Active SSH brute-force detected. Logs: Mar 14 17:39:53 UziDaGod sshd[3788703]: Failed password for r ...
show moreActive SSH brute-force detected. Logs: Mar 14 17:39:53 UziDaGod sshd[3788703]: Failed password for root from 139.59.27.21 port 38212 ssh2 Mar 14 17:41:08 UziDaGod sshd[3788760]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh...
show less
Mar 14 22:38:10 v220241135696295643 sshd[340596]: Failed password for root from 139.59.27.21 port 48 ...
show moreMar 14 22:38:10 v220241135696295643 sshd[340596]: Failed password for root from 139.59.27.21 port 48780 ssh2
Mar 14 22:39:25 v220241135696295643 sshd[340627]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.27.21 user=root
Mar 14 22:39:27 v220241135696295643 sshd[340627]: Failed password for root from 139.59.27.21 port 43596 ssh2
Mar 14 22:40:37 v220241135696295643 sshd[340631]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.27.21 user=root
Mar 14 22:40:39 v220241135696295643 sshd[340631]: Failed password for root from 139.59.27.21 port 43738 ssh2
...
show less
Mar 14 22:32:07 ns1 sshd-session[64113]: Connection closed by 139.59.27.21 port 58998
Mar 14 22:34:1 ...
show moreMar 14 22:32:07 ns1 sshd-session[64113]: Connection closed by 139.59.27.21 port 58998
Mar 14 22:34:14 ns1 sshd-session[64124]: Connection closed by authenticating user root 139.59.27.21 port 51974 [preauth]
Mar 14 22:35:27 ns1 sshd-session[64128]: Connection closed by authenticating user root 139.59.27.21 port 48492 [preauth]
Mar 14 22:36:41 ns1 sshd-session[64132]: Connection closed by authenticating user root 139.59.27.21 port 52984 [preauth]
Mar 14 22:37:59 ns1 sshd-session[64136]: Connection closed by authenticating user root 139.59.27.21 port 38912 [preauth]
...
show less
2026-03-14T22:34:49.427115+01:00 gw2.wira-gmbh.de sshd[1563372]: Connection closed by 139.59.27.21 p ...
show more2026-03-14T22:34:49.427115+01:00 gw2.wira-gmbh.de sshd[1563372]: Connection closed by 139.59.27.21 port 40210
2026-03-14T22:36:51.503009+01:00 gw2.wira-gmbh.de sshd[1563813]: Connection closed by authenticating user root 139.59.27.21 port 55372 [preauth]
2026-03-14T22:38:03.497238+01:00 gw2.wira-gmbh.de sshd[1564024]: Connection closed by authenticating user root 139.59.27.21 port 36822 [preauth]
2026-03-14T22:39:17.960263+01:00 gw2.wira-gmbh.de sshd[1564346]: Connection closed by authenticating user root 139.59.27.21 port 51716 [preauth]
2026-03-14T22:40:36.066503+01:00 gw2.wira-gmbh.de sshd[1564567]: Connection closed by authenticating user root 139.59.27.21 port 38558 [preauth]
show less
Brute-Force
Showing 1 to
15
of 42 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ