This IP address has been reported a total of
496
times from
369 distinct
sources.
138.99.79.29 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-06-01T09:48:41.069426+03:00 vatnik sshd[19324]: User root from 138.99.79.29 not allowed because ...
show more2026-06-01T09:48:41.069426+03:00 vatnik sshd[19324]: User root from 138.99.79.29 not allowed because listed in DenyUsers
...
show less
May 31 17:50:32 b146-10 sshd[358089]: Failed password for root from 138.99.79.29 port 58860 ssh2
Jun ...
show moreMay 31 17:50:32 b146-10 sshd[358089]: Failed password for root from 138.99.79.29 port 58860 ssh2
Jun 1 00:44:22 b146-10 sshd[364165]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.99.79.29 user=root
Jun 1 00:44:24 b146-10 sshd[364165]: Failed password for root from 138.99.79.29 port 59714 ssh2
...
show less
Brute-Force
SSH
Anonymous
2026-06-01T09:43:16.206495+03:00 2426447-on24665.twc1.net sshd[1223233]: pam_unix(sshd:auth): authen ...
show more2026-06-01T09:43:16.206495+03:00 2426447-on24665.twc1.net sshd[1223233]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.99.79.29 user=root
2026-06-01T09:43:17.749869+03:00 2426447-on24665.twc1.net sshd[1223233]: Failed password for root from 138.99.79.29 port 57356 ssh2
...
show less
2026-06-01T08:33:47.986127+02:00 ovh-proxmox sshd[2927196]: Failed password for root from 138.99.79. ...
show more2026-06-01T08:33:47.986127+02:00 ovh-proxmox sshd[2927196]: Failed password for root from 138.99.79.29 port 59374 ssh2
2026-06-01T08:37:42.605972+02:00 ovh-proxmox sshd[2928193]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.99.79.29 user=root
2026-06-01T08:37:44.630810+02:00 ovh-proxmox sshd[2928193]: Failed password for root from 138.99.79.29 port 53588 ssh2
...
show less
SSH brute-force attempt detected from IP 138.99.79.29: 2026-06-01T06:10:17.746417+00:00 [redacted-ho ...
show moreSSH brute-force attempt detected from IP 138.99.79.29: 2026-06-01T06:10:17.746417+00:00 [redacted-hostname] sshd[341006]: Failed password for invalid user root from 138.99.79.29 port 37036 ssh2 on 1780294709.
show less
138.99.79.29 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time w ...
show more138.99.79.29 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time wasted: 3s. Total bytes sent by tarpit: 441B. Report generated by Endlessh Report Generator v1.2.3
show less
SSH brute force on port 22 -- 2 attempts, 1 successful. Credentials: root:Master123. Active: 2026-05 ...
show moreSSH brute force on port 22 -- 2 attempts, 1 successful. Credentials: root:Master123. Active: 2026-05-31T19:34 to 2026-06-01T00:41. Post-login: pgrep -x .16; /usr/bin/qijwzgqsgn [kthreadd] 1894731; /usr/bin/qijwzgqsgn 7379736C6F6764202D6D2030 1894731. Malware: miner (critical); trojan (high); trojan (critical). Source: AS264157 GUAREZE FIBRA LTDA (Flores da Cunha, BR). Data from SSH honeypot — not a production system.
show less
Brute-Force
SSH
IoT Targeted
Showing 61 to
75
of 496 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩