Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-11-08T10:55:47.959146+01:00 smvps001 sshd-session[164279]: Connection closed by 27.130.39.66 port 43122 [preauth]
2026-11-08T10:57:54.069365+01:00 smvps001 sshd-session[164348]: Unable to negotiate with 27.130.39.66 port 12812: no matching ciphe ...
show more2026-11-08T10:55:47.959146+01:00 smvps001 sshd-session[164279]: Connection closed by 27.130.39.66 port 43122 [preauth]
2026-11-08T10:57:54.069365+01:00 smvps001 sshd-session[164348]: Unable to negotiate with 27.130.39.66 port 12812: no matching cipher found. Their offer: arcfour,arcfour128,arcfour256,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,[email protected],3des-cbc,[email protected] [preauth]
2026-11-08T10:58:10.779122+01:00 smvps001 sshd-session[164368]: Unable to negotiate with 27.130.39.66 port 39306: no matching cipher found. Their offer: arcfour,arcfour128,arcfour256,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,[email protected],3des-cbc,[email protected] [preauth]
...
show less
2026-11-08T09:49:01.099054+00:00 vps-81d0881d sshd[84630]: Invalid user zabbix from 27.130.39.66 port 45330
2026-11-08T09:49:22.731400+00:00 vps-81d0881d sshd[84647]: Connection from 27.130.39.66 port 40580 on 193.70.87.236 port 2622 rdomain ""
2026- ...
show more2026-11-08T09:49:01.099054+00:00 vps-81d0881d sshd[84630]: Invalid user zabbix from 27.130.39.66 port 45330
2026-11-08T09:49:22.731400+00:00 vps-81d0881d sshd[84647]: Connection from 27.130.39.66 port 40580 on 193.70.87.236 port 2622 rdomain ""
2026-11-08T09:49:23.478084+00:00 vps-81d0881d sshd[84647]: Invalid user postgres from 27.130.39.66 port 40580
...
show less
2026-11-08T10:09:28.793798+01:00 vegeta sshd[9641]: Invalid user demo3 from 27.130.39.66 port 55442
2026-11-08T10:09:45.153261+01:00 vegeta sshd[9643]: Invalid user lyj from 27.130.39.66 port 34372
2026-11-08T07:54:49.065546+00:00 debian-4gb-hel1-2 sshd[1846880]: Failed password for root from 27.130.39.66 port 39096 ssh2
2026-11-08T07:55:04.319271+00:00 debian-4gb-hel1-2 sshd[1847305]: Invalid user lzh from 27.130.39.66 port 9888
2026-11-08T07: ...
show more2026-11-08T07:54:49.065546+00:00 debian-4gb-hel1-2 sshd[1846880]: Failed password for root from 27.130.39.66 port 39096 ssh2
2026-11-08T07:55:04.319271+00:00 debian-4gb-hel1-2 sshd[1847305]: Invalid user lzh from 27.130.39.66 port 9888
2026-11-08T07:55:04.540517+00:00 debian-4gb-hel1-2 sshd[1847305]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.130.39.66
2026-11-08T07:55:06.926504+00:00 debian-4gb-hel1-2 sshd[1847305]: Failed password for invalid user lzh from 27.130.39.66 port 9888 ssh2
2026-11-08T07:55:26.641074+00:00 debian-4gb-hel1-2 sshd[1848239]: Invalid user ali from 27.130.39.66 port 46766
...
show less
2026-11-08T13:58:52.395768+08:00 netcup-llb sshd[2115112]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.130.39.66 user=root
2026-11-08T13:58:54.649915+08:00 netcup-llb sshd[2115112]: Failed password for ...
show more2026-11-08T13:58:52.395768+08:00 netcup-llb sshd[2115112]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.130.39.66 user=root
2026-11-08T13:58:54.649915+08:00 netcup-llb sshd[2115112]: Failed password for root from 27.130.39.66 port 42434 ssh2
2026-11-08T13:59:21.922012+08:00 netcup-llb sshd[2115456]: Invalid user jefferson from 27.130.39.66 port 54080
2026-11-08T13:59:22.103763+08:00 netcup-llb sshd[2115456]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.130.39.66
2026-11-08T13:59:24.477882+08:00 netcup-llb sshd[2115456]: Failed password for invalid user jefferson from 27.130.39.66 port 54080 ssh2
...
show less
Brute-Force
SSH
Anonymous
Nov 8 06:19:56 server21 sshd-session[29613]: User root from 27.130.39.66 not allowed because not listed in AllowUsers
Nov 8 06:20:12 server21 sshd-session[29657]: User ftpuser from 27.130.39.66 not allowed because not listed in AllowUsers
Nov 8 06 ...
show moreNov 8 06:19:56 server21 sshd-session[29613]: User root from 27.130.39.66 not allowed because not listed in AllowUsers
Nov 8 06:20:12 server21 sshd-session[29657]: User ftpuser from 27.130.39.66 not allowed because not listed in AllowUsers
Nov 8 06:20:29 server21 sshd-session[29661]: Invalid user user0 from 27.130.39.66 port 37930
Nov 8 06:20:45 server21 sshd-session[29689]: User root from 27.130.39.66 not allowed because not listed in AllowUsers
Nov 8 06:21:10 server21 sshd-session[29701]: User root from 27.130.39.66 not allowed because not listed in AllowUsers
...
show less
2026-11-08T03:29:18.946870+01:00 v30393 sshd[2378623]: Connection closed by 27.130.39.66 port 38692 [preauth]
2026-11-08T03:32:28.543523+01:00 v30393 sshd[2378742]: Connection closed by authenticating user root 27.130.39.66 port 45240 [preauth]
...
Nov 7 19:40:57 mail sshd[3012378]: Invalid user user from 27.130.39.66 port 54568
Nov 7 19:40:57 mail sshd[3012378]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.130.39.66
Nov 7 19:40:59 mail sshd[301 ...
show moreNov 7 19:40:57 mail sshd[3012378]: Invalid user user from 27.130.39.66 port 54568
Nov 7 19:40:57 mail sshd[3012378]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.130.39.66
Nov 7 19:40:59 mail sshd[3012378]: Failed password for invalid user user from 27.130.39.66 port 54568 ssh2
...
show less
2026-11-07T14:04:19.530127 vmi2293746.contaboserver.net sshd[73203]: Invalid user stu03 from 27.130.39.66 port 56984
2026-11-07T14:04:35.114169 vmi2293746.contaboserver.net sshd[73215]: Invalid user esadmin from 27.130.39.66 port 60686
...
Fail2ban ban on jail 'sshd'. Repeated failed authentication attempts against a monitored host. Detected and correlated by Wazuh SIEM (rule 100110, level 10). Reported automatically.
2026-11-07T10:10:56.591669-03:00 vmi2819241 sshd-session[2158233]: Failed password for invalid user root from 27.130.39.66 port 27576 ssh2
2026-11-07T10:11:12.090079-03:00 vmi2819241 sshd-session[2158343]: Invalid user linux from 27.130.39.66 port 39 ...
show more2026-11-07T10:10:56.591669-03:00 vmi2819241 sshd-session[2158233]: Failed password for invalid user root from 27.130.39.66 port 27576 ssh2
2026-11-07T10:11:12.090079-03:00 vmi2819241 sshd-session[2158343]: Invalid user linux from 27.130.39.66 port 39396
2026-11-07T10:11:12.302242-03:00 vmi2819241 sshd-session[2158343]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.130.39.66
2026-11-07T10:11:13.986728-03:00 vmi2819241 sshd-session[2158343]: Failed password for invalid user linux from 27.130.39.66 port 39396 ssh2
...
show less
Brute-Force
SSH
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown
