This IP address has been reported a total of
101
times from
72 distinct
sources.
174.138.12.89 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ...
show moreAutomated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).
show less
2026-03-10T00:50:31.326797-05:00 zwgonkop sshd[17261]: Invalid user test from 174.138.12.89 port 447 ...
show more2026-03-10T00:50:31.326797-05:00 zwgonkop sshd[17261]: Invalid user test from 174.138.12.89 port 44744
2026-03-10T00:50:31.326797-05:00 zwgonkop sshd[17261]: Invalid user test from 174.138.12.89 port 44744
2026-03-10T00:50:31.935323-05:00 zwgonkop sshd[17261]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.12.89
2026-03-10T00:50:34.116098-05:00 zwgonkop sshd[17261]: Failed password for invalid user test from 174.138.12.89 port 44744 ssh2
2026-03-10T00:50:31.935323-05:00 zwgonkop sshd[17261]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.12.89
2026-03-10T00:50:34.116098-05:00 zwgonkop sshd[17261]: Failed password for invalid user test from 174.138.12.89 port 44744 ssh2
2026-03-10T00:50:36.048229-05:00 zwgonkop sshd[17261]: Connection closed by invalid user test 174.138.12.89 port 44744 [preauth]
2026-03-10T00:50:36.048229-05:00 zwgonkop sshd[17261]: Connection closed by invalid user test 1
...
show less
Mar 10 05:40:06 mail sshd[93632]: Invalid user postgres from 174.138.12.89 port 55674
Mar 10 05:41:2 ...
show moreMar 10 05:40:06 mail sshd[93632]: Invalid user postgres from 174.138.12.89 port 55674
Mar 10 05:41:24 mail sshd[93645]: Invalid user oracle from 174.138.12.89 port 53286
Mar 10 05:42:39 mail sshd[93654]: Invalid user user from 174.138.12.89 port 43162
Mar 10 05:43:55 mail sshd[93663]: Invalid user vps from 174.138.12.89 port 60938
Mar 10 05:45:10 mail sshd[93692]: Invalid user testuser from 174.138.12.89 port 56372
...
show less
Mar 10 05:38:56 mk-bgp sshd[101448]: Invalid user postgres from 174.138.12.89 port 41908
Mar 10 05:4 ...
show moreMar 10 05:38:56 mk-bgp sshd[101448]: Invalid user postgres from 174.138.12.89 port 41908
Mar 10 05:40:15 mk-bgp sshd[101479]: Invalid user oracle from 174.138.12.89 port 49866
Mar 10 05:41:31 mk-bgp sshd[101492]: Invalid user user from 174.138.12.89 port 36266
Mar 10 05:42:45 mk-bgp sshd[101505]: Invalid user vps from 174.138.12.89 port 57054
Mar 10 05:44:00 mk-bgp sshd[101511]: Invalid user testuser from 174.138.12.89 port 47282
...
show less
2026-03-10T05:39:50.903939+00:00 luckless.de sshd-session[2337683]: Invalid user postgres from 174.1 ...
show more2026-03-10T05:39:50.903939+00:00 luckless.de sshd-session[2337683]: Invalid user postgres from 174.138.12.89 port 57616
2026-03-10T05:41:09.606490+00:00 luckless.de sshd-session[2337749]: Invalid user oracle from 174.138.12.89 port 52612
2026-03-10T05:42:26.461123+00:00 luckless.de sshd-session[2337785]: Invalid user user from 174.138.12.89 port 59102
...
show less
2026-03-10T06:27:24.670595+01:00 tor01-ca-pop.as202427.net sshd[887751]: User root from 174.138.12.8 ...
show more2026-03-10T06:27:24.670595+01:00 tor01-ca-pop.as202427.net sshd[887751]: User root from 174.138.12.89 not allowed because not listed in AllowUsers
2026-03-10T06:28:52.566876+01:00 tor01-ca-pop.as202427.net sshd[888002]: User root from 174.138.12.89 not allowed because not listed in AllowUsers
2026-03-10T06:30:22.986184+01:00 tor01-ca-pop.as202427.net sshd[888330]: User root from 174.138.12.89 not allowed because not listed in AllowUsers
...
show less
Report 2129592 with IP 3177154 for SSH brute-force attack by source 3171817 via ssh-honeypot/0.2.0+h ...
show moreReport 2129592 with IP 3177154 for SSH brute-force attack by source 3171817 via ssh-honeypot/0.2.0+http
show less
2026-03-10T00:28:12.849269-05:00 afterlife.dchu096.me sshd[112763]: Failed password for root from 17 ...
show more2026-03-10T00:28:12.849269-05:00 afterlife.dchu096.me sshd[112763]: Failed password for root from 174.138.12.89 port 52128 ssh2
2026-03-10T00:29:38.366417-05:00 afterlife.dchu096.me sshd[112770]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.12.89 user=root
2026-03-10T00:29:40.533315-05:00 afterlife.dchu096.me sshd[112770]: Failed password for root from 174.138.12.89 port 39450 ssh2
...
show less
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ...
show moreAutomated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).
show less
2026-03-10T00:26:28.315549-05:00 zwgonkop sshd[17198]: pam_unix(sshd:auth): authentication failure; ...
show more2026-03-10T00:26:28.315549-05:00 zwgonkop sshd[17198]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.12.89 user=root
2026-03-10T00:26:30.733198-05:00 zwgonkop sshd[17198]: Failed password for invalid user root from 174.138.12.89 port 48240 ssh2
2026-03-10T00:26:32.152320-05:00 zwgonkop sshd[17198]: Connection closed by invalid user root 174.138.12.89 port 48240 [preauth]
2026-03-10T00:27:55.742626-05:00 zwgonkop sshd[17206]: User root from 174.138.12.89 not allowed because not listed in AllowUsers
2026-03-10T00:27:56.381347-05:00 zwgonkop sshd[17206]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.12.89 user=root
2026-03-10T00:27:58.212067-05:00 zwgonkop sshd[17206]: Failed password for invalid user root from 174.138.12.89 port 43888 ssh2
2026-03-10T00:28:00.452034-05:00 zwgonkop sshd[17206]: Connection closed by invalid user root 174.138.12.89 port 43888 [preauth]
2026-03-10T00:29:24.5
...
show less
Brute-Force
SSH
Anonymous
Mar 10 05:27:52 madrants sshd[1820527]: Failed password for root from 174.138.12.89 port 52768 ssh2
...
show moreMar 10 05:27:52 madrants sshd[1820527]: Failed password for root from 174.138.12.89 port 52768 ssh2
Mar 10 05:29:20 madrants sshd[1820596]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.12.89 user=root
Mar 10 05:29:21 madrants sshd[1820596]: Failed password for root from 174.138.12.89 port 51678 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 101 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩