This IP address has been reported a total of
293
times from
201 distinct
sources.
39.106.61.225 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-06-02T23:11:49.983810-07:00 mail sshd[188723]: Invalid user git from 39.106.61.225 port 52310
2 ...
show more2026-06-02T23:11:49.983810-07:00 mail sshd[188723]: Invalid user git from 39.106.61.225 port 52310
2026-06-02T23:11:51.908474-07:00 mail sshd[188733]: Invalid user vyos from 39.106.61.225 port 53568
2026-06-02T23:11:58.341298-07:00 mail sshd[188773]: Invalid user testuser from 39.106.61.225 port 57168
...
show less
2026-06-02T20:55:15.989616+00:00 ubuntu-4gb-nbg1-1 sshd[2014254]: Invalid user testuser from 39.106. ...
show more2026-06-02T20:55:15.989616+00:00 ubuntu-4gb-nbg1-1 sshd[2014254]: Invalid user testuser from 39.106.61.225 port 38972
2026-06-02T20:55:17.892780+00:00 ubuntu-4gb-nbg1-1 sshd[2014258]: Invalid user admin from 39.106.61.225 port 40506
2026-06-02T20:55:21.766109+00:00 ubuntu-4gb-nbg1-1 sshd[2014267]: Invalid user ubuntu from 39.106.61.225 port 43332
...
show less
Jun 1 14:07:06 Debian-1010-buster-64-minimal sshd[3553489]: Invalid user hduser from 39.106.61.225 ...
show moreJun 1 14:07:06 Debian-1010-buster-64-minimal sshd[3553489]: Invalid user hduser from 39.106.61.225 port 56488
Jun 1 14:07:08 Debian-1010-buster-64-minimal sshd[3553798]: Invalid user admin from 39.106.61.225 port 58110
Jun 1 14:07:11 Debian-1010-buster-64-minimal sshd[3555064]: Invalid user ubuntu from 39.106.61.225 port 36450
Jun 1 14:07:13 Debian-1010-buster-64-minimal sshd[3555301]: Invalid user ubuntu from 39.106.61.225 port 39800
Jun 1 14:07:15 Debian-1010-buster-64-minimal sshd[3556758]: Invalid user git from 39.106.61.225 port 42240
...
show less
2026-06-01T11:36:20.111791+00:00 [SERVER] sshd-session[1665755]: Invalid user testuser from 39.106.6 ...
show more2026-06-01T11:36:20.111791+00:00 [SERVER] sshd-session[1665755]: Invalid user testuser from 39.106.61.225 port 54532
2026-06-01T11:36:20.520347+00:00 [SERVER] sshd-session[1665755]: Connection closed by invalid user testuser 39.106.61.225 port 54532 [preauth]
2026-06-01T11:36:21.981570+00:00 [SERVER] sshd-session[1665763]: Invalid user appuser from 39.106.61.225 port 56732
show less
2026-05-31T04:47:17.579616+01:00 CiviDrupal16GB sshd[537177]: Invalid user deploy from 39.106.61.225 ...
show more2026-05-31T04:47:17.579616+01:00 CiviDrupal16GB sshd[537177]: Invalid user deploy from 39.106.61.225 port 33700
2026-05-31T04:47:18.468572+01:00 CiviDrupal16GB sshd[537179]: User root from 39.106.61.225 not allowed because not listed in AllowUsers
...
show less
2026-05-31T05:38:56.228434+02:00 personaldiamant3 sshd[2202122]: Failed password for invalid user de ...
show more2026-05-31T05:38:56.228434+02:00 personaldiamant3 sshd[2202122]: Failed password for invalid user deploy from 39.106.61.225 port 47940 ssh2
2026-05-31T05:38:59.471506+02:00 personaldiamant3 sshd[2202124]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=39.106.61.225 user=root
2026-05-31T05:39:01.865240+02:00 personaldiamant3 sshd[2202124]: Failed password for root from 39.106.61.225 port 52512 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 293 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩