Detected multiple authentication failures and invalid user attempts from IP address 78.73.54.117 on ...
show moreDetected multiple authentication failures and invalid user attempts from IP address 78.73.54.117 on [PT] SP01 Node
show less
2026-05-27T22:47:21.286654-04:00 castle3d sshd-session[2828308]: pam_unix(sshd:auth): authentication ...
show more2026-05-27T22:47:21.286654-04:00 castle3d sshd-session[2828308]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.73.54.117
2026-05-27T22:47:23.044134-04:00 castle3d sshd-session[2828308]: Failed password for invalid user admin from 78.73.54.117 port 36024 ssh2
2026-05-27T22:47:25.151479-04:00 castle3d sshd-session[2828308]: Connection closed by invalid user admin 78.73.54.117 port 36024 [preauth]
...
show less
(sshd) Failed SSH login from 78.73.54.117 (SE/Sweden/78-73-54-117-no2655.tbcn.telia.com): 5 in the l ...
show more(sshd) Failed SSH login from 78.73.54.117 (SE/Sweden/78-73-54-117-no2655.tbcn.telia.com): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: May 27 21:38:29 21257 sshd[30532]: Invalid user admin from 78.73.54.117 port 39946
May 27 21:38:31 21257 sshd[30532]: Failed password for invalid user admin from 78.73.54.117 port 39946 ssh2
May 27 21:39:19 21257 sshd[30632]: Invalid user orangepi from 78.73.54.117 port 49374
May 27 21:39:21 21257 sshd[30632]: Failed password for invalid user orangepi from 78.73.54.117 port 49374 ssh2
May 27 21:40:00 21257 sshd[30649]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.73.54.117 user=root
show less
2026-05-27T22:18:55.234958-04:00 debian sshd[2240400]: Invalid user orangepi from 78.73.54.117 port ...
show more2026-05-27T22:18:55.234958-04:00 debian sshd[2240400]: Invalid user orangepi from 78.73.54.117 port 42480
2026-05-27T22:18:55.238385-04:00 debian sshd[2240400]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.73.54.117
2026-05-27T22:18:57.483075-04:00 debian sshd[2240400]: Failed password for invalid user orangepi from 78.73.54.117 port 42480 ssh2
2026-05-27T22:19:36.572955-04:00 debian sshd[2240989]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.73.54.117 user=root
2026-05-27T22:19:39.111925-04:00 debian sshd[2240989]: Failed password for root from 78.73.54.117 port 53758 ssh2
...
show less
\[Thu May 28 03:02:41.060345 2026\] \[core:error\] \[pid 14587\] \[client 78.73.54.117:48718\] AH001 ...
show more\[Thu May 28 03:02:41.060345 2026\] \[core:error\] \[pid 14587\] \[client 78.73.54.117:48718\] AH00126: Invalid URI in request POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1
...
show less
FTP Brute-Force
Port Scan
Brute-Force
Web App Attack
SSH
May 27 18:42:38 b146-18 sshd[205145]: Invalid user orangepi from 78.73.54.117 port 54882
May 27 18:4 ...
show moreMay 27 18:42:38 b146-18 sshd[205145]: Invalid user orangepi from 78.73.54.117 port 54882
May 27 18:42:38 b146-18 sshd[205145]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.73.54.117
May 27 18:42:40 b146-18 sshd[205145]: Failed password for invalid user orangepi from 78.73.54.117 port 54882 ssh2
...
show less
[markis] Auto banned by Fail2Ban. Reason: SSH brute force / repeated failed login attempts. Evidence ...
show more[markis] Auto banned by Fail2Ban. Reason: SSH brute force / repeated failed login attempts. Evidence:
2026-05-28T00:33:58.143836+00:00 sshd-session[788819]: Invalid user orangepi from 78.73.54.117 port 48060
2026-05-28T00:33:58.146981+00:00 sshd-session[788819]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.73.54.117
2026-05-28T00:33:59.850158+00:00 sshd-session[788819]: Failed password for invalid user orangepi from 78.73.54.117 port 48060 ssh2
2026-05-28T00:34:49.483827+00:00 sshd-session[788836]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.73.54.117 user=root
2026-05-28T00:34:51.369547+00:00 sshd-session[788836]: Failed password for root from 78.73.54.117 port 56012 ssh2
show less
(sshd) Failed SSH login from 78.73.54.117 (SE/Sweden/78-73-54-117-no2655.tbcn.telia.com): 5 in the l ...
show more(sshd) Failed SSH login from 78.73.54.117 (SE/Sweden/78-73-54-117-no2655.tbcn.telia.com): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: May 27 17:54:36 15299 sshd[26537]: Invalid user admin from 78.73.54.117 port 55370
May 27 17:54:38 15299 sshd[26537]: Failed password for invalid user admin from 78.73.54.117 port 55370 ssh2
May 27 17:55:30 15299 sshd[26784]: Invalid user orangepi from 78.73.54.117 port 35638
May 27 17:55:32 15299 sshd[26784]: Failed password for invalid user orangepi from 78.73.54.117 port 35638 ssh2
May 27 17:56:26 15299 sshd[27057]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.73.54.117 user=root
show less
May 27 21:26:27 pegasus sshd[3040051]: Invalid user admin from 78.73.54.117 port 40156
May 27 21:26: ...
show moreMay 27 21:26:27 pegasus sshd[3040051]: Invalid user admin from 78.73.54.117 port 40156
May 27 21:26:27 pegasus sshd[3040051]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.73.54.117
May 27 21:26:29 pegasus sshd[3040051]: Failed password for invalid user admin from 78.73.54.117 port 40156 ssh2
May 27 21:27:22 pegasus sshd[3040239]: Invalid user orangepi from 78.73.54.117 port 48618
show less