Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
(sshd) Failed SSH login from 151.59.123.205 (IT/Italy/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Nov 3 16:20:07 zone sshd[1177308]: Invalid user debian from 151.59.123.205 port 60862
Nov 3 16:20:08 zone sshd[11 ...
show more(sshd) Failed SSH login from 151.59.123.205 (IT/Italy/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Nov 3 16:20:07 zone sshd[1177308]: Invalid user debian from 151.59.123.205 port 60862
Nov 3 16:20:08 zone sshd[1177308]: Failed password for invalid user debian from 151.59.123.205 port 60862 ssh2
Nov 3 16:27:29 zone sshd[1178679]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.59.123.205 user=root
Nov 3 16:27:31 zone sshd[1178679]: Failed password for root from 151.59.123.205 port 58848 ssh2
Nov 3 16:29:02 zone sshd[1178966]: Invalid user sam from 151.59.123.205 port 47240
show less
2026-11-03T15:12:30.828559+00:00 TimberTrailCarving sshd[2951456]: Failed password for root from 151.59.123.205 port 43054 ssh2
2026-11-03T15:13:59.707096+00:00 TimberTrailCarving sshd[2952049]: pam_unix(sshd:auth): authentication failure; logname= u ...
show more2026-11-03T15:12:30.828559+00:00 TimberTrailCarving sshd[2951456]: Failed password for root from 151.59.123.205 port 43054 ssh2
2026-11-03T15:13:59.707096+00:00 TimberTrailCarving sshd[2952049]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.59.123.205 user=root
2026-11-03T15:14:02.025740+00:00 TimberTrailCarving sshd[2952049]: Failed password for root from 151.59.123.205 port 59868 ssh2
...
show less
2026-11-03T08:25:32.925072-06:00 b146-34 sshd[180582]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.59.123.205 user=george
2026-11-03T08:25:34.825782-06:00 b146-34 sshd[180582]: Failed password for invali ...
show more2026-11-03T08:25:32.925072-06:00 b146-34 sshd[180582]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.59.123.205 user=george
2026-11-03T08:25:34.825782-06:00 b146-34 sshd[180582]: Failed password for invalid user george from 151.59.123.205 port 45332 ssh2
2026-11-03T08:29:23.621276-06:00 b146-34 sshd[181131]: User root from 151.59.123.205 not allowed because none of user's groups are listed in AllowGroups
...
show less
Fail2ban ban on jail 'sshd'. Repeated failed authentication attempts against a monitored host. Detected and correlated by Wazuh SIEM (rule 100110, level 10). Reported automatically.
2026-11-03T16:00:24.292547+02:00 soon sshd-session[728129]: Invalid user user from 151.59.123.205 port 36872
2026-11-03T16:00:24.294426+02:00 soon sshd-session[728129]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= ...
show more2026-11-03T16:00:24.292547+02:00 soon sshd-session[728129]: Invalid user user from 151.59.123.205 port 36872
2026-11-03T16:00:24.294426+02:00 soon sshd-session[728129]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.59.123.205
2026-11-03T16:00:26.306292+02:00 soon sshd-session[728129]: Failed password for invalid user user from 151.59.123.205 port 36872 ssh2
...
show less
Brute-Force
SSH
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown
