JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 94.159.106.39

94.159.106.39 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 0%: ?

ISP	H2.NEXUS Frankfurt Network
Usage Type	Data Center/Web Hosting/Transit
ASN	AS215730
Hostname(s)	ge.salatsufle.ru
Domain Name	h2.nexus
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 94.159.106.39

Whois 94.159.106.39

IP Abuse Reports for 94.159.106.39:

This IP address has been reported a total of 14 times from 10 distinct sources. 94.159.106.39 was first reported on January 31st 2025, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 focusnic.com	2025-04-10 05:15:05 (1 year ago)	(sshd) Failed SSH login from 94.159.106.39 (DE/Germany/ge.salatsufle.ru): 5 in the last 3600 secs; P ... show more (sshd) Failed SSH login from 94.159.106.39 (DE/Germany/ge.salatsufle.ru): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Apr 10 05:01:34 server-95-179-243-207 sshd[96925]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.159.106.39 user=root Apr 10 05:01:35 server-95-179-243-207 sshd[96925]: Failed password for root from 94.159.106.39 port 59945 ssh2 Apr 10 05:13:18 server-95-179-243-207 sshd[99739]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.159.106.39 user=root Apr 10 05:13:20 server-95-179-243-207 sshd[99739]: Failed password for root from 94.159.106.39 port 34143 ssh2 Apr 10 05:15:03 server-95-179-243-207 sshd[100073]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.159.106.39 user=root show less	Port Scan
🇨🇳 ThreatBook.io	2025-04-05 23:24:44 (1 year ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/94.159.106.39	SSH
🇨🇳 ThreatBook.io	2025-04-01 23:30:46 (1 year ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/94.159.106.39	SSH
🇨🇳 ThreatBook.io	2025-03-28 23:19:30 (1 year ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/94.159.106.39	SSH
Anonymous	2025-03-25 13:03:44 (1 year ago)	94.159.106.39 (RU/Russia/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Por ... show more 94.159.106.39 (RU/Russia/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Mar 25 09:03:38 server2 sshd[13224]: Failed password for root from 179.43.159.196 port 36160 ssh2 Mar 25 09:03:39 server2 sshd[13231]: Failed password for root from 185.220.101.109 port 50943 ssh2 Mar 25 09:03:07 server2 sshd[13010]: Failed password for root from 172.104.129.235 port 32858 ssh2 Mar 25 09:03:00 server2 sshd[12968]: Failed password for root from 94.159.106.39 port 49465 ssh2 Mar 25 09:03:32 server2 sshd[13131]: Failed password for root from 92.255.88.219 port 59781 ssh2 IP Addresses Blocked: 179.43.159.196 (CH/Switzerland/-) 185.220.101.109 (DE/Germany/-) 172.104.129.235 (DE/Germany/-) show less	Brute-Force
🇺🇸 hostseries	2025-03-20 13:40:00 (1 year ago)	Brute-force cPanel Services	Brute-Force
Anonymous	2025-03-17 00:56:31 (1 year ago)	2025-03-17T00:35:00.427535+00:00 nl-ams1-nat643 sshd[275033]: Failed password for root from 94.159.1 ... show more 2025-03-17T00:35:00.427535+00:00 nl-ams1-nat643 sshd[275033]: Failed password for root from 94.159.106.39 port 33391 ssh2 2025-03-17T00:56:28.582905+00:00 nl-ams1-nat643 sshd[276851]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.159.106.39 user=root 2025-03-17T00:56:30.313818+00:00 nl-ams1-nat643 sshd[276851]: Failed password for root from 94.159.106.39 port 53839 ssh2 ... show less	Brute-Force SSH
🇲🇾 syokadmin	2025-03-09 22:42:04 (1 year ago)	94.159.106.39 (DE/Germany/-), 3 distributed smtpauth attacks on account [[email protected]] in th ... show more 94.159.106.39 (DE/Germany/-), 3 distributed smtpauth attacks on account [[email protected]] in the last 3600 secs show less	Brute-Force
🇩🇪 Packets-Decreaser.NET	2025-03-05 21:26:25 (1 year ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇩🇪 itak	2025-02-22 03:47:40 (1 year ago)	postfix Server DDoS - AUTH drops, early HANGUPs, other DDoS attacks, etc. Might contain brute-force ... show more postfix Server DDoS - AUTH drops, early HANGUPs, other DDoS attacks, etc. Might contain brute-force dictionary attack sightings on IMAP and SMTP. show less	DDoS Attack Port Scan
🇩🇪 Packets-Decreaser.NET	2025-02-11 21:25:12 (1 year ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
Anonymous	2025-02-08 19:42:42 (1 year ago)	Ports: 25,465,587; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
Anonymous	2025-02-07 10:53:01 (1 year ago)	Ports: 25,465,587; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
Anonymous	2025-01-31 15:24:46 (1 year ago)	(CT) IP 94.159.106.39 (DE/Germany/ge.salatsufle.ru) found to have 603 connections; Ports: 27960; SRV ... show more (CT) IP 94.159.106.39 (DE/Germany/ge.salatsufle.ru) found to have 603 connections; Ports: 27960; SRV: 1; Action: 1; Trigger: CT_LIMIT show less	DDoS Attack Hacking

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 20.172.240.136

🇩🇪 213.209.159.226

🇸🇬 212.73.148.10

🇰🇷 211.247.127.250

🇩🇪 194.88.98.88

🇮🇱 82.102.165.200

🇨🇿 78.44.192.210

🇮🇶 65.20.217.64

🇨🇳 47.118.30.89

🇺🇸 34.138.190.143

🇹🇼 221.120.42.196

🇨🇳 220.154.133.118

🇳🇱 216.57.106.238

🇩🇪 213.209.159.108

🇩🇪 213.209.159.56

🇭🇰 210.177.143.61

🇰🇷 210.123.87.143

🇨🇭 193.32.127.228

🇺🇸 147.185.132.203

🇸🇬 101.47.8.187