This IP address has been reported a total of
12,263
times from
344 distinct
sources.
213.209.159.227 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Apr 12 12:15:33 Tower sshd-session[3548116]: Connection from 213.209.159.227 port 42422 on 192.168.1 ...
show moreApr 12 12:15:33 Tower sshd-session[3548116]: Connection from 213.209.159.227 port 42422 on 192.168.10.220 port 22 rdomain ""
Apr 12 12:15:33 Tower sshd-session[3548116]: Failed password for root from 213.209.159.227 port 42422 ssh2
Apr 12 12:15:33 Tower sshd-session[3548116]: Connection closed by authenticating user root 213.209.159.227 port 42422 [preauth]
Apr 12 12:15:33 Tower sshd[3583]: srclimit_penalise: ipv4: new 213.209.159.227/32 deferred penalty of 5 seconds for penalty: failed authentication
show less
Apr 12 18:06:53 raspberrypi sshd[2226]: Failed password for root from 213.209.159.227 port 59992 ssh ...
show moreApr 12 18:06:53 raspberrypi sshd[2226]: Failed password for root from 213.209.159.227 port 59992 ssh2
...
show less
Port Scan
Brute-Force
SSH
Anonymous
Apr 12 12:01:56 srv sshd[6042]: Failed password for root from 213.209.159.227 port 35684 ssh2
Automatic Fail2Ban report from jail ssh: multiple matching events detected.
Brute-Force
SSH
Anonymous
2026-04-12T15:48:49.120234+01:00 lXXX.com sshd[3320020]: Failed password for root from 213.209.159.2 ...
show more2026-04-12T15:48:49.120234+01:00 lXXX.com sshd[3320020]: Failed password for root from 213.209.159.227 port 45772 ssh2
2026-04-12T16:24:48.976984+01:00 lXXX.com sshd[3325020]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.209.159.227 user=root
2026-04-12T16:24:50.940486+01:00 lXXX.com sshd[3325020]: Failed password for root from 213.209.159.227 port 59140 ssh2
...
show less
2026-04-12T16:48:27.757296+02:00 milkyway sshd[3649248]: Failed password for root from 213.209.159.2 ...
show more2026-04-12T16:48:27.757296+02:00 milkyway sshd[3649248]: Failed password for root from 213.209.159.227 port 42320 ssh2
2026-04-12T17:04:45.436252+02:00 milkyway sshd[3650875]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.209.159.227 user=root
2026-04-12T17:04:47.580588+02:00 milkyway sshd[3650875]: Failed password for root from 213.209.159.227 port 60782 ssh2
...
show less
2026-04-12T15:24:31.545898+02:00 Shiva sshd-session[3432917]: Failed password for root from 213.209. ...
show more2026-04-12T15:24:31.545898+02:00 Shiva sshd-session[3432917]: Failed password for root from 213.209.159.227 port 41436 ssh2
2026-04-12T16:07:05.937911+02:00 Shiva sshd-session[172687]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.209.159.227 user=root
2026-04-12T16:07:07.908122+02:00 Shiva sshd-session[172687]: Failed password for root from 213.209.159.227 port 37190 ssh2
...
show less
Failed password for root Apr 12 14:19:01 port 51056
Brute-Force
SSH
Anonymous
2026-04-12T16:00:57.668410 localhost.localdomain sshd[2177290]: Failed password for root from 213.20 ...
show more2026-04-12T16:00:57.668410 localhost.localdomain sshd[2177290]: Failed password for root from 213.209.159.227 port 46116 ssh2
2026-04-12T16:00:58.681283 localhost.localdomain sshd[2177290]: Connection closed by authenticating user root 213.209.159.227 port 46116 [preauth]
...
show less
2026-04-12T15:24:36.780224+02:00 proxmox sshd[2306557]: Failed password for root from 213.209.159.22 ...
show more2026-04-12T15:24:36.780224+02:00 proxmox sshd[2306557]: Failed password for root from 213.209.159.227 port 42826 ssh2
2026-04-12T15:45:49.357702+02:00 proxmox sshd[2324862]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.209.159.227 user=root
2026-04-12T15:45:51.331979+02:00 proxmox sshd[2324862]: Failed password for root from 213.209.159.227 port 60582 ssh2
...
show less
Brute-Force
SSH
Showing 11896 to
11910
of 12263 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩