This IP address has been reported a total of
965
times from
361 distinct
sources.
174.138.53.142 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
This IP address carried out 3 SSH credential attack (attempts) on 06-04-2026. For more information o ...
show moreThis IP address carried out 3 SSH credential attack (attempts) on 06-04-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
Apr 5 21:59:55 coyote sshd[770592]: Invalid user frappe from 174.138.53.142 port 57754
Apr 5 21:59 ...
show moreApr 5 21:59:55 coyote sshd[770592]: Invalid user frappe from 174.138.53.142 port 57754
Apr 5 21:59:55 coyote sshd[770592]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.53.142
Apr 5 21:59:57 coyote sshd[770592]: Failed password for invalid user frappe from 174.138.53.142 port 57754 ssh2
...
show less
2026-04-06T01:35:52.828633+03:00 kotia sshd-session[255353]: Invalid user desliga from 174.138.53.14 ...
show more2026-04-06T01:35:52.828633+03:00 kotia sshd-session[255353]: Invalid user desliga from 174.138.53.142 port 54790
...
show less
2026-04-06T04:48:35.358985+08:00 vmi996132.contaboserver.net sshd[1712418]: pam_unix(sshd:auth): aut ...
show more2026-04-06T04:48:35.358985+08:00 vmi996132.contaboserver.net sshd[1712418]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.53.142
2026-04-06T04:48:37.468993+08:00 vmi996132.contaboserver.net sshd[1712418]: Failed password for invalid user gitea from 174.138.53.142 port 55578 ssh2
2026-04-06T04:48:37.848542+08:00 vmi996132.contaboserver.net sshd[1712418]: Disconnected from invalid user gitea 174.138.53.142 port 55578 [preauth]
...
show less
174.138.53.142 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 s ...
show more174.138.53.142 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 5 10:57:21 15039 sshd[15598]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.102.22.96 user=root
Apr 5 10:57:23 15039 sshd[15598]: Failed password for root from 180.102.22.96 port 33592 ssh2
Apr 5 10:47:40 15039 sshd[14838]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.47.17.142 user=root
Apr 5 10:47:43 15039 sshd[14838]: Failed password for root from 101.47.17.142 port 42008 ssh2
Apr 5 11:37:35 15039 sshd[18581]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.53.142 user=root
IP Addresses Blocked:
180.102.22.96 (CN/China/-)
101.47.17.142 (SG/Singapore/-)
show less
Brute-Force
SSH
Anonymous
Apr 5 12:29:47 v sshd\[18655\]: Invalid user claude from 174.138.53.142 port 49292
Apr 5 12:29:47 ...
show moreApr 5 12:29:47 v sshd\[18655\]: Invalid user claude from 174.138.53.142 port 49292
Apr 5 12:29:47 v sshd\[18655\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.53.142
Apr 5 12:29:49 v sshd\[18655\]: Failed password for invalid user claude from 174.138.53.142 port 49292 ssh2
...
show less