52.140.76.154
52.140.76.154 is a threat-intelligence indicator (IPv4 address) classified as Suspicious, corroborated across 5 independent feeds. It is aggregated and de-duplicated from many open and commercial threat feeds, with confidence scoring and decay over time.
Indicator facts
- Type
- IPv4 address
- Indicator
52.140.76.154- Classification
- Suspicious
- Confidence
- 90 / 100
- Corroboration
- 5 independent sources
- First seen
- Last seen
- Network (ASN)
- AS8075 — MICROSOFT-CORP-MSN-AS-BLOCK
- Country
- US
Tags
- brute-force
- ssh
- aggregate-source
- attacker
- sshpwauth
- honeypot
- scanner
Related CVEs (87)
- CVE-2026-49975
- CVE-2026-44631
- CVE-2026-44186
- CVE-2026-44185
- CVE-2026-44119
- CVE-2026-43951
- CVE-2026-42536
- CVE-2026-42535
- CVE-2026-34356
- CVE-2026-34355
- CVE-2026-34059
- CVE-2026-34032
- CVE-2026-33857
- CVE-2026-33523
- CVE-2026-33375
- CVE-2026-33007
- CVE-2026-33006
- CVE-2026-29170
- CVE-2026-29169
- CVE-2026-29168
- CVE-2026-29167
- CVE-2026-28780
- CVE-2026-24072
- CVE-2026-21727
- CVE-2026-21722
- CVE-2026-21721
- CVE-2026-21720
- CVE-2025-66200
- CVE-2025-65082
- CVE-2025-59775
- CVE-2025-58098
- CVE-2025-55753
- CVE-2025-53020
- CVE-2025-49812
- CVE-2025-49630
- CVE-2025-41115
- CVE-2025-23419
- CVE-2025-23048
- CVE-2025-12141
- CVE-2024-47252
- CVE-2024-43394
- CVE-2024-43204
- CVE-2024-42516
- CVE-2024-40898
- CVE-2024-39573
- CVE-2024-38477
- CVE-2024-38476
- CVE-2024-38475
- CVE-2024-38474
- CVE-2024-38473
← Threat intelligence command center · Explore the indicator corpus