SSH login attempts (SSH bruteforce attack). For more information, or to report interesting/incorrect ...
show moreSSH login attempts (SSH bruteforce attack). For more information, or to report interesting/incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
2023-03-03 08:23:20 - Unauthorized SFTP/SSH access attempts from IP address 44.242.158.78 on port 22 ...
show more2023-03-03 08:23:20 - Unauthorized SFTP/SSH access attempts from IP address 44.242.158.78 on port 22 (3 daily hits).
show less
Mar 3 12:01:09 jira sshd[1247894]: Unable to negotiate with 44.242.158.78 port 35166: no matching h ...
show moreMar 3 12:01:09 jira sshd[1247894]: Unable to negotiate with 44.242.158.78 port 35166: no matching host key type found. Their offer: ecdsa-sha2-nistp521 [preauth]
Mar 3 12:01:24 jira sshd[1247902]: Connection from 44.242.158.78 port 53168 on 138.201.123.138 port 22 rdomain ""
Mar 3 12:01:30 jira sshd[1247902]: Unable to negotiate with 44.242.158.78 port 53168: no matching host key type found. Their offer: ssh-rsa [preauth]
Mar 3 12:01:51 jira sshd[1247904]: Connection from 44.242.158.78 port 46152 on 138.201.123.138 port 22 rdomain ""
Mar 3 12:01:52 jira sshd[1247904]: Unable to negotiate with 44.242.158.78 port 46152: no matching host key type found. Their offer: ssh-dss [preauth]
...
show less
Mar 3 07:44:09 cti1.cti.srvfarm.net sshd[4176868]: Connection closed by 44.242.158.78 port 56086 [p ...
show moreMar 3 07:44:09 cti1.cti.srvfarm.net sshd[4176868]: Connection closed by 44.242.158.78 port 56086 [preauth]
Mar 3 07:44:10 cti1.cti.srvfarm.net sshd[4176871]: Unable to negotiate with 44.242.158.78 port 57022: no matching host key type found. Their offer: ecdsa-sha2-nistp384 [preauth]
Mar 3 07:44:12 cti1.cti.srvfarm.net sshd[4176873]: Unable to negotiate with 44.242.158.78 port 57998: no matching host key type found. Their offer: ecdsa-sha2-nistp521 [preauth]
Mar 3 07:44:46 cti1.cti.srvfarm.net sshd[4176881]: Connection closed by 44.242.158.78 port 38984 [preauth]
Mar 3 07:44:48 cti1.cti.srvfarm.net sshd[4176888]: Unable to negotiate with 44.242.158.78 port 40048: no matching host key type found. Their offer: ssh-dss [preauth]
show less
Mar 3 07:44:09 cti1.cti.srvfarm.net sshd[4176868]: Connection closed by 44.242.158.78 port 56086 [p ...
show moreMar 3 07:44:09 cti1.cti.srvfarm.net sshd[4176868]: Connection closed by 44.242.158.78 port 56086 [preauth]
Mar 3 07:44:10 cti1.cti.srvfarm.net sshd[4176871]: Unable to negotiate with 44.242.158.78 port 57022: no matching host key type found. Their offer: ecdsa-sha2-nistp384 [preauth]
Mar 3 07:44:12 cti1.cti.srvfarm.net sshd[4176873]: Unable to negotiate with 44.242.158.78 port 57998: no matching host key type found. Their offer: ecdsa-sha2-nistp521 [preauth]
Mar 3 07:44:46 cti1.cti.srvfarm.net sshd[4176881]: Connection closed by 44.242.158.78 port 38984 [preauth]
Mar 3 07:44:48 cti1.cti.srvfarm.net sshd[4176888]: Unable to negotiate with 44.242.158.78 port 40048: no matching host key type found. Their offer: ssh-dss [preauth]
show less
2023-03-03T07:35:58.455818news2.dwmp.it sshd[16450]: refused connect from ec2-44-242-158-78.us-west- ...
show more2023-03-03T07:35:58.455818news2.dwmp.it sshd[16450]: refused connect from ec2-44-242-158-78.us-west-2.compute.amazonaws.com (44.242.158.78)
2023-03-03T07:36:27.434904news2.dwmp.it sshd[16451]: refused connect from ec2-44-242-158-78.us-west-2.compute.amazonaws.com (44.242.158.78)
2023-03-03T07:36:33.780297news2.dwmp.it sshd[16452]: refused connect from ec2-44-242-158-78.us-west-2.compute.amazonaws.com (44.242.158.78)
...
show less
Mar 3 07:01:19 lnxweb62 sshd[19806]: Connection closed by 44.242.158.78 port 54384 [preauth]
Mar 3 ...
show moreMar 3 07:01:19 lnxweb62 sshd[19806]: Connection closed by 44.242.158.78 port 54384 [preauth]
Mar 3 07:01:20 lnxweb62 sshd[19834]: Unable to negotiate with 44.242.158.78 port 55312: no matching host key type found. Their offer: ecdsa-sha2-nistp384 [preauth]
Mar 3 07:01:22 lnxweb62 sshd[19844]: Unable to negotiate with 44.242.158.78 port 55816: no matching host key type found. Their offer: ecdsa-sha2-nistp521 [preauth]
Mar 3 07:01:27 lnxweb62 sshd[19866]: Connection closed by 44.242.158.78 port 53614 [preauth]
Mar 3 07:01:32 lnxweb62 sshd[19892]: Unable to negotiate with 44.242.158.78 port 55640: no matching host key type found. Their offer: ssh-dss [preauth]
...
show less