This IP address has been reported a total of
29
times from
24 distinct
sources.
174.138.89.209 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-06-09T14:03:04.592430+00:00 [host] sshd[148525]: Invalid user bitcoind from 174.138.89.209 port ...
show more2026-06-09T14:03:04.592430+00:00 [host] sshd[148525]: Invalid user bitcoind from 174.138.89.209 port 36812
2026-06-09T14:31:04.764399+00:00 [host] sshd[148903]: User root from 174.138.89.209 not allowed because not listed in AllowUsers
2026-06-09T14:45:04.875748+00:00 [host] sshd[149034]: User root from 174.138.89.209 not allowed because not listed in AllowUsers
show less
Jun 9 07:31:37 servidor sshd[3144027]: Invalid user postgres from 174.138.89.209 port 47876
Jun 9 ...
show moreJun 9 07:31:37 servidor sshd[3144027]: Invalid user postgres from 174.138.89.209 port 47876
Jun 9 07:31:39 servidor sshd[3144027]: Failed password for invalid user postgres from 174.138.89.209 port 47876 ssh2
Jun 9 07:31:41 servidor sshd[3144027]: Connection closed by invalid user postgres 174.138.89.209 port 47876 [preauth]
...
show less
Jun 9 12:45:49 jackstringer sshd[738291]: Invalid user deploy from 174.138.89.209 port 60492
Jun 9 ...
show moreJun 9 12:45:49 jackstringer sshd[738291]: Invalid user deploy from 174.138.89.209 port 60492
Jun 9 12:45:49 jackstringer sshd[738291]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.89.209
Jun 9 12:45:50 jackstringer sshd[738291]: Failed password for invalid user deploy from 174.138.89.209 port 60492 ssh2
...
show less
2026-06-09T13:37:01.996845+02:00 asdeby sshd-session[460587]: pam_unix(sshd:auth): authentication fa ...
show more2026-06-09T13:37:01.996845+02:00 asdeby sshd-session[460587]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.89.209 user=root
2026-06-09T13:37:04.081558+02:00 asdeby sshd-session[460587]: Failed password for root from 174.138.89.209 port 51518 ssh2
2026-06-09T13:37:04.832962+02:00 asdeby sshd-session[460587]: Connection closed by authenticating user root 174.138.89.209 port 51518 [preauth]
...
show less
174.138.89.209 (US/United States/-), 5 distributed sshd attacks on account [tomcat] in the last 3600 ...
show more174.138.89.209 (US/United States/-), 5 distributed sshd attacks on account [tomcat] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jun 9 06:28:17 14253 sshd[15902]: Invalid user tomcat from 62.171.177.192 port 40582
Jun 9 06:27:17 14253 sshd[15392]: Invalid user tomcat from 139.59.138.20 port 55286
Jun 9 06:27:19 14253 sshd[15392]: Failed password for invalid user tomcat from 139.59.138.20 port 55286 ssh2
Jun 9 06:27:46 14253 sshd[15547]: Invalid user tomcat from 174.138.89.209 port 58492
Jun 9 06:27:48 14253 sshd[15547]: Failed password for invalid user tomcat from 174.138.89.209 port 58492 ssh2
IP Addresses Blocked:
62.171.177.192 (DE/Germany/vmi1628877.contaboserver.net)
139.59.138.20 (DE/Germany/-)
show less
2026-06-09T12:29:00.816428+02:00 asdeby sshd-session[421218]: pam_unix(sshd:auth): authentication fa ...
show more2026-06-09T12:29:00.816428+02:00 asdeby sshd-session[421218]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.89.209
2026-06-09T12:29:02.798273+02:00 asdeby sshd-session[421218]: Failed password for invalid user exchange from 174.138.89.209 port 40038 ssh2
2026-06-09T12:29:03.632007+02:00 asdeby sshd-session[421218]: Connection closed by invalid user exchange 174.138.89.209 port 40038 [preauth]
...
show less
Jun 9 10:11:29 server sshd[400615]: Invalid user postgres from 174.138.89.209 port 55092
Jun 9 10: ...
show moreJun 9 10:11:29 server sshd[400615]: Invalid user postgres from 174.138.89.209 port 55092
Jun 9 10:11:29 server sshd[400615]: Failed password for invalid user postgres from 174.138.89.209 port 55092 ssh2
...
show less
174.138.89.209 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 s ...
show more174.138.89.209 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jun 9 03:48:15 14098 sshd[2862]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.89.209 user=root
Jun 9 03:48:18 14098 sshd[2862]: Failed password for root from 174.138.89.209 port 57990 ssh2
Jun 9 03:47:49 14098 sshd[2436]: Failed password for root from 154.3.39.132 port 53426 ssh2
Jun 9 03:48:48 14098 sshd[3016]: Failed password for root from 173.249.63.80 port 37462 ssh2
Jun 9 03:48:46 14098 sshd[3016]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.249.63.80 user=root
IP Addresses Blocked:
show less
Brute-Force
SSH
Showing 1 to
15
of 29 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩