:29.795132+01:00 sso-host-01.sso.srvfarm.net sshd-session[31161]: Invalid user pm2user from 5.252.226.149 port 41336 2026-03-26T07:10:29.840639+01:00 sso-host-01.sso.srvfarm.net sshd-session[31161]: Disconnected from invalid user pm2user 5.252.226.149 port 41336 [preauth] 2026-03-26T07:12:10.610028+01:00 sso-host-01.sso.srvfarm.net sshd-session[31538]: Invalid user juan from 5.252.226.149 port 55038 show less	Brute-Force
🇫🇷 gianluca.demartino75	2026-03-26 06:04:26 (2 months ago)	2026-03-26T07:04:24.573509+01:00 vps-49934a4d endlessh[2730420]: 2026-03-26T06:04:24.573Z ACCEPT hos ... show more 2026-03-26T07:04:24.573509+01:00 vps-49934a4d endlessh[2730420]: 2026-03-26T06:04:24.573Z ACCEPT host=::ffff:5.252.226.149 port=50652 fd=5 n=2/4096 ... show less	Brute-Force SSH
🇩🇪 mygcode.de	2026-03-26 05:57:50 (2 months ago)	sshd Bruteforce attack	Brute-Force
Anonymous	2026-03-26 05:56:50 (2 months ago)	sshd	Brute-Force SSH
🇻🇳 edata-vn	2026-03-26 05:48:20 (2 months ago)	2026-03-26T12:37:48.889080+07:00 euxcvn124012 sshd[1550090]: Invalid user vip1 from 5.252.226.149 po ... show more 2026-03-26T12:37:48.889080+07:00 euxcvn124012 sshd[1550090]: Invalid user vip1 from 5.252.226.149 port 49348 2026-03-26T12:43:27.520979+07:00 euxcvn124012 sshd[1550591]: Invalid user software from 5.252.226.149 port 55302 2026-03-26T12:45:10.765125+07:00 euxcvn124012 sshd[1550813]: Invalid user test1 from 5.252.226.149 port 44206 2026-03-26T12:46:46.971404+07:00 euxcvn124012 sshd[1550970]: Invalid user liang from 5.252.226.149 port 50566 2026-03-26T12:48:20.218865+07:00 euxcvn124012 sshd[1551140]: Invalid user ubuntu from 5.252.226.149 port 52480 ... show less	Brute-Force SSH
🇬🇧 FlipRich	2026-03-26 05:35:49 (2 months ago)	2026-03-26T05:30:52.976915 flipserv6 sshd[280365]: Failed password for invalid user jboss from 5.252 ... show more 2026-03-26T05:30:52.976915 flipserv6 sshd[280365]: Failed password for invalid user jboss from 5.252.226.149 port 41994 ssh2 2026-03-26T05:32:36.918145 flipserv6 sshd[281063]: Invalid user giovanni from 5.252.226.149 port 57532 2026-03-26T05:32:36.920366 flipserv6 sshd[281063]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.252.226.149 2026-03-26T05:32:38.966908 flipserv6 sshd[281063]: Failed password for invalid user giovanni from 5.252.226.149 port 57532 ssh2 2026-03-26T05:34:11.648150 flipserv6 sshd[281750]: Invalid user tsunami from 5.252.226.149 port 41408 2026-03-26T05:34:11.650358 flipserv6 sshd[281750]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.252.226.149 2026-03-26T05:34:13.406537 flipserv6 sshd[281750]: Failed password for invalid user tsunami from 5.252.226.149 port 41408 ssh2 2026-03-26T05:35:46.476882 flipserv6 sshd[282433]: Invalid user weimin from 5.252.226.149 port 43178 2026-03- ... show less	Brute-Force SSH

Showing 1 to 15 of 266 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 187.16.96.250

🇺🇸 143.198.143.161

🇺🇸 136.118.228.162

🇮🇳 122.164.233.253

🇳🇱 5.61.209.96

🇳🇱 176.65.139.130

🇺🇸 172.96.182.111

🇸🇪 170.168.30.13

🇺🇸 136.56.34.147

🇭🇰 104.208.108.166

🇳🇬 102.93.12.169

🇺🇸 45.38.249.56

🇺🇸 8.230.97.101

🇺🇸 193.202.81.251

🇳🇱 193.176.31.203

🇺🇸 172.86.114.38

🇺🇸 162.217.167.57

🇺🇸 147.185.132.21

🇺🇸 137.184.25.34

🇺🇸 66.132.172.114