Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-11-10T09:53:17.338202+08:00 localhost sshd[14046]: Failed password for root from 206.189.132.23 port 57194 ssh2
2026-11-10T09:57:50.906822+08:00 localhost sshd-session[1224]: Failed password for root from 206.189.132.23 port 38462 ssh2
2026-11-1 ...
show more2026-11-10T09:53:17.338202+08:00 localhost sshd[14046]: Failed password for root from 206.189.132.23 port 57194 ssh2
2026-11-10T09:57:50.906822+08:00 localhost sshd-session[1224]: Failed password for root from 206.189.132.23 port 38462 ssh2
2026-11-10T09:57:51.249955+08:00 localhost sshd-session[6891]: Failed password for root from 206.189.132.23 port 47000 ssh2
...
show less
2026-11-10T04:21:17.319212+08:00 localhost sshd-session[3350]: Failed password for root from 206.189.132.23 port 36262 ssh2
2026-11-10T04:29:04.331631+08:00 localhost sshd-session[11475]: Failed password for root from 206.189.132.23 port 40108 ssh2
2 ...
show more2026-11-10T04:21:17.319212+08:00 localhost sshd-session[3350]: Failed password for root from 206.189.132.23 port 36262 ssh2
2026-11-10T04:29:04.331631+08:00 localhost sshd-session[11475]: Failed password for root from 206.189.132.23 port 40108 ssh2
2026-11-10T04:29:04.476804+08:00 localhost sshd-session[3530]: Failed password for root from 206.189.132.23 port 35076 ssh2
...
show less
2026-11-10T00:45:39.097183+08:00 localhost sshd[10600]: User root from 206.189.132.23 not allowed because not listed in AllowUsers
2026-11-10T00:45:39.237403+08:00 localhost sshd-session[14898]: pam_unix(sshd:auth): authentication failure; logname= u ...
show more2026-11-10T00:45:39.097183+08:00 localhost sshd[10600]: User root from 206.189.132.23 not allowed because not listed in AllowUsers
2026-11-10T00:45:39.237403+08:00 localhost sshd-session[14898]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.132.23 user=root
2026-11-10T00:45:40.730297+08:00 localhost sshd-session[14898]: Failed password for root from 206.189.132.23 port 40600 ssh2
...
show less
Brute-Force
SSH
Anonymous
Blocked by UFW (TCP on 16396)
Source port: 43535
TTL: 45
Packet length: 52
TOS: 0x14
This report (for 206.189.132.23) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
Anonymous
May 7 13:03:12 srv sshd[28626]: Failed password for invalid user user from 206.189.132.238 port 42134 ssh2
May 7 13:03:15 srv sshd[28628]: Failed password for invalid user user from 206.189.132.238 port 47206 ssh2