AbuseIPDB » 52.148.197.119

52.148.197.119 was found in our database!

This IP was reported 7,466 times. Confidence of Abuse is 0%: ?

0%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 52.148.197.119

Whois 52.148.197.119

IP Abuse Reports for 52.148.197.119:

This IP address has been reported a total of 7,466 times from 458 distinct sources. 52.148.197.119 was first reported on July 10th 2024, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
nesga12	2025-03-15 02:09:02 (2 months ago)	SMTP Brute-Force	Email Spam Brute-Force
LRob.fr	2025-02-27 00:01:04 (3 months ago)	Repeated attacks detected by Fail2Ban in recidive jail	Hacking
rtbh.com.tr	2025-02-26 20:49:26 (3 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
LRob.fr	2025-02-25 23:08:08 (3 months ago)	Repeated attacks detected by Fail2Ban in recidive jail	Hacking
rtbh.com.tr	2025-02-25 20:49:28 (3 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
shimizu	2025-02-25 15:01:01 (3 months ago)	2 times SMTP brute-force	Hacking Brute-Force
Study Bitcoin 🤗	2025-02-25 12:50:05 (3 months ago)	2 port probes: 2x tcp/110 (post office- version 3) [srv62]	Port Scan
ISPLtd	2025-02-25 12:31:35 (3 months ago)	Feb 25 08:31:32 SRC=52.148.197.119 PROTO=TCP SPT=32992 DPT=110 SYN Feb 25 08:31:33 SRC=52.148. ... show moreFeb 25 08:31:32 SRC=52.148.197.119 PROTO=TCP SPT=32992 DPT=110 SYN Feb 25 08:31:33 SRC=52.148.197.119 PROTO=TCP SPT=32992 DPT=110 SYN Feb 25 08:31:35 SRC=52.148.197.119 PROTO=TCP SPT=32992 DPT=110 ... show less	Port Scan
tecnicorioja	2025-02-25 11:00:16 (3 months ago)	Failed password for invalid user Feb 25 11:07:44 port 38894	Brute-Force SSH
Study Bitcoin 🤗	2025-02-25 09:38:18 (3 months ago)	2 port probes: 2x tcp/110 (post office- version 3) [srv62]	Port Scan
formality	2025-02-25 09:26:20 (3 months ago)	Invalid user beepartment from 52.148.197.119 port 43382	Brute-Force SSH
www.fransveldman.world	2025-02-25 09:07:02 (3 months ago)	Feb 25 08:50:42 mail dovecot: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts i ... show moreFeb 25 08:50:42 mail dovecot: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=52.148.197.119, lip=195.20.234.197, session=<nrFLjfMuhow0lMV3> Feb 25 09:07:02 mail dovecot: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=52.148.197.119, lip=195.20.234.197, session=<Ygqwx/MuHOI0lMV3> ... show less	Email Spam Brute-Force
dwmp	2025-02-25 09:01:24 (3 months ago)	Feb 25 05:43:24 plesk sshd[1711070]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eui ... show moreFeb 25 05:43:24 plesk sshd[1711070]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.148.197.119 user=root Feb 25 05:43:26 plesk sshd[1711070]: Failed password for root from 52.148.197.119 port 36574 ssh2 Feb 25 10:01:19 plesk sshd[1919055]: Invalid user aceperenergierinnovabili from 52.148.197.119 port 36370 Feb 25 10:01:21 plesk sshd[1919055]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.148.197.119 Feb 25 10:01:23 plesk sshd[1919055]: Failed password for invalid user aceperenergierinnovabili from 52.148.197.119 port 36370 ssh2 ... show less	Brute-Force SSH
el-brujo	2025-02-25 08:53:53 (3 months ago)	02/25/2025-09:53:53.376731 52.148.197.119 Protocol: 6 ET SCAN Potential SSH Scan	Port Scan
initsol	2025-02-25 08:32:51 (3 months ago)	Feb 25 09:05:30 phoenix dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user= ... show moreFeb 25 09:05:30 phoenix dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=52.148.197.119, lip=10.10.50.34, session=<NxCb6/Iu6Kw0lMV3> Feb 25 09:10:07 phoenix dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=52.148.197.119, lip=10.10.50.34, session=<LYcl/PIuoqg0lMV3> Feb 25 09:32:50 phoenix dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=52.148.197.119, lip=10.10.50.34, session=<VEdmTfMulpU0lMV3> ... show less	Brute-Force

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩