SSH abuse or brute-force attack detected by Fail2Ban in ssh jail
Brute-Force
SSH
Anonymous
2026-02-05T22:03:35.713031+01:00 hvs sshd-session[50340]: Connection closed by authenticating user root 178.62.209.210 port 47856 [preauth]
2026-02-05T22:04:16.535230+01:00 hvs sshd-session[50349]: Connection closed by authenticating user root 178.62 ...
show more2026-02-05T22:03:35.713031+01:00 hvs sshd-session[50340]: Connection closed by authenticating user root 178.62.209.210 port 47856 [preauth]
2026-02-05T22:04:16.535230+01:00 hvs sshd-session[50349]: Connection closed by authenticating user root 178.62.209.210 port 45870 [preauth]
2026-02-05T22:05:36.712473+01:00 hvs sshd-session[50371]: Connection closed by authenticating user root 178.62.209.210 port 48230 [preauth]
2026-02-05T22:06:14.729311+01:00 hvs sshd-session[50380]: Connection closed by authenticating user root 178.62.209.210 port 45584 [preauth]
2026-02-05T22:06:51.503987+01:00 hvs sshd-session[50387]: Connection closed by authenticating user root 178.62.209.210 port 47430 [preauth]
...
show less
Feb 6 06:05:24 starlight-server sshd[35627]: Failed password for root from 178.62.209.210 port 35694 ssh2
Feb 6 06:06:00 starlight-server sshd[36016]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.20 ...
show moreFeb 6 06:05:24 starlight-server sshd[35627]: Failed password for root from 178.62.209.210 port 35694 ssh2
Feb 6 06:06:00 starlight-server sshd[36016]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.209.210 user=root
Feb 6 06:06:02 starlight-server sshd[36016]: Failed password for root from 178.62.209.210 port 50026 ssh2
Feb 6 06:06:38 starlight-server sshd[36428]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.209.210 user=root
Feb 6 06:06:41 starlight-server sshd[36428]: Failed password for root from 178.62.209.210 port 38684 ssh2
...
show less
2026-02-06T05:04:04.203800+08:00 dh sshd[1253032]: Connection closed by authenticating user root 178.62.209.210 port 44772 [preauth]
2026-02-06T05:04:43.578161+08:00 dh sshd[1253184]: Connection closed by authenticating user root 178.62.209.210 port ...
show more2026-02-06T05:04:04.203800+08:00 dh sshd[1253032]: Connection closed by authenticating user root 178.62.209.210 port 44772 [preauth]
2026-02-06T05:04:43.578161+08:00 dh sshd[1253184]: Connection closed by authenticating user root 178.62.209.210 port 39612 [preauth]
2026-02-06T05:05:24.314873+08:00 dh sshd[1253245]: Connection closed by authenticating user root 178.62.209.210 port 57820 [preauth]
2026-02-06T05:06:02.284894+08:00 dh sshd[1253297]: Connection closed by authenticating user root 178.62.209.210 port 56984 [preauth]
2026-02-06T05:06:39.703633+08:00 dh sshd[1253331]: Connection closed by authenticating user root 178.62.209.210 port 36576 [preauth]
show less
2026-02-05T22:02:19.512500+01:00 cu94u8qp sshd-session[434384]: Connection closed by authenticating user root 178.62.209.210 port 40116 [preauth]
2026-02-05T22:02:59.617541+01:00 cu94u8qp sshd-session[434393]: Connection closed by authenticating user ...
show more2026-02-05T22:02:19.512500+01:00 cu94u8qp sshd-session[434384]: Connection closed by authenticating user root 178.62.209.210 port 40116 [preauth]
2026-02-05T22:02:59.617541+01:00 cu94u8qp sshd-session[434393]: Connection closed by authenticating user root 178.62.209.210 port 43034 [preauth]
2026-02-05T22:03:39.935259+01:00 cu94u8qp sshd-session[434402]: Connection closed by authenticating user root 178.62.209.210 port 40346 [preauth]
2026-02-05T22:04:18.212115+01:00 cu94u8qp sshd-session[434417]: Connection closed by authenticating user root 178.62.209.210 port 33828 [preauth]
2026-02-05T22:04:56.034341+01:00 cu94u8qp sshd-session[434423]: Connection closed by authenticating user root 178.62.209.210 port 50146 [preauth]
...
show less
Brute-Force
SSH
Anonymous
$f2bV_matches
DDoS Attack
FTP Brute-Force
Port Scan
Hacking
SQL Injection
Spoofing
Brute-Force
Bad Web Bot
SSH
IoT Targeted
2026-02-05T22:03:48.491033+01:00 devicedock sshd[51513]: User root from 178.62.209.210 not allowed because not listed in AllowUsers
2026-02-05T22:04:29.504325+01:00 devicedock sshd[51527]: User root from 178.62.209.210 not allowed because not listed ...
show more2026-02-05T22:03:48.491033+01:00 devicedock sshd[51513]: User root from 178.62.209.210 not allowed because not listed in AllowUsers
2026-02-05T22:04:29.504325+01:00 devicedock sshd[51527]: User root from 178.62.209.210 not allowed because not listed in AllowUsers
2026-02-05T22:05:09.630941+01:00 devicedock sshd[51544]: User root from 178.62.209.210 not allowed because not listed in AllowUsers
...
show less
Brute-Force
SSH
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown