This IP address has been reported a total of
55
times from
42 distinct
sources.
157.22.189.59 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Fail2Ban host=fra-02-dsh-proxy jail=sshd failures=5. Login abuse observed. sample=2026-08-31T18:06:4 ...
show moreFail2Ban host=fra-02-dsh-proxy jail=sshd failures=5. Login abuse observed. sample=2026-08-31T18:06:47.447632+02:00 fra-02-dsh-proxy sshd-session[2626392]: Disconnected from authenticating user root 157.22.189.59 port 51544 [preauth] 2026-08-31T18:10:27.300289+02:00 fra-02-dsh-proxy sshd-session[2626699]: Disconnected from authenticating user root 157.22.189.59 port 35568 [preauth] 2026-08-31T18:11:38.382479+02:00 fra-02-dsh-proxy sshd-session[2626778]: Invalid user luke from 157.22.189.59 port 38788 2026-08-31T18:11:38.439608+02:00 fra-02-dsh-proxy sshd-session[2626778]: Disc
show less
2026-08-31T16:10:20.064124likely-lavender.ptr.network sshd[82243]: pam_unix(sshd:auth): authenticati ...
show more2026-08-31T16:10:20.064124likely-lavender.ptr.network sshd[82243]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.22.189.59 user=root
2026-08-31T16:10:22.426991likely-lavender.ptr.network sshd[82243]: Failed password for root from 157.22.189.59 port 40398 ssh2
2026-08-31T16:11:30.565329likely-lavender.ptr.network sshd[82260]: Invalid user luke from 157.22.189.59 port 52386
...
show less
2026-08-31T16:02:53.341770+00:00 vps2 sshd[4189408]: Disconnected from authenticating user root 157. ...
show more2026-08-31T16:02:53.341770+00:00 vps2 sshd[4189408]: Disconnected from authenticating user root 157.22.189.59 port 51092 [preauth]
2026-08-31T16:09:33.457998+00:00 vps2 sshd[4189866]: Disconnected from authenticating user root 157.22.189.59 port 60442 [preauth]
2026-08-31T16:10:46.075808+00:00 vps2 sshd[4190007]: Invalid user luke from 157.22.189.59 port 51742
...
show less
2026-08-31T17:07:29.357840 webhost1 sshd-session[506502]: Disconnected from authenticating user root ...
show more2026-08-31T17:07:29.357840 webhost1 sshd-session[506502]: Disconnected from authenticating user root 157.22.189.59 port 53084 [preauth]
2026-08-31T17:10:13.126623 webhost1 sshd-session[506614]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.22.189.59 user=root
2026-08-31T17:10:14.861792 webhost1 sshd-session[506614]: Failed password for root from 157.22.189.59 port 47082 ssh2
...
show less
Aug 30 09:29:58 localhost sshd[491521]: Invalid user vm from 157.22.189.59 port 37434
Aug 30 09:31:0 ...
show moreAug 30 09:29:58 localhost sshd[491521]: Invalid user vm from 157.22.189.59 port 37434
Aug 30 09:31:08 localhost sshd[491555]: Invalid user user from 157.22.189.59 port 51066
Aug 30 09:32:09 localhost sshd[491587]: Invalid user jackett from 157.22.189.59 port 50388
Aug 30 09:33:10 localhost sshd[491620]: Invalid user steam from 157.22.189.59 port 58534
Aug 30 09:34:12 localhost sshd[491654]: Invalid user leon from 157.22.189.59 port 39256
...
show less
2026-08-30T08:22:10.142793+00:00 web3.mattps.com sshd[1693116]: Failed password for invalid user pro ...
show more2026-08-30T08:22:10.142793+00:00 web3.mattps.com sshd[1693116]: Failed password for invalid user prod from 157.22.189.59 port 53226 ssh2
2026-08-30T08:27:26.840651+00:00 web3.mattps.com sshd[1693142]: Invalid user user1 from 157.22.189.59 port 39734
2026-08-30T08:27:26.843827+00:00 web3.mattps.com sshd[1693142]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.22.189.59
2026-08-30T08:27:29.104395+00:00 web3.mattps.com sshd[1693142]: Failed password for invalid user user1 from 157.22.189.59 port 39734 ssh2
2026-08-30T08:28:32.421013+00:00 web3.mattps.com sshd[1693144]: Invalid user music from 157.22.189.59 port 34886
show less
2026-08-30T09:13:27.696684+02:00 pve-osd-102 sshd[3121072]: Disconnected from invalid user server 15 ...
show more2026-08-30T09:13:27.696684+02:00 pve-osd-102 sshd[3121072]: Disconnected from invalid user server 157.22.189.59 port 45066 [preauth]
2026-08-30T09:21:40.130716+02:00 pve-osd-102 sshd[3121752]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.22.189.59 user=root
2026-08-30T09:21:42.004454+02:00 pve-osd-102 sshd[3121752]: Failed password for root from 157.22.189.59 port 60826 ssh2
2026-08-30T09:21:43.658183+02:00 pve-osd-102 sshd[3121752]: Disconnected from authenticating user root 157.22.189.59 port 60826 [preauth]
2026-08-30T09:22:50.928375+02:00 pve-osd-102 sshd[3121847]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.22.189.59 user=root
2026-08-30T09:22:52.080449+02:00 pve-osd-102 sshd[3121847]: Failed password for root from 157.22.189.59 port 48932 ssh2
...
show less
Report 2651428 with IP 3698995 for SSH brute-force attack by source 3693653 via ssh-honeypot/0.2.1+h ...
show moreReport 2651428 with IP 3698995 for SSH brute-force attack by source 3693653 via ssh-honeypot/0.2.1+http
show less
Aug 30 06:20:44 v4bgp sshd[1725916]: Invalid user operation from 157.22.189.59 port 54050
Aug 30 06: ...
show moreAug 30 06:20:44 v4bgp sshd[1725916]: Invalid user operation from 157.22.189.59 port 54050
Aug 30 06:20:44 v4bgp sshd[1725916]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.22.189.59
Aug 30 06:20:45 v4bgp sshd[1725916]: Failed password for invalid user operation from 157.22.189.59 port 54050 ssh2
...
show less
2026-08-30T07:09:13.286911+02:00 web3 sshd-session[3140224]: Failed password for invalid user git fr ...
show more2026-08-30T07:09:13.286911+02:00 web3 sshd-session[3140224]: Failed password for invalid user git from 157.22.189.59 port 39906 ssh2
2026-08-30T07:13:50.689312+02:00 web3 sshd-session[3140278]: Invalid user ftpuser from 157.22.189.59 port 49070
2026-08-30T07:13:50.692283+02:00 web3 sshd-session[3140278]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.22.189.59
2026-08-30T07:13:53.149322+02:00 web3 sshd-session[3140278]: Failed password for invalid user ftpuser from 157.22.189.59 port 49070 ssh2
show less
Brute-Force
SSH
Showing 1 to
15
of 55 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩