Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
SSH honeypot login attempts; session never became a real shell.
TCP/2222 SSH honeypot; handshake completed, no real shell.
jail=cowrie proto=tcp port=2222 failures>=3 users=root method=password-auth
auth_result=none_succeeded this is not the product ...
show moreSSH honeypot login attempts; session never became a real shell.
TCP/2222 SSH honeypot; handshake completed, no real shell.
jail=cowrie proto=tcp port=2222 failures>=3 users=root method=password-auth
auth_result=none_succeeded this is not the production sshd
when=2026-11-13T20:54:01Z sensor=fail2ban role=ssh-honeypot
src=164.92.149.50
show less
Nov 4 17:15:21 con01 sshd[2233292]: Failed password for root from 164.92.149.50 port 45786 ssh2
Nov 4 17:15:48 con01 sshd[2234246]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.92.149.50 user=root
Nov ...
show moreNov 4 17:15:21 con01 sshd[2233292]: Failed password for root from 164.92.149.50 port 45786 ssh2
Nov 4 17:15:48 con01 sshd[2234246]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.92.149.50 user=root
Nov 4 17:15:50 con01 sshd[2234246]: Failed password for root from 164.92.149.50 port 46868 ssh2
Nov 4 17:16:13 con01 sshd[2235332]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.92.149.50 user=root
Nov 4 17:16:15 con01 sshd[2235332]: Failed password for root from 164.92.149.50 port 59708 ssh2
...
show less