This IP address has been reported a total of
166
times from
139 distinct
sources.
106.74.21.237 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
ThreatBook Intelligence: IDC more details on http://threatbook.io/ip/106.74.21.237
SSH
Anonymous
2026-04-21T16:56:35.331762+02:00 mail sshd[562585]: Failed password for root from 106.74.21.237 port ...
show more2026-04-21T16:56:35.331762+02:00 mail sshd[562585]: Failed password for root from 106.74.21.237 port 59538 ssh2
2026-04-21T16:56:39.491885+02:00 mail sshd[562585]: Failed password for root from 106.74.21.237 port 59538 ssh2
2026-04-21T16:56:43.449829+02:00 mail sshd[562585]: Failed password for root from 106.74.21.237 port 59538 ssh2
2026-04-21T16:56:47.402809+02:00 mail sshd[562585]: Failed password for root from 106.74.21.237 port 59538 ssh2
2026-04-21T16:56:50.545014+02:00 mail sshd[562585]: Failed password for root from 106.74.21.237 port 59538 ssh2
...
show less
2026-04-21T11:25:30.888982+00:00 reverse sshd[3225983]: Failed password for root from 106.74.21.237 ...
show more2026-04-21T11:25:30.888982+00:00 reverse sshd[3225983]: Failed password for root from 106.74.21.237 port 59918 ssh2
2026-04-21T11:25:34.003072+00:00 reverse sshd[3225983]: Failed password for root from 106.74.21.237 port 59918 ssh2
2026-04-21T11:25:37.104636+00:00 reverse sshd[3225983]: Failed password for root from 106.74.21.237 port 59918 ssh2
...
show less
[AUTORAVALT][[20/04/2026 - 03:17:49 -03:00 UTC]
Attack from [Xin Xing]
[106.74.21.237]-[RANGE:106.74 ...
show more[AUTORAVALT][[20/04/2026 - 03:17:49 -03:00 UTC]
Attack from [Xin Xing]
[106.74.21.237]-[RANGE:106.74.0.0 - 106.74.255.255]
Action: BLocKed
FTP Brute-Force -> Running brute force credentials on the FTP server.
Brute-Force -> Credential brute-force attacks on webpage logins and services like SSH, FTP, SIP, SMTP, RDP, etc.
]
...
show less
FTP Brute-Force
Brute-Force
Anonymous
Apr 20 05:19:56 nosvoid sshd[2517389]: Disconnecting authenticating user root 106.74.21.237 port 456 ...
show moreApr 20 05:19:56 nosvoid sshd[2517389]: Disconnecting authenticating user root 106.74.21.237 port 45603: Change of username or service not allowed: (root,ssh-connection) -> (test,ssh-connection) [preauth]
Apr 20 05:19:57 nosvoid sshd[2517810]: Invalid user test from 106.74.21.237 port 11215
Apr 20 05:19:57 nosvoid sshd[2517810]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.74.21.237
Apr 20 05:19:59 nosvoid sshd[2517810]: Failed password for invalid user test from 106.74.21.237 port 11215 ssh2
Apr 20 05:20:03 nosvoid sshd[2517810]: Failed password for invalid user test from 106.74.21.237 port 11215 ssh2
...
show less
Apr 20 05:19:58 vps-d7931dc8 sshd[53001]: Failed password for invalid user test from 106.74.21.237 p ...
show moreApr 20 05:19:58 vps-d7931dc8 sshd[53001]: Failed password for invalid user test from 106.74.21.237 port 54073 ssh2
Apr 20 05:19:56 vps-d7931dc8 sshd[53001]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.74.21.237
Apr 20 05:19:56 vps-d7931dc8 sshd[53001]: Invalid user test from 106.74.21.237 port 54073
Apr 20 05:19:58 vps-d7931dc8 sshd[53001]: Failed password for invalid user test from 106.74.21.237 port 54073 ssh2
Apr 20 05:20:02 vps-d7931dc8 sshd[53001]: Failed password for invalid user test from 106.74.21.237 port 54073 ssh2
show less
Brute-Force
SSH
Anonymous
2026-04-19T19:48:35.469094+00:00 logger sshd[999687]: pam_unix(sshd:auth): authentication failure; l ...
show more2026-04-19T19:48:35.469094+00:00 logger sshd[999687]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.74.21.237 user=root
2026-04-19T19:48:37.375653+00:00 logger sshd[999687]: Failed password for root from 106.74.21.237 port 62646 ssh2
...
show less
Brute-Force
SSH
Anonymous
2026-04-19T01:19:56.561267+02:00 vm635618.cloud.nuxt.network sshd[5497]: Failed password for root fr ...
show more2026-04-19T01:19:56.561267+02:00 vm635618.cloud.nuxt.network sshd[5497]: Failed password for root from 106.74.21.237 port 3694 ssh2
2026-04-19T01:19:59.735005+02:00 vm635618.cloud.nuxt.network sshd[5497]: Failed password for root from 106.74.21.237 port 3694 ssh2
2026-04-19T01:20:03.484474+02:00 vm635618.cloud.nuxt.network sshd[5497]: Failed password for root from 106.74.21.237 port 3694 ssh2
...
show less
2026-04-18T14:03:37.072283+08:00 C20241211186402 sshd[628988]: Failed password for root from 106.74. ...
show more2026-04-18T14:03:37.072283+08:00 C20241211186402 sshd[628988]: Failed password for root from 106.74.21.237 port 13549 ssh2
2026-04-18T14:03:40.626214+08:00 C20241211186402 sshd[628988]: Failed password for root from 106.74.21.237 port 13549 ssh2
2026-04-18T14:03:45.041291+08:00 C20241211186402 sshd[628988]: Failed password for root from 106.74.21.237 port 13549 ssh2
2026-04-18T14:03:47.922153+08:00 C20241211186402 sshd[628988]: Failed password for root from 106.74.21.237 port 13549 ssh2
2026-04-18T14:03:51.017925+08:00 C20241211186402 sshd[628988]: Failed password for root from 106.74.21.237 port 13549 ssh2
...
show less
Brute-Force
SSH
Showing 121 to
135
of 166 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩