2026-05-04T10:55:09.326483+00:00 squid sshd-session[727370]: Failed password for root from 111.228.5 ...
show more2026-05-04T10:55:09.326483+00:00 squid sshd-session[727370]: Failed password for root from 111.228.52.74 port 59576 ssh2
2026-05-04T10:55:12.027028+00:00 squid sshd-session[727370]: Failed password for root from 111.228.52.74 port 59576 ssh2
2026-05-04T10:55:15.430987+00:00 squid sshd-session[727370]: Failed password for root from 111.228.52.74 port 59576 ssh2
2026-05-04T10:55:19.016914+00:00 squid sshd-session[727370]: Failed password for root from 111.228.52.74 port 59576 ssh2
2026-05-04T10:55:21.731788+00:00 squid sshd-session[727370]: Failed password for root from 111.228.52.74 port 59576 ssh2
...
show less
2026-05-03T17:45:11.055146-04:00 us-east.cbz.pw sshd[4066190]: Failed password for root from 111.228 ...
show more2026-05-03T17:45:11.055146-04:00 us-east.cbz.pw sshd[4066190]: Failed password for root from 111.228.52.74 port 34628 ssh2
2026-05-03T17:45:14.745549-04:00 us-east.cbz.pw sshd[4066190]: Failed password for root from 111.228.52.74 port 34628 ssh2
2026-05-03T17:45:18.719140-04:00 us-east.cbz.pw sshd[4066190]: Failed password for root from 111.228.52.74 port 34628 ssh2
2026-05-03T17:45:23.368784-04:00 us-east.cbz.pw sshd[4066190]: Failed password for root from 111.228.52.74 port 34628 ssh2
2026-05-03T17:45:26.933978-04:00 us-east.cbz.pw sshd[4066190]: Failed password for root from 111.228.52.74 port 34628 ssh2
...
show less
May 2 22:42:07 vmori-manager-1 sshd[211882]: Connection closed by authenticating user root 111.228. ...
show moreMay 2 22:42:07 vmori-manager-1 sshd[211882]: Connection closed by authenticating user root 111.228.52.74 port 54046 [preauth]
...
show less
Brute-force attack detected on 22/SSH
• Credentials: root:FEbUG2bV7p, root:123456, root:12345678, ro ...
show moreBrute-force attack detected on 22/SSH
• Credentials: root:FEbUG2bV7p, root:123456, root:12345678, root:Aa123456, root:password
• Number of login attempts: 5
• 1 command(s) were executed during the session
• Client: SSH-2.0-russh_0.51.1
show less
2026-05-02T11:59:31.382201+02:00 personaldiamant3 sshd[1208653]: Failed password for root from 111.2 ...
show more2026-05-02T11:59:31.382201+02:00 personaldiamant3 sshd[1208653]: Failed password for root from 111.228.52.74 port 43232 ssh2
2026-05-02T11:59:34.900876+02:00 personaldiamant3 sshd[1208653]: Failed password for root from 111.228.52.74 port 43232 ssh2
2026-05-02T11:59:37.731869+02:00 personaldiamant3 sshd[1208653]: Failed password for root from 111.228.52.74 port 43232 ssh2
...
show less
May 2 11:46:18 nexus-node-02 sshd[1111191]: Failed password for root from 111.228.52.74 port 34572 ...
show moreMay 2 11:46:18 nexus-node-02 sshd[1111191]: Failed password for root from 111.228.52.74 port 34572 ssh2
May 2 11:46:22 nexus-node-02 sshd[1111191]: Failed password for root from 111.228.52.74 port 34572 ssh2
May 2 11:46:26 nexus-node-02 sshd[1111191]: Failed password for root from 111.228.52.74 port 34572 ssh2
May 2 11:46:29 nexus-node-02 sshd[1111191]: Failed password for root from 111.228.52.74 port 34572 ssh2
May 2 11:46:33 nexus-node-02 sshd[1111191]: Failed password for root from 111.228.52.74 port 34572 ssh2
...
show less
2026-05-02T09:45:46.105745+00:00 vps.billy.wales sshd[28941]: Failed password for root from 111.228. ...
show more2026-05-02T09:45:46.105745+00:00 vps.billy.wales sshd[28941]: Failed password for root from 111.228.52.74 port 37604 ssh2
2026-05-02T09:45:48.525237+00:00 vps.billy.wales sshd[28941]: Failed password for root from 111.228.52.74 port 37604 ssh2
2026-05-02T09:45:52.582764+00:00 vps.billy.wales sshd[28941]: Failed password for root from 111.228.52.74 port 37604 ssh2
2026-05-02T09:45:56.642911+00:00 vps.billy.wales sshd[28941]: Failed password for root from 111.228.52.74 port 37604 ssh2
2026-05-02T09:46:00.188313+00:00 vps.billy.wales sshd[28941]: Failed password for root from 111.228.52.74 port 37604 ssh2
...
show less
2026-04-30T02:05:35.741306jump1.sailx.co sshd[11345]: Failed password for root from 111.228.52.74 po ...
show more2026-04-30T02:05:35.741306jump1.sailx.co sshd[11345]: Failed password for root from 111.228.52.74 port 46728 ssh2
2026-04-30T02:05:37.974455jump1.sailx.co sshd[11345]: Failed password for root from 111.228.52.74 port 46728 ssh2
2026-04-30T02:05:39.953439jump1.sailx.co sshd[11345]: Failed password for root from 111.228.52.74 port 46728 ssh2
2026-04-30T02:05:41.876187jump1.sailx.co sshd[11345]: Failed password for root from 111.228.52.74 port 46728 ssh2
2026-04-30T02:05:44.746052jump1.sailx.co sshd[11345]: Failed password for root from 111.228.52.74 port 46728 ssh2
...
show less
Blocked by UFW on server [22/tcp]
Source port: 53920
TTL: 42
Packet length: 60
TOS: 0x00
This repor ...
show moreBlocked by UFW on server [22/tcp]
Source port: 53920
TTL: 42
Packet length: 60
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
SSH
Anonymous
Large amount of failed SSH access attempts (brute-force)
2026-04-29T07:43:58.257457-05:00 drpxkvfh.colocrossing.cloud sshd[399483]: Failed password for root ...
show more2026-04-29T07:43:58.257457-05:00 drpxkvfh.colocrossing.cloud sshd[399483]: Failed password for root from 111.228.52.74 port 35828 ssh2
2026-04-29T07:44:00.142974-05:00 drpxkvfh.colocrossing.cloud sshd[399483]: Failed password for root from 111.228.52.74 port 35828 ssh2
2026-04-29T07:44:03.504888-05:00 drpxkvfh.colocrossing.cloud sshd[399483]: Failed password for root from 111.228.52.74 port 35828 ssh2
2026-04-29T07:44:05.754414-05:00 drpxkvfh.colocrossing.cloud sshd[399483]: Failed password for root from 111.228.52.74 port 35828 ssh2
2026-04-29T07:44:08.737592-05:00 drpxkvfh.colocrossing.cloud sshd[399483]: Failed password for root from 111.228.52.74 port 35828 ssh2
2026-04-29T07:44:09.034108-05:00 drpxkvfh.colocrossing.cloud sshd[399483]: Disconnecting authenticating user root 111.228.52.74 port 35828: Change of username or service not allowed: (root,ssh-connection) -> (test,ssh-connection) [preauth]
...
show less
2026-04-25T04:11:26.023626-07:00 bluejay sshd[1488067]: Failed password for root from 111.228.52.74 ...
show more2026-04-25T04:11:26.023626-07:00 bluejay sshd[1488067]: Failed password for root from 111.228.52.74 port 41954 ssh2
2026-04-25T04:11:29.633716-07:00 bluejay sshd[1488067]: Failed password for root from 111.228.52.74 port 41954 ssh2
2026-04-25T04:11:33.386163-07:00 bluejay sshd[1488067]: Failed password for root from 111.228.52.74 port 41954 ssh2
2026-04-25T04:11:36.715590-07:00 bluejay sshd[1488067]: Failed password for root from 111.228.52.74 port 41954 ssh2
...
show less
111.228.52.74 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Port ...
show more111.228.52.74 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 25 10:10:33 23198 sshd[13063]: Failed password for root from 45.118.106.53 port 51462 ssh2
Apr 25 10:51:15 23198 sshd[25876]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.228.52.74 user=root
Apr 25 10:51:17 23198 sshd[25876]: Failed password for root from 111.228.52.74 port 58586 ssh2
Apr 25 10:51:20 23198 sshd[25876]: Failed password for root from 111.228.52.74 port 58586 ssh2
Apr 25 10:51:22 23198 sshd[25876]: Failed password for root from 111.228.52.74 port 58586 ssh2
IP Addresses Blocked:
45.118.106.53 (IN/India/-)
show less