Jun 14 09:27:24 antti-vps2 sshd[1457786]: Connection from 80.49.39.49 port 47726 on 10.0.0.124 port ...
show moreJun 14 09:27:24 antti-vps2 sshd[1457786]: Connection from 80.49.39.49 port 47726 on 10.0.0.124 port 22 rdomain ""
Jun 14 09:27:25 antti-vps2 sshd[1457786]: User root from 80.49.39.49 not allowed because none of user's groups are listed in AllowGroups
Jun 14 09:27:25 antti-vps2 sshd[1457786]: error: maximum authentication attempts exceeded for invalid user root from 80.49.39.49 port 47726 ssh2 [preauth]
Jun 14 09:27:25 antti-vps2 sshd[1457789]: Connection from 80.49.39.49 port 47924 on 10.0.0.124 port 22 rdomain ""
Jun 14 09:27:26 antti-vps2 sshd[1457789]: User root from 80.49.39.49 not allowed because none of user's groups are listed in AllowGroups
...
show less
SSH credential brute-force observed by honeypot.
Source IP: 80.49.39.49
Targeted device: Debian serv ...
show moreSSH credential brute-force observed by honeypot.
Source IP: 80.49.39.49
Targeted device: Debian server
First seen: 14 Jun 2026 08:36:18 UTC
Last seen: 14 Jun 2026 08:36:18 UTC
Attempts: 1
Client: SSH-2.0-libssh2_1.11.1
Sample credentials: root:root
show less
Jun 14 10:27:41 QBDevServerMS2025 sshd[4024000]: pam_unix(sshd:auth): authentication failure; lognam ...
show moreJun 14 10:27:41 QBDevServerMS2025 sshd[4024000]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.49.39.49 user=root
Jun 14 10:27:43 QBDevServerMS2025 sshd[4024000]: Failed password for root from 80.49.39.49 port 54282 ssh2
Jun 14 10:27:54 QBDevServerMS2025 sshd[4024000]: Failed password for root from 80.49.39.49 port 54282 ssh2
Jun 14 10:27:57 QBDevServerMS2025 sshd[4024000]: Failed password for root from 80.49.39.49 port 54282 ssh2
Jun 14 10:27:58 QBDevServerMS2025 sshd[4024000]: error: maximum authentication attempts exceeded for root from 80.49.39.49 port 54282 ssh2 [preauth]
Jun 14 10:27:59 QBDevServerMS2025 sshd[4024039]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.49.39.49 user=root
Jun 14 10:28:00 QBDevServerMS2025 sshd[4024039]: Failed password for root from 80.49.39.49 port 58028 ssh2
...
show less
Report 2462282 with IP 3509849 for SSH brute-force attack by source 3504507 via ssh-honeypot/0.2.1+h ...
show moreReport 2462282 with IP 3509849 for SSH brute-force attack by source 3504507 via ssh-honeypot/0.2.1+http
show less
2026-06-14T06:40:32.805361+01:00 dokploy-remote sshd[823892]: error: maximum authentication attempts ...
show more2026-06-14T06:40:32.805361+01:00 dokploy-remote sshd[823892]: error: maximum authentication attempts exceeded for root from 80.49.39.49 port 33302 ssh2 [preauth]
2026-06-14T06:40:33.916239+01:00 dokploy-remote sshd[823894]: error: maximum authentication attempts exceeded for root from 80.49.39.49 port 33604 ssh2 [preauth]
2026-06-14T06:40:35.895703+01:00 dokploy-remote sshd[823896]: error: maximum authentication attempts exceeded for root from 80.49.39.49 port 33882 ssh2 [preauth]
2026-06-14T06:40:39.707045+01:00 dokploy-remote sshd[823908]: Invalid user admin from 80.49.39.49 port 34680
2026-06-14T06:40:39.869753+01:00 dokploy-remote sshd[823908]: error: maximum authentication attempts exceeded for invalid user admin from 80.49.39.49 port 34680 ssh2 [preauth]
...
show less
Jun 13 23:20:49 setebos sshd[205546]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ...
show moreJun 13 23:20:49 setebos sshd[205546]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.49.39.49 user=root
Jun 13 23:20:50 setebos sshd[205546]: Failed password for root from 80.49.39.49 port 55562 ssh2
Jun 13 23:20:53 setebos sshd[205546]: Failed password for root from 80.49.39.49 port 55562 ssh2
Jun 13 23:20:56 setebos sshd[205546]: Failed password for root from 80.49.39.49 port 55562 ssh2
...
show less
2026-06-14T05:01:43.318136+00:00 NBG-VS01-WebServer sshd-session[1090720]: Failed password for root ...
show more2026-06-14T05:01:43.318136+00:00 NBG-VS01-WebServer sshd-session[1090720]: Failed password for root from 80.49.39.49 port 35506 ssh2
2026-06-14T05:01:45.515213+00:00 NBG-VS01-WebServer sshd-session[1090720]: Failed password for root from 80.49.39.49 port 35506 ssh2
2026-06-14T05:01:48.478125+00:00 NBG-VS01-WebServer sshd-session[1090720]: Failed password for root from 80.49.39.49 port 35506 ssh2
...
show less
2026-06-14T06:39:25.226269ee-nginx-elbernabeu sshd[32231]: error: maximum authentication attempts ex ...
show more2026-06-14T06:39:25.226269ee-nginx-elbernabeu sshd[32231]: error: maximum authentication attempts exceeded for root from 80.49.39.49 port 43180 ssh2 [preauth]
2026-06-14T06:39:25.226311ee-nginx-elbernabeu sshd[32231]: Disconnecting: Too many authentication failures [preauth]
2026-06-14T06:39:27.265423ee-nginx-elbernabeu sshd[32235]: error: maximum authentication attempts exceeded for root from 80.49.39.49 port 43596 ssh2 [preauth]
...
show less