Blocked by CrowdSec. Scenario: crowdsecurity/ssh-bf
Brute-Force
SSH
Anonymous
2026-08-25T19:23:20.240901+00:00 HongKong2 sshd-session[1382137]: Connection closed by 5.101.122.182 port 50790 [preauth]
2026-08-25T19:23:21.826749+00:00 HongKong2 sshd-session[1382355]: Unable to negotiate with 5.101.122.182 port 50813: no matching ...
show more2026-08-25T19:23:20.240901+00:00 HongKong2 sshd-session[1382137]: Connection closed by 5.101.122.182 port 50790 [preauth]
2026-08-25T19:23:21.826749+00:00 HongKong2 sshd-session[1382355]: Unable to negotiate with 5.101.122.182 port 50813: no matching cipher found. Their offer: aes128-ctr [preauth]
...
show less
2026-02-08T18:05:47.255695+07:00 NetBird sshd[1843020]: Invalid user admin from 5.101.122.182 port 60556
2026-02-08T18:05:50.175252+07:00 NetBird sshd[1843026]: Invalid user admin from 5.101.122.182 port 60579
2026-02-08T18:05:51.627688+07:00 NetBird ...
show more2026-02-08T18:05:47.255695+07:00 NetBird sshd[1843020]: Invalid user admin from 5.101.122.182 port 60556
2026-02-08T18:05:50.175252+07:00 NetBird sshd[1843026]: Invalid user admin from 5.101.122.182 port 60579
2026-02-08T18:05:51.627688+07:00 NetBird sshd[1843029]: Invalid user user from 5.101.122.182 port 60593
2026-02-08T18:05:53.090411+07:00 NetBird sshd[1843031]: Invalid user user2 from 5.101.122.182 port 60607
2026-02-08T18:05:56.294800+07:00 NetBird sshd[1843035]: Invalid user admin from 5.101.122.182 port 60642
...
show less
[Honeypot] Malicious activity detected by honeypot on port 3389. IP attempted unauthorized access to decoy service. Original message: RDP brute force attack from honeypot - User: connection_attempt. Attempted credentials captured.