1.95.138.99

2026-09-26 16:56:40,481 fail2ban.actions [1388]: NOTICE [ipblocklist] Ban 1.95.138.99 ...

2026-09-26 14:14:08,207 fail2ban.actions [1427]: NOTICE [ipblocklist] Ban 1.95.138.99 ...

2026-09-24 19:53:19,209 fail2ban.actions [1330]: NOTICE [ipblocklist] Ban 1.95.138.99 ...

SSH brute-force / unauthorized login attempts.

2026-09-15T09:35:15.158929+00:00 Germany1 sshd-session[1889187]: Failed password for root from 1.95.138.99 port 36096 ssh2 2026-09-15T09:35:15.374081+00:00 Germany1 sshd-session[1889187]: Connection closed by authenticating user root 1.95.138.99 port ... show more 2026-09-15T09:35:15.158929+00:00 Germany1 sshd-session[1889187]: Failed password for root from 1.95.138.99 port 36096 ssh2 2026-09-15T09:35:15.374081+00:00 Germany1 sshd-session[1889187]: Connection closed by authenticating user root 1.95.138.99 port 36096 [preauth] ... show less

2026-09-15T10:30:02.999346+02:00 telekom-de-01.api.my-carrier-services.com sshd[94759]: Connection closed by authenticating user root 1.95.138.99 port 54748 [preauth] 2026-09-15T10:36:08.007285+02:00 telekom-de-01.api.my-carrier-services.com sshd[949 ... show more 2026-09-15T10:30:02.999346+02:00 telekom-de-01.api.my-carrier-services.com sshd[94759]: Connection closed by authenticating user root 1.95.138.99 port 54748 [preauth] 2026-09-15T10:36:08.007285+02:00 telekom-de-01.api.my-carrier-services.com sshd[94980]: Connection closed by authenticating user root 1.95.138.99 port 53980 [preauth] 2026-09-15T10:37:50.256327+02:00 telekom-de-01.api.my-carrier-services.com sshd[94983]: Connection closed by authenticating user root 1.95.138.99 port 57242 [preauth] 2026-09-15T10:37:52.084385+02:00 telekom-de-01.api.my-carrier-services.com sshd[95019]: Connection closed by authenticating user root 1.95.138.99 port 38656 [preauth] 2026-09-15T10:37:55.395611+02:00 telekom-de-01.api.my-carrier-services.com sshd[95022]: Connection closed by authenticating user root 1.95.138.99 port 41816 [preauth] show less

Knock-Knock honeypot brute-force: SSH (31 total hits)

SSH brute-force detected by honeypot. 10 failed login attempts. Last username: 'root'. SSH client: SSH-2.0-Go. Origin: China (AS55990 - Huawei Cloud Service data center).

FW-PortScan: Traffic Blocked srcport=49240 dstport=22

2026-09-15T03:04:35.328777+00:00 debian-8gb-fsn1-1 sshd-session[2175554]: Failed password for root from 1.95.138.99 port 50562 ssh2 2026-09-15T03:04:39.228364+00:00 debian-8gb-fsn1-1 sshd-session[2176427]: pam_unix(sshd:auth): authentication failure; ... show more 2026-09-15T03:04:35.328777+00:00 debian-8gb-fsn1-1 sshd-session[2175554]: Failed password for root from 1.95.138.99 port 50562 ssh2 2026-09-15T03:04:39.228364+00:00 debian-8gb-fsn1-1 sshd-session[2176427]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.95.138.99 user=root 2026-09-15T03:04:41.235575+00:00 debian-8gb-fsn1-1 sshd-session[2176427]: Failed password for root from 1.95.138.99 port 56020 ssh2 2026-09-15T03:04:54.403288+00:00 debian-8gb-fsn1-1 sshd-session[2176974]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.95.138.99 user=root 2026-09-15T03:04:56.017859+00:00 debian-8gb-fsn1-1 sshd-session[2176974]: Failed password for root from 1.95.138.99 port 35470 ssh2 ... show less

Sep 15 03:57:43 EMIRATESofBULGARIA sshd[1729349]: Failed password for root from 1.95.138.99 port 47776 ssh2 Sep 15 04:03:51 EMIRATESofBULGARIA sshd[1729386]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.95 ... show more Sep 15 03:57:43 EMIRATESofBULGARIA sshd[1729349]: Failed password for root from 1.95.138.99 port 47776 ssh2 Sep 15 04:03:51 EMIRATESofBULGARIA sshd[1729386]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.95.138.99 user=root Sep 15 04:03:53 EMIRATESofBULGARIA sshd[1729386]: Failed password for root from 1.95.138.99 port 56210 ssh2 Sep 15 04:03:58 EMIRATESofBULGARIA sshd[1729388]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.95.138.99 user=root Sep 15 04:03:59 EMIRATESofBULGARIA sshd[1729388]: Failed password for root from 1.95.138.99 port 39214 ssh2 Sep 15 04:04:04 EMIRATESofBULGARIA sshd[1729390]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.95.138.99 user=root Sep 15 04:04:06 EMIRATESofBULGARIA sshd[1729390]: Failed password for root from 1.95.138.99 port 48672 ssh2 ... show less

2026-09-14T22:40:25.137917-03:00 pbs sshd-session[204694]: Failed password for root from 1.95.138.99 port 34784 ssh2

sshd

2026-09-14T20:17:19.640877+00:00 Debian sshd-session[1287392]: kex_exchange_identification: Connection closed by remote host 2026-09-14T20:17:19.640916+00:00 Debian sshd-session[1287392]: Connection closed by 1.95.138.99 port 55924 ...

2026-09-14T19:08:13.406Z ACCEPT host=1.95.138.99 port=46818 fd=4 n=1/4096 2026-09-14T19:08:13.406Z ACCEPT host=1.95.138.99 port=46818 fd=4 n=1/4096 2026-09-14T19:23:16.697Z ACCEPT host=1.95.138.99 port=53422 fd=6 n=3/4096 2026-09-14T19:23:16.697Z ACC ... show more 2026-09-14T19:08:13.406Z ACCEPT host=1.95.138.99 port=46818 fd=4 n=1/4096 2026-09-14T19:08:13.406Z ACCEPT host=1.95.138.99 port=46818 fd=4 n=1/4096 2026-09-14T19:23:16.697Z ACCEPT host=1.95.138.99 port=53422 fd=6 n=3/4096 2026-09-14T19:23:16.697Z ACCEPT host=1.95.138.99 port=53422 fd=6 n=3/4096 2026-09-14T19:26:32.535Z ACCEPT host=1.95.138.99 port=41222 fd=4 n=2/4096 2026-09-14T19:26:32.535Z ACCEPT host=1.95.138.99 port=41222 fd=4 n=2/4096 2026-09-14T19:29:13.114Z ACCEPT host=1.95.138.99 port=50442 fd=5 n=2/4096 2026-09-14T19:29:13.114Z ACCEPT host=1.95.138.99 port=50442 fd=5 n=2/4096 ... show less