This IP address has been reported a total of
166
times from
139 distinct
sources.
106.74.21.237 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-05-18T19:06:14.781364+00:00 xproot sshd[3495489]: Failed password for root from 106.74.21.237 p ...
show more2026-05-18T19:06:14.781364+00:00 xproot sshd[3495489]: Failed password for root from 106.74.21.237 port 7254 ssh2
2026-05-18T19:06:19.079908+00:00 xproot sshd[3495489]: Failed password for root from 106.74.21.237 port 7254 ssh2
2026-05-18T19:06:22.276650+00:00 xproot sshd[3495489]: Failed password for root from 106.74.21.237 port 7254 ssh2
2026-05-18T19:06:24.320729+00:00 xproot sshd[3495489]: Failed password for root from 106.74.21.237 port 7254 ssh2
2026-05-18T19:06:26.714471+00:00 xproot sshd[3495489]: Failed password for root from 106.74.21.237 port 7254 ssh2
...
show less
2026-05-18T23:10:16.429340+08:00 C20241211186402 sshd[2295537]: Failed password for root from 106.74 ...
show more2026-05-18T23:10:16.429340+08:00 C20241211186402 sshd[2295537]: Failed password for root from 106.74.21.237 port 57282 ssh2
2026-05-18T23:10:18.867838+08:00 C20241211186402 sshd[2295537]: Failed password for root from 106.74.21.237 port 57282 ssh2
2026-05-18T23:10:21.769995+08:00 C20241211186402 sshd[2295537]: Failed password for root from 106.74.21.237 port 57282 ssh2
2026-05-18T23:10:24.819686+08:00 C20241211186402 sshd[2295537]: Failed password for root from 106.74.21.237 port 57282 ssh2
2026-05-18T23:10:26.456370+08:00 C20241211186402 sshd[2295537]: Failed password for root from 106.74.21.237 port 57282 ssh2
...
show less
2026-05-17T17:15:31.095825-05:00 drpxkvfh.colocrossing.cloud sshd[12031]: Failed password for root f ...
show more2026-05-17T17:15:31.095825-05:00 drpxkvfh.colocrossing.cloud sshd[12031]: Failed password for root from 106.74.21.237 port 60314 ssh2
2026-05-17T17:15:33.704458-05:00 drpxkvfh.colocrossing.cloud sshd[12031]: Failed password for root from 106.74.21.237 port 60314 ssh2
2026-05-17T17:15:37.200295-05:00 drpxkvfh.colocrossing.cloud sshd[12031]: Failed password for root from 106.74.21.237 port 60314 ssh2
2026-05-17T17:15:41.438470-05:00 drpxkvfh.colocrossing.cloud sshd[12031]: Failed password for root from 106.74.21.237 port 60314 ssh2
2026-05-17T17:15:44.316521-05:00 drpxkvfh.colocrossing.cloud sshd[12031]: Failed password for root from 106.74.21.237 port 60314 ssh2
2026-05-17T17:15:45.142539-05:00 drpxkvfh.colocrossing.cloud sshd[12031]: Disconnecting authenticating user root 106.74.21.237 port 60314: Change of username or service not allowed: (root,ssh-connection) -> (test,ssh-connection) [preauth]
...
show less
2026-05-17T13:09:20.725963+00:00 helium sshd-session[2928643]: Failed password for root from 106.74. ...
show more2026-05-17T13:09:20.725963+00:00 helium sshd-session[2928643]: Failed password for root from 106.74.21.237 port 7681 ssh2
2026-05-17T13:09:23.528182+00:00 helium sshd-session[2928643]: Failed password for root from 106.74.21.237 port 7681 ssh2
2026-05-17T13:09:27.620764+00:00 helium sshd-session[2928643]: Failed password for root from 106.74.21.237 port 7681 ssh2
...
show less
2026-05-17T10:39:41.030726+00:00 md sshd-session[445078]: Failed password for root from 106.74.21.23 ...
show more2026-05-17T10:39:41.030726+00:00 md sshd-session[445078]: Failed password for root from 106.74.21.237 port 33479 ssh2
2026-05-17T10:39:43.525400+00:00 md sshd-session[445078]: Failed password for root from 106.74.21.237 port 33479 ssh2
2026-05-17T10:39:47.355678+00:00 md sshd-session[445078]: Failed password for root from 106.74.21.237 port 33479 ssh2
2026-05-17T10:39:50.486386+00:00 md sshd-session[445078]: Failed password for root from 106.74.21.237 port 33479 ssh2
2026-05-17T10:39:53.372425+00:00 md sshd-session[445078]: Failed password for root from 106.74.21.237 port 33479 ssh2
...
show less
(localhost/crowdsec) crowdsecurity/ssh-bf by ip 106.74.21.237 (CN/133118) : 4h ban on Ip 106.74.21.2 ...
show more(localhost/crowdsec) crowdsecurity/ssh-bf by ip 106.74.21.237 (CN/133118) : 4h ban on Ip 106.74.21.237
show less
router1:
2026-05-16T19:27:59Z Failed password for root
2026-05-16T19:28:01Z Failed password for root ...
show morerouter1:
2026-05-16T19:27:59Z Failed password for root
2026-05-16T19:28:01Z Failed password for root
2026-05-16T19:28:04Z Failed password for root
2026-05-16T19:28:08Z Failed password for root
2026-05-16T19:28:10Z Failed password for root
...
show less
14 failed SSH login attempts on port 22 from this IP. Usernames attempted included dev, test, ubuntu ...
show more14 failed SSH login attempts on port 22 from this IP. Usernames attempted included dev, test, ubuntu. Generic dictionary list, none matched real accounts. Activity window: 2026-05-15 07:26 UTC to 2026-05-15 07:27 UTC.
show less
14 failed SSH login attempts on port 22 from this IP. Usernames attempted included dev, test, ubuntu ...
show more14 failed SSH login attempts on port 22 from this IP. Usernames attempted included dev, test, ubuntu. Generic dictionary list, none matched real accounts. Activity window: 2026-05-15 07:26 UTC to 2026-05-15 07:27 UTC.
show less
2026-05-15T07:26:50.488972+00:00 fynn-epyc2 sshd[1478746]: Failed password for root from 106.74.21.2 ...
show more2026-05-15T07:26:50.488972+00:00 fynn-epyc2 sshd[1478746]: Failed password for root from 106.74.21.237 port 2001 ssh2
2026-05-15T07:26:52.946074+00:00 fynn-epyc2 sshd[1478746]: Failed password for root from 106.74.21.237 port 2001 ssh2
...
show less
Brute-Force
SSH
Showing 46 to
60
of 166 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩