2026-09-21T01:19:02.722186+00:00 ubuntu-4gb-hel1-2 sshd[1813143]: Invalid user db2inst1 from 118.31.4.34 port 44114
2026-09-21T01:19:04.682693+00:00 ubuntu-4gb-hel1-2 sshd[1813278]: Invalid user cs2 from 118.31.4.34 port 45568
2026-09-21T01:19:06.181 ...
show more2026-09-21T01:19:02.722186+00:00 ubuntu-4gb-hel1-2 sshd[1813143]: Invalid user db2inst1 from 118.31.4.34 port 44114
2026-09-21T01:19:04.682693+00:00 ubuntu-4gb-hel1-2 sshd[1813278]: Invalid user cs2 from 118.31.4.34 port 45568
2026-09-21T01:19:06.181325+00:00 ubuntu-4gb-hel1-2 sshd[1813344]: Invalid user zjw from 118.31.4.34 port 46060
2026-09-21T01:19:09.206176+00:00 ubuntu-4gb-hel1-2 sshd[1813369]: Invalid user devops from 118.31.4.34 port 47460
2026-09-21T01:19:10.502990+00:00 ubuntu-4gb-hel1-2 sshd[1813393]: Invalid user oracle from 118.31.4.34 port 48308
...
show less
Fail2ban sshd: 2026-09-21T01:04:14.220162+00:00 siem-test sshd[3557366]: Failed password for invalid user db2inst1 from 118.31.4.34 port 50210 ssh2
2026-09-21T01:04:17.277935+00:00 siem-test sshd[3557378]: Invalid user cs2 from 118.31.4.34 port 52606 ...
show moreFail2ban sshd: 2026-09-21T01:04:14.220162+00:00 siem-test sshd[3557366]: Failed password for invalid user db2inst1 from 118.31.4.34 port 50210 ssh2
2026-09-21T01:04:17.277935+00:00 siem-test sshd[3557378]: Invalid user cs2 from 118.31.4.34 port 52606
2026-09-21T01:04:17.526488+00:00 siem-test sshd[3557378]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.31.4.34
2026-09-21T01:04:19.648612+00:00 siem-test sshd[3557378]: Failed password for invalid user cs2 from 118.3
show less
2026-09-21T00:44:56.724044+00:00 debian-4gb-hel1-2 eb89f534b924[1328]: Invalid user db2inst1 from 118.31.4.34 port 36876
2026-09-21T00:44:57.998748+00:00 debian-4gb-hel1-2 eb89f534b924[1328]: Invalid user cs2 from 118.31.4.34 port 37530
2026-09-21T ...
show more2026-09-21T00:44:56.724044+00:00 debian-4gb-hel1-2 eb89f534b924[1328]: Invalid user db2inst1 from 118.31.4.34 port 36876
2026-09-21T00:44:57.998748+00:00 debian-4gb-hel1-2 eb89f534b924[1328]: Invalid user cs2 from 118.31.4.34 port 37530
2026-09-21T00:45:00.092614+00:00 debian-4gb-hel1-2 eb89f534b924[1328]: Invalid user zjw from 118.31.4.34 port 38378
2026-09-21T00:45:17.810500+00:00 debian-4gb-hel1-2 eb89f534b924[1328]: Invalid user redhat from 118.31.4.34 port 47960
2026-09-21T00:45:19.056160+00:00 debian-4gb-hel1-2 eb89f534b924[1328]: Invalid user steam from 118.31.4.34 port 48406
...
show less
2026-09-21T00:11:35.380701+02:00 HETZNER-FI-1 sshd[827262]: Invalid user postgres from 118.31.4.34 port 36612
2026-09-21T00:11:36.806344+02:00 HETZNER-FI-1 sshd[827397]: Invalid user a from 118.31.4.34 port 37598
2026-09-21T00:11:38.264211+02:00 HETZ ...
show more2026-09-21T00:11:35.380701+02:00 HETZNER-FI-1 sshd[827262]: Invalid user postgres from 118.31.4.34 port 36612
2026-09-21T00:11:36.806344+02:00 HETZNER-FI-1 sshd[827397]: Invalid user a from 118.31.4.34 port 37598
2026-09-21T00:11:38.264211+02:00 HETZNER-FI-1 sshd[827507]: Invalid user kali from 118.31.4.34 port 38674
...
show less
2026-09-20T21:55:36.678276+00:00 server sshd[617410]: Invalid user postgres from 118.31.4.34 port 34984
2026-09-20T21:55:38.203237+00:00 server sshd[617413]: Invalid user a from 118.31.4.34 port 35716
2026-09-20T21:55:39.656607+00:00 server sshd[6174 ...
show more2026-09-20T21:55:36.678276+00:00 server sshd[617410]: Invalid user postgres from 118.31.4.34 port 34984
2026-09-20T21:55:38.203237+00:00 server sshd[617413]: Invalid user a from 118.31.4.34 port 35716
2026-09-20T21:55:39.656607+00:00 server sshd[617415]: Invalid user kali from 118.31.4.34 port 37002
show less
2026-09-20T23:38:59.119485+02:00 Debian-trixie-latest-amd64-base sshd-session[575841]: Invalid user postgres from 118.31.4.34 port 33038
2026-09-20T23:38:59.372802+02:00 Debian-trixie-latest-amd64-base sshd-session[575841]: pam_unix(sshd:auth): authe ...
show more2026-09-20T23:38:59.119485+02:00 Debian-trixie-latest-amd64-base sshd-session[575841]: Invalid user postgres from 118.31.4.34 port 33038
2026-09-20T23:38:59.372802+02:00 Debian-trixie-latest-amd64-base sshd-session[575841]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.31.4.34
2026-09-20T23:39:01.345894+02:00 Debian-trixie-latest-amd64-base sshd-session[575841]: Failed password for invalid user postgres from 118.31.4.34 port 33038 ssh2
2026-09-20T23:39:04.414895+02:00 Debian-trixie-latest-amd64-base sshd-session[576109]: Invalid user a from 118.31.4.34 port 36876
...
show less
SSH brute-force attack detected.
Detection: Fail2Ban (sshd).
Service: SSH.
Ban duration: unknown.
Time (UTC): 2026-09-20T20:16:51Z. Evidence: 2026-09-20T20:16:48.923275+00:00 SERVER sshd-session[3601719]: Invalid user a from REDACTED_IP port 50610 20 ...
show moreSSH brute-force attack detected.
Detection: Fail2Ban (sshd).
Service: SSH.
Ban duration: unknown.
Time (UTC): 2026-09-20T20:16:51Z. Evidence: 2026-09-20T20:16:48.923275+00:00 SERVER sshd-session[3601719]: Invalid user a from REDACTED_IP port 50610 2026-09-20T20:16:49.998204+00:00 SERVER sshd-session[3601751]: Invalid user kali from REDACTED
show less
pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.31.4.34 user=root Failed password for root from 118.31.4.34 | Invalid user postgres from 118.31.4.34
Brute-Force
SSH
Anonymous
[medistocloud-prod-01] ssh-invalid-user: logs=/var/log/auth.log; samples=2026-09-20T19:39:23.898200+00:00 medistocloud-prod-01 sshd[2760942]: Invalid user postgres from 118.31.4.34 port 36542 | 2026-09-20T19:39:25.202438+00:00 medistocloud-prod-01 ss ...
show more[medistocloud-prod-01] ssh-invalid-user: logs=/var/log/auth.log; samples=2026-09-20T19:39:23.898200+00:00 medistocloud-prod-01 sshd[2760942]: Invalid user postgres from 118.31.4.34 port 36542 | 2026-09-20T19:39:25.202438+00:00 medistocloud-prod-01 sshd[2760944]: Invalid user a from 118.31.4.34 port 37602 | 2026-09-20T19:39:26.388164+00:00 medistocloud-prod-01 sshd[2760981]: Invalid user kali from 118.31.4.34 port 38634
show less