Log in to view charts and search reports for this IP.
Log In
Reports Activity
Example preview
Report Categories (Last 60 Days)
Example preview
Top Reporter Countries (Last 60 Days)
Example preview
Account required for the enhanced features
Log inSign up
IP Abuse Reports for 106.89.63.95
This IP address has been reported a total of
49
times from
44 distinct
sources.
106.89.63.95 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 17
reports;
Netherlands
with 4
reports;
Spain
with 3
reports.
The most common categories in these recent reports were:
Brute-Force
43
times;
SSH
8
times;
Email Spam
7
times;
Port Scan
5
times;
Web App Attack
2
times;
Other
3
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-09-26T17:24:21.855498+02:00 medusa sshd-session[193292]: Invalid user guest from 106.89.63.95 p ...
show more2026-09-26T17:24:21.855498+02:00 medusa sshd-session[193292]: Invalid user guest from 106.89.63.95 port 31911
...
show less
2026-09-26T22:32:34.154574+08:00 localhost sshd[1272014]: Invalid user centos from 106.89.63.95 port ...
show more2026-09-26T22:32:34.154574+08:00 localhost sshd[1272014]: Invalid user centos from 106.89.63.95 port 31580
...
show less
26 Sep 2026 14:06:54UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) includin ...
show more26 Sep 2026 14:06:54UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) including ip address 106.89.63.95
show less
SSH brute-force / unauthorized pre-auth probing against production node Manual-Audit. Filtered & dro ...
show moreSSH brute-force / unauthorized pre-auth probing against production node Manual-Audit. Filtered & dropped by iptables. Raw audit:
Manual audit command trigger
show less
2026-09-26T11:11:20.094140+02:00 vweb01 sshd[392465]: Invalid user user from 106.89.63.95 port 31283 ...
show more2026-09-26T11:11:20.094140+02:00 vweb01 sshd[392465]: Invalid user user from 106.89.63.95 port 31283
2026-09-26T11:11:24.703445+02:00 vweb01 sshd[392465]: error: PAM: Authentication failure for illegal user user from 106.89.63.95
2026-09-26T11:11:24.704279+02:00 vweb01 sshd[392465]: Failed keyboard-interactive/pam for invalid user user from 106.89.63.95 port 31283 ssh2
2026-09-26T11:11:25.650485+02:00 vweb01 sshd[392465]: Connection closed by invalid user user 106.89.63.95 port 31283 [preauth]
...
show less
This address opens SMTP sessions to our mail server, asks whether authentication is offered, and han ...
show moreThis address opens SMTP sessions to our mail server, asks whether authentication is offered, and hangs up. This is reconnaissance for credential attacks on mail accounts, seen from many addresses at once; blocked. Please check what runs on this address. | 2026-09-26 03:28 UTC
show less
