AbuseIPDB » 52.161.137.249

52.161.137.249 was found in our database!

This IP was reported 933 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
Domain Name	microsoft.com
Country	United States of America
City	Cheyenne, Wyoming

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 52.161.137.249

Whois 52.161.137.249

IP Abuse Reports for 52.161.137.249:

This IP address has been reported a total of 933 times from 480 distinct sources. 52.161.137.249 was first reported on September 12th 2024, and the most recent report was 7 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
mxpgmbh	2024-10-04 13:56:33 (7 minutes ago)	2024-10-04T15:55:48.880635+02:00 hz-vm-web-026 sshd[1686199]: pam_unix(sshd:auth): authentication fa ... show more2024-10-04T15:55:48.880635+02:00 hz-vm-web-026 sshd[1686199]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.137.249 2024-10-04T15:55:51.321922+02:00 hz-vm-web-026 sshd[1686199]: Failed password for invalid user hadoop from 52.161.137.249 port 55910 ssh2 2024-10-04T15:56:31.246268+02:00 hz-vm-web-026 sshd[1687605]: Invalid user ubuntu from 52.161.137.249 port 36996 2024-10-04T15:56:31.248116+02:00 hz-vm-web-026 sshd[1687605]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.137.249 2024-10-04T15:56:32.922104+02:00 hz-vm-web-026 sshd[1687605]: Failed password for invalid user ubuntu from 52.161.137.249 port 36996 ssh2 show less	Brute-Force SSH
Anonymous	2024-10-04 13:56:24 (7 minutes ago)	Scenario: crowdsecurity/ssh-slow-bf	Brute-Force SSH
vbios.com	2024-10-04 13:53:33 (10 minutes ago)	Oct 4 16:53:30 dev sshd[1915705]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ... show moreOct 4 16:53:30 dev sshd[1915705]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.137.249 Oct 4 16:53:32 dev sshd[1915705]: Failed password for invalid user deploy from 52.161.137.249 port 52428 ssh2 show less	Brute-Force SSH
Mario Bretscher	2024-10-04 13:41:45 (21 minutes ago)	Oct 4 15:39:43 hades sshd[947479]: Failed password for invalid user test from 52.161.137.249 port 4 ... show moreOct 4 15:39:43 hades sshd[947479]: Failed password for invalid user test from 52.161.137.249 port 49314 ssh2 Oct 4 15:41:41 hades sshd[947628]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.137.249 user=mysql Oct 4 15:41:43 hades sshd[947628]: Failed password for mysql from 52.161.137.249 port 54220 ssh2 ... show less	SSH
sa0azs	2024-10-04 13:41:45 (21 minutes ago)	2024-10-04T15:40:17.994423+02:00 ErrolFlynn sshd[509989]: pam_unix(sshd:auth): authentication failur ... show more2024-10-04T15:40:17.994423+02:00 ErrolFlynn sshd[509989]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.137.249 2024-10-04T15:40:19.955066+02:00 ErrolFlynn sshd[509989]: Failed password for invalid user test from 52.161.137.249 port 39236 ssh2 2024-10-04T15:41:44.591281+02:00 ErrolFlynn sshd[510044]: Invalid user mysql from 52.161.137.249 port 53162 ... show less	Brute-Force SSH
icera-network.de	2024-10-04 13:41:20 (22 minutes ago)	2024-10-04T14:35:39.294955+01:00 jane sshd[1703608]: pam_unix(sshd:auth): authentication failure; lo ... show more2024-10-04T14:35:39.294955+01:00 jane sshd[1703608]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.137.249 2024-10-04T14:35:41.424105+01:00 jane sshd[1703608]: Failed password for invalid user test from 52.161.137.249 port 34584 ssh2 2024-10-04T14:41:19.489849+01:00 jane sshd[1709092]: Invalid user mysql from 52.161.137.249 port 54020 ... show less	Brute-Force SSH
yzfdude1	2024-10-04 13:27:42 (35 minutes ago)	Oct 4 07:23:30 b146-40 sshd[1291844]: pam_unix(sshd:auth): authentication failure; logname= uid=0 e ... show moreOct 4 07:23:30 b146-40 sshd[1291844]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.137.249 Oct 4 07:23:33 b146-40 sshd[1291844]: Failed password for invalid user test from 52.161.137.249 port 46550 ssh2 Oct 4 07:27:42 b146-40 sshd[1292069]: Invalid user hadoop from 52.161.137.249 port 55386 ... show less	Brute-Force SSH
ghostwarriors	2024-10-04 13:22:13 (41 minutes ago)	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
phoenix1jl96	2024-10-04 12:47:22 (1 hour ago)	Oct 4 14:45:56 box sshd[2373740]: Invalid user admin from 52.161.137.249 port 58116 Oct 4 14 ... show moreOct 4 14:45:56 box sshd[2373740]: Invalid user admin from 52.161.137.249 port 58116 Oct 4 14:45:56 box sshd[2373740]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.137.249 Oct 4 14:45:57 box sshd[2373740]: Failed password for invalid user admin from 52.161.137.249 port 58116 ssh2 Oct 4 14:46:38 box sshd[2374271]: Invalid user hadoop from 52.161.137.249 port 46396 Oct 4 14:46:38 box sshd[2374271]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.137.249 Oct 4 14:46:40 box sshd[2374271]: Failed password for invalid user hadoop from 52.161.137.249 port 46396 ssh2 Oct 4 14:47:21 box sshd[2374856]: Invalid user user from 52.161.137.249 port 35714 ... show less	DNS Compromise DNS Poisoning DDoS Attack Ping of Death Web Spam Email Spam Blog Spam Port Scan Hacking Brute-Force Bad Web Bot Web App Attack SSH
OHOST.BG	2024-10-04 12:46:45 (1 hour ago)	2024-10-04T15:45:03.788070hostwere sshd[9532]: Failed password for invalid user git from 52.161.137. ... show more2024-10-04T15:45:03.788070hostwere sshd[9532]: Failed password for invalid user git from 52.161.137.249 port 44232 ssh2 2024-10-04T15:46:01.987974hostwere sshd[17894]: Invalid user admin from 52.161.137.249 port 33124 2024-10-04T15:46:01.993192hostwere sshd[17894]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.137.249 2024-10-04T15:46:04.630857hostwere sshd[17894]: Failed password for invalid user admin from 52.161.137.249 port 33124 ssh2 2024-10-04T15:46:44.898969hostwere sshd[23937]: Invalid user hadoop from 52.161.137.249 port 45706 ... show less	Brute-Force SSH
Anonymous	2024-10-04 12:46:45 (1 hour ago)	2024-10-04T12:45:02.161012+00:00 deb0 sshd[97678]: Invalid user git from 52.161.137.249 port 40064<b ... show more2024-10-04T12:45:02.161012+00:00 deb0 sshd[97678]: Invalid user git from 52.161.137.249 port 40064 2024-10-04T12:45:02.325949+00:00 deb0 sshd[97678]: Disconnected from invalid user git 52.161.137.249 port 40064 [preauth] 2024-10-04T12:46:02.012358+00:00 deb0 sshd[97699]: Invalid user admin from 52.161.137.249 port 45688 2024-10-04T12:46:02.175111+00:00 deb0 sshd[97699]: Disconnected from invalid user admin 52.161.137.249 port 45688 [preauth] 2024-10-04T12:46:44.960020+00:00 deb0 sshd[97741]: Invalid user hadoop from 52.161.137.249 port 53692 2024-10-04T12:46:45.122190+00:00 deb0 sshd[97741]: Disconnected from invalid user hadoop 52.161.137.249 port 53692 [preauth] ... show less	Brute-Force SSH
en0	2024-10-04 12:20:17 (1 hour ago)	2024-10-04 07:20:17,059 fail2ban.actions [974]: NOTICE [sshd] Ban 52.161.137.249	Brute-Force SSH
Dominik Lysiak	2024-10-04 12:18:34 (1 hour ago)	2024-10-04T14:15:38.989196+02:00 main sshd[3656507]: pam_unix(sshd:auth): authentication failure; lo ... show more2024-10-04T14:15:38.989196+02:00 main sshd[3656507]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.137.249 2024-10-04T14:15:41.691648+02:00 main sshd[3656507]: Failed password for invalid user guest from 52.161.137.249 port 45876 ssh2 2024-10-04T14:15:38.989196+02:00 main sshd[3656507]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.137.249 2024-10-04T14:15:41.691648+02:00 main sshd[3656507]: Failed password for invalid user guest from 52.161.137.249 port 45876 ssh2 2024-10-04T14:18:33.244777+02:00 main sshd[3658751]: Invalid user debian from 52.161.137.249 port 55074 ... show less	Brute-Force SSH
Anonymous	2024-10-04 12:17:32 (1 hour ago)	52.161.137.249 (US/United States/-), 7 distributed sshd attacks on account [guest] in the last 3600 ... show more52.161.137.249 (US/United States/-), 7 distributed sshd attacks on account [guest] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Oct 4 08:14:39 server2 sshd[19922]: Invalid user guest from 52.161.137.249 port 36022 Oct 4 08:14:39 server2 sshd[19922]: Failed password for invalid user guest from 52.161.137.249 port 36022 ssh2 Oct 4 08:11:44 server2 sshd[18814]: Invalid user guest from 117.33.131.6 port 37488 Oct 4 08:11:44 server2 sshd[18814]: Failed password for invalid user guest from 117.33.131.6 port 37488 ssh2 Oct 4 07:44:35 server2 sshd[6796]: Invalid user guest from 103.98.4.35 port 49962 Oct 4 07:44:35 server2 sshd[6796]: Failed password for invalid user guest from 103.98.4.35 port 49962 ssh2 Oct 4 08:17:27 server2 sshd[21524]: Invalid user guest from 167.86.81.130 port 53642 IP Addresses Blocked: show less	Brute-Force
SpeedIT Solutions	2024-10-04 12:05:30 (1 hour ago)	(sshd) Failed SSH login from 52.161.137.249 (US/United States/-)	Brute-Force SSH