Nov 1 11:06:26 f2b auth.info sshd[8377]: Invalid user ftpuser from 187.8.132.130 port 45922
Nov 1 11:06:26 f2b auth.info sshd[8377]: Failed password for invalid user ftpuser from 187.8.132.130 port 45922 ssh2
Nov 1 11:06:26 f2b auth.info sshd[8377 ...
show moreNov 1 11:06:26 f2b auth.info sshd[8377]: Invalid user ftpuser from 187.8.132.130 port 45922
Nov 1 11:06:26 f2b auth.info sshd[8377]: Failed password for invalid user ftpuser from 187.8.132.130 port 45922 ssh2
Nov 1 11:06:26 f2b auth.info sshd[8377]: Disconnected from invalid user ftpuser 187.8.132.130 port 45922 [preauth]
...
show less
2026-11-01T07:00:24.847744-04:00 xrb.astro.sunysb.edu sshd-session[969367]: Failed password for invalid user tiptop from 187.8.132.130 port 55812 ssh2
2026-11-01T07:00:22.824742-04:00 xrb.astro.sunysb.edu sshd-session[969367]: pam_unix(sshd:auth): au ...
show more2026-11-01T07:00:24.847744-04:00 xrb.astro.sunysb.edu sshd-session[969367]: Failed password for invalid user tiptop from 187.8.132.130 port 55812 ssh2
2026-11-01T07:00:22.824742-04:00 xrb.astro.sunysb.edu sshd-session[969367]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.8.132.130
2026-11-01T07:00:24.847744-04:00 xrb.astro.sunysb.edu sshd-session[969367]: Failed password for invalid user tiptop from 187.8.132.130 port 55812 ssh2
2026-11-01T07:03:38.529725-04:00 xrb.astro.sunysb.edu sshd-session[969431]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.8.132.130 user=root
2026-11-01T07:03:40.460588-04:00 xrb.astro.sunysb.edu sshd-session[969431]: Failed password for root from 187.8.132.130 port 54714 ssh2
...
show less
Fail2ban ban on jail 'sshd'. Repeated failed authentication attempts against a monitored host. Detected and correlated by Wazuh SIEM (rule 100110, level 10). Reported automatically.
2026-11-01T03:34:42.518353-06:00 sterling sshd[46673]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.8.132.130 user=dataiku
2026-11-01T03:34:44.407605-06:00 sterling sshd[46673]: Failed password for invali ...
show more2026-11-01T03:34:42.518353-06:00 sterling sshd[46673]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.8.132.130 user=dataiku
2026-11-01T03:34:44.407605-06:00 sterling sshd[46673]: Failed password for invalid user dataiku from 187.8.132.130 port 37904 ssh2
2026-11-01T03:40:59.395804-06:00 sterling sshd[46824]: User root from 187.8.132.130 not allowed because none of user's groups are listed in AllowGroups
...
show less
Multiple SSH login attempts from 187.8.132.130 targeting user(s): dev,kingbase | Server Managed by Focusnic
Brute-Force
SSH
Anonymous
2026-11-01T15:48:15.900225+08:00 kltw-debian sshd[31027]: Disconnected from authenticating user root 187.8.132.130 port 37212 [preauth]
2026-11-01T15:54:08.767504+08:00 kltw-debian sshd[31365]: Disconnected from authenticating user root 187.8.132.130 ...
show more2026-11-01T15:48:15.900225+08:00 kltw-debian sshd[31027]: Disconnected from authenticating user root 187.8.132.130 port 37212 [preauth]
2026-11-01T15:54:08.767504+08:00 kltw-debian sshd[31365]: Disconnected from authenticating user root 187.8.132.130 port 52002 [preauth]
2026-11-01T15:57:41.251457+08:00 kltw-debian sshd[31551]: Disconnected from authenticating user root 187.8.132.130 port 51066 [preauth]
2026-11-01T16:01:08.150045+08:00 kltw-debian sshd[31566]: Invalid user payara from 187.8.132.130 port 50132
2026-11-01T16:01:09.147024+08:00 kltw-debian sshd[31566]: Disconnected from invalid user payara 187.8.132.130 port 50132 [preauth]
...
show less