Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-11-09T07:24:22.746258+08:00 cowgl sshd[1323683]: Connection closed by authenticating user root 45.199.139.25 port 35022 [preauth]
2026-11-09T07:48:54.160460+08:00 cowgl sshd[1383941]: pam_unix(sshd:auth): authentication failure; logname= uid=0 e ...
show more2026-11-09T07:24:22.746258+08:00 cowgl sshd[1323683]: Connection closed by authenticating user root 45.199.139.25 port 35022 [preauth]
2026-11-09T07:48:54.160460+08:00 cowgl sshd[1383941]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.199.139.25 user=root
2026-11-09T07:48:55.562208+08:00 cowgl sshd[1383941]: Failed password for root from 45.199.139.25 port 41068 ssh2
2026-11-09T07:48:56.018273+08:00 cowgl sshd[1383941]: Connection closed by authenticating user root 45.199.139.25 port 41068 [preauth]
...
show less
{"session":"2bd02299b46a","protocol":"ssh","src_ip":"45.199.139.25","src_port":38802,"dst_ip":"10.0.5.2","dst_port":2222,"username":"root","password":"Lippux2024","eventid":"cowrie.login.success","sensor":"fd9684127da9","uuid":"26508e4e-6eff-11f1-948 ...
show more{"session":"2bd02299b46a","protocol":"ssh","src_ip":"45.199.139.25","src_port":38802,"dst_ip":"10.0.5.2","dst_port":2222,"username":"root","password":"Lippux2024","eventid":"cowrie.login.success","sensor":"fd9684127da9","uuid":"26508e4e-6eff-11f1-9488-c6c9e32495b7","timestamp":"2026-11-08T23:21:53.185296Z","message":"login attempt [root/Lippux2024] succeeded"}
{"session":"2bd02299b46a","protocol":"ssh","src_ip":"45.199.139.25","src_port":38802,"dst_ip":"10.0.5.2","dst_port":2222,"input":"uname -a","eventid":"cowrie.command.input","sensor":"fd9684127da9","uuid":"26508e4e-6eff-11f1-9488-c6c9e32495b7","timestamp":"2026-11-08T23:21:53.453116Z","message":"CMD: uname -a"}
...
show less
Brute-Force
SSH
Anonymous
2026-11-08T23:13:49.715624+00:00 mail sshd[293862]: User root from 45.199.139.25 not allowed because not listed in AllowUsers
2026-11-08T23:13:49.832317+00:00 mail sshd[293862]: Connection closed by invalid user root 45.199.139.25 port 52842 [preauth ...
show more2026-11-08T23:13:49.715624+00:00 mail sshd[293862]: User root from 45.199.139.25 not allowed because not listed in AllowUsers
2026-11-08T23:13:49.832317+00:00 mail sshd[293862]: Connection closed by invalid user root 45.199.139.25 port 52842 [preauth]
...
show less
Nov 8 12:43:57 gen sshd[3617513]: Failed password for root from 45.199.139.25 port 49724 ssh2
Nov 8 13:09:21 gen sshd[3617702]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.199.139.25 user=root
Nov 8 ...
show moreNov 8 12:43:57 gen sshd[3617513]: Failed password for root from 45.199.139.25 port 49724 ssh2
Nov 8 13:09:21 gen sshd[3617702]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.199.139.25 user=root
Nov 8 13:09:23 gen sshd[3617702]: Failed password for root from 45.199.139.25 port 48360 ssh2
...
show less
