JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

52.149.183.94

Neutral Activity

Abuse confidence score ?

0% Low Risk

19 reports

15 reporters · latest 5 years ago

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Dulles Town Center, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

52.149.183.94 has been reported 19 times. The most recent report is from 5 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 52.149.183.94

This IP address has been reported a total of 19 times from 15 distinct sources. 52.149.183.94 was first reported on August 7th 2021, and the most recent report was 5 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 HamSammich	2021-08-23 04:00:00 (5 years ago)	IP connected to honeypot on port 22 before being firewalled.	Port Scan Hacking Brute-Force SSH
🇺🇸 MU-star.net	2021-08-19 11:43:24 (5 years ago)	Invalid user ubnt from 52.149.183.94 port 58337	Port Scan Brute-Force SSH
🇺🇸 LuckyCharms	2021-08-19 09:02:45 (5 years ago)	tarpit	SSH
🇮🇳 Parth Maniar	2021-08-19 07:21:26 (5 years ago)	SSH login attempts (SSH bruteforce attack). For more information, or to report interesting/incorrect ... show more SSH login attempts (SSH bruteforce attack). For more information, or to report interesting/incorrect findings, give me a shoutout on @parthmaniar on twitter. show less	Brute-Force SSH
🇺🇸 Carltonfsck	2021-08-18 15:48:31 (5 years ago)	Aug 18 19:48:29 ssh2 sshd[6780]: Unable to negotiate with 52.149.183.94 port 64063: no matching key ... show more Aug 18 19:48:29 ssh2 sshd[6780]: Unable to negotiate with 52.149.183.94 port 64063: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1 [preauth] Aug 18 19:48:30 ssh2 sshd[6782]: Connection from 52.149.183.94 port 64455 on 192.240.101.3 port 22 Aug 18 19:48:31 ssh2 sshd[6782]: Unable to negotiate with 52.149.183.94 port 64455: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1 [preauth] ... show less	Brute-Force SSH
🇺🇸 Daniel Lane	2021-08-18 15:38:40 (5 years ago)	Aug 18 19:38:29 tludr sshd[291972]: refused connect from 52.149.183.94 (52.149.183.94) Aug 18 19:38: ... show more Aug 18 19:38:29 tludr sshd[291972]: refused connect from 52.149.183.94 (52.149.183.94) Aug 18 19:38:35 tludr sshd[291973]: refused connect from 52.149.183.94 (52.149.183.94) Aug 18 19:38:40 tludr sshd[291974]: refused connect from 52.149.183.94 (52.149.183.94) ... show less	Brute-Force SSH
🇩🇪 www.blocklist.de	2021-08-16 13:42:13 (5 years ago)	Aug 16 17:16:25 vz239 sshd[19745]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ... show more Aug 16 17:16:25 vz239 sshd[19745]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.149.183.94 user=r.r Aug 16 17:16:27 vz239 sshd[19745]: Failed password for r.r from 52.149.183.94 port 49805 ssh2 Aug 16 17:16:29 vz239 sshd[19747]: Invalid user ubnt from 52.149.183.94 Aug 16 17:16:29 vz239 sshd[19747]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.149.183.94 Aug 16 17:16:31 vz239 sshd[19747]: Failed password for invalid user ubnt from 52.149.183.94 port 50900 ssh2 Aug 16 17:16:32 vz239 sshd[19749]: Invalid user guest from 52.149.183.94 Aug 16 17:16:32 vz239 sshd[19749]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.149.183.94 Aug 16 17:16:34 vz239 sshd[19749]: Failed password for invalid user guest from 52.149.183.94 port 51705 ssh2 Aug 16 17:16:35 vz239 sshd[19751]: Invalid user pi from 52.149.183.94 Aug 16 17:16:35 vz239 sshd[19751]: ........ ------------------------------- show less	FTP Brute-Force Hacking
🇩🇪 www.blocklist.de	2021-08-16 12:41:51 (5 years ago)	Aug 16 17:16:25 vz239 sshd[19745]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ... show more Aug 16 17:16:25 vz239 sshd[19745]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.149.183.94 user=r.r Aug 16 17:16:27 vz239 sshd[19745]: Failed password for r.r from 52.149.183.94 port 49805 ssh2 Aug 16 17:16:29 vz239 sshd[19747]: Invalid user ubnt from 52.149.183.94 Aug 16 17:16:29 vz239 sshd[19747]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.149.183.94 Aug 16 17:16:31 vz239 sshd[19747]: Failed password for invalid user ubnt from 52.149.183.94 port 50900 ssh2 Aug 16 17:16:32 vz239 sshd[19749]: Invalid user guest from 52.149.183.94 Aug 16 17:16:32 vz239 sshd[19749]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.149.183.94 Aug 16 17:16:34 vz239 sshd[19749]: Failed password for invalid user guest from 52.149.183.94 port 51705 ssh2 Aug 16 17:16:35 vz239 sshd[19751]: Invalid user pi from 52.149.183.94 Aug 16 17:16:35 vz239 sshd[19751]: ........ ------------------------------- show less	FTP Brute-Force Hacking
🇩🇪 Gr33nbl00d	2021-08-16 12:25:03 (5 years ago)	2021-08-16 16:25:02 INFO TarpitServer: Client ('52.149.183.94', 51977) connected ...	Brute-Force SSH
🇩🇪 www.blocklist.de	2021-08-16 12:02:00 (5 years ago)	Aug 16 17:16:25 vz239 sshd[19745]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ... show more Aug 16 17:16:25 vz239 sshd[19745]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.149.183.94 user=r.r Aug 16 17:16:27 vz239 sshd[19745]: Failed password for r.r from 52.149.183.94 port 49805 ssh2 Aug 16 17:16:29 vz239 sshd[19747]: Invalid user ubnt from 52.149.183.94 Aug 16 17:16:29 vz239 sshd[19747]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.149.183.94 Aug 16 17:16:31 vz239 sshd[19747]: Failed password for invalid user ubnt from 52.149.183.94 port 50900 ssh2 Aug 16 17:16:32 vz239 sshd[19749]: Invalid user guest from 52.149.183.94 Aug 16 17:16:32 vz239 sshd[19749]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.149.183.94 Aug 16 17:16:34 vz239 sshd[19749]: Failed password for invalid user guest from 52.149.183.94 port 51705 ssh2 Aug 16 17:16:35 vz239 sshd[19751]: Invalid user pi from 52.149.183.94 Aug 16 17:16:35 vz239 sshd[19751]: ........ ------------------------------- show less	FTP Brute-Force Hacking
🇩🇪 www.blocklist.de	2021-08-16 11:41:33 (5 years ago)	Aug 16 17:16:25 vz239 sshd[19745]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ... show more Aug 16 17:16:25 vz239 sshd[19745]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.149.183.94 user=r.r Aug 16 17:16:27 vz239 sshd[19745]: Failed password for r.r from 52.149.183.94 port 49805 ssh2 Aug 16 17:16:29 vz239 sshd[19747]: Invalid user ubnt from 52.149.183.94 Aug 16 17:16:29 vz239 sshd[19747]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.149.183.94 Aug 16 17:16:31 vz239 sshd[19747]: Failed password for invalid user ubnt from 52.149.183.94 port 50900 ssh2 Aug 16 17:16:32 vz239 sshd[19749]: Invalid user guest from 52.149.183.94 Aug 16 17:16:32 vz239 sshd[19749]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.149.183.94 Aug 16 17:16:34 vz239 sshd[19749]: Failed password for invalid user guest from 52.149.183.94 port 51705 ssh2 Aug 16 17:16:35 vz239 sshd[19751]: Invalid user pi from 52.149.183.94 Aug 16 17:16:35 vz239 sshd[19751]: ........ ------------------------------- show less	FTP Brute-Force Hacking
🇩🇪 www.blocklist.de	2021-08-16 11:20:44 (5 years ago)	Aug 16 17:16:25 vz239 sshd[19745]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ... show more Aug 16 17:16:25 vz239 sshd[19745]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.149.183.94 user=r.r Aug 16 17:16:27 vz239 sshd[19745]: Failed password for r.r from 52.149.183.94 port 49805 ssh2 Aug 16 17:16:29 vz239 sshd[19747]: Invalid user ubnt from 52.149.183.94 Aug 16 17:16:29 vz239 sshd[19747]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.149.183.94 Aug 16 17:16:31 vz239 sshd[19747]: Failed password for invalid user ubnt from 52.149.183.94 port 50900 ssh2 Aug 16 17:16:32 vz239 sshd[19749]: Invalid user guest from 52.149.183.94 Aug 16 17:16:32 vz239 sshd[19749]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.149.183.94 Aug 16 17:16:34 vz239 sshd[19749]: Failed password for invalid user guest from 52.149.183.94 port 51705 ssh2 Aug 16 17:16:35 vz239 sshd[19751]: Invalid user pi from 52.149.183.94 Aug 16 17:16:35 vz239 sshd[19751]: ........ ------------------------------- show less	FTP Brute-Force Hacking
🇬🇧 cyberswitch.co.uk	2021-08-16 05:33:10 (5 years ago)	(sshd) Failed SSH login from 52.149.183.94 (US/United States/-): 5 in the last 3600 secs; Ports: ; ... show more (sshd) Failed SSH login from 52.149.183.94 (US/United States/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Aug 16 09:33:02 ws1 sshd[15566]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.149.183.94 user=root Aug 16 09:33:04 ws1 sshd[15566]: Failed password for root from 52.149.183.94 port 64104 ssh2 Aug 16 09:33:05 ws1 sshd[15576]: Invalid user ubnt from 52.149.183.94 port 65019 Aug 16 09:33:08 ws1 sshd[15576]: Failed password for invalid user ubnt from 52.149.183.94 port 65019 ssh2 Aug 16 09:33:09 ws1 sshd[15582]: Invalid user guest from 52.149.183.94 port 49577 show less	Brute-Force SSH
🇺🇸 Sardonimous	2021-08-13 09:45:04 (5 years ago)	Aug 13 08:37:05 askasleikir sshd[198519]: Unable to negotiate with 52.149.183.94 port 50075: no matc ... show more Aug 13 08:37:05 askasleikir sshd[198519]: Unable to negotiate with 52.149.183.94 port 50075: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1 [preauth] show less	Brute-Force
Anonymous	2021-08-11 13:21:50 (5 years ago)	Aug 11 10:21:49 propaganda sshd[22246]: Connection from 52.149.183.94 port 62407 on 10.0.0.161 port ... show more Aug 11 10:21:49 propaganda sshd[22246]: Connection from 52.149.183.94 port 62407 on 10.0.0.161 port 22 rdomain "" Aug 11 10:21:49 propaganda sshd[22246]: Unable to negotiate with 52.149.183.94 port 62407: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1 [preauth] show less	Brute-Force SSH

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇬 197.39.108.69

🇧🇷 187.17.228.239

🇳🇱 109.160.32.20

🇩🇪 109.91.4.177

🇫🇷 85.217.140.37

🇬🇧 34.147.183.249

🇷🇴 2.57.122.209

🇺🇸 2600:1900:4120:e3fb:0:7a::

🇩🇪 167.172.178.173

🇧🇷 138.36.57.206

🇨🇳 114.100.210.56

🇯🇵 87.76.190.27

🇹🇼 59.126.224.134

🇧🇪 34.140.241.141

🇨🇭 34.65.103.42

🇸🇰 213.81.189.106

🇨🇳 202.46.62.86

🇩🇪 141.98.152.118

🇮🇱 109.226.17.247

🇺🇦 109.87.153.26