This IP address has been reported a total of
70
times from
62 distinct
sources.
174.138.14.49 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
Automated report: IP 174.138.14.49 detected in ssh-bruteforce activity on convergentdefense.com. See ...
show moreAutomated report: IP 174.138.14.49 detected in ssh-bruteforce activity on convergentdefense.com. Seen 1x, first: 2026-03-11 08:00. [ISAC-India]
show less
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ...
show moreAutomated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).
show less
(sshd) Failed SSH login from 174.138.14.49 (NL/Netherlands/-): 5 in the last 3600 secs; Ports: *; Di ...
show more(sshd) Failed SSH login from 174.138.14.49 (NL/Netherlands/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Mar 11 14:00:11 da057 sshd[2863687]: Did not receive identification string from 174.138.14.49 port 50878
Mar 11 14:20:14 da057 sshd[2881487]: Invalid user test from 174.138.14.49 port 36278
Mar 11 14:21:20 da057 sshd[2882236]: Invalid user test from 174.138.14.49 port 51414
Mar 11 14:22:24 da057 sshd[2883191]: Invalid user test from 174.138.14.49 port 36902
Mar 11 14:23:28 da057 sshd[2884354]: Invalid user test from 174.138.14.49 port 42532
show less
Port Scan
Anonymous
2026-03-11T14:03:40.549819+01:00 hosting13 sshd[1827446]: Failed password for root from 174.138.14.4 ...
show more2026-03-11T14:03:40.549819+01:00 hosting13 sshd[1827446]: Failed password for root from 174.138.14.49 port 41206 ssh2
2026-03-11T14:04:45.891589+01:00 hosting13 sshd[1827846]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.14.49 user=root
2026-03-11T14:04:48.051261+01:00 hosting13 sshd[1827846]: Failed password for root from 174.138.14.49 port 48078 ssh2
2026-03-11T14:05:51.211530+01:00 hosting13 sshd[1828268]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.14.49 user=root
2026-03-11T14:05:52.762706+01:00 hosting13 sshd[1828268]: Failed password for root from 174.138.14.49 port 54970 ssh2
...
show less
2026-03-11T14:00:11.287642+01:00 jabber-host01.talk.srvfarm.net sshd[117404]: Connection closed by 1 ...
show more2026-03-11T14:00:11.287642+01:00 jabber-host01.talk.srvfarm.net sshd[117404]: Connection closed by 174.138.14.49 port 33882
2026-03-11T14:01:34.599645+01:00 jabber-host01.talk.srvfarm.net sshd[117467]: Connection closed by authenticating user root 174.138.14.49 port 58102 [preauth]
2026-03-11T14:02:37.446765+01:00 jabber-host01.talk.srvfarm.net sshd[117539]: Connection closed by authenticating user root 174.138.14.49 port 34190 [preauth]
2026-03-11T14:03:40.354162+01:00 jabber-host01.talk.srvfarm.net sshd[117600]: Connection closed by authenticating user root 174.138.14.49 port 47294 [preauth]
2026-03-11T14:04:47.744781+01:00 jabber-host01.talk.srvfarm.net sshd[117650]: Connection closed by authenticating user root 174.138.14.49 port 51744 [preauth]
show less
Brute-Force
Showing 1 to
15
of 70 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩