This IP address has been reported a total of
397
times from
200 distinct
sources.
159.192.144.206 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-06-21T23:46:14.239601-06:00 yms sshd[2840910]: Connection closed by authenticating user root 15 ...
show more2026-06-21T23:46:14.239601-06:00 yms sshd[2840910]: Connection closed by authenticating user root 159.192.144.206 port 43586 [preauth]
2026-06-21T23:47:47.060614-06:00 yms sshd[2843529]: Connection closed by authenticating user root 159.192.144.206 port 50462 [preauth]
...
show less
2026-06-22T01:33:50.702930-03:00 salada-de-fruta sshd[1997492]: Connection closed by authenticating ...
show more2026-06-22T01:33:50.702930-03:00 salada-de-fruta sshd[1997492]: Connection closed by authenticating user root 159.192.144.206 port 53518 [preauth]
...
show less
159.192.144.206 (TH/Thailand/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; ...
show more159.192.144.206 (TH/Thailand/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jun 21 21:25:43 13646 sshd[22000]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.247.209.100 user=root
Jun 21 21:25:45 13646 sshd[22000]: Failed password for root from 60.247.209.100 port 59874 ssh2
Jun 21 21:31:19 13646 sshd[24923]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.192.144.206 user=root
Jun 21 21:31:21 13646 sshd[24923]: Failed password for root from 159.192.144.206 port 48868 ssh2
Jun 21 21:19:49 13646 sshd[18467]: Failed password for root from 202.29.228.248 port 58316 ssh2
IP Addresses Blocked:
60.247.209.100 (CN/China/-)
show less
SSH abuse or brute-force attack detected by Fail2Ban in ssh jail
Brute-Force
SSH
Anonymous
2026-06-21T23:23:41.180576+00:00 mta sshd[410560]: pam_unix(sshd:auth): authentication failure; logn ...
show more2026-06-21T23:23:41.180576+00:00 mta sshd[410560]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.192.144.206 user=root
2026-06-21T23:23:43.414030+00:00 mta sshd[410560]: Failed password for root from 159.192.144.206 port 45558 ssh2
...
show less
2026-06-21T23:07:47.067550+02:00 vps sshd[12082]: Failed password for root from 159.192.144.206 port ...
show more2026-06-21T23:07:47.067550+02:00 vps sshd[12082]: Failed password for root from 159.192.144.206 port 48618 ssh2
2026-06-21T23:26:45.263248+02:00 vps sshd[12815]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.192.144.206 user=root
2026-06-21T23:26:46.990155+02:00 vps sshd[12815]: Failed password for root from 159.192.144.206 port 40478 ssh2
...
show less
{"event":{"DateTime":"2026-06-21T15:29:06Z","RemoteAddr":"159.192.144.206:37490","Protocol":"SSH","C ...
show more{"event":{"DateTime":"2026-06-21T15:29:06Z","RemoteAddr":"159.192.144.206:37490","Protocol":"SSH","Command":"","CommandOutput":"","Status":"Stateless","Msg":"New SSH Login Attempt","ID":"ae4a18be-82ae-46c3-bb6c-e23525448dfa","Environ":"","User":"root","Password":"djdeamon2025","Client":"SSH-2.0-Go","Headers":"","HeadersMap":null,"Cookies":"","UserAgent":"","HostHTTPRequest":"","Body":"","HTTPMethod":"","RequestURI":"","Description":"SSH interactive","SourceIp":"159.192.144.206","SourcePort":"37490","TLSServerName":"","Handler":""},"level":"info","msg":"New Event","status":"Stateless"}
{"event":{"DateTime":"2026-06-21T16:29:38Z","RemoteAddr":"159.192.144.206:46256","Protocol":"SSH","Command":"","CommandOutput":"","Status":"Stateless","Msg":"New SSH Login Attempt","ID":"13fa4ed5-b875-44ca-b108-b4ed7343ce15","Environ":"","User":"root","Password":"djdeamon2012!@#","Client":"SSH-2.0-Go","Headers":"","HeadersMap":null,"Cookies":"","UserAgent":"","HostHTTPRequest":"","Body":"","HTTPMethod":"","RequestURI":"","Descri
show less
Hacking
Port Scan
Brute-Force
SSH
Showing 1 to
15
of 397 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩