201.55.113.121

SSH brute-force blocked by fail2ban: 2026-05-14T18:35:07.766183+02:00 [host] sshd-session[3766636]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.55.113.121 user=root 2026-05-14T18:35:09.292264+02:00 [ho ... show more SSH brute-force blocked by fail2ban: 2026-05-14T18:35:07.766183+02:00 [host] sshd-session[3766636]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.55.113.121 user=root 2026-05-14T18:35:09.292264+02:00 [host] sshd-session[3766636]: Failed password for root from 201.55.113.121 port 59150 ssh2 show less

Confirmed malicious by STILWaters CTI platform (score=96, sources=1)

Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).

Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).

Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).

Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).

rooted: SSH Brute Force from 201.55.113.121 at 2026-05-28 06:28:24 IST

SSH Bruteforcing Attempt / Port Scanning

201.55.113.121 (BR/Brazil/201-55-113-121.static.ctbctelecom.com.br), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 20 07:13:27 14193 sshd[29426]: pam_unix(sshd:auth): aut ... show more 201.55.113.121 (BR/Brazil/201-55-113-121.static.ctbctelecom.com.br), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 20 07:13:27 14193 sshd[29426]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.55.113.121 user=root May 20 07:14:51 14193 sshd[29625]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.144.76.1 user=root May 20 07:14:53 14193 sshd[29625]: Failed password for root from 168.144.76.1 port 40502 ssh2 May 20 07:16:17 14193 sshd[29930]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.35.192.61 user=root May 20 07:13:29 14193 sshd[29426]: Failed password for root from 201.55.113.121 port 47324 ssh2 IP Addresses Blocked: show less

Banned by Multi Agent · node …bnl2 · attempts=5 · SSH brute-force / scan

2026-05-20T01:11:51.128234+12:00 localhost sshd[3801047]: Invalid user ftpusers from 201.55.113.121 port 44834 2026-05-20T01:20:58.861469+12:00 localhost sshd[3811129]: Invalid user ec2-user from 201.55.113.121 port 48290 2026-05-20T01:24:00.476677+1 ... show more 2026-05-20T01:11:51.128234+12:00 localhost sshd[3801047]: Invalid user ftpusers from 201.55.113.121 port 44834 2026-05-20T01:20:58.861469+12:00 localhost sshd[3811129]: Invalid user ec2-user from 201.55.113.121 port 48290 2026-05-20T01:24:00.476677+12:00 localhost sshd[3813779]: Invalid user user11 from 201.55.113.121 port 42998 2026-05-20T01:29:47.965008+12:00 localhost sshd[3819438]: Invalid user john from 201.55.113.121 port 51658 2026-05-20T01:34:36.949680+12:00 localhost sshd[3823967]: Invalid user admin123 from 201.55.113.121 port 42562 show less

May 19 07:53:28 vmi1858823 sshd[1101103]: Failed password for root from 201.55.113.121 port 60212 ssh2 May 19 07:54:28 vmi1858823 sshd[1101119]: Invalid user claude from 201.55.113.121 port 58032 ...

2026-05-19T03:45:25.350138+00:00 ks6.hofud.com sshd[322207]: Invalid user adminftp from 201.55.113.121 port 44590 2026-05-19T03:45:25.527839+00:00 ks6.hofud.com sshd[322207]: Disconnected from invalid user adminftp 201.55.113.121 port 44590 [preauth] ... show more 2026-05-19T03:45:25.350138+00:00 ks6.hofud.com sshd[322207]: Invalid user adminftp from 201.55.113.121 port 44590 2026-05-19T03:45:25.527839+00:00 ks6.hofud.com sshd[322207]: Disconnected from invalid user adminftp 201.55.113.121 port 44590 [preauth] 2026-05-19T03:47:00.118587+00:00 ks6.hofud.com sshd[322258]: Invalid user thiago from 201.55.113.121 port 44170 2026-05-19T03:47:00.295348+00:00 ks6.hofud.com sshd[322258]: Disconnected from invalid user thiago 201.55.113.121 port 44170 [preauth] 2026-05-19T03:48:37.574229+00:00 ks6.hofud.com sshd[322343]: Disconnected from authenticating user root 201.55.113.121 port 37112 [preauth] ... show less

May 19 06:39:40 pkdns2 sshd\[6067\]: Invalid user seafile from 201.55.113.121May 19 06:39:42 pkdns2 sshd\[6067\]: Failed password for invalid user seafile from 201.55.113.121 port 51244 ssh2May 19 06:41:17 pkdns2 sshd\[6184\]: Failed password for roo ... show more May 19 06:39:40 pkdns2 sshd\[6067\]: Invalid user seafile from 201.55.113.121May 19 06:39:42 pkdns2 sshd\[6067\]: Failed password for invalid user seafile from 201.55.113.121 port 51244 ssh2May 19 06:41:17 pkdns2 sshd\[6184\]: Failed password for root from 201.55.113.121 port 40650 ssh2May 19 06:42:40 pkdns2 sshd\[6235\]: Invalid user al from 201.55.113.121May 19 06:42:42 pkdns2 sshd\[6235\]: Failed password for invalid user al from 201.55.113.121 port 51260 ssh2May 19 06:44:12 pkdns2 sshd\[6305\]: Failed password for root from 201.55.113.121 port 47360 ssh2 ... show less