This IP address has been reported a total of
67
times from
41 distinct
sources.
61.254.10.138 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-07-09T04:25:29.397420+00:00 netbird.franssen.xyz sshd-session[849516]: Failed password for inva ...
show more2026-07-09T04:25:29.397420+00:00 netbird.franssen.xyz sshd-session[849516]: Failed password for invalid user karan from 61.254.10.138 port 37634 ssh2
2026-07-09T04:27:51.249882+00:00 netbird.franssen.xyz sshd-session[850129]: Invalid user userb from 61.254.10.138 port 38990
2026-07-09T04:27:51.254409+00:00 netbird.franssen.xyz sshd-session[850129]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.254.10.138
2026-07-09T04:27:53.775464+00:00 netbird.franssen.xyz sshd-session[850129]: Failed password for invalid user userb from 61.254.10.138 port 38990 ssh2
2026-07-09T04:30:18.315957+00:00 netbird.franssen.xyz sshd-session[850716]: Invalid user sopuser from 61.254.10.138 port 49264
...
show less
2026-07-09T04:11:25.197051+00:00 netbird.franssen.xyz sshd-session[846043]: pam_unix(sshd:auth): aut ...
show more2026-07-09T04:11:25.197051+00:00 netbird.franssen.xyz sshd-session[846043]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.254.10.138
2026-07-09T04:11:26.569175+00:00 netbird.franssen.xyz sshd-session[846043]: Failed password for invalid user sammy from 61.254.10.138 port 40796 ssh2
2026-07-09T04:13:46.533696+00:00 netbird.franssen.xyz sshd-session[846626]: Invalid user reolink from 61.254.10.138 port 58064
2026-07-09T04:13:46.544093+00:00 netbird.franssen.xyz sshd-session[846626]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.254.10.138
2026-07-09T04:13:49.161913+00:00 netbird.franssen.xyz sshd-session[846626]: Failed password for invalid user reolink from 61.254.10.138 port 58064 ssh2
...
show less
2026-07-09T03:55:09.244991+00:00 netbird.franssen.xyz sshd-session[842048]: Invalid user lucas from ...
show more2026-07-09T03:55:09.244991+00:00 netbird.franssen.xyz sshd-session[842048]: Invalid user lucas from 61.254.10.138 port 51886
2026-07-09T03:55:09.250089+00:00 netbird.franssen.xyz sshd-session[842048]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.254.10.138
2026-07-09T03:55:11.180954+00:00 netbird.franssen.xyz sshd-session[842048]: Failed password for invalid user lucas from 61.254.10.138 port 51886 ssh2
2026-07-09T03:57:08.927058+00:00 netbird.franssen.xyz sshd-session[842517]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.254.10.138 user=root
2026-07-09T03:57:10.745501+00:00 netbird.franssen.xyz sshd-session[842517]: Failed password for root from 61.254.10.138 port 43526 ssh2
...
show less
Brute-Force
SSH
Anonymous
SSH brute force attempt. User: lucas, Pass: [REDACTED]
2026-07-09T06:40:16.807803+03:00 sculkbot sshd[28283]: Invalid user user from 61.254.10.138 port 419 ...
show more2026-07-09T06:40:16.807803+03:00 sculkbot sshd[28283]: Invalid user user from 61.254.10.138 port 41906
2026-07-09T06:42:13.384856+03:00 sculkbot sshd[28304]: Invalid user project from 61.254.10.138 port 39258
2026-07-09T06:46:05.428970+03:00 sculkbot sshd[28344]: Invalid user flectra from 61.254.10.138 port 58072
2026-07-09T06:47:55.699365+03:00 sculkbot sshd[28356]: Invalid user pzuser from 61.254.10.138 port 49190
2026-07-09T06:49:49.118974+03:00 sculkbot sshd[28378]: Invalid user hm from 61.254.10.138 port 44182
...
show less
2026-07-09T05:40:12.640142+02:00 nospam3 sshd[2312623]: Invalid user user from 61.254.10.138 port 44 ...
show more2026-07-09T05:40:12.640142+02:00 nospam3 sshd[2312623]: Invalid user user from 61.254.10.138 port 44552
2026-07-09T05:42:09.100104+02:00 nospam3 sshd[2312647]: Invalid user project from 61.254.10.138 port 33670
2026-07-09T05:46:01.299845+02:00 nospam3 sshd[2313110]: Invalid user flectra from 61.254.10.138 port 58468
2026-07-09T05:47:51.666998+02:00 nospam3 sshd[2313139]: Invalid user pzuser from 61.254.10.138 port 57610
2026-07-09T05:49:44.889099+02:00 nospam3 sshd[2313151]: Invalid user hm from 61.254.10.138 port 34008
...
show less
2026-07-09T11:39:53.166291+08:00 localhost sshd-session[2240777]: Invalid user user from 61.254.10.1 ...
show more2026-07-09T11:39:53.166291+08:00 localhost sshd-session[2240777]: Invalid user user from 61.254.10.138 port 47018
2026-07-09T11:41:50.366112+08:00 localhost sshd-session[2241306]: Invalid user project from 61.254.10.138 port 53238
2026-07-09T11:45:43.331435+08:00 localhost sshd-session[2242322]: Invalid user flectra from 61.254.10.138 port 41080
...
show less
dedirock-38618307: SSH Brute Force from 61.254.10.138 at 2026-07-09 07:43:27 +04
Brute-Force
SSH
Anonymous
Jul 8 23:40:18 www sshd\[20456\]: Invalid user user from 61.254.10.138
Jul 8 23:42:15 www sshd\[20 ...
show moreJul 8 23:40:18 www sshd\[20456\]: Invalid user user from 61.254.10.138
Jul 8 23:42:15 www sshd\[20458\]: Invalid user project from 61.254.10.138
...
show less
2026-07-09T03:39:53.829543+00:00 netbird.franssen.xyz sshd-session[838267]: pam_unix(sshd:auth): aut ...
show more2026-07-09T03:39:53.829543+00:00 netbird.franssen.xyz sshd-session[838267]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.254.10.138
2026-07-09T03:39:55.080574+00:00 netbird.franssen.xyz sshd-session[838267]: Failed password for invalid user user from 61.254.10.138 port 58382 ssh2
2026-07-09T03:41:50.814468+00:00 netbird.franssen.xyz sshd-session[838733]: Invalid user project from 61.254.10.138 port 58350
2026-07-09T03:41:50.819472+00:00 netbird.franssen.xyz sshd-session[838733]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.254.10.138
2026-07-09T03:41:53.225056+00:00 netbird.franssen.xyz sshd-session[838733]: Failed password for invalid user project from 61.254.10.138 port 58350 ssh2
...
show less
Brute-Force
SSH
Anonymous
SSH brute force attempt. User: user, Pass: [REDACTED]
Brute-Force
SSH
Anonymous
SSH brute force attempt. User: root, Pass: [REDACTED]
2026-07-09T04:59:11.215134+02:00 router01.mhm.de.mersrv.de sshd[2639494]: Disconnected from authenti ...
show more2026-07-09T04:59:11.215134+02:00 router01.mhm.de.mersrv.de sshd[2639494]: Disconnected from authenticating user root 61.254.10.138 port 54294 [preauth]
2026-07-09T05:01:07.937234+02:00 router01.mhm.de.mersrv.de sshd[2640075]: Invalid user shoply from 61.254.10.138 port 50894
2026-07-09T05:01:08.223092+02:00 router01.mhm.de.mersrv.de sshd[2640075]: Disconnected from invalid user shoply 61.254.10.138 port 50894 [preauth]
2026-07-09T05:02:55.261475+02:00 router01.mhm.de.mersrv.de sshd[2640457]: Disconnected from authenticating user root 61.254.10.138 port 60602 [preauth]
2026-07-09T05:04:40.558983+02:00 router01.mhm.de.mersrv.de sshd[2640965]: Invalid user firewall from 61.254.10.138 port 49688
show less
2026-07-09T03:49:51.297427+02:00 router01.mhm.de.mersrv.de sshd[2620006]: Disconnected from authenti ...
show more2026-07-09T03:49:51.297427+02:00 router01.mhm.de.mersrv.de sshd[2620006]: Disconnected from authenticating user admin 61.254.10.138 port 40118 [preauth]
2026-07-09T03:55:37.344777+02:00 router01.mhm.de.mersrv.de sshd[2621688]: Invalid user vnc from 61.254.10.138 port 41062
2026-07-09T03:55:37.617994+02:00 router01.mhm.de.mersrv.de sshd[2621688]: Disconnected from invalid user vnc 61.254.10.138 port 41062 [preauth]
2026-07-09T03:57:31.490008+02:00 router01.mhm.de.mersrv.de sshd[2622202]: Invalid user git from 61.254.10.138 port 34470
2026-07-09T03:57:31.771552+02:00 router01.mhm.de.mersrv.de sshd[2622202]: Disconnected from invalid user git 61.254.10.138 port 34470 [preauth]
show less
Brute-Force
Showing 1 to
15
of 67 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩