JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 52.186.174.149

52.186.174.149 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 79%: ?

79%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Washington, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 52.186.174.149

Whois 52.186.174.149

IP Abuse Reports for 52.186.174.149:

This IP address has been reported a total of 20 times from 18 distinct sources. 52.186.174.149 was first reported on March 28th 2026, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Richie	2026-07-25 08:14:06 (4 hours ago)	2026-07-25T10:13:39.648052+02:00 host2 sshd[1654496]: Failed password for root from 52.186.174.149 p ... show more 2026-07-25T10:13:39.648052+02:00 host2 sshd[1654496]: Failed password for root from 52.186.174.149 port 55234 ssh2 2026-07-25T10:13:47.888447+02:00 host2 sshd[1654520]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.186.174.149 user=root 2026-07-25T10:13:49.968435+02:00 host2 sshd[1654520]: Failed password for root from 52.186.174.149 port 55233 ssh2 2026-07-25T10:14:03.462447+02:00 host2 sshd[1654580]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.186.174.149 user=root 2026-07-25T10:14:05.402259+02:00 host2 sshd[1654580]: Failed password for root from 52.186.174.149 port 55236 ssh2 ... show less	Brute-Force SSH
🇫🇷 HerrWolf	2026-07-25 06:45:03 (6 hours ago)	CrowdSec Detection: crowdsecurity/ssh-bf	Brute-Force SSH
🇫🇷 SpaceHost-Server	2026-07-25 06:19:40 (6 hours ago)	Jul 25 08:18:47 pegasus sshd[3429711]: Failed password for root from 52.186.174.149 port 55232 ssh2 ... show more Jul 25 08:18:47 pegasus sshd[3429711]: Failed password for root from 52.186.174.149 port 55232 ssh2 Jul 25 08:18:52 pegasus sshd[3429746]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.186.174.149 user=root Jul 25 08:18:55 pegasus sshd[3429746]: Failed password for root from 52.186.174.149 port 55235 ssh2 Jul 25 08:19:37 pegasus sshd[3429899]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.186.174.149 user=root Jul 25 08:19:39 pegasus sshd[3429899]: Failed password for root from 52.186.174.149 port 55233 ssh2 show less	Brute-Force SSH
🇫🇷 SiyCah	2026-07-25 06:00:05 (6 hours ago)	52.186.174.149 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time ... show more 52.186.174.149 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time wasted: 2s. Total bytes sent by tarpit: 42B. Report generated by Endlessh Report Generator v1.2.3 show less	Brute-Force Port Scan SSH Hacking
🇫🇷 Lino Project	2026-07-25 05:36:29 (7 hours ago)	Jul 25 07:36:26 vps1 sshd[589571]: Invalid user ubuntu from 52.186.174.149 port 55303 ...	Brute-Force SSH
🇫🇷 rhydo	2026-07-25 05:21:43 (7 hours ago)	2026-07-25T07:19:58.482045+02:00 server sshd[1513427]: User root from 52.186.174.149 not allowed bec ... show more 2026-07-25T07:19:58.482045+02:00 server sshd[1513427]: User root from 52.186.174.149 not allowed because listed in DenyUsers 2026-07-25T07:20:06.632913+02:00 server sshd[1513467]: User root from 52.186.174.149 not allowed because listed in DenyUsers 2026-07-25T07:20:52.910366+02:00 server sshd[1513600]: User root from 52.186.174.149 not allowed because listed in DenyUsers 2026-07-25T07:21:37.266094+02:00 server sshd[1513733]: User root from 52.186.174.149 not allowed because listed in DenyUsers 2026-07-25T07:21:41.536310+02:00 server sshd[1513736]: User root from 52.186.174.149 not allowed because listed in DenyUsers ... show less	Brute-Force SSH
🇫🇷 EvoX	2026-07-25 04:56:04 (8 hours ago)	🛡️ Honeypot [bsts-tpot-sensor]: Brute-force attack detected on 22/SSH • Credentials: root:Contabo202 ... show more 🛡️ Honeypot [bsts-tpot-sensor]: Brute-force attack detected on 22/SSH • Credentials: root:Contabo2025#, root:admin@2026, root:123456, admin:admin • Number of login attempts: 4 • Client: SSH-2.0-paramiko_5.0.0 show less	Brute-Force SSH
🇫🇷 SpaceHost-Server	2026-07-25 04:31:41 (8 hours ago)	Jul 25 06:30:19 pegasus sshd[3392638]: Failed password for root from 52.186.174.149 port 55296 ssh2 ... show more Jul 25 06:30:19 pegasus sshd[3392638]: Failed password for root from 52.186.174.149 port 55296 ssh2 Jul 25 06:30:25 pegasus sshd[3392659]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.186.174.149 user=root Jul 25 06:30:27 pegasus sshd[3392659]: Failed password for root from 52.186.174.149 port 55299 ssh2 Jul 25 06:31:38 pegasus sshd[3392934]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.186.174.149 user=root Jul 25 06:31:40 pegasus sshd[3392934]: Failed password for root from 52.186.174.149 port 55300 ssh2 show less	Brute-Force SSH
🇩🇪 NetWatch	2026-07-25 03:58:56 (9 hours ago)	The IP 52.186.174.149 tried multiple SSH_BRUTE_FORCE logins	Brute-Force
🇫🇷 aki	2026-07-25 03:47:47 (9 hours ago)	Drop: ...	Port Scan
🇫🇷 Neoloop	2026-07-25 03:47:18 (9 hours ago)	Jul 25 05:47:04 athena sshd[3001206]: Failed password for root from 52.186.174.149 port 55301 ssh2 J ... show more Jul 25 05:47:04 athena sshd[3001206]: Failed password for root from 52.186.174.149 port 55301 ssh2 Jul 25 05:47:08 athena sshd[3001281]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.186.174.149 user=root Jul 25 05:47:10 athena sshd[3001281]: Failed password for root from 52.186.174.149 port 55297 ssh2 Jul 25 05:47:15 athena sshd[3001391]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.186.174.149 user=root Jul 25 05:47:17 athena sshd[3001391]: Failed password for root from 52.186.174.149 port 55296 ssh2 ... show less	Brute-Force SSH
🇫🇷 vtchost.com	2026-07-25 03:43:50 (9 hours ago)	multiple failed login attempts ...	Brute-Force SSH
🇫🇷 DoSammy	2026-07-25 03:29:47 (9 hours ago)	Jul 25 05:29:44 dalia sshd[1951118]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eui ... show more Jul 25 05:29:44 dalia sshd[1951118]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.186.174.149 user=root Jul 25 05:29:46 dalia sshd[1951118]: Failed password for root from 52.186.174.149 port 55301 ssh2 ... show less	Brute-Force SSH
🇫🇷 kleine babykatze	2026-07-25 03:21:32 (9 hours ago)	2026-07-25T05:21:24.362576+02:00 vmd177327 sshd[3230684]: Failed password for root from 52.186.174.1 ... show more 2026-07-25T05:21:24.362576+02:00 vmd177327 sshd[3230684]: Failed password for root from 52.186.174.149 port 55242 ssh2 2026-07-25T05:21:28.819131+02:00 vmd177327 sshd[3230735]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.186.174.149 user=root 2026-07-25T05:21:30.428995+02:00 vmd177327 sshd[3230735]: Failed password for root from 52.186.174.149 port 55237 ssh2 ... show less	Brute-Force SSH FTP Brute-Force
🇺🇸 TPI-Abuse	2026-04-10 04:21:01 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 52.186.174.149 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 52.186.174.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 10 00:20:53.027494 2026] [security2:error] [pid 1832300:tid 1832300] [client 52.186.174.149:47144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gamedayteamwear.com.gamedayincentives.com"] [uri "/@fs/app/.git/config"] [unique_id "adh6pY9mOKDl83edO9J6gQAAAAE"], referer: https://outlook.live.com/ show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 211.46.188.16

🇸🇪 185.246.128.133

🇮🇩 180.252.243.8

🇸🇪 130.49.115.216

🇲🇲 122.248.109.243

🇮🇳 103.111.6.121

🇳🇬 102.88.137.213

🇫🇷 85.217.140.32

🇩🇪 4.185.41.66

🇨🇳 221.0.14.36

🇧🇷 200.53.205.196

🇺🇸 192.101.68.88

🇺🇸 165.154.202.23

🇧🇬 164.138.220.142

🇺🇸 164.90.152.103

🇸🇬 97.74.86.176

🇩🇪 93.152.221.206

🇳🇱 77.239.124.252

🇺🇸 67.205.171.117

🇬🇧 45.133.173.29