Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-11-12T19:57:40.637688+02:00 lXXX.com sshd[2250014]: Failed password for root from 2.28.64.118 port 52060 ssh2
2026-11-12T19:57:47.010397+02:00 lXXX.com sshd[2250016]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh rus ...
show more2026-11-12T19:57:40.637688+02:00 lXXX.com sshd[2250014]: Failed password for root from 2.28.64.118 port 52060 ssh2
2026-11-12T19:57:47.010397+02:00 lXXX.com sshd[2250016]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.28.64.118 user=root
2026-11-12T19:57:49.005206+02:00 lXXX.com sshd[2250016]: Failed password for root from 2.28.64.118 port 52068 ssh2
...
show less
Nov 7 12:18:53 shu sshd[20570]: Failed password for root from 2.28.64.118 port 56560 ssh2
Nov 7 12:18:59 shu sshd[20648]: Failed password for root from 2.28.64.118 port 55160 ssh2
...
2026-11-05T19:44:47.241562+01:00 ezri sshd[536795]: error: kex_exchange_identification: Connection closed by remote host
2026-11-05T19:44:47.241601+01:00 ezri sshd[536795]: Connection closed by 2.28.64.118 port 35810
2026-11-05T19:44:52.763940+01:00 ...
show more2026-11-05T19:44:47.241562+01:00 ezri sshd[536795]: error: kex_exchange_identification: Connection closed by remote host
2026-11-05T19:44:47.241601+01:00 ezri sshd[536795]: Connection closed by 2.28.64.118 port 35810
2026-11-05T19:44:52.763940+01:00 ezri sshd[536798]: User root from 2.28.64.118 not allowed because not listed in AllowUsers
2026-11-05T19:44:53.223584+01:00 ezri sshd[536798]: Connection closed by invalid user root 2.28.64.118 port 35822 [preauth]
...
show less