JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 174.138.2.214

174.138.2.214 was found in our database!

This IP was reported 544 times. Confidence of Abuse is 14%: ?

14%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 174.138.2.214

Whois 174.138.2.214

IP Abuse Reports for 174.138.2.214:

This IP address has been reported a total of 544 times from 273 distinct sources. 174.138.2.214 was first reported on December 2nd 2025, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-05-15 01:19:10 (3 weeks ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 174.138.2.214 (NL/The Netherlands/-): ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 174.138.2.214 (NL/The Netherlands/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇺🇸 RAP	2026-05-15 01:15:09 (3 weeks ago)	2026-05-15 01:15:09 UTC Unauthorized activity to TCP port 8443. Web App	Port Scan Web App Attack
🇬🇧 thetomtaylor.co.uk	2026-05-05 16:08:12 (1 month ago)	Fail2Ban - [SSH]Brute-force login attempts on sshd ... [mx02]	Brute-Force SSH
🇬🇧 thetomtaylor.co.uk	2026-04-08 21:05:02 (2 months ago)	Fail2Ban - [SSH]Brute-force login attempts on sshd ... [wa01]	Brute-Force SSH
🇫🇷 SpaceHost-Server	2026-02-06 23:34:05 (4 months ago)		Brute-Force Web App Attack
🇫🇷 SpaceHost-Server	2026-02-05 23:31:23 (4 months ago)		Brute-Force Web App Attack
🇹🇷 rtbh.com.tr	2026-02-05 20:11:24 (4 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 sh97	2026-02-05 18:27:19 (4 months ago)	tr01: SSH Brute Force from 174.138.2.214 at 2026-02-05 23:57:19 IST	Brute-Force SSH
🇹🇷 rtbh.com.tr	2026-02-04 20:11:24 (4 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Anonymous	2026-02-04 16:35:56 (4 months ago)	Portscan: TCP/22 (6x)	Port Scan
🇫🇷 tecnicorioja	2026-02-04 11:45:28 (4 months ago)	Failed password for root Feb 04 08:45:49 port 41836	Brute-Force SSH
Anonymous	2026-02-04 09:06:45 (4 months ago)	Fail2Ban SSH login block from 174.138.2.214	SSH
🇰🇷 forgeban	2026-02-04 09:06:29 (4 months ago)	Session Report (UTC: 2026-02-04T09:06:29.445Z) Session Duration: 2026-02-04T09:06:20.439Z - 2026-02- ... show more Session Report (UTC: 2026-02-04T09:06:29.445Z) Session Duration: 2026-02-04T09:06:20.439Z - 2026-02-04T09:06:29.445Z Client: SSH-2.0-Go Source Port: 37712 Activities: - no_auth - Login attempt - User: ubuntu (SUCCESS) - connection - debug_channel - session - debug_channel_request - Command executed: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH uname=$(uname -s -v -n -m 2>/dev/null) arch=$(uname -m 2>/dev/null) uptime=$(cat /proc/uptime 2>/dev/null \| cut -d. -f1) cpus=$( (nproc \|\| grep -c "^processor" /proc/cpuinfo) 2>/dev/null \| head -1) cpu_model=$( (grep -m1 -E "model name\|Hardware" /proc/cpuinfo \| cut -d: -f2- \| sed 's/^ //;s/ $//' ; lscpu 2>/dev/null \| awk -F: '/Model name/ {gsub(/^ +\| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null \| head -n1 ; uname -p 2>/dev/null) \| awk 'NF{print; exit}' ) gpu_info=$( (lspci 2>/dev/null \| grep -i vga; lspci 2>/dev/null \| grep -i nvidia) 2>/dev/null \| head -n50) cat_help=$( (cat --help 2>&1 \| tr '\n' ' ') \|\| show less	Hacking Brute-Force SSH
🇩🇪 ddos-report	2026-02-04 09:04:12 (4 months ago)	Feb 4 10:03:29 v220241135696295643 sshd[847058]: Invalid user ubuntu from 174.138.2.214 port 47188 ... show more Feb 4 10:03:29 v220241135696295643 sshd[847058]: Invalid user ubuntu from 174.138.2.214 port 47188 Feb 4 10:03:29 v220241135696295643 sshd[847058]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.2.214 Feb 4 10:03:29 v220241135696295643 sshd[847058]: Invalid user ubuntu from 174.138.2.214 port 47188 Feb 4 10:03:31 v220241135696295643 sshd[847058]: Failed password for invalid user ubuntu from 174.138.2.214 port 47188 ssh2 Feb 4 10:04:12 v220241135696295643 sshd[847061]: Invalid user ubuntu from 174.138.2.214 port 51816 ... show less	Brute-Force SSH
🇩🇪 SELECT-IT Beratung und IT Dienstleistung GmbH	2026-02-04 09:03:46 (4 months ago)	2026-02-04T09:02:23.132476+00:00 Door-Opener-Proxy sshd[3111895]: Failed password for invalid user u ... show more 2026-02-04T09:02:23.132476+00:00 Door-Opener-Proxy sshd[3111895]: Failed password for invalid user ubuntu from 174.138.2.214 port 52622 ssh2 2026-02-04T09:03:01.717546+00:00 Door-Opener-Proxy sshd[3112706]: Invalid user ubuntu from 174.138.2.214 port 37276 2026-02-04T09:03:01.887498+00:00 Door-Opener-Proxy sshd[3112706]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.2.214 2026-02-04T09:03:04.031714+00:00 Door-Opener-Proxy sshd[3112706]: Failed password for invalid user ubuntu from 174.138.2.214 port 37276 ssh2 2026-02-04T09:03:44.759201+00:00 Door-Opener-Proxy sshd[3113539]: Invalid user ubuntu from 174.138.2.214 port 37122 ... show less	Brute-Force SSH

Showing 1 to 15 of 544 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 103.146.159.173

🇭🇰 218.250.28.248

🇬🇧 217.146.93.233

🇲🇽 189.217.198.203

🇭🇰 150.5.141.198

🇫🇮 147.185.133.55

🇺🇸 129.212.183.98

🇨🇳 120.26.75.147

🇷🇴 80.94.92.187

🇺🇸 66.132.198.4

🇺🇸 66.132.186.129

🇹🇼 61.231.216.167

🇧🇷 45.225.193.62

🇳🇱 45.153.34.114

🇺🇸 20.168.122.36

🇺🇸 18.221.197.55

🇮🇩 2404:c0:b302:634e:dd8d:1d10:80cd:bfb9

🇦🇷 190.112.99.235

🇸🇪 89.253.90.113

🇧🇷 45.225.195.45