This IP address has been reported a total of
1,530
times from
572 distinct
sources.
106.74.27.159 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ...
show moreAutomated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).
show less
Zero-day telemetry verified. Full node vectors and 273 signatures at http://206.189.21.23/manifest. ...
show moreZero-day telemetry verified. Full node vectors and 273 signatures at http://206.189.21.23/manifest.json
show less
Historical Fail2Ban SSH ban observed on this host. Source: fail2ban.log. Categories: SSH brute-force ...
show moreHistorical Fail2Ban SSH ban observed on this host. Source: fail2ban.log. Categories: SSH brute-force.
show less
2026-05-11T19:33:39.351240+02:00 gw-de01-01.guestgw.net sshd[1053208]: Connection closed by authenti ...
show more2026-05-11T19:33:39.351240+02:00 gw-de01-01.guestgw.net sshd[1053208]: Connection closed by authenticating user root 106.74.27.159 port 51390 [preauth]
2026-05-11T19:33:48.743292+02:00 gw-de01-01.guestgw.net sshd[1053224]: Connection closed by authenticating user root 106.74.27.159 port 55676 [preauth]
2026-05-11T19:33:52.457029+02:00 gw-de01-01.guestgw.net sshd[1053255]: Connection closed by authenticating user root 106.74.27.159 port 60838 [preauth]
2026-05-11T19:33:56.861445+02:00 gw-de01-01.guestgw.net sshd[1053278]: Connection closed by authenticating user root 106.74.27.159 port 36316 [preauth]
2026-05-11T19:38:38.326758+02:00 gw-de01-01.guestgw.net sshd[1054687]: Connection closed by authenticating user root 106.74.27.159 port 46538 [preauth]
show less
106.74.27.159 (CN/-/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: * ...
show more106.74.27.159 (CN/-/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 11 08:19:42 14407 sshd[10588]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.190.152.15 user=root
May 11 08:19:44 14407 sshd[10588]: Failed password for root from 115.190.152.15 port 58550 ssh2
May 11 08:19:46 14407 sshd[10590]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.190.152.15 user=root
May 11 08:01:33 14407 sshd[7995]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.74.27.159 user=root
May 11 08:01:36 14407 sshd[7995]: Failed password for root from 106.74.27.159 port 44830 ssh2
IP Addresses Blocked:
115.190.152.15 (CN/-/-)
show less
Brute-Force
SSH
Anonymous
May 11 06:52:42 v sshd\[12661\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid ...
show moreMay 11 06:52:42 v sshd\[12661\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.74.27.159 user=root
May 11 06:52:45 v sshd\[12661\]: Failed password for root from 106.74.27.159 port 43544 ssh2
May 11 06:52:57 v sshd\[12666\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.74.27.159 user=root
...
show less