149.28.138.88
149.28.138.88 is a threat-intelligence indicator (IPv4 address) classified as Suspicious, corroborated across 3 independent feeds. It is aggregated and de-duplicated from many open and commercial threat feeds, with confidence scoring and decay over time.
Indicator facts
- Type
- IPv4 address
- Indicator
149.28.138.88- Classification
- Suspicious
- Confidence
- 80 / 100
- Corroboration
- 3 independent sources
- First seen
- Last seen
- Network (ASN)
- AS20473 — AS-VULTR
- Country
- US
Tags
- ssh
- brute-force
- attacker
- sshpwauth
- scanner
Related CVEs (37)
- CVE-2026-20912
- CVE-2026-20904
- CVE-2026-20897
- CVE-2026-20888
- CVE-2026-20883
- CVE-2026-20800
- CVE-2026-20750
- CVE-2026-20736
- CVE-2026-0798
- CVE-2025-69413
- CVE-2025-68944
- CVE-2025-68942
- CVE-2025-68941
- CVE-2025-68940
- CVE-2025-68939
- CVE-2025-68938
- CVE-2024-21171
- CVE-2024-21137
- CVE-2024-21102
- CVE-2024-21101
- CVE-2024-21096
- CVE-2024-21087
- CVE-2024-21069
- CVE-2024-21062
- CVE-2024-21061
- CVE-2024-21047
- CVE-2024-20985
- CVE-2024-20981
- CVE-2024-20977
- CVE-2024-20975
- CVE-2024-20973
- CVE-2024-20971
- CVE-2024-20969
- CVE-2024-20967
- CVE-2024-20965
- CVE-2024-20963
- CVE-2024-20961
← Threat intelligence command center · Explore the indicator corpus