AbuseIPDB » 52.161.124.61

52.161.124.61 was found in our database!

This IP was reported 1,653 times. Confidence of Abuse is 65%: ?

65%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
Domain Name	microsoft.com
Country	United States of America
City	Cheyenne, Wyoming

Report 52.161.124.61

Whois 52.161.124.61

IP Abuse Reports for 52.161.124.61:

This IP address has been reported a total of 1,653 times from 657 distinct sources. 52.161.124.61 was first reported on September 12th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
rtbh.com.tr	2024-09-15 20:54:38 (2 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
. .	2024-09-15 20:11:06 (2 months ago)	2024-09-15T20:11:03.418215 [REDACTED] sshd[219012]: Connection from 52.161.124.61 port 52490 on [RED ... show more2024-09-15T20:11:03.418215 [REDACTED] sshd[219012]: Connection from 52.161.124.61 port 52490 on [REDACTED] port 22 rdomain "" 2024-09-15T20:11:04.239554 [REDACTED] sshd[219012]: User root from 52.161.124.61 not allowed because listed in DenyUsers ... show less	Brute-Force SSH
www.jfarjona.com	2024-09-15 19:52:31 (2 months ago)	$f2bV_matches	Brute-Force SSH
SELECT-IT Beratung und IT Dienstleistung GmbH	2024-09-15 19:49:41 (2 months ago)	2024-09-15T21:49:00.980453+02:00 runner3 sshd[4180322]: Failed password for root from 52.161.124.61 ... show more2024-09-15T21:49:00.980453+02:00 runner3 sshd[4180322]: Failed password for root from 52.161.124.61 port 45646 ssh2 2024-09-15T21:49:41.007133+02:00 runner3 sshd[4180383]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.124.61 user=root 2024-09-15T21:49:43.140461+02:00 runner3 sshd[4180383]: Failed password for root from 52.161.124.61 port 42896 ssh2 2024-09-15T21:50:26.734936+02:00 runner3 sshd[4181072]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.124.61 user=root 2024-09-15T21:50:28.517165+02:00 runner3 sshd[4181072]: Failed password for root from 52.161.124.61 port 56864 ssh2 ... show less	Brute-Force SSH
LoNET	2024-09-15 19:48:14 (2 months ago)	Report 1342189 with IP 2389739 for SSH brute-force attack by source 2384414 via ssh-honeypot/0.2.0+h ... show moreReport 1342189 with IP 2389739 for SSH brute-force attack by source 2384414 via ssh-honeypot/0.2.0+http show less	Brute-Force SSH
bret.dk	2024-09-15 19:47:38 (2 months ago)	Sep 15 19:47:35 sg-mirror sshd[1502175]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show moreSep 15 19:47:35 sg-mirror sshd[1502175]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.124.61 user=root Sep 15 19:47:37 sg-mirror sshd[1502175]: Failed password for root from 52.161.124.61 port 38782 ssh2 ... show less	Brute-Force SSH
maxxsense	2024-09-15 18:41:03 (2 months ago)	(sshd) Failed SSH login from 52.161.124.61 (US/United States/-)	Brute-Force SSH
offensivekernel	2024-09-15 15:55:02 (2 months ago)	Sep 15 15:49:16 ip-172-26-13-107 sshd[999208]: Disconnected from authenticating user root 52.161.124 ... show moreSep 15 15:49:16 ip-172-26-13-107 sshd[999208]: Disconnected from authenticating user root 52.161.124.61 port 50564 [preauth] Sep 15 15:52:37 ip-172-26-13-107 sshd[999213]: Disconnected from authenticating user root 52.161.124.61 port 40682 [preauth] Sep 15 15:53:24 ip-172-26-13-107 sshd[999222]: Disconnected from authenticating user root 52.161.124.61 port 52284 [preauth] Sep 15 15:54:12 ip-172-26-13-107 sshd[999224]: Disconnected from authenticating user root 52.161.124.61 port 48360 [preauth] Sep 15 15:55:01 ip-172-26-13-107 sshd[999226]: Disconnected from authenticating user root 52.161.124.61 port 60014 [preauth] ... show less	Brute-Force SSH
MazenHost	2024-09-15 15:24:05 (2 months ago)	Sep 15 17:21:41 dev-server sshd[317415]: Failed password for root from 52.161.124.61 port 52612 ssh2 ... show moreSep 15 17:21:41 dev-server sshd[317415]: Failed password for root from 52.161.124.61 port 52612 ssh2 Sep 15 17:22:23 dev-server sshd[317452]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.124.61 user=root Sep 15 17:22:25 dev-server sshd[317452]: Failed password for root from 52.161.124.61 port 46844 ssh2 Sep 15 17:23:07 dev-server sshd[317486]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.124.61 user=root Sep 15 17:23:09 dev-server sshd[317486]: Failed password for root from 52.161.124.61 port 53776 ssh2 Sep 15 17:23:52 dev-server sshd[317522]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.124.61 user=root Sep 15 17:23:54 dev-server sshd[317522]: Failed password for root from 52.161.124.61 port 35600 ssh2 ... show less	Brute-Force SSH
stypr	2024-09-15 14:49:48 (2 months ago)	SSH Bruteforcing Attempt / Port Scanning	Brute-Force SSH
yzfdude1	2024-09-15 14:48:07 (2 months ago)	Sep 15 08:47:26 sycorax sshd[1531616]: Failed password for root from 52.161.124.61 port 46192 ssh2<b ... show moreSep 15 08:47:26 sycorax sshd[1531616]: Failed password for root from 52.161.124.61 port 46192 ssh2 Sep 15 08:48:05 sycorax sshd[1531680]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.124.61 user=root Sep 15 08:48:07 sycorax sshd[1531680]: Failed password for root from 52.161.124.61 port 58086 ssh2 ... show less	Brute-Force SSH
Filli Group	2024-09-15 13:41:28 (2 months ago)	2024-09-15T15:34:36.152400+02:00 mkc01.us.pop.as202427.net sshd[1823449]: User root from 52.161.124. ... show more2024-09-15T15:34:36.152400+02:00 mkc01.us.pop.as202427.net sshd[1823449]: User root from 52.161.124.61 not allowed because not listed in AllowUsers 2024-09-15T15:40:44.948447+02:00 mkc01.us.pop.as202427.net sshd[1825392]: User root from 52.161.124.61 not allowed because not listed in AllowUsers 2024-09-15T15:41:27.140188+02:00 mkc01.us.pop.as202427.net sshd[1825655]: User root from 52.161.124.61 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
VHosting	2024-09-15 13:03:23 (2 months ago)	Attempt from 52.161.124.61	Brute-Force SSH
Anonymous	2024-09-15 12:31:27 (2 months ago)	2024-09-15T14:22:37.588275v22019037947384217 sshd[16337]: Disconnected from 52.161.124.61 port 43358 ... show more2024-09-15T14:22:37.588275v22019037947384217 sshd[16337]: Disconnected from 52.161.124.61 port 43358 [preauth] 2024-09-15T14:30:46.119069v22019037947384217 sshd[16357]: Disconnected from 52.161.124.61 port 58742 [preauth] 2024-09-15T14:31:27.009591v22019037947384217 sshd[16361]: Disconnected from 52.161.124.61 port 36584 [preauth] ... show less	Brute-Force SSH
blizzard	2024-09-15 11:23:43 (2 months ago)	Sep 15 11:23:42 uptime sshd[604088]: Disconnected from authenticating user root 52.161.124.61 port 4 ... show moreSep 15 11:23:42 uptime sshd[604088]: Disconnected from authenticating user root 52.161.124.61 port 44394 [preauth] ... show less	Brute-Force SSH