Dear Sir/Madam,
We have detected abuse from the IP address 95.181.153.79, which according to a whois lookup is on your network. We would appreciate if you would investigate and take action as appropriate.
Log lines are given below, but please ask if you require any further information.
(If you are not the correct person to contact about this please accept our apologies — your e-mail address was extracted from the whois record by an automated process. This mail was generated by Fail2Ban.)
Note: Local timezone is +0200 (CEST)
Jul 19 18:48:34 vweb02 sshd[11142]: Invalid user mysql2 from 95.181.153.79 port 58822
Jul 19 18:48:34 vweb02 sshd[11142]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.181.153.79
Jul 19 18:48:36 vweb02 sshd[11142]: Failed password for invalid user mysql2 from 95.181.153.79 port 58822 ssh2
Jul 19 18:48:36 vweb02 sshd[11142]: Received disconnect from 95.181.153.79 port 58822:11: Bye Bye [preauth]
Jul 19 18:48:36 vweb02 sshd[11142]: Disconnected from 95.181.153.79 port 58822 [preauth]
Jul 19 19:08:04 vweb02 sshd[15974]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.181.153.79 user=root
Jul 19 19:08:06 vweb02 sshd[15974]: Failed password for root from 95.181.153.79 port 49598 ssh2
Jul 19 19:08:06 vweb02 sshd[15974]: Received disconnect from 95.181.153.79 port 49598:11: Bye Bye [preauth]
Jul 19 19:08:06 vweb02 sshd[15974]: Disconnected from 95.181.153.79 port 49598 [preauth]
Jul 19 19:10:15 vweb02 sshd[16392]: Invalid user admin123 from 95.181.153.79 port 59406
Jul 19 19:10:15 vweb02 sshd[16392]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.181.153.79
Jul 19 19:10:17 vweb02 sshd[16392]: Failed password for invalid user admin123 from 95.181.153.79 port 59406 ssh2
Jul 19 19:10:17 vweb02 sshd[16392]: Received disconnect from 95.181.153.79 port 59406:11: Bye Bye [preauth]
Jul 19 19:10:17 vweb02 sshd[16392]: Disconnected from 95.181.153.79 port 59406 [preauth]
Jul 19 19:12:18 vweb02 sshd[16738]: Invalid user jorge from 95.181.153.79 port 40936
Jul 19 19:12:18 vweb02 sshd[16738]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.181.153.79
Jul 19 19:12:20 vweb02 sshd[16738]: Failed password for invalid user jorge from 95.181.153.79 port 40936 ssh2
Jul 19 19:12:20 vweb02 sshd[16738]: Received disconnect from 95.181.153.79 port 40936:11: Bye Bye [preauth]
Jul 19 19:12:20 vweb02 sshd[16738]: Disconnected from 95.181.153.79 port 40936 [preauth]
Jul 19 19:14:26 vweb02 sshd[17025]: Invalid user l4d2server from 95.181.153.79 port 50706
Jul 19 19:14:26 vweb02 sshd[17025]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.181.153.79
Jul 19 19:14:29 vweb02 sshd[17025]: Failed password for invalid user l4d2server from 95.181.153.79 port 50706 ssh2
Jul 19 19:14:29 vweb02 sshd[17025]: Received disconnect from 95.181.153.79 port 50706:11: Bye Bye [preauth]
Jul 19 19:14:29 vweb02 sshd[17025]: Disconnected from 95.181.153.79 port 50706 [preauth]
