167.71.69.91

Dec 27 22:23:00 pegasus sshd[1933518]: Failed password for root from 167.71.69.91 port 42028 ssh2 Dec 27 22:23:45 pegasus sshd[1934378]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.69.91 user=root D ... show more Dec 27 22:23:00 pegasus sshd[1933518]: Failed password for root from 167.71.69.91 port 42028 ssh2 Dec 27 22:23:45 pegasus sshd[1934378]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.69.91 user=root Dec 27 22:23:47 pegasus sshd[1934378]: Failed password for root from 167.71.69.91 port 43560 ssh2 Dec 27 22:24:30 pegasus sshd[1934559]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.69.91 user=root Dec 27 22:24:32 pegasus sshd[1934559]: Failed password for root from 167.71.69.91 port 50798 ssh2 show less

Dec 27 21:23:30 mail sshd[349612]: Failed password for root from 167.71.69.91 port 51032 ssh2 Dec 27 21:24:14 mail sshd[349618]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.69.91 user=root Dec 27 21 ... show more Dec 27 21:23:30 mail sshd[349612]: Failed password for root from 167.71.69.91 port 51032 ssh2 Dec 27 21:24:14 mail sshd[349618]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.69.91 user=root Dec 27 21:24:16 mail sshd[349618]: Failed password for root from 167.71.69.91 port 56970 ssh2 ... show less

2025-12-27T22:22:41.958058+01:00 mkc01-us-pop.as202427.net sshd[1532096]: User root from 167.71.69.91 not allowed because not listed in AllowUsers 2025-12-27T22:23:28.616036+01:00 mkc01-us-pop.as202427.net sshd[1532322]: User root from 167.71.69.91 n ... show more 2025-12-27T22:22:41.958058+01:00 mkc01-us-pop.as202427.net sshd[1532096]: User root from 167.71.69.91 not allowed because not listed in AllowUsers 2025-12-27T22:23:28.616036+01:00 mkc01-us-pop.as202427.net sshd[1532322]: User root from 167.71.69.91 not allowed because not listed in AllowUsers 2025-12-27T22:24:14.642523+01:00 mkc01-us-pop.as202427.net sshd[1532437]: User root from 167.71.69.91 not allowed because not listed in AllowUsers ... show less

Report 2000754 with IP 3048312 for SSH brute-force attack by source 3042979 via ssh-honeypot/0.2.0+http

2025-12-27T23:22:19.222075+02:00 gaia sshd[4030689]: Failed password for invalid user root from 167.71.69.91 port 33732 ssh2 2025-12-27T23:23:01.162200+02:00 gaia sshd[4030983]: Connection from 167.71.69.91 port 47168 on 23.88.28.109 port 22 rdomain ... show more 2025-12-27T23:22:19.222075+02:00 gaia sshd[4030689]: Failed password for invalid user root from 167.71.69.91 port 33732 ssh2 2025-12-27T23:23:01.162200+02:00 gaia sshd[4030983]: Connection from 167.71.69.91 port 47168 on 23.88.28.109 port 22 rdomain "" 2025-12-27T23:23:03.127883+02:00 gaia sshd[4030983]: User root from 167.71.69.91 not allowed because not listed in AllowUsers ... show less

Dec 27 16:22:42 us-mfl-01 sshd[243711]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.69.91 user=root Dec 27 16:22:44 us-mfl-01 sshd[243711]: Failed password for root from 167.71.69.91 port 33510 ssh2 ... show more Dec 27 16:22:42 us-mfl-01 sshd[243711]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.69.91 user=root Dec 27 16:22:44 us-mfl-01 sshd[243711]: Failed password for root from 167.71.69.91 port 33510 ssh2 ... show less

2025-12-27T23:21:37.363187+02:00 vatnik sshd[88322]: error: kex_exchange_identification: Connection closed by remote host 2025-12-27T23:21:37.364226+02:00 vatnik sshd[88322]: Connection closed by 167.71.69.91 port 46328 ...

SSH login on honeypot.

tcp/1224

tcp/1224 (2 or more attempts)

167.71.69.91 banned on rtr - Threshold reached: 5 failures

tcp/8082 (2 or more attempts)

unauthorized connection or malicious port scan attempted on tcp port 22 - dr

Port probe to tcp/85 (mit ml device) [srv135]

tcp/1244 (2 or more attempts)