Honeypot hit: Brute-force attack detected on 22/SSH
• Credentials: root:root, root:1, root:12, root:123, root:1234
• Number of login attempts: 5
• 8 command(s) were executed during the session
• Client: SSH-2.0-Go
Reported by: https://github.com/sefi ...
show moreHoneypot hit: Brute-force attack detected on 22/SSH
• Credentials: root:root, root:1, root:12, root:123, root:1234
• Number of login attempts: 5
• 8 command(s) were executed during the session
• Client: SSH-2.0-Go
Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less
2026-03-11T20:36:00.692477+11:00 sleep-salami sshd[41545]: Connection closed by authenticating user root 152.42.129.47 port 41986 [preauth]
2026-03-11T20:37:14.951926+11:00 sleep-salami sshd[41551]: Connection closed by authenticating user root 152.4 ...
show more2026-03-11T20:36:00.692477+11:00 sleep-salami sshd[41545]: Connection closed by authenticating user root 152.42.129.47 port 41986 [preauth]
2026-03-11T20:37:14.951926+11:00 sleep-salami sshd[41551]: Connection closed by authenticating user root 152.42.129.47 port 34100 [preauth]
2026-03-11T20:38:35.269417+11:00 sleep-salami sshd[41560]: Connection closed by authenticating user root 152.42.129.47 port 47422 [preauth]
2026-03-11T20:39:49.113416+11:00 sleep-salami sshd[41562]: Connection closed by authenticating user root 152.42.129.47 port 47554 [preauth]
2026-03-11T20:41:12.115245+11:00 sleep-salami sshd[41575]: Connection closed by authenticating user root 152.42.129.47 port 35676 [preauth]
...
show less