Honeypot hit: Brute-force attack detected on 22/SSH
โข Credentials: root:123456, root:password, root: ...
show moreHoneypot hit: Brute-force attack detected on 22/SSH
โข Credentials: root:123456, root:password, root:admin
โข Number of login attempts: 3
โข 12 command(s) were executed during the session
โข Client: SSH-2.0-Go
show less
2026-02-08T11:57:35.415853+02:00 mail sshd[216849]: Failed password for root from 167.71.5.21 port 5 ...
show more2026-02-08T11:57:35.415853+02:00 mail sshd[216849]: Failed password for root from 167.71.5.21 port 50312 ssh2
2026-02-08T11:58:16.740647+02:00 mail sshd[216998]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.5.21 user=root
2026-02-08T11:58:19.173911+02:00 mail sshd[216998]: Failed password for root from 167.71.5.21 port 53468 ssh2
2026-02-08T11:59:00.487905+02:00 mail sshd[217006]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.5.21 user=root
2026-02-08T11:59:02.292755+02:00 mail sshd[217006]: Failed password for root from 167.71.5.21 port 44694 ssh2
...
show less
2026-02-08T10:56:07.184645+01:00 router01.civitelli.de sshd-session[243822]: Connection closed by au ...
show more2026-02-08T10:56:07.184645+01:00 router01.civitelli.de sshd-session[243822]: Connection closed by authenticating user root 167.71.5.21 port 38266 [preauth]
2026-02-08T10:56:49.407426+01:00 router01.civitelli.de sshd-session[243847]: Connection closed by authenticating user root 167.71.5.21 port 57592 [preauth]
2026-02-08T10:57:33.562289+01:00 router01.civitelli.de sshd-session[243873]: Connection closed by authenticating user root 167.71.5.21 port 56508 [preauth]
2026-02-08T10:58:17.142852+01:00 router01.civitelli.de sshd-session[243896]: Connection closed by authenticating user root 167.71.5.21 port 35996 [preauth]
2026-02-08T10:59:00.679034+01:00 router01.civitelli.de sshd-session[243935]: Connection closed by authenticating user root 167.71.5.21 port 42708 [preauth]
show less