This IP address has been reported a total of
267
times from
202 distinct
sources.
195.161.21.219 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
[ns65.kdns.gr] ssh: logs=/var/log/secure; samples=Jul 8 21:27:29 ns65 sshd[2169185]: Failed password ...
show more[ns65.kdns.gr] ssh: logs=/var/log/secure; samples=Jul 8 21:27:29 ns65 sshd[2169185]: Failed password for root from 195.161.21.219 port 34170 ssh2 | Jul 8 21:27:32 ns65 sshd[2169185]: Failed password for root from 195.161.21.219 port 34170 ssh2 | Jul 8 21:27:35 ns65 sshd[2169185]: Failed password for root from 195.161.21.219 port 34170 ssh2
show less
2026-07-07T05:51:20.930138+00:00 cirno sshd[213120]: Failed password for root from 195.161.21.219 po ...
show more2026-07-07T05:51:20.930138+00:00 cirno sshd[213120]: Failed password for root from 195.161.21.219 port 40666 ssh2
2026-07-07T05:51:23.668715+00:00 cirno sshd[213120]: Failed password for root from 195.161.21.219 port 40666 ssh2
2026-07-07T05:51:26.758468+00:00 cirno sshd[213120]: Failed password for root from 195.161.21.219 port 40666 ssh2
...
show less
2026-07-04T13:10:23.582773+00:00 LYN-HMS-1 sshd-session[1145047]: Failed password for root from 195. ...
show more2026-07-04T13:10:23.582773+00:00 LYN-HMS-1 sshd-session[1145047]: Failed password for root from 195.161.21.219 port 47460 ssh2
2026-07-04T13:10:27.322785+00:00 LYN-HMS-1 sshd-session[1145047]: Failed password for root from 195.161.21.219 port 47460 ssh2
2026-07-04T13:10:31.478845+00:00 LYN-HMS-1 sshd-session[1145047]: Failed password for root from 195.161.21.219 port 47460 ssh2
2026-07-04T13:10:35.191000+00:00 LYN-HMS-1 sshd-session[1145047]: Failed password for root from 195.161.21.219 port 47460 ssh2
2026-07-04T13:10:38.565213+00:00 LYN-HMS-1 sshd-session[1145047]: Failed password for root from 195.161.21.219 port 47460 ssh2
...
show less
Jun 30 17:28:42 localhost sshd[675467]: error: maximum authentication attempts exceeded for root fro ...
show moreJun 30 17:28:42 localhost sshd[675467]: error: maximum authentication attempts exceeded for root from 195.161.21.219 port 37090 ssh2 [preauth]
Jun 30 17:28:45 localhost sshd[675561]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.161.21.219 user=root
Jun 30 17:28:46 localhost sshd[675561]: Failed password for root from 195.161.21.219 port 34726 ssh2
Jun 30 17:29:01 localhost sshd[675561]: Failed password for root from 195.161.21.219 port 34726 ssh2
Jun 30 17:29:01 localhost sshd[675561]: error: maximum authentication attempts exceeded for root from 195.161.21.219 port 34726 ssh2 [preauth]
...
show less
FTP Brute-Force
Port Scan
Hacking
Brute-Force
Bad Web Bot
Web App Attack
SSH
2026-06-30T02:21:24.379983 gateway sshd[1008005]: Failed password for root from 195.161.21.219 port ...
show more2026-06-30T02:21:24.379983 gateway sshd[1008005]: Failed password for root from 195.161.21.219 port 48092 ssh2
2026-06-30T02:21:27.978980 gateway sshd[1008005]: Failed password for root from 195.161.21.219 port 48092 ssh2
2026-06-30T02:21:32.057484 gateway sshd[1008005]: Failed password for root from 195.161.21.219 port 48092 ssh2
2026-06-30T02:21:35.799096 gateway sshd[1008005]: Failed password for root from 195.161.21.219 port 48092 ssh2
2026-06-30T02:21:39.541988 gateway sshd[1008005]: Failed password for root from 195.161.21.219 port 48092 ssh2
2026-06-30T02:21:41.248571 gateway sshd[1008005]: error: maximum authentication attempts exceeded for root from 195.161.21.219 port 48092 ssh2 [preauth]
2026-06-30T02:21:42.344390 gateway sshd[1008016]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.161.21.219 user=root
2026-06-30T02:21:44.368240 gateway sshd[1008016]: Failed password for root from 195.161.21.219 port 38624 ssh2
2026-06-30T02:21:
...
show less
Jun 26 00:40:08 vmori-manager-1 sshd[259235]: Connection closed by authenticating user root 195.161. ...
show moreJun 26 00:40:08 vmori-manager-1 sshd[259235]: Connection closed by authenticating user root 195.161.21.219 port 49512 [preauth]
...
show less
2026-06-25T08:29:21.841699+02:00 gaia sshd[945074]: pam_unix(sshd:auth): authentication failure; log ...
show more2026-06-25T08:29:21.841699+02:00 gaia sshd[945074]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.161.21.219 user=root
2026-06-25T08:29:23.582104+02:00 gaia sshd[945074]: Failed password for invalid user root from 195.161.21.219 port 39984 ssh2
2026-06-25T08:29:26.959997+02:00 gaia sshd[945074]: Failed password for invalid user root from 195.161.21.219 port 39984 ssh2
...
show less
Report 2492228 with IP 3539792 for SSH brute-force attack by source 3534450 via ssh-honeypot/0.2.0+h ...
show moreReport 2492228 with IP 3539792 for SSH brute-force attack by source 3534450 via ssh-honeypot/0.2.0+http
show less
Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2026-06-21T04:57:14Z and 2026-06-2 ...
show moreCowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2026-06-21T04:57:14Z and 2026-06-21T04:57:16Z
show less
2026-06-20T17:47:25.804530+00:00 fra-1 sshd[343887]: Failed password for root from 195.161.21.219 po ...
show more2026-06-20T17:47:25.804530+00:00 fra-1 sshd[343887]: Failed password for root from 195.161.21.219 port 39446 ssh2
2026-06-20T17:47:29.011130+00:00 fra-1 sshd[343887]: Failed password for root from 195.161.21.219 port 39446 ssh2
2026-06-20T17:47:31.685505+00:00 fra-1 sshd[343887]: Failed password for root from 195.161.21.219 port 39446 ssh2
2026-06-20T17:47:34.697594+00:00 fra-1 sshd[343887]: Failed password for root from 195.161.21.219 port 39446 ssh2
2026-06-20T17:47:37.710767+00:00 fra-1 sshd[343887]: Failed password for root from 195.161.21.219 port 39446 ssh2
...
show less
2026-06-16T03:31:55.240903-04:00 debian sshd[1016347]: Failed password for root from 195.161.21.219 ...
show more2026-06-16T03:31:55.240903-04:00 debian sshd[1016347]: Failed password for root from 195.161.21.219 port 47132 ssh2
2026-06-16T03:31:59.016982-04:00 debian sshd[1016347]: Failed password for root from 195.161.21.219 port 47132 ssh2
2026-06-16T03:32:01.958730-04:00 debian sshd[1016347]: Failed password for root from 195.161.21.219 port 47132 ssh2
2026-06-16T03:32:04.424384-04:00 debian sshd[1016347]: Failed password for root from 195.161.21.219 port 47132 ssh2
2026-06-16T03:32:07.119321-04:00 debian sshd[1016347]: Failed password for root from 195.161.21.219 port 47132 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 267 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩