106.57.99.24

Apr 25 22:30:31 server sshd[1932543]: Failed password for invalid user bnjoroge from 106.57.99.24 port 42299 ssh2 Apr 25 22:30:52 server sshd[1932546]: Invalid user hadoop from 106.57.99.24 port 42321 Apr 25 22:30:52 server sshd[1932546]: pam_unix(ss ... show more Apr 25 22:30:31 server sshd[1932543]: Failed password for invalid user bnjoroge from 106.57.99.24 port 42299 ssh2 Apr 25 22:30:52 server sshd[1932546]: Invalid user hadoop from 106.57.99.24 port 42321 Apr 25 22:30:52 server sshd[1932546]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.57.99.24 Apr 25 22:30:52 server sshd[1932546]: Invalid user hadoop from 106.57.99.24 port 42321 Apr 25 22:30:54 server sshd[1932546]: Failed password for invalid user hadoop from 106.57.99.24 port 42321 ssh2 show less

ICS Labs identified 106.57.99.24 as a malicious indicator from threat intelligence.

Unauthorized ssh login attempt

Apr 27 10:43:14 routing0302 sshd[8702]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.57.99.24 Apr 27 10:43:14 routing0302 sshd[8702]: Invalid user user from 106.57.99.24 port 42360 Apr 27 10:43:16 routi ... show more Apr 27 10:43:14 routing0302 sshd[8702]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.57.99.24 Apr 27 10:43:14 routing0302 sshd[8702]: Invalid user user from 106.57.99.24 port 42360 Apr 27 10:43:16 routing0302 sshd[8702]: Failed password for invalid user user from 106.57.99.24 port 42360 ssh2 ... show less

2026-04-27T09:02:25.604969+02:00 mail.chill.at sshd[318366]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.57.99.24 2026-04-27T09:02:27.353329+02:00 mail.chill.at sshd[318366]: Failed password for invalid ... show more 2026-04-27T09:02:25.604969+02:00 mail.chill.at sshd[318366]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.57.99.24 2026-04-27T09:02:27.353329+02:00 mail.chill.at sshd[318366]: Failed password for invalid user xrdp from 106.57.99.24 port 42392 ssh2 2026-04-27T09:02:41.057935+02:00 mail.chill.at sshd[318375]: Invalid user li from 106.57.99.24 port 42440 2026-04-27T09:02:41.306279+02:00 mail.chill.at sshd[318375]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.57.99.24 2026-04-27T09:02:42.583858+02:00 mail.chill.at sshd[318375]: Failed password for invalid user li from 106.57.99.24 port 42440 ssh2 show less

2026-04-27T07:18:35.922218+02:00 devel.lenzdevelopment.pl sshd-session[293250]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.57.99.24 2026-04-27T07:18:38.051225+02:00 devel.lenzdevelopment.pl sshd-sessio ... show more 2026-04-27T07:18:35.922218+02:00 devel.lenzdevelopment.pl sshd-session[293250]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.57.99.24 2026-04-27T07:18:38.051225+02:00 devel.lenzdevelopment.pl sshd-session[293250]: Failed password for invalid user test from 106.57.99.24 port 42205 ssh2 2026-04-27T07:18:53.411909+02:00 devel.lenzdevelopment.pl sshd-session[293655]: Invalid user unreal from 106.57.99.24 port 42302 2026-04-27T07:18:53.671022+02:00 devel.lenzdevelopment.pl sshd-session[293655]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.57.99.24 2026-04-27T07:18:55.616794+02:00 devel.lenzdevelopment.pl sshd-session[293655]: Failed password for invalid user unreal from 106.57.99.24 port 42302 ssh2 ... show less

1 attack(s) detected, such as these: {"event":"ssh_block","host":"127.0.1.1 185.207.107.155","ip":"106.57.99.24","user":"root","service":"ssh:notty","logentry":"root;ssh:notty;106.57.99.24;Sun;Apr;26;21:01;-;21:01;(00:00)"} * Report Details *: https: ... show more 1 attack(s) detected, such as these: {"event":"ssh_block","host":"127.0.1.1 185.207.107.155","ip":"106.57.99.24","user":"root","service":"ssh:notty","logentry":"root;ssh:notty;106.57.99.24;Sun;Apr;26;21:01;-;21:01;(00:00)"} * Report Details *: https://p4u.xyz/CPNLPJHAMDN/1* IP Details *: https://p4u.xyz/CPNLPJHAMDN/2 show less

Fail2Ban 207

SSH attack

2026-04-26T11:05:24.462720+02:00 exdc sshd-session[3965188]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.57.99.24 user=root 2026-04-26T11:05:26.402721+02:00 exdc sshd-session[3965188]: Failed password ... show more 2026-04-26T11:05:24.462720+02:00 exdc sshd-session[3965188]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.57.99.24 user=root 2026-04-26T11:05:26.402721+02:00 exdc sshd-session[3965188]: Failed password for invalid user root from 106.57.99.24 port 42214 ssh2 2026-04-26T11:06:14.215281+02:00 exdc sshd-session[3965304]: Invalid user hosting from 106.57.99.24 port 42415 ... show less

Unauthorized connection attempt detected, SSH Brute-Force

Bad SSHAUTH 2026.04.26 06:38:39 blocked until 2026.04.29 06:38:39 by HoneyPot FI_Uusimaa01

2026-04-26T05:32:57.626727+01:00 vegeta sshd[2677941]: Invalid user test from 106.57.99.24 port 42282 2026-04-26T05:33:49.134738+01:00 vegeta sshd[2677956]: Invalid user sun from 106.57.99.24 port 42310

Unauthorized connection to FTP port 21

Multiple Brute Force Attack