JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 14.137.228.51

14.137.228.51 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 43%: ?

43%

ISP	IPOX
Usage Type	Data Center/Web Hosting/Transit
ASN	AS133180
Domain Name	netutils.io
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 14.137.228.51

Whois 14.137.228.51

IP Abuse Reports for 14.137.228.51:

This IP address has been reported a total of 14 times from 9 distinct sources. 14.137.228.51 was first reported on August 11th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 anycast_ac	2026-08-23 15:31:39 (1 week ago)	[mirai-detector honeypot] Inbound attack against our honeypot on tcp/9050 (socks). Tried credentials ... show more [mirai-detector honeypot] Inbound attack against our honeypot on tcp/9050 (socks). Tried credentials: b'toh':b'toh' Family fingerprint: proxy-scanner Commands captured: $ socks5 methods offered: ['no-auth', 'user/pass'] $ socks5 auth: 'toh' : 'toh' show less	DDoS Attack
🇨🇦 Luhte	2026-08-23 11:59:54 (1 week ago)	Unsolicited TCP connection from 14.137.228.51 to port 0 at 2026-08-23T11:59:54Z. Source IP completed ... show more Unsolicited TCP connection from 14.137.228.51 to port 0 at 2026-08-23T11:59:54Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring. show less	Port Scan Hacking
Anonymous	2026-08-22 19:02:04 (1 week ago)	106/tcp (1 or more attempts)	Port Scan
🇸🇬 drewf.ink	2026-08-21 10:30:14 (1 week ago)	[10:30] Attempted to relay through an open SOCKS5 proxy (CONNECT to api.ipify.org:443), authenticati ... show more [10:30] Attempted to relay through an open SOCKS5 proxy (CONNECT to api.ipify.org:443), authenticating as 16651665:1******5 show less	Open Proxy Port Scan
🇸🇬 drewf.ink	2026-08-21 10:14:59 (1 week ago)	[10:14] Attempted to relay through an open SOCKS5 proxy (CONNECT to api.ipify.org:443), authenticati ... show more [10:14] Attempted to relay through an open SOCKS5 proxy (CONNECT to api.ipify.org:443), authenticating as 393:3*3 show less	Open Proxy Port Scan
🇸🇬 drewf.ink	2026-08-20 18:05:55 (1 week ago)	[18:05] Attempted to relay through an open SOCKS5 proxy (CONNECT to api.ipify.org:443), authenticati ... show more [18:05] Attempted to relay through an open SOCKS5 proxy (CONNECT to api.ipify.org:443), authenticating as 45:45 show less	Open Proxy Port Scan
🇻🇳 scuslon	2026-08-15 21:07:38 (2 weeks ago)	RdpGuard detected brute-force attempt on RDP	Brute-Force
🇳🇱 Alimed	2026-08-15 19:30:25 (2 weeks ago)	[20260815 21:30:25] [14.137.228.51] connecting [20260815 21:30:25] [14.137.228.51] connected [202608 ... show more [20260815 21:30:25] [14.137.228.51] connecting [20260815 21:30:25] [14.137.228.51] connected [20260815 21:30:28] [14.137.228.51] user 'azureuser' sent [20260815 21:30:28] [14.137.228.51] password sent, failed... [20260815 21:30:28] [14.137.228.51] disconnected (azureuser) [20260815 21:33:04] [14.137.228.51] connecting [20260815 21:33:04] [14.137.228.51] connected [20260815 21:33:05] [14.137.228.51] user 'azureuser' sent [20260815 21:33:05] [14.137.228.51] password sent, failed... [20260815 21:33:06] [14.137.228.51] disconnected (azureuser) [20260815 21:42:22] [14.137.228.51] connecting [20260815 21:42:22] [14.137.228.51] connected [20260815 21:42:23] [14.137.228.51] user 'azureuser' sent [20260815 21:42:23] [14.137.228.51] password sent, failed... [20260815 21:42:23] [14.137.228.51] ip is temporarily banned... show less	Brute-Force SSH
🇳🇱 walkerit.ch	2026-08-15 19:11:14 (2 weeks ago)	Aug 15 21:02:27 srv-ubuntu-dev3 sshd[2542429]: Failed password for invalid user azureuser from 14.13 ... show more Aug 15 21:02:27 srv-ubuntu-dev3 sshd[2542429]: Failed password for invalid user azureuser from 14.137.228.51 port 55371 ssh2 Aug 15 21:02:28 srv-ubuntu-dev3 sshd[2542429]: Connection closed by invalid user azureuser 14.137.228.51 port 55371 [preauth] Aug 15 21:11:12 srv-ubuntu-dev3 sshd[2544012]: Invalid user azureuser from 14.137.228.51 port 61192 Aug 15 21:11:12 srv-ubuntu-dev3 sshd[2544012]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.137.228.51 Aug 15 21:11:14 srv-ubuntu-dev3 sshd[2544012]: Failed password for invalid user azureuser from 14.137.228.51 port 61192 ssh2 ... show less	Brute-Force SSH
🇳🇱 walkerit.ch	2026-08-15 17:38:10 (2 weeks ago)	Aug 15 19:37:09 srv-ubuntu-dev3 sshd[2527917]: Failed password for invalid user azureuser from 14.13 ... show more Aug 15 19:37:09 srv-ubuntu-dev3 sshd[2527917]: Failed password for invalid user azureuser from 14.137.228.51 port 55064 ssh2 Aug 15 19:37:11 srv-ubuntu-dev3 sshd[2527917]: Connection closed by invalid user azureuser 14.137.228.51 port 55064 [preauth] Aug 15 19:38:08 srv-ubuntu-dev3 sshd[2528089]: Invalid user azureuser from 14.137.228.51 port 63048 Aug 15 19:38:08 srv-ubuntu-dev3 sshd[2528089]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.137.228.51 Aug 15 19:38:10 srv-ubuntu-dev3 sshd[2528089]: Failed password for invalid user azureuser from 14.137.228.51 port 63048 ssh2 ... show less	Brute-Force SSH
🇫🇷 EvoX	2026-08-14 15:55:55 (2 weeks ago)	🛡️ Honeypot [bsts-tpot-sensor]: HTTP/1.1 request on 5985 POST /wsman?PSVersion=5.1.19041.1 User-Age ... show more 🛡️ Honeypot [bsts-tpot-sensor]: HTTP/1.1 request on 5985 POST /wsman?PSVersion=5.1.19041.1 User-Agent: Microsoft WinRM Client; 5985 [1] TCP show less	Hacking Bad Web Bot
🇿🇦 maximonline.co.za	2026-08-13 20:11:07 (2 weeks ago)	Brute Force RDP Attack	Port Scan Hacking Brute-Force
🇻🇳 scuslon	2026-08-13 17:18:46 (2 weeks ago)	RdpGuard detected brute-force attempt on RDP	Brute-Force
🇻🇳 scuslon	2026-08-11 11:51:21 (3 weeks ago)	RdpGuard detected brute-force attempt on RDP	Brute-Force

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 161.35.100.104

🇨🇳 121.36.217.118

🇹🇭 101.109.194.215

🇧🇪 198.235.24.196

🇦🇷 181.104.2.65

🇦🇷 179.40.66.97

🇺🇸 172.7.160.27

🇨🇳 171.8.42.112

🇵🇰 161.248.202.88

🇧🇩 161.248.201.228

🇧🇩 161.248.189.83

🇨🇳 121.29.4.80

🇨🇳 116.179.32.81

🇫🇷 91.231.89.83

🇳🇱 89.21.67.162

🇫🇮 77.105.130.244

🇱🇹 62.60.130.253

🇺🇸 34.55.8.2

🇧🇪 207.175.52.247

🇵🇱 178.211.139.135