Fail2Ban - [SSH]Brute-force login attempts on sshd ... [wa01]
Brute-Force
SSH
Anonymous
2025-12-07T03:52:33.067942+00:00 ubuntu-4gb-hel1-2 sshd[3191397]: Invalid user admin from 75.102.42. ...
show more2025-12-07T03:52:33.067942+00:00 ubuntu-4gb-hel1-2 sshd[3191397]: Invalid user admin from 75.102.42.151 port 44442
2025-12-07T03:52:33.831533+00:00 ubuntu-4gb-hel1-2 sshd[3191421]: Invalid user ftpuser from 75.102.42.151 port 44458
2025-12-07T03:52:34.579048+00:00 ubuntu-4gb-hel1-2 sshd[3191423]: Invalid user testuser from 75.102.42.151 port 36168
2025-12-07T03:52:36.100866+00:00 ubuntu-4gb-hel1-2 sshd[3191427]: Invalid user hadoop from 75.102.42.151 port 36196
2025-12-07T03:52:39.152563+00:00 ubuntu-4gb-hel1-2 sshd[3191473]: Invalid user centos from 75.102.42.151 port 36234
...
show less
2025-12-07T03:50:49.203144+00:00 0 sshd-session[178010]: Invalid user admin from 75.102.42.151 port ...
show more2025-12-07T03:50:49.203144+00:00 0 sshd-session[178010]: Invalid user admin from 75.102.42.151 port 49096
2025-12-07T03:50:49.962880+00:00 0 sshd-session[178012]: Invalid user ftpuser from 75.102.42.151 port 49108
2025-12-07T03:50:50.700846+00:00 0 sshd-session[178014]: Invalid user testuser from 75.102.42.151 port 49122
2025-12-07T03:50:52.221146+00:00 0 sshd-session[178018]: Invalid user hadoop from 75.102.42.151 port 49144
2025-12-07T03:50:55.227898+00:00 0 sshd-session[178026]: Invalid user centos from 75.102.42.151 port 60244
...
show less
2025-12-07T03:33:08.553205+00:00 debian-4gb-hel1-2 701e1c2aebc4[921]: Invalid user admin from 75.102 ...
show more2025-12-07T03:33:08.553205+00:00 debian-4gb-hel1-2 701e1c2aebc4[921]: Invalid user admin from 75.102.42.151 port 35146
2025-12-07T03:33:09.321554+00:00 debian-4gb-hel1-2 701e1c2aebc4[921]: Invalid user ftpuser from 75.102.42.151 port 35160
2025-12-07T03:33:10.063492+00:00 debian-4gb-hel1-2 701e1c2aebc4[921]: Invalid user testuser from 75.102.42.151 port 35162
2025-12-07T03:33:11.583841+00:00 debian-4gb-hel1-2 701e1c2aebc4[921]: Invalid user hadoop from 75.102.42.151 port 35178
2025-12-07T03:33:14.616933+00:00 debian-4gb-hel1-2 701e1c2aebc4[921]: Invalid user centos from 75.102.42.151 port 47360
...
show less
2025-12-07T04:55:34.778482+02:00 FDC sshd[2668281]: Invalid user admin from 75.102.42.151 port 39482 ...
show more2025-12-07T04:55:34.778482+02:00 FDC sshd[2668281]: Invalid user admin from 75.102.42.151 port 39482
2025-12-07T04:55:34.903812+02:00 FDC sshd[2668281]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=75.102.42.151
2025-12-07T04:55:37.017228+02:00 FDC sshd[2668281]: Failed password for invalid user admin from 75.102.42.151 port 39482 ssh2
...
show less
2025-12-07T03:52:27.807878+01:00 Ubuntu-2404-noble-amd64-base sshd[332386]: pam_unix(sshd:auth): aut ...
show more2025-12-07T03:52:27.807878+01:00 Ubuntu-2404-noble-amd64-base sshd[332386]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=75.102.42.151
2025-12-07T03:52:29.249311+01:00 Ubuntu-2404-noble-amd64-base sshd[332386]: Failed password for invalid user admin from 75.102.42.151 port 48596 ssh2
2025-12-07T03:52:30.143977+01:00 Ubuntu-2404-noble-amd64-base sshd[332404]: Invalid user ftpuser from 75.102.42.151 port 48604
2025-12-07T03:52:30.266706+01:00 Ubuntu-2404-noble-amd64-base sshd[332404]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=75.102.42.151
2025-12-07T03:52:32.785909+01:00 Ubuntu-2404-noble-amd64-base sshd[332404]: Failed password for invalid user ftpuser from 75.102.42.151 port 48604 ssh2
...
show less
2025-12-07T03:35:35.606283+01:00 ovh-proxmox sshd[2226924]: Invalid user admin from 75.102.42.151 po ...
show more2025-12-07T03:35:35.606283+01:00 ovh-proxmox sshd[2226924]: Invalid user admin from 75.102.42.151 port 40310
2025-12-07T03:35:35.715821+01:00 ovh-proxmox sshd[2226924]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=75.102.42.151
2025-12-07T03:35:37.895122+01:00 ovh-proxmox sshd[2226924]: Failed password for invalid user admin from 75.102.42.151 port 40310 ssh2
...
show less
Dec 7 02:18:57 f2b auth.info sshd[876151]: Failed password for root from 75.102.42.151 port 35722 s ...
show moreDec 7 02:18:57 f2b auth.info sshd[876151]: Failed password for root from 75.102.42.151 port 35722 ssh2
Dec 7 02:18:58 f2b auth.info sshd[876153]: Invalid user admin from 75.102.42.151 port 35738
Dec 7 02:18:58 f2b auth.info sshd[876153]: Failed password for invalid user admin from 75.102.42.151 port 35738 ssh2
...
show less
2025-12-07T02:12:59.218542+00:00 fr sshd[313382]: Invalid user admin from 75.102.42.151 port 44720
2 ...
show more2025-12-07T02:12:59.218542+00:00 fr sshd[313382]: Invalid user admin from 75.102.42.151 port 44720
2025-12-07T02:13:00.006714+00:00 fr sshd[313384]: Invalid user ftpuser from 75.102.42.151 port 44732
2025-12-07T02:13:00.848852+00:00 fr sshd[313386]: Invalid user testuser from 75.102.42.151 port 44748
...
show less
[Fail2Ban] Banned 75.102.42.151 for 600 seconds.
Relevant log lines:
Dec 7 00:46:01 iZt4nbucvhvuif5 ...
show more[Fail2Ban] Banned 75.102.42.151 for 600 seconds.
Relevant log lines:
Dec 7 00:46:01 iZt4nbucvhvuif53kcyu0iZ sshd[1692527]: Invalid user ubuntu from 75.102.42.151 port 57336
Dec 7 00:46:01 iZt4nbucvhvuif53kcyu0iZ sshd[1692527]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=75.102.42.151
Dec 7 00:46:03 iZt4nbucvhvuif53kcyu0iZ sshd[1692527]: Failed password for invalid user ubuntu from 75.102.42.151 port 57336 ssh2
show less
2025-12-06T17:00:10.514105+01:00 mail sshd-session[433433]: Failed password for root from 75.102.42. ...
show more2025-12-06T17:00:10.514105+01:00 mail sshd-session[433433]: Failed password for root from 75.102.42.151 port 60114 ssh2
2025-12-06T17:00:13.385427+01:00 mail sshd-session[433435]: Invalid user admin from 75.102.42.151 port 60118
2025-12-06T17:00:15.543480+01:00 mail sshd-session[433435]: Failed password for invalid user admin from 75.102.42.151 port 60118 ssh2
2025-12-06T17:00:19.742523+01:00 mail sshd-session[433439]: Failed password for root from 75.102.42.151 port 46910 ssh2
2025-12-06T17:00:23.364574+01:00 mail sshd-session[433441]: Failed password for root from 75.102.42.151 port 46926 ssh2
...
show less