2026-09-21T19:14:48.154352+08:00 vmi996132.contaboserver.net sshd[552345]: Connection closed by authenticating user root 103.99.51.47 port 35646 [preauth]
2026-09-21T19:14:48.905945+08:00 vmi996132.contaboserver.net sshd[552368]: pam_unix(sshd:auth): ...
show more2026-09-21T19:14:48.154352+08:00 vmi996132.contaboserver.net sshd[552345]: Connection closed by authenticating user root 103.99.51.47 port 35646 [preauth]
2026-09-21T19:14:48.905945+08:00 vmi996132.contaboserver.net sshd[552368]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.99.51.47 user=root
2026-09-21T19:14:50.496443+08:00 vmi996132.contaboserver.net sshd[552368]: Failed password for root from 103.99.51.47 port 36622 ssh2
...
show less
2026-09-20T16:50:05.453449+02:00 pve sshd-session[2255101]: Failed password for root from 103.99.51.47 port 56110 ssh2
2026-09-20T16:50:06.933568+02:00 pve sshd-session[2255101]: Connection closed by authenticating user root 103.99.51.47 port 56110 [ ...
show more2026-09-20T16:50:05.453449+02:00 pve sshd-session[2255101]: Failed password for root from 103.99.51.47 port 56110 ssh2
2026-09-20T16:50:06.933568+02:00 pve sshd-session[2255101]: Connection closed by authenticating user root 103.99.51.47 port 56110 [preauth]
...
show less
Fail2ban ban on jail 'sshd'. Repeated failed authentication attempts against a monitored host. Detected and correlated by Wazuh SIEM (rule 100110, level 10). Reported automatically.
Cowrie SSH honeypot detected unauthorized SSH activity. Username: root. Failed SSH login attempts from this IP in the last 24 hours: 299. New failed login attempts since the previous report: 146. Reason: Failed SSH login attempt. Target: SSH honeypot ...
show moreCowrie SSH honeypot detected unauthorized SSH activity. Username: root. Failed SSH login attempts from this IP in the last 24 hours: 299. New failed login attempts since the previous report: 146. Reason: Failed SSH login attempt. Target: SSH honeypot.
show less
Cowrie SSH honeypot detected unauthorized SSH activity. Username: root. Failed SSH login attempts from this IP in the last 24 hours: 153. New failed login attempts since the previous report: 152. Reason: Failed SSH login attempt. Target: SSH honeypot ...
show moreCowrie SSH honeypot detected unauthorized SSH activity. Username: root. Failed SSH login attempts from this IP in the last 24 hours: 153. New failed login attempts since the previous report: 152. Reason: Failed SSH login attempt. Target: SSH honeypot.
show less
2026-09-17T12:05:15.953327+02:00 gaia sshd[1230513]: Failed password for invalid user root from 103.99.51.47 port 35312 ssh2
2026-09-17T12:05:17.968269+02:00 gaia sshd[1230568]: Connection from 103.99.51.47 port 37548 on 23.88.28.109 port 22 rdomain ...
show more2026-09-17T12:05:15.953327+02:00 gaia sshd[1230513]: Failed password for invalid user root from 103.99.51.47 port 35312 ssh2
2026-09-17T12:05:17.968269+02:00 gaia sshd[1230568]: Connection from 103.99.51.47 port 37548 on 23.88.28.109 port 22 rdomain ""
2026-09-17T12:05:21.357769+02:00 gaia sshd[1230568]: User root from 103.99.51.47 not allowed because not listed in AllowUsers
...
show less
Cowrie SSH honeypot detected unauthorized SSH activity. Username: root. Failed SSH login attempts from this IP in the last 24 hours: 1. New failed login attempts since the previous report: 1. Reason: Failed SSH login attempt. Target: SSH honeypot.
