report.txt Reported-From: abuse-team@blocklist.de Category: abuse Report-Type: login-attack Service: ssh Version: 0.2 User-Agent: Fail2BanFeedBackScript blocklist.de V0.2 Date: Mon, 29 Jan 2024 21:22:14 +0100 Source-Type: ip-address Source: 80.76.43.94 Port: 22 Report-ID: 1079506393@blocklist.de Schema-URL: http://www.xarf.org/schema/abuse_login-attack_0.1.2.json Attachment: text/plain logfile.log Lines containing failures of 80.76.43.94 (max 1000) Jan 29 21:16:15 webslave02 sshd[3829082]: Invalid user testuser1 from 80.76.43.94 port 41982 Jan 29 21:16:15 webslave02 sshd[3829082]: Received disconnect from 80.76.43.94 port 41982:11: Bye Bye [preauth] Jan 29 21:16:15 webslave02 sshd[3829082]: Disconnected from invalid user testuser1 80.76.43.94 port 41982 [preauth] Jan 29 21:21:11 webslave02 sshd[3830018]: Invalid user admin from 80.76.43.94 port 59548 Jan 29 21:21:11 webslave02 sshd[3830018]: Received disconnect from 80.76.43.94 port 59548:11: Bye Bye [preauth] Jan 29 21:21:11 webslave02 sshd[3830018]: Disconnected from invalid user admin 80.76.43.94 port 59548 [preauth] Jan 29 21:22:14 webslave02 sshd[3830334]: Invalid user ubuntu from 80.76.43.94 port 50996 Jan 29 21:22:14 webslave02 sshd[3830334]: Received disconnect from 80.76.43.94 port 50996:11: Bye Bye [preauth] Jan 29 21:22:14 webslave02 sshd[3830334]: Disconnected from invalid user ubuntu 80.76.43.94 port 50996 [preauth]
