174.138.6.173

Web attack/malicious scanning detected

DNS AXFR Attempt

Blocked by UFW (TCP on 50050) Source port: 61006 TTL: 237 Packet length: 44 TOS: 0x08 This report (for 174.138.6.173) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter

ThreatBook Intelligence: Scanner,cdn more details on https://threatbook.io/ip/174.138.6.173

list.rtbh.com.tr report: tcp/0

scan port 22, 174.138.6.173 block

<jail> banned by fail2ban

Hacker syslog review 1772429659

2026-03-02T08:16:33.635419pantelemone.ru sshd[727099]: Failed password for www-data from 174.138.6.173 port 52844 ssh2 2026-03-02T08:17:06.458334pantelemone.ru sshd[727522]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh r ... show more 2026-03-02T08:16:33.635419pantelemone.ru sshd[727099]: Failed password for www-data from 174.138.6.173 port 52844 ssh2 2026-03-02T08:17:06.458334pantelemone.ru sshd[727522]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.6.173 user=www-data 2026-03-02T08:17:08.001612pantelemone.ru sshd[727522]: Failed password for www-data from 174.138.6.173 port 57016 ssh2 2026-03-02T08:17:40.276585pantelemone.ru sshd[727671]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.6.173 user=www-data 2026-03-02T08:17:42.487849pantelemone.ru sshd[727671]: Failed password for www-data from 174.138.6.173 port 53356 ssh2 ... show less

2026-03-02T06:13:02.968698+01:00 ozelot sshd-session[165528]: Failed password for backup from 174.138.6.173 port 35812 ssh2 2026-03-02T06:13:34.995728+01:00 ozelot sshd-session[174633]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid ... show more 2026-03-02T06:13:02.968698+01:00 ozelot sshd-session[165528]: Failed password for backup from 174.138.6.173 port 35812 ssh2 2026-03-02T06:13:34.995728+01:00 ozelot sshd-session[174633]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.6.173 user=backup 2026-03-02T06:13:37.070831+01:00 ozelot sshd-session[174633]: Failed password for backup from 174.138.6.173 port 47002 ssh2 show less

Mar 2 05:12:48 shomerdns sshd[519181]: Failed password for backup from 174.138.6.173 port 37216 ssh2 Mar 2 05:13:20 shomerdns sshd[519184]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.6.173 user= ... show more Mar 2 05:12:48 shomerdns sshd[519181]: Failed password for backup from 174.138.6.173 port 37216 ssh2 Mar 2 05:13:20 shomerdns sshd[519184]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.6.173 user=backup Mar 2 05:13:22 shomerdns sshd[519184]: Failed password for backup from 174.138.6.173 port 54830 ssh2 show less

Mar 2 05:12:43 vps-d7931dc8 sshd[251533]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.6.173 user=backup Mar 2 05:12:45 vps-d7931dc8 sshd[251533]: Failed password for backup from 174.138.6.173 por ... show more Mar 2 05:12:43 vps-d7931dc8 sshd[251533]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.6.173 user=backup Mar 2 05:12:45 vps-d7931dc8 sshd[251533]: Failed password for backup from 174.138.6.173 port 57948 ssh2 Mar 2 05:12:45 vps-d7931dc8 sshd[251533]: Connection closed by authenticating user backup 174.138.6.173 port 57948 [preauth] Mar 2 05:13:16 vps-d7931dc8 sshd[251535]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.6.173 user=backup Mar 2 05:13:19 vps-d7931dc8 sshd[251535]: Failed password for backup from 174.138.6.173 port 56580 ssh2 show less

2026-03-02T06:12:25.089841+01:00 ovh-proxmox sshd[3186949]: Failed password for backup from 174.138.6.173 port 60734 ssh2 2026-03-02T06:12:56.551763+01:00 ovh-proxmox sshd[3187078]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 t ... show more 2026-03-02T06:12:25.089841+01:00 ovh-proxmox sshd[3186949]: Failed password for backup from 174.138.6.173 port 60734 ssh2 2026-03-02T06:12:56.551763+01:00 ovh-proxmox sshd[3187078]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.6.173 user=backup 2026-03-02T06:12:58.773275+01:00 ovh-proxmox sshd[3187078]: Failed password for backup from 174.138.6.173 port 46104 ssh2 ... show less

Mar 2 05:05:51 internal-mail-rafled-com sshd[3392971]: Invalid user ftpuser from 174.138.6.173 port 46290 ...

2026-03-02 05:16:41,172 fail2ban.actions [14514]: NOTICE [sshd] Ban 174.138.6.173 2026-03-02 05:27:56,823 fail2ban.actions [14514]: NOTICE [sshd] Ban 174.138.6.173 2026-03-02 05:39:22,766 fail2ban.actions [14514]: NOTICE [sshd ... show more 2026-03-02 05:16:41,172 fail2ban.actions [14514]: NOTICE [sshd] Ban 174.138.6.173 2026-03-02 05:27:56,823 fail2ban.actions [14514]: NOTICE [sshd] Ban 174.138.6.173 2026-03-02 05:39:22,766 fail2ban.actions [14514]: NOTICE [sshd] Ban 174.138.6.173 2026-03-02 05:50:58,624 fail2ban.actions [14514]: NOTICE [sshd] Ban 174.138.6.173 2026-03-02 06:02:33,110 fail2ban.actions [14514]: NOTICE [sshd] Ban 174.138.6.173 ... show less