Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-10-26T15:07:56.029825+02:00 serengeti sshd-session[391136]: Failed password for root from 50.6.206.179 port 51208 ssh2
2026-10-26T15:13:31.394612+02:00 serengeti sshd-session[392056]: Failed password for root from 50.6.206.179 port 55214 ssh2
20 ...
show more2026-10-26T15:07:56.029825+02:00 serengeti sshd-session[391136]: Failed password for root from 50.6.206.179 port 51208 ssh2
2026-10-26T15:13:31.394612+02:00 serengeti sshd-session[392056]: Failed password for root from 50.6.206.179 port 55214 ssh2
2026-10-26T15:15:01.347691+02:00 serengeti sshd-session[392145]: Failed password for root from 50.6.206.179 port 55482 ssh2
2026-10-26T15:16:30.199156+02:00 serengeti sshd-session[392526]: Failed password for root from 50.6.206.179 port 55456 ssh2
2026-10-26T15:18:05.035091+02:00 serengeti sshd-session[392655]: Failed password for root from 50.6.206.179 port 43978 ssh2
...
show less
50.6.206.179 brute-forcing ssh logins on Mon Oct 26 14:01:09 CET 2026
Brute-Force
SSH
Anonymous
Oct 26 12:56:04 f2b auth.info sshd[1271600]: Failed password for root from 50.6.206.179 port 47480 ssh2
Oct 26 12:57:34 f2b auth.info sshd[1271609]: Failed password for root from 50.6.206.179 port 38326 ssh2
Oct 26 12:59:05 f2b auth.info sshd[1271623 ...
show moreOct 26 12:56:04 f2b auth.info sshd[1271600]: Failed password for root from 50.6.206.179 port 47480 ssh2
Oct 26 12:57:34 f2b auth.info sshd[1271609]: Failed password for root from 50.6.206.179 port 38326 ssh2
Oct 26 12:59:05 f2b auth.info sshd[1271623]: Failed password for root from 50.6.206.179 port 41900 ssh2
...
show less
2026-10-26T14:56:59.979789+02:00 ieyasu.moretrix.com sshd-session[1002847]: User root from 50.6.206.179 not allowed because none of user's groups are listed in AllowGroups
2026-10-26T14:58:32.087229+02:00 ieyasu.moretrix.com sshd-session[1002868]: Co ...
show more2026-10-26T14:56:59.979789+02:00 ieyasu.moretrix.com sshd-session[1002847]: User root from 50.6.206.179 not allowed because none of user's groups are listed in AllowGroups
2026-10-26T14:58:32.087229+02:00 ieyasu.moretrix.com sshd-session[1002868]: Connection from 50.6.206.179 port 33356 on 176.9.64.17 port 22 rdomain ""
2026-10-26T14:58:32.727968+02:00 ieyasu.moretrix.com sshd-session[1002868]: User root from 50.6.206.179 not allowed because none of user's groups are listed in AllowGroups
...
show less
2026-10-26T06:38:49.559515-06:00 scania sshd[106956]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=50.6.206.179 user=root
2026-10-26T06:38:51.384635-06:00 scania sshd[106956]: Failed password for invalid us ...
show more2026-10-26T06:38:49.559515-06:00 scania sshd[106956]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=50.6.206.179 user=root
2026-10-26T06:38:51.384635-06:00 scania sshd[106956]: Failed password for invalid user root from 50.6.206.179 port 35910 ssh2
2026-10-26T06:40:32.254110-06:00 scania sshd[107048]: User root from 50.6.206.179 not allowed because none of user's groups are listed in AllowGroups
...
show less
Automated SSH brute-force attack detected. The IP repeatedly attempted to authenticate to port 22 using multiple usernames and password guesses within a short timeframe.
Disconnected from authenticating user root 50.6.206.179 port 49194 [preauth]
Disconnected from authenticating user root 50.6.206.179 port 32910 [preauth]
Disconnected from authenticating user root 50.6.206.179 port 42512 [preauth]
Disconnected from a ...
show moreDisconnected from authenticating user root 50.6.206.179 port 49194 [preauth]
Disconnected from authenticating user root 50.6.206.179 port 32910 [preauth]
Disconnected from authenticating user root 50.6.206.179 port 42512 [preauth]
Disconnected from authenticating user root 50.6.206.179 port 34708 [preauth]
Disconnected from authenticating user root 50.6.206.179 port 39812 [preauth]
show less
Brute-Force
SSH
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown