[EmExpress] Auto banned by Fail2Ban. Reason: SSH brute force / repeated failed login attempts. Evide ...
show more[EmExpress] Auto banned by Fail2Ban. Reason: SSH brute force / repeated failed login attempts. Evidence:
Jun 29 13:58:29 emexpress sshd[231750]: Failed password for root from 106.75.135.53 port 60882 ssh2
Jun 29 13:58:36 emexpress sshd[231752]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.135.53 user=root
Jun 29 13:58:38 emexpress sshd[231752]: Failed password for root from 106.75.135.53 port 63420 ssh2
show less
Jun 29 14:38:34 plsk sshd[4102645]: Failed password for root from 106.75.135.53 port 64112 ssh2
Jun ...
show moreJun 29 14:38:34 plsk sshd[4102645]: Failed password for root from 106.75.135.53 port 64112 ssh2
Jun 29 14:38:37 plsk sshd[4102647]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.135.53 user=root
Jun 29 14:38:39 plsk sshd[4102647]: Failed password for root from 106.75.135.53 port 64116 ssh2
Jun 29 14:38:42 plsk sshd[4102649]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.135.53 user=root
Jun 29 14:38:44 plsk sshd[4102649]: Failed password for root from 106.75.135.53 port 60712 ssh2
...
show less
106.75.135.53 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Port ...
show more106.75.135.53 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jun 29 03:09:40 15032 sshd[23685]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.242.191.232 user=root
Jun 29 03:09:42 15032 sshd[23685]: Failed password for root from 151.242.191.232 port 42766 ssh2
Jun 29 03:56:57 15032 sshd[22897]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.135.53 user=root
Jun 29 03:25:06 15032 sshd[1875]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.242.191.232 user=root
Jun 29 03:25:08 15032 sshd[1875]: Failed password for root from 151.242.191.232 port 57198 ssh2
IP Addresses Blocked:
151.242.191.232 (RO/Romania/-)
show less
Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT | PORTS ...
show moreVerified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT | PORTS=22 | HITS=2 | IPSET=ADD | FIRST=2026-06-29 06:04:21 | LAST=2026-06-29 06:04:22. Last seen 2026-06-29 06:04:22.
show less
2026-06-29T03:46:21.120290+00:00 ktj-nc sshd[360918]: Connection closed by authenticating user root ...
show more2026-06-29T03:46:21.120290+00:00 ktj-nc sshd[360918]: Connection closed by authenticating user root 106.75.135.53 port 63058 [preauth]
2026-06-29T03:46:22.640232+00:00 ktj-nc sshd[360920]: Connection closed by authenticating user root 106.75.135.53 port 60448 [preauth]
...
show less
Hit on SSH honeypot at 2026-06-29 03:14:03 from 106.75.135.53 as user root with password ---fuck_you ...
show moreHit on SSH honeypot at 2026-06-29 03:14:03 from 106.75.135.53 as user root with password ---fuck_you----
show less
Jun 29 04:46:36 FriendsRP sshd[1843259]: Failed password for root from 106.75.135.53 port 64682 ssh2 ...
show moreJun 29 04:46:36 FriendsRP sshd[1843259]: Failed password for root from 106.75.135.53 port 64682 ssh2
Jun 29 04:46:39 FriendsRP sshd[1843261]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.135.53 user=root
Jun 29 04:46:41 FriendsRP sshd[1843261]: Failed password for root from 106.75.135.53 port 64686 ssh2
Jun 29 04:46:45 FriendsRP sshd[1843263]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.135.53 user=root
Jun 29 04:46:47 FriendsRP sshd[1843263]: Failed password for root from 106.75.135.53 port 64244 ssh2
Jun 29 04:46:50 FriendsRP sshd[1843265]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.135.53 user=root
Jun 29 04:46:52 FriendsRP sshd[1843265]: Failed password for root from 106.75.135.53 port 62688 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 64 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩