Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Fail2ban ban on jail 'sshd'. Repeated failed authentication attempts against a monitored host. Detected and correlated by Wazuh SIEM (rule 100110, level 10). Reported automatically.
2026-11-07T22:24:36.664954+00:00 arrow-lv1 sshd-session[358973]: Failed password for root from 120.27.22.6 port 45610 ssh2
2026-11-07T22:24:41.294299+00:00 arrow-lv1 sshd-session[358976]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ...
show more2026-11-07T22:24:36.664954+00:00 arrow-lv1 sshd-session[358973]: Failed password for root from 120.27.22.6 port 45610 ssh2
2026-11-07T22:24:41.294299+00:00 arrow-lv1 sshd-session[358976]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.27.22.6 user=root
2026-11-07T22:24:43.688083+00:00 arrow-lv1 sshd-session[358976]: Failed password for root from 120.27.22.6 port 48488 ssh2
...
show less
2026-11-06T21:02:22.831562+02:00 arrow-za1 sshd-session[145246]: Failed password for root from 120.27.22.6 port 54074 ssh2
2026-11-06T21:02:27.163940+02:00 arrow-za1 sshd-session[145253]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ...
show more2026-11-06T21:02:22.831562+02:00 arrow-za1 sshd-session[145246]: Failed password for root from 120.27.22.6 port 54074 ssh2
2026-11-06T21:02:27.163940+02:00 arrow-za1 sshd-session[145253]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.27.22.6 user=root
2026-11-06T21:02:28.831072+02:00 arrow-za1 sshd-session[145253]: Failed password for root from 120.27.22.6 port 55976 ssh2
...
show less