This IP address has been reported a total of
35
times from
32 distinct
sources.
34.14.85.26 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 9
reports;
Germany
with 7
reports;
France
with 4
reports.
The most common categories in these recent reports were:
Port Scan
17
times;
Brute-Force
17
times;
Hacking
10
times;
Email Spam
6
times;
FTP Brute-Force
3
times;
Other
9
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
SSH aggressive port ping.
{"destinationServicename":"telnetd","dpt":"2323","dst":"REDACTED.2","level ...
show moreSSH aggressive port ping.
{"destinationServicename":"telnetd","dpt":"2323","dst":"REDACTED.2","level":"info","msg":"Telnet connection","product":"ssh-auth-logger","spt":"61960","src":"34.14.85.26","time":"2026-10-13T08:00:26Z"}
{"destinationServicename":"telnetd","dpt":"2323","dst":"REDACTED.2","level":"info","msg":"Telnet connection","product":"ssh-auth-logger","spt":"61964","src":"34.14.85.26","time":"2026-10-13T08:00:26Z"}
{"destinationServicename":"telnetd","dpt":"2323","dst":"REDACTED.2","level":"info","msg":"Telnet connection","product":"ssh-auth-logger","spt":"61972","src":"34.14.85.26","time":"2026-10-13T08:00:26Z"}
{"abuseConfidenceScore":100,"countryCode":"BE","destinationServicename":"telnetd","dpt":"2323","dst":"REDACTED.2","level":"info","msg":"Telnet connection","product":"ssh-auth-logger","spt":"61978","src":"34.14.85.26","time":"2026-10-13T08:00:36Z","totalReports":34}
{"abuseConfidenceScore":100,"countryCode":"BE","destinationServicename":"telnetd","dpt":"2323","dst":"REDACTED.2","level":
...
show less
PortSentry honeypot: unsolicited TCP connection to closed decoy port 23 (Telnet) on a host running n ...
show morePortSentry honeypot: unsolicited TCP connection to closed decoy port 23 (Telnet) on a host running no such service. Automated port-scan detection at 2026-10-13T07:32:24Z.
show less
postfix Server DDoS - AUTH drops, early HANGUPs, other DDoS attacks, etc. Might contain brute-force ...
show morepostfix Server DDoS - AUTH drops, early HANGUPs, other DDoS attacks, etc. Might contain brute-force dictionary attack sightings on IMAP and SMTP.
show less
Oct 13 08:56:42 mx1 postfix/postscreen[1883902]: PREGREET 18 after 0.01 from [34.14.85.26]:31658: EH ...
show moreOct 13 08:56:42 mx1 postfix/postscreen[1883902]: PREGREET 18 after 0.01 from [34.14.85.26]:31658: EHLO example.com\r\n
...
show less
Port Scanner or SMTP unauthorized access tries
...
Port Scan
Brute-Force
Anonymous
2026-10-12 23:26:59,267 server-866667.chao.iondata.systems proftpd[1417990] server-866667.chao.ionda ...
show more2026-10-12 23:26:59,267 server-866667.chao.iondata.systems proftpd[1417990] server-866667.chao.iondata.systems (26.85.14.34.bc.googleusercontent.com[34.14.85.26]): USER anonymous: no such user found from 26.85.14.34.bc.googleusercontent.com [34.14.85.26] to ::ffff:129.121.100.75:21
...
show less
34.14.85.26 (BE/Belgium/26.85.14.34.bc.googleusercontent.com), 6 distributed ftpd attacks on account ...
show more34.14.85.26 (BE/Belgium/26.85.14.34.bc.googleusercontent.com), 6 distributed ftpd attacks on account [redacted]
show less
Known exploit / shellcode injection attempt / network protocol violation, may be port scanning false ...
show moreKnown exploit / shellcode injection attempt / network protocol violation, may be port scanning false positive
show less
Honeypot Finding: Telnet intrusion activity on TCP/23; successful login, command, or download activi ...
show moreHoneypot Finding: Telnet intrusion activity on TCP/23; successful login, command, or download activity observed.
show less
