151.35.153.52 (IT/Italy/35.151.in-addr.arpa), 5 distributed sshd attacks on account [root] in the la ...
show more151.35.153.52 (IT/Italy/35.151.in-addr.arpa), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 26 20:04:20 15015 sshd[23775]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.35.153.52 user=root
May 26 20:14:40 15015 sshd[24916]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.37.156.238 user=root
May 26 20:14:41 15015 sshd[24916]: Failed password for root from 102.37.156.238 port 57836 ssh2
May 26 20:16:31 15015 sshd[25160]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.37.156.238 user=root
May 26 20:04:23 15015 sshd[23775]: Failed password for root from 151.35.153.52 port 49662 ssh2
IP Addresses Blocked:
show less
[markis] Auto banned by Fail2Ban. Reason: SSH brute force / repeated failed login attempts. Evidence ...
show more[markis] Auto banned by Fail2Ban. Reason: SSH brute force / repeated failed login attempts. Evidence:
2026-05-26T23:51:45.781117+00:00 sshd-session[750210]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.35.153.52 user=root
2026-05-26T23:51:48.057781+00:00 sshd-session[750210]: Failed password for root from 151.35.153.52 port 49521 ssh2
2026-05-26T23:56:30.710082+00:00 sshd-session[750566]: Invalid user mikey from 151.35.153.52 port 49494
2026-05-26T23:56:30.713272+00:00 sshd-session[750566]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.35.153.52
2026-05-26T23:56:32.320895+00:00 sshd-session[750566]: Failed password for invalid user mikey from 151.35.153.52 port 49494 ssh2
show less