Wazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | s ...
show moreWazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | src_ip: 2.26.122.111
sshd[16150]: Failed password for invalid user deploy from 2.26.122.111 port 63536 ssh2
Count: 52 events in 523s | 14/May/2026:06:13:19 +0000
show less
CrowdSec: crowdsecurity/ssh-bf
21 auth failures over 412s from 2.26.122.111
sshd[28468]: Failed pass ...
show moreCrowdSec: crowdsecurity/ssh-bf
21 auth failures over 412s from 2.26.122.111
sshd[28468]: Failed password for tomcat from 2.26.122.111 port 35745 ssh2
Decision: ban 8h
show less
AS201988 VPSPay bulletproof hosting. Active in SNI spoofing, hosting phishing kits, C2 infrastructur ...
show moreAS201988 VPSPay bulletproof hosting. Active in SNI spoofing, hosting phishing kits, C2 infrastructure, and proxy/VPN abuse services.
show less
Hacking
Exploited Host
Showing 1 to
6
of 6 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ