Unwanted traffic detected by honeypot on February 22, 2026: port scans (2 port 22 scans), and brute ...
show moreUnwanted traffic detected by honeypot on February 22, 2026: port scans (2 port 22 scans), and brute force and hacking attacks (3 over ssh).
show less
router1:
2026-02-22T21:57:45Z Failed password for invalid user test
2026-02-22T21:58:45Z Invalid use ...
show morerouter1:
2026-02-22T21:57:45Z Failed password for invalid user test
2026-02-22T21:58:45Z Invalid user nagios
2026-02-22T21:58:45Z authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.204.30
2026-02-22T21:58:47Z Failed password for invalid user nagios
2026-02-22T21:59:46Z Invalid user guest
...
show less
2026-02-22T21:57:38.872842+00:00 web01 sshd[3902546]: Failed password for invalid user test from 161 ...
show more2026-02-22T21:57:38.872842+00:00 web01 sshd[3902546]: Failed password for invalid user test from 161.35.204.30 port 36602 ssh2
2026-02-22T21:58:38.408811+00:00 web01 sshd[3902562]: Invalid user nagios from 161.35.204.30 port 55472
2026-02-22T21:58:38.444401+00:00 web01 sshd[3902562]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.204.30
2026-02-22T21:58:39.850032+00:00 web01 sshd[3902562]: Failed password for invalid user nagios from 161.35.204.30 port 55472 ssh2
2026-02-22T21:59:40.528122+00:00 web01 sshd[3902594]: Invalid user guest from 161.35.204.30 port 36666
...
show less
2026-02-22T22:57:32.003738+01:00 proxy-nl1 sshd[2812196]: Failed password for invalid user test from ...
show more2026-02-22T22:57:32.003738+01:00 proxy-nl1 sshd[2812196]: Failed password for invalid user test from 161.35.204.30 port 58504 ssh2
2026-02-22T22:58:30.321435+01:00 proxy-nl1 sshd[2812235]: Invalid user nagios from 161.35.204.30 port 38512
2026-02-22T22:58:30.636866+01:00 proxy-nl1 sshd[2812235]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.204.30
2026-02-22T22:58:32.610325+01:00 proxy-nl1 sshd[2812235]: Failed password for invalid user nagios from 161.35.204.30 port 38512 ssh2
2026-02-22T22:59:32.244091+01:00 proxy-nl1 sshd[2812260]: Invalid user guest from 161.35.204.30 port 44790
show less
Feb 22 22:49:32 [host] sshd[13661]: Failed password for invalid user uftp from 161.35.204.30 port 51 ...
show moreFeb 22 22:49:32 [host] sshd[13661]: Failed password for invalid user uftp from 161.35.204.30 port 51
Feb 22 22:49:32 [host] sshd[13661]: Connection closed by invalid user uftp 161.35.204.30 port 51712
Feb 22 22:50:30 [host] sshd[13739]: Invalid user testuser from 161.35.204.30 port 37822
Feb 22 22:50:30 [host] sshd[13739]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid
Feb 22 22:50:32 [host] sshd[13739]: Failed password for invalid user testuser from 161.35.204.30 por
show less
2026-02-22T22:32:08.715817+01:00 sv5.ggsrv.de sshd-session[3676481]: Invalid user test1 from 161.35. ...
show more2026-02-22T22:32:08.715817+01:00 sv5.ggsrv.de sshd-session[3676481]: Invalid user test1 from 161.35.204.30 port 33994
2026-02-22T22:33:19.788543+01:00 sv5.ggsrv.de sshd-session[3676638]: Invalid user test2 from 161.35.204.30 port 57114
2026-02-22T22:34:30.198268+01:00 sv5.ggsrv.de sshd-session[3676823]: Invalid user test3 from 161.35.204.30 port 40478
2026-02-22T22:43:07.100983+01:00 sv5.ggsrv.de sshd-session[3678484]: Invalid user postgres from 161.35.204.30 port 35738
2026-02-22T22:44:05.644829+01:00 sv5.ggsrv.de sshd-session[3678627]: Invalid user oracle from 161.35.204.30 port 52834
...
show less
Feb 22 21:32:09 transform-schauspielschule sshd[875477]: Invalid user test1 from 161.35.204.30 port ...
show moreFeb 22 21:32:09 transform-schauspielschule sshd[875477]: Invalid user test1 from 161.35.204.30 port 55898
Feb 22 21:33:20 transform-schauspielschule sshd[875488]: Invalid user test2 from 161.35.204.30 port 45222
Feb 22 21:34:30 transform-schauspielschule sshd[875511]: Invalid user test3 from 161.35.204.30 port 33956
Feb 22 21:43:07 transform-schauspielschule sshd[875691]: Invalid user postgres from 161.35.204.30 port 35544
Feb 22 21:44:06 transform-schauspielschule sshd[875707]: Invalid user oracle from 161.35.204.30 port 42852
...
show less
Feb 23 00:32:09 HydrAttack-TW-HL sshd[2198980]: Invalid user test1 from 161.35.204.30 port 39396
Feb ...
show moreFeb 23 00:32:09 HydrAttack-TW-HL sshd[2198980]: Invalid user test1 from 161.35.204.30 port 39396
Feb 23 00:33:20 HydrAttack-TW-HL sshd[2199019]: Invalid user test2 from 161.35.204.30 port 59216
Feb 23 00:34:30 HydrAttack-TW-HL sshd[2199061]: Invalid user test3 from 161.35.204.30 port 42146
Feb 23 00:43:07 HydrAttack-TW-HL sshd[2199463]: Invalid user postgres from 161.35.204.30 port 60140
Feb 23 00:44:06 HydrAttack-TW-HL sshd[2199501]: Invalid user oracle from 161.35.204.30 port 58720
...
show less
Brute-Force
Anonymous
Feb 22 22:31:21 srv2 sshd[2535647]: Invalid user test1 from 161.35.204.30 port 38660
Feb 22 22:32:30 ...
show moreFeb 22 22:31:21 srv2 sshd[2535647]: Invalid user test1 from 161.35.204.30 port 38660
Feb 22 22:32:30 srv2 sshd[2535680]: Invalid user test2 from 161.35.204.30 port 40382
Feb 22 22:33:39 srv2 sshd[2535719]: Invalid user test3 from 161.35.204.30 port 45342
Feb 22 22:42:26 srv2 sshd[2536604]: Invalid user postgres from 161.35.204.30 port 60478
Feb 22 22:43:23 srv2 sshd[2536645]: Invalid user oracle from 161.35.204.30 port 44042
...
show less
Brute-Force
SSH
Showing 1 to
15
of 44 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ