This IP address has been reported a total of
877
times from
384 distinct
sources.
106.37.191.2 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Report 2429824 with IP 3376479 for SSH brute-force attack by source 3472049 via ssh-honeypot/0.2.0+h ...
show moreReport 2429824 with IP 3376479 for SSH brute-force attack by source 3472049 via ssh-honeypot/0.2.0+http
show less
2026-06-04T11:41:21.056380+08:00 nekoaru-shanghai-1 sshd-session[1917772]: Connection from 106.37.19 ...
show more2026-06-04T11:41:21.056380+08:00 nekoaru-shanghai-1 sshd-session[1917772]: Connection from 106.37.191.2 port 61403 on 192.168.12.24 port 41022 rdomain ""
2026-06-04T11:41:21.306582+08:00 nekoaru-shanghai-1 sshd-session[1917772]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.37.191.2 user=root
2026-06-04T11:41:23.531937+08:00 nekoaru-shanghai-1 sshd-session[1917772]: Failed password for root from 106.37.191.2 port 61403 ssh2
...
show less
(sshd) Failed SSH login from 106.37.191.2 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction ...
show more(sshd) Failed SSH login from 106.37.191.2 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jun 3 20:47:39 14772 sshd[8314]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.37.191.2 user=root
Jun 3 20:47:41 14772 sshd[8314]: Failed password for root from 106.37.191.2 port 15311 ssh2
Jun 3 21:05:25 14772 sshd[17844]: Invalid user andreas from 106.37.191.2 port 64705
Jun 3 21:05:27 14772 sshd[17844]: Failed password for invalid user andreas from 106.37.191.2 port 64705 ssh2
Jun 3 21:42:20 14772 sshd[6179]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.37.191.2 user=root
show less
Honeypot hit: Brute-force attack detected on 22/SSH
• Credentials: user:userpass, root:Zz112233
• Nu ...
show moreHoneypot hit: Brute-force attack detected on 22/SSH
• Credentials: user:userpass, root:Zz112233
• Number of login attempts: 2
• Client: SSH-2.0-libssh_0.9.6
Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less
2026-06-03T19:41:35.357906+02:00 euve sshd-session[1012220]: pam_unix(sshd:auth): authentication fai ...
show more2026-06-03T19:41:35.357906+02:00 euve sshd-session[1012220]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.37.191.2
2026-06-03T19:41:37.810184+02:00 euve sshd-session[1012220]: Failed password for invalid user dell from 106.37.191.2 port 32889 ssh2
2026-06-03T19:41:39.420709+02:00 euve sshd-session[1012220]: Disconnected from invalid user dell 106.37.191.2 port 32889 [preauth]
...
show less
2026-06-03T15:33:33.641060+02:00 bear sshd[1632033]: Failed password for root from 106.37.191.2 port ...
show more2026-06-03T15:33:33.641060+02:00 bear sshd[1632033]: Failed password for root from 106.37.191.2 port 54927 ssh2
2026-06-03T15:34:53.061004+02:00 bear sshd[1632050]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.37.191.2 user=root
2026-06-03T15:34:54.835111+02:00 bear sshd[1632050]: Failed password for root from 106.37.191.2 port 63206 ssh2
...
show less
2026-06-03T16:35:01.209462+07:00 yuki sshd[1814265]: Failed password for invalid user ubuntu from 10 ...
show more2026-06-03T16:35:01.209462+07:00 yuki sshd[1814265]: Failed password for invalid user ubuntu from 106.37.191.2 port 10390 ssh2
2026-06-03T16:49:16.731905+07:00 yuki sshd[1817506]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.37.191.2 user=root
2026-06-03T16:49:18.780781+07:00 yuki sshd[1817506]: Failed password for root from 106.37.191.2 port 35688 ssh2
...
show less
2026-06-03T10:56:05.337111+02:00 v2202509299507380972 sshd[2062236]: Invalid user d from 106.37.191. ...
show more2026-06-03T10:56:05.337111+02:00 v2202509299507380972 sshd[2062236]: Invalid user d from 106.37.191.2 port 51322
2026-06-03T10:56:05.340099+02:00 v2202509299507380972 sshd[2062236]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.37.191.2
2026-06-03T10:56:07.318324+02:00 v2202509299507380972 sshd[2062236]: Failed password for invalid user d from 106.37.191.2 port 51322 ssh2
2026-06-03T10:58:11.187404+02:00 v2202509299507380972 sshd[2062428]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.37.191.2 user=root
2026-06-03T10:58:12.463563+02:00 v2202509299507380972 sshd[2062428]: Failed password for root from 106.37.191.2 port 4545 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 877 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩