JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

52.142.186.245

Neutral Activity

Abuse confidence score ?

0% Low Risk

45 reports

28 reporters · latest 4 years ago

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	Cardiff, Wales

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

52.142.186.245 has been reported 45 times. The most recent report is from 4 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 52.142.186.245

Export CSV

This IP address has been reported a total of 45 times from 28 distinct sources. 52.142.186.245 was first reported on March 11th 2022, and the most recent report was 4 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 QUADEMU Abuse Dpt	2022-04-04 22:23:33 (4 years ago)	[New] Noxious/Nuisible/вредоносный Host.	Port Scan Brute-Force
🇫🇷 security.rdmc.fr	2022-04-04 22:10:56 (4 years ago)	Automatic report - VoIP Attack proto:UDP src:5082 dst:5060	Fraud VoIP Port Scan
🇨🇴 ingentar	2022-04-02 02:29:23 (4 years ago)	\[2022-04-02 01:29:21\] NOTICE\[11921\] chan_sip.c: Registration from \'"800" \<sip:[email protected]. ... show more \[2022-04-02 01:29:21\] NOTICE\[11921\] chan_sip.c: Registration from \'"800" \<sip:[email protected]\>\' failed for \'52.142.186.245:7139\' - Wrong password\[2022-04-02 01:29:21\] SECURITY\[12036\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2022-04-02T01:29:21.125-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="800",SessionID="0x7fa51c02d788",LocalAddress="IPV4/UDP/181.143.117.59/5060",RemoteAddress="IPV4/UDP/52.142.186.245/7139",Challenge="31f9df30",ReceivedChallenge="31f9df30",ReceivedHash="76a739f95d67afcc3dd6ae5414b5ec5f"\[2022-04-02 01:29:21\] NOTICE\[11921\] chan_sip.c: Registration from \'"800" \<sip:[email protected]\>\' failed for \'52.142.186.245:7139\' - Wrong password\[2022-04-02 01:29:21\] SECURITY\[12036\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2022-04-02T01:29:21.388-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="800",SessionID="0x7fa51c0477c8",LocalAddress="IPV4/UDP/181.143.117.59/5060",Remote ... show less	Fraud VoIP Brute-Force
🇨🇴 ingentar	2022-04-02 01:58:38 (4 years ago)	\[2022-04-02 00:58:35\] NOTICE\[11921\] chan_sip.c: Registration from \'"100" \<sip:[email protected]. ... show more \[2022-04-02 00:58:35\] NOTICE\[11921\] chan_sip.c: Registration from \'"100" \<sip:[email protected]\>\' failed for \'52.142.186.245:6196\' - Wrong password\[2022-04-02 00:58:35\] SECURITY\[12036\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2022-04-02T00:58:35.778-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="100",SessionID="0x7fa51c1ab178",LocalAddress="IPV4/UDP/181.143.117.59/5060",RemoteAddress="IPV4/UDP/52.142.186.245/6196",Challenge="43669d39",ReceivedChallenge="43669d39",ReceivedHash="43483f7f70f4dbdf416675da3ec999b4"\[2022-04-02 00:58:36\] NOTICE\[11921\] chan_sip.c: Registration from \'"100" \<sip:[email protected]\>\' failed for \'52.142.186.245:6196\' - Wrong password\[2022-04-02 00:58:36\] SECURITY\[12036\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2022-04-02T00:58:36.092-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="100",SessionID="0x7fa51c168978",LocalAddress="IPV4/UDP/181.143.117.59/5060",Remote ... show less	Fraud VoIP Brute-Force
🇵🇱 6GNet.pl	2022-03-28 15:58:05 (4 years ago)	[2022-03-28 21:58:04] SECURITY[9142] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="20 ... show more [2022-03-28 21:58:04] SECURITY[9142] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2022-03-28T21:58:04.871+0200",Severity="Error",Service="SIP",EventVersion="2",AccountID="4500",SessionID="0x7f872c15c9a0",LocalAddress="IPV4/UDP/64.18.129.55/5060",RemoteAddress="IPV4/UDP/52.142.186.245/6101",Challenge="26d218e4",ReceivedChallenge="26d218e4",ReceivedHash="30ae2b8d02036432d97d354ba91cb60b" [2022-03-28 21:58:04] SECURITY[9142] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2022-03-28T21:58:04.951+0200",Severity="Error",Service="SIP",EventVersion="2",AccountID="4500",SessionID="0x7f872c280610",LocalAddress="IPV4/UDP/64.18.129.55/5060",RemoteAddress="IPV4/UDP/52.142.186.245/6101",Challenge="6f62f077",ReceivedChallenge="6f62f077",ReceivedHash="b558abe953e792371999126481a56ce9" [2022-03-28 21:58:04] SECURITY[9142] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2022-03-28T21:58:04.995+0200",Severity="Error",Service="SIP",EventVersion="2",AccountID="450 ... show less	Fraud VoIP Brute-Force
🇵🇱 6GNet.pl	2022-03-27 15:47:35 (4 years ago)	[2022-03-27 21:47:34] SECURITY[9142] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="20 ... show more [2022-03-27 21:47:34] SECURITY[9142] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2022-03-27T21:47:34.621+0200",Severity="Error",Service="SIP",EventVersion="2",AccountID="100",SessionID="0x7f872c066e60",LocalAddress="IPV4/UDP/64.18.129.55/5060",RemoteAddress="IPV4/UDP/52.142.186.245/6887",Challenge="32e8f711",ReceivedChallenge="32e8f711",ReceivedHash="8c26ed3316207556f0f9ad92c96d67cd" [2022-03-27 21:47:34] SECURITY[9142] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2022-03-27T21:47:34.771+0200",Severity="Error",Service="SIP",EventVersion="2",AccountID="100",SessionID="0x7f872c062350",LocalAddress="IPV4/UDP/64.18.129.55/5060",RemoteAddress="IPV4/UDP/52.142.186.245/6887",Challenge="532f1671",ReceivedChallenge="532f1671",ReceivedHash="9ec7ea2beb70e73f1e4f0d99e726dd6f" [2022-03-27 21:47:34] SECURITY[9142] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2022-03-27T21:47:34.819+0200",Severity="Error",Service="SIP",EventVersion="2",AccountID="100", ... show less	Fraud VoIP Brute-Force
🇵🇱 6GNet.pl	2022-03-26 13:34:07 (4 years ago)	[2022-03-26 18:34:07] SECURITY[9142] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="20 ... show more [2022-03-26 18:34:07] SECURITY[9142] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2022-03-26T18:34:07.071+0100",Severity="Error",Service="SIP",EventVersion="2",AccountID="888",SessionID="0x7f872c096ca0",LocalAddress="IPV4/UDP/64.18.129.55/5060",RemoteAddress="IPV4/UDP/52.142.186.245/5436",Challenge="7f8e06b6",ReceivedChallenge="7f8e06b6",ReceivedHash="b4036c14b1e53eb6ae2f25e5059b070c" [2022-03-26 18:34:07] SECURITY[9142] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2022-03-26T18:34:07.182+0100",Severity="Error",Service="SIP",EventVersion="2",AccountID="888",SessionID="0x7f872c190770",LocalAddress="IPV4/UDP/64.18.129.55/5060",RemoteAddress="IPV4/UDP/52.142.186.245/5436",Challenge="76655e41",ReceivedChallenge="76655e41",ReceivedHash="0dcb65c5cd876dd9aa8abba3a8423ce7" [2022-03-26 18:34:07] SECURITY[9142] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2022-03-26T18:34:07.195+0100",Severity="Error",Service="SIP",EventVersion="2",AccountID="888", ... show less	Fraud VoIP Brute-Force
🇸🇬 Samuel K	2022-03-25 21:00:04 (4 years ago)	Web scan/attack	Port Scan Web App Attack
🇵🇱 6GNet.pl	2022-03-25 13:29:09 (4 years ago)	[2022-03-25 18:29:08] SECURITY[9142] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="20 ... show more [2022-03-25 18:29:08] SECURITY[9142] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2022-03-25T18:29:08.608+0100",Severity="Error",Service="SIP",EventVersion="2",AccountID="100",SessionID="0x7f872c0ac970",LocalAddress="IPV4/UDP/64.18.129.55/5060",RemoteAddress="IPV4/UDP/52.142.186.245/5082",Challenge="2c944636",ReceivedChallenge="2c944636",ReceivedHash="36247ad7bb166117717ee99e821fd7f2" [2022-03-25 18:29:08] SECURITY[9142] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2022-03-25T18:29:08.741+0100",Severity="Error",Service="SIP",EventVersion="2",AccountID="100",SessionID="0x7f872c0cdea0",LocalAddress="IPV4/UDP/64.18.129.55/5060",RemoteAddress="IPV4/UDP/52.142.186.245/5082",Challenge="57c0e2bc",ReceivedChallenge="57c0e2bc",ReceivedHash="37f00eaf6e42ca0136b70aab7d370283" [2022-03-25 18:29:08] SECURITY[9142] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2022-03-25T18:29:08.783+0100",Severity="Error",Service="SIP",EventVersion="2",AccountID="100", ... show less	Fraud VoIP Brute-Force
Anonymous	2022-03-25 01:18:59 (4 years ago)	Host Scan	Port Scan
🇷🇸 Smel	2022-03-21 07:40:05 (4 years ago)	SIP/5060 Probe, Scan, BF, Hack -	Fraud VoIP Port Scan Hacking Brute-Force
🇷🇸 Smel	2022-03-19 18:59:11 (4 years ago)	SIP/5060 Probe, Scan, BF, Hack -	Fraud VoIP Port Scan Hacking Brute-Force
🇳🇱 ipoac.nl	2022-03-16 17:13:40 (4 years ago)	[Mar 16 22:13:29] SECURITY[125743] res_security_log.c: SecurityEvent="FailedACL",EventTV="2022-03-16 ... show more [Mar 16 22:13:29] SECURITY[125743] res_security_log.c: SecurityEvent="FailedACL",EventTV="2022-03-16T22:13:29.529+0100",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="anonymous",SessionID="25886b465dc8b535f1be111d6c374a18",LocalAddress="IPV4/UDP/45.95.239.192/5060",RemoteAddress="IPV4/UDP/52.142.186.245/46540",ACLName="registrar_attempt_without_configured_aors" [Mar 16 22:13:39] SECURITY[125743] res_security_log.c: SecurityEvent="FailedACL",EventTV="2022-03-16T22:13:39.926+0100",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="anonymous",SessionID="1889311647",LocalAddress="IPV4/UDP/45.95.239.192/5060",RemoteAddress="IPV4/UDP/52.142.186.245/5074",ACLName="registrar_attempt_without_configured_aors" [Mar 16 22:13:39] SECURITY[125743] res_security_log.c: SecurityEvent="FailedACL",EventTV="2022-03-16T22:13:39.926+0100",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="anonymous",SessionID="1889311647",LocalAddress="IPV4/UDP/45.95.239.192/5060",RemoteAddress="IPV4/UDP/52[...] show less	Fraud VoIP Brute-Force
🇫🇷 DiLenaTech	2022-03-15 17:05:29 (4 years ago)	2022-03-13 20:41:37,533 fail2ban.actions [1052]: NOTICE [asterisk] Ban 52.142.186.245 2022-0 ... show more 2022-03-13 20:41:37,533 fail2ban.actions [1052]: NOTICE [asterisk] Ban 52.142.186.245 2022-03-14 20:59:09,741 fail2ban.actions [1052]: NOTICE [asterisk-challenge] Ban 52.142.186.245 2022-03-15 21:05:28,283 fail2ban.actions [1052]: NOTICE [asterisk-challenge] Ban 52.142.186.245 ... show less	Brute-Force SSH
🇫🇷 Emily	2022-03-15 13:19:22 (4 years ago)	Mar 13 05:39:02 box kernel: [1962917.337977] [UFW BLOCK] IN=eth0 OUT= MAC=[munged] SRC=52.142.186.24 ... show more Mar 13 05:39:02 box kernel: [1962917.337977] [UFW BLOCK] IN=eth0 OUT= MAC=[munged] SRC=52.142.186.245 DST=[munged] LEN=431 TOS=0x00 PREC=0x00 TTL=49 ID=51389 DF PROTO=UDP SPT=5060 DPT=5060 LEN=411 show less	Port Scan

Showing 1 to 15 of 45 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.231

🇺🇸 199.165.159.166

🇿🇦 197.185.183.82

🇺🇦 194.24.236.191

🇱🇹 185.169.4.188

🇺🇸 172.172.214.224

🇲🇽 170.78.210.14

🇷🇴 80.94.92.234

🇧🇬 78.128.113.74

🇵🇱 77.91.65.163

🇮🇳 74.225.250.166

🇺🇸 65.49.1.152

🇧🇪 35.187.117.181

🇺🇸 2a10:7b00:a0d0:3815:c359:d422:8473:1c58

🇳🇱 2a02:a44a:1c52:0:6c66:44ba:fcd4:1e28

🇮🇷 2a01:5ec0:d007:77d9:f112:9750:dea2:bca0

🇱🇹 185.169.4.184

🇺🇸 162.215.223.91

🇺🇸 158.94.187.76

🇺🇸 157.230.237.131