This IP address has been reported a total of
108
times from
86 distinct
sources.
39.105.125.252 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-05-31T07:16:23.053356+02:00 jane sshd-session[3030965]: pam_unix(sshd:auth): authentication fai ...
show more2026-05-31T07:16:23.053356+02:00 jane sshd-session[3030965]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=39.105.125.252
2026-05-31T07:16:24.756842+02:00 jane sshd-session[3030965]: Failed password for invalid user kafka from 39.105.125.252 port 38146 ssh2
2026-05-31T07:16:25.824869+02:00 jane sshd-session[3032050]: Invalid user user from 39.105.125.252 port 46416
...
show less
Brute-Force
SSH
Anonymous
2026-05-31T07:16:18.957068+02:00 vps575891 sshd[2412847]: pam_unix(sshd:auth): authentication failur ...
show more2026-05-31T07:16:18.957068+02:00 vps575891 sshd[2412847]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=39.105.125.252
2026-05-31T07:16:20.943459+02:00 vps575891 sshd[2412847]: Failed password for invalid user ansadmin from 39.105.125.252 port 55568 ssh2
2026-05-31T07:16:24.545603+02:00 vps575891 sshd[2412870]: Invalid user user from 39.105.125.252 port 57672
...
show less
May 31 07:16:14 vps-07b0f6cf sshd[4181697]: User debian from 39.105.125.252 not allowed because list ...
show moreMay 31 07:16:14 vps-07b0f6cf sshd[4181697]: User debian from 39.105.125.252 not allowed because listed in DenyUsers
May 31 07:16:15 vps-07b0f6cf sshd[4181699]: Invalid user ubuntu from 39.105.125.252 port 58548
...
show less
2026-05-31T08:13:51.805244+03:00 kotiacat.nexus sshd[218156]: Invalid user user from 39.105.125.252 ...
show more2026-05-31T08:13:51.805244+03:00 kotiacat.nexus sshd[218156]: Invalid user user from 39.105.125.252 port 48826
2026-05-31T08:16:10.022097+03:00 kotiacat.nexus sshd[218165]: Invalid user ubuntu from 39.105.125.252 port 33546
2026-05-31T08:16:11.843485+03:00 kotiacat.nexus sshd[218171]: Invalid user test from 39.105.125.252 port 35058
...
show less
2026-05-30T16:29:34.586289-07:00 mail sshd[1659847]: Invalid user deploy from 39.105.125.252 port 60 ...
show more2026-05-30T16:29:34.586289-07:00 mail sshd[1659847]: Invalid user deploy from 39.105.125.252 port 60332
2026-05-30T16:29:38.469478-07:00 mail sshd[1659856]: Invalid user nexus from 39.105.125.252 port 34482
2026-05-30T16:29:42.260075-07:00 mail sshd[1659888]: Invalid user appuser from 39.105.125.252 port 36646
...
show less
2026-05-30T22:25:41.636250+00:00 ip-172-31-5-127 sshd[3280801]: Invalid user git from 39.105.125.252 ...
show more2026-05-30T22:25:41.636250+00:00 ip-172-31-5-127 sshd[3280801]: Invalid user git from 39.105.125.252 port 37288
2026-05-30T22:25:41.849427+00:00 ip-172-31-5-127 sshd[3280801]: Connection closed by invalid user git 39.105.125.252 port 37288 [preauth]
2026-05-30T22:25:44.015502+00:00 ip-172-31-5-127 sshd[3280803]: Connection closed by authenticating user ubuntu 39.105.125.252 port 39088 [preauth]
...
show less
[Fail2Ban] Banned 39.105.125.252 for 3600 seconds.\nRelevant log lines:\nMay 29 21:26:48 iZt4n7rlv57 ...
show more[Fail2Ban] Banned 39.105.125.252 for 3600 seconds.\nRelevant log lines:\nMay 29 21:26:48 iZt4n7rlv57tk8vhdup9fcZ sshd[2672107]: Failed password for invalid user vps from 39.105.125.252 port 37234 ssh2
May 29 21:26:51 iZt4n7rlv57tk8vhdup9fcZ sshd[2672109]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=39.105.125.252 user=root
May 29 21:26:53 iZt4n7rlv57tk8vhdup9fcZ sshd[2672109]: Failed password for root from 39.105.125.252 port 39054 ssh2
show less
2026-05-29T21:14:29.577101+08:00 *hostname* sshd-session[1848300]: Invalid user testuser from 39.105 ...
show more2026-05-29T21:14:29.577101+08:00 *hostname* sshd-session[1848300]: Invalid user testuser from 39.105.125.252 port 37774
2026-05-29T21:14:30.016477+08:00 *hostname* sshd-session[1848302]: Connection from 39.105.125.252 port 38404 on 10.0.16.255 port 22 rdomain ""
2026-05-29T21:14:30.897083+08:00 *hostname* sshd-session[1848302]: Invalid user ubuntu from 39.105.125.252 port 38404
2026-05-29T21:14:31.304940+08:00 *hostname* sshd-session[1848304]: Connection from 39.105.125.252 port 38934 on 10.0.16.255 port 22 rdomain ""
2026-05-29T21:14:32.717103+08:00 *hostname* sshd-session[1848304]: Invalid user admin from 39.105.125.252 port 38934
show less
2026-05-29T14:38:28.671961+02:00 vedantham-xyz sshd[452549]: Invalid user vps from 39.105.125.252 po ...
show more2026-05-29T14:38:28.671961+02:00 vedantham-xyz sshd[452549]: Invalid user vps from 39.105.125.252 port 43662
2026-05-29T14:38:32.430502+02:00 vedantham-xyz sshd[452553]: Invalid user oracle from 39.105.125.252 port 45226
2026-05-29T14:38:34.665213+02:00 vedantham-xyz sshd[452555]: Invalid user testuser from 39.105.125.252 port 46094
2026-05-29T14:38:35.635661+02:00 vedantham-xyz sshd[452557]: Invalid user ubuntu from 39.105.125.252 port 47096
2026-05-29T14:38:37.587609+02:00 vedantham-xyz sshd[452559]: Invalid user admin from 39.105.125.252 port 47924
...
show less
Brute-Force
SSH
Anonymous
2026-05-29T12:26:31.176410+00:00 de-fsn1-it1 sshd[1902433]: Invalid user vps from 39.105.125.252 por ...
show more2026-05-29T12:26:31.176410+00:00 de-fsn1-it1 sshd[1902433]: Invalid user vps from 39.105.125.252 port 35756
2026-05-29T12:26:33.716299+00:00 de-fsn1-it1 sshd[1902439]: Invalid user oracle from 39.105.125.252 port 37436
2026-05-29T12:26:34.723279+00:00 de-fsn1-it1 sshd[1902441]: Invalid user testuser from 39.105.125.252 port 38034
...
show less
Brute-Force
SSH
Showing 31 to
45
of 108 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩