JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

174.28.13.2

Neutral Activity

Abuse Confidence Score

0% Low Risk

16 reports

16 reporters · latest 5 years ago

ISP: CenturyLink Communications, LLC
Usage Type: Fixed Line ISP
ASN: AS209
Hostname(s): 174-28-13-2.albq.qwest.net
Domain Name: centurylink.com
Country: 🇺🇸 United States of America
City: Albuquerque, New Mexico

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

174.28.13.2 has been reported 16 times. The most recent report is from 5 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

16 from 16 distinct reporters

First reported

January 10th 2021

Most recent report

5 years ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 security.rdmc.fr	2021-01-16 07:56:30 UTC · (5 years ago)	Automatic report - Banned IP Access	Web App Attack
🇺🇸 dridas	2021-01-16 03:24:21 UTC · (5 years ago)	Jan 16 08:24:18 vps2 sshd[15338]: Failed password for root from 174.28.13.2 port 46276 ssh2 Jan 16 08:24:20 vps2 sshd[15338]: Failed password for root from 174.28.13.2 port 46276 ssh2 ...	Brute-Force SSH
🇫🇷 astroplan	2021-01-15 11:14:55 UTC · (5 years ago)	SSH login attempts brute force.	Brute-Force SSH
🇺🇸 spacex.sp.fyi	2021-01-15 09:06:30 UTC · (5 years ago)	Jan 15 14:06:16 UbuSX sshd[1049]: Failed password for root from 174.28.13.2 port 37094 ssh2 Jan 15 14:06:18 UbuSX sshd[1049]: Failed password for root from 174.28.13.2 port 37094 ssh2 Jan 15 14:06:30 UbuSX sshd[1049]: error: maximum authentication at ... show more Jan 15 14:06:16 UbuSX sshd[1049]: Failed password for root from 174.28.13.2 port 37094 ssh2 Jan 15 14:06:18 UbuSX sshd[1049]: Failed password for root from 174.28.13.2 port 37094 ssh2 Jan 15 14:06:30 UbuSX sshd[1049]: error: maximum authentication attempts exceeded for root from 174.28.13.2 port 37094 ssh2 [preauth] ... show less	Brute-Force SSH
🇫🇷 smtp.com.es	2021-01-15 04:11:40 UTC · (5 years ago)	Brute force attempt	Brute-Force SSH
🇺🇸 instant	2021-01-14 11:15:30 UTC · (5 years ago)	Jan 14 16:15:28 *** sshd[30255]: User root from 174.28.13.2 not allowed because not listed in AllowUsers	Brute-Force SSH
🇩🇪 hscode.pl	2021-01-14 09:23:14 UTC · (5 years ago)	s1.hscode.pl - SSH Attack	Brute-Force SSH
🇩🇪 www.blocklist.de	2021-01-13 19:04:40 UTC · (5 years ago)	Lines containing failures of 174.28.13.2 Jan 14 01:00:17 shared03 sshd[30164]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.28.13.2 user=r.r Jan 14 01:00:20 shared03 sshd[30164]: Failed password for r.r ... show more Lines containing failures of 174.28.13.2 Jan 14 01:00:17 shared03 sshd[30164]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.28.13.2 user=r.r Jan 14 01:00:20 shared03 sshd[30164]: Failed password for r.r from 174.28.13.2 port 58336 ssh2 Jan 14 01:00:22 shared03 sshd[30164]: Failed password for r.r from 174.28.13.2 port 58336 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=174.28.13.2 show less	FTP Brute-Force Hacking
🇳🇱 wlt-blocker	2021-01-13 15:03:28 UTC · (5 years ago)	Attempts to access SSH server with wrong credentials	SSH
🇮🇳 Parth Maniar	2021-01-13 13:48:58 UTC · (5 years ago)	SSH bruteforce login attempts.	Brute-Force SSH
🇲🇩 iHost	2021-01-13 07:41:04 UTC · (5 years ago)	174.28.13.2 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: 22; Direction: in; Trigger: LF_DISTATTACK; Logs: Jan 13 14:41:00 web1 sshd[284359]: Failed password for root from 174.28.13.2 port 35042 ssh2 ... show more 174.28.13.2 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: 22; Direction: in; Trigger: LF_DISTATTACK; Logs: Jan 13 14:41:00 web1 sshd[284359]: Failed password for root from 174.28.13.2 port 35042 ssh2 Jan 13 14:41:03 web1 sshd[284359]: Failed password for root from 174.28.13.2 port 35042 ssh2 Jan 13 14:40:56 web1 sshd[284359]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.28.13.2 user=root Jan 13 14:40:58 web1 sshd[284359]: Failed password for root from 174.28.13.2 port 35042 ssh2 Jan 13 14:39:38 web1 sshd[280288]: Failed password for root from 75.175.105.189 port 54764 ssh2 IP Addresses Blocked: show less	Port Scan
🇮🇹 Dario B.	2021-01-12 18:01:37 UTC · (5 years ago)	DATE:2021-01-13 00:00:25, IP:174.28.13.2, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)	Brute-Force
🇬🇷 gbetsis	2021-01-12 14:22:46 UTC · (5 years ago)	Telnet Server BruteForce Attack	Brute-Force
IrisFlower	2021-01-12 11:20:36 UTC · (5 years ago)	Unauthorized connection attempt detected from IP address 174.28.13.2 to port 23	Hacking
🇨🇦 Largnet SOC	2021-01-11 15:40:50 UTC · (5 years ago)	Icarus honeypot on github	Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇵🇭 131.226.100.178

🇩🇪 109.160.32.39

🇺🇸 20.38.15.21

🇰🇷 221.138.172.189

🇬🇷 194.154.36.195

🇵🇱 94.26.68.131

🇫🇷 91.231.89.111

🇨🇦 85.217.149.2

🇪🇸 85.62.28.108

🇳🇱 45.148.10.151

🇺🇸 20.38.35.186

🇬🇷 194.154.40.33

🇺🇸 76.171.112.53

🇧🇪 35.206.133.85

🇧🇪 23.251.135.142

🇺🇸 20.171.10.118

🇩🇪 5.183.32.197

🇺🇸 216.25.90.126

🇺🇸 216.25.90.21

🇳🇱 195.178.110.217