AbuseIPDB » 52.161.124.61

52.161.124.61 was found in our database!

This IP was reported 1,653 times. Confidence of Abuse is 81%: ?

81%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
Domain Name	microsoft.com
Country	United States of America
City	Cheyenne, Wyoming

Report 52.161.124.61

Whois 52.161.124.61

IP Abuse Reports for 52.161.124.61:

This IP address has been reported a total of 1,653 times from 657 distinct sources. 52.161.124.61 was first reported on September 12th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
yzfdude1	2024-09-14 14:00:19 (2 months ago)	Sep 14 07:59:34 b146-19 sshd[1407182]: Failed password for root from 52.161.124.61 port 46400 ssh2<b ... show moreSep 14 07:59:34 b146-19 sshd[1407182]: Failed password for root from 52.161.124.61 port 46400 ssh2 Sep 14 08:00:16 b146-19 sshd[1407256]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.124.61 user=root Sep 14 08:00:18 b146-19 sshd[1407256]: Failed password for root from 52.161.124.61 port 40136 ssh2 ... show less	Brute-Force SSH
amit177	2024-09-14 09:09:02 (2 months ago)		Brute-Force SSH
Anonymous	2024-09-14 09:08:21 (2 months ago)	(sshd) Failed SSH login from 52.161.124.61 (US/United States/-): 4 in the last 3600 secs; Ports: ; ... show more(sshd) Failed SSH login from 52.161.124.61 (US/United States/-): 4 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SSHD; Logs: Sep 14 11:00:14 xn--80aqlfee4d sshd[5847]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.124.61 user=root Sep 14 11:00:16 xn--80aqlfee4d sshd[5847]: Failed password for root from 52.161.124.61 port 41968 ssh2 Sep 14 11:08:17 xn--80aqlfee4d sshd[6706]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.124.61 user=root Sep 14 11:08:19 xn--80aqlfee4d sshd[6706]: Failed password for root from 52.161.124.61 port 40844 ssh2 show less	Port Scan
Martin Atukunda	2024-09-14 08:38:43 (2 months ago)	Sep 14 11:28:29 voice sshd[4655]: Failed password for root from 52.161.124.61 port 58452 ssh2 ... show moreSep 14 11:28:29 voice sshd[4655]: Failed password for root from 52.161.124.61 port 58452 ssh2 Sep 14 11:36:34 voice sshd[5025]: Failed password for root from 52.161.124.61 port 38074 ssh2 Sep 14 11:37:16 voice sshd[5054]: Failed password for root from 52.161.124.61 port 39020 ssh2 Sep 14 11:37:58 voice sshd[5082]: Failed password for root from 52.161.124.61 port 41080 ssh2 Sep 14 11:38:41 voice sshd[5133]: Failed password for root from 52.161.124.61 port 59836 ssh2 ... show less	Port Scan Hacking Brute-Force SSH
Richard Lee	2024-09-14 07:19:06 (2 months ago)	Sep 14 07:19:04 PAR-636868 sshd[1889744]: Failed password for root from 52.161.124.61 port 51652 ssh ... show moreSep 14 07:19:04 PAR-636868 sshd[1889744]: Failed password for root from 52.161.124.61 port 51652 ssh2 Sep 14 07:19:05 PAR-636868 sshd[1889744]: Disconnected from authenticating user root 52.161.124.61 port 51652 [preauth] Sep 14 07:19:05 PAR-636868 sshd[1889744]: Disconnected from authenticating user root 52.161.124.61 port 51652 [preauth] ... show less	FTP Brute-Force Port Scan Hacking Brute-Force Bad Web Bot Web App Attack SSH
Richard Lee	2024-09-14 06:58:32 (2 months ago)	Sep 14 06:51:49 PAR-636868 sshd[1889356]: Disconnected from authenticating user root 52.161.124.61 p ... show moreSep 14 06:51:49 PAR-636868 sshd[1889356]: Disconnected from authenticating user root 52.161.124.61 port 48478 [preauth] Sep 14 06:58:29 PAR-636868 sshd[1889447]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.124.61 user=root Sep 14 06:58:31 PAR-636868 sshd[1889447]: Failed password for root from 52.161.124.61 port 35416 ssh2 ... show less	FTP Brute-Force Port Scan Hacking Brute-Force Bad Web Bot Web App Attack SSH
Samuil Warshan	2024-09-14 06:25:52 (2 months ago)	F2B blocked SSH BF	Brute-Force SSH
LTM	2024-09-14 06:20:01 (2 months ago)	SSH - Attempt to login using invalid or illegal credential	Port Scan Brute-Force SSH
MazenHost	2024-09-14 04:49:52 (2 months ago)	Sep 14 06:46:13 OSRP sshd[1943792]: Failed password for root from 52.161.124.61 port 52378 ssh2<br / ... show moreSep 14 06:46:13 OSRP sshd[1943792]: Failed password for root from 52.161.124.61 port 52378 ssh2 Sep 14 06:47:00 OSRP sshd[1943857]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.124.61 user=root Sep 14 06:47:03 OSRP sshd[1943857]: Failed password for root from 52.161.124.61 port 45340 ssh2 Sep 14 06:47:46 OSRP sshd[1943946]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.124.61 user=root Sep 14 06:47:49 OSRP sshd[1943946]: Failed password for root from 52.161.124.61 port 56198 ssh2 Sep 14 06:48:34 OSRP sshd[1944004]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.124.61 user=root Sep 14 06:48:36 OSRP sshd[1944004]: Failed password for root from 52.161.124.61 port 48638 ssh2 ... show less	Brute-Force SSH
McClay	2024-09-14 02:56:05 (2 months ago)	Illegal access attempt:2024-09-14T04:56:04.056328+02:00 xn--kster-juait sshd[3501541]: Failed passwo ... show moreIllegal access attempt:2024-09-14T04:56:04.056328+02:00 xn--kster-juait sshd[3501541]: Failed password for root from 52.161.124.61 port 53060 ssh2 2024-09-14T04:56:04.406344+02:00 xn--kster-juait sshd[3501541]: error: maximum authentication attempts exceeded for root from 52.161.124.61 port 53060 ssh2 [preauth] ... show less	Brute-Force SSH
ISPLtd	2024-09-14 02:54:12 (2 months ago)	Sep 13 19:54:11 SRC=52.161.124.61 PROTO=TCP SPT=39856 DPT=22 SYN ...	Port Scan SSH
Futunk	2024-09-14 02:23:41 (2 months ago)	2024-09-14T04:20:09.444412+02:00 jadzia sshd[959807]: User root from 52.161.124.61 not allowed becau ... show more2024-09-14T04:20:09.444412+02:00 jadzia sshd[959807]: User root from 52.161.124.61 not allowed because not listed in AllowUsers 2024-09-14T04:20:09.581028+02:00 jadzia sshd[959807]: Disconnected from invalid user root 52.161.124.61 port 43100 [preauth] 2024-09-14T04:22:57.467919+02:00 jadzia sshd[959993]: User root from 52.161.124.61 not allowed because not listed in AllowUsers 2024-09-14T04:22:57.604084+02:00 jadzia sshd[959993]: Disconnected from invalid user root 52.161.124.61 port 33696 [preauth] 2024-09-14T04:23:40.619979+02:00 jadzia sshd[960050]: User root from 52.161.124.61 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
MPL	2024-09-14 02:19:30 (2 months ago)	tcp/22 (8 or more attempts)	Port Scan
Max la Menace	2024-09-13 23:33:03 (2 months ago)	ssh brute force (P)	Brute-Force SSH
LRNP	2024-09-13 22:25:45 (2 months ago)	2024-09-13T22:18:29.154333+00:00 boron sshd[353614]: Disconnected from authenticating user root 52.1 ... show more2024-09-13T22:18:29.154333+00:00 boron sshd[353614]: Disconnected from authenticating user root 52.161.124.61 port 41298 [preauth] 2024-09-13T22:25:46.883325+00:00 boron sshd[353625]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.124.61 user=root 2024-09-13T22:25:49.042524+00:00 boron sshd[353625]: Failed password for root from 52.161.124.61 port 35914 ssh2 ... show less	Brute-Force SSH