Auto-blocked by IT Solutions USA security proxy after malicious web-shell/backdoor scanning and atta ...
show moreAuto-blocked by IT Solutions USA security proxy after malicious web-shell/backdoor scanning and attack probes. Requests blocked (403).
show less
SSH/Telnet honeypot (endlessh) on habith.eu: 9 connection attempts trapped, total tarpit time 4.0min ...
show moreSSH/Telnet honeypot (endlessh) on habith.eu: 9 connection attempts trapped, total tarpit time 4.0min. Automated report.
show less
2026-08-01T13:33:25.413438+02:00 pkg-host01.packages.managed-infra.com sshd-session[45141]: Connecti ...
show more2026-08-01T13:33:25.413438+02:00 pkg-host01.packages.managed-infra.com sshd-session[45141]: Connection closed by 54.67.23.164 port 53486 [preauth]
2026-08-01T13:33:27.992559+02:00 pkg-host01.packages.managed-infra.com sshd-session[45147]: Unable to negotiate with 54.67.23.164 port 53502: no matching host key type found. Their offer: ecdsa-sha2-nistp521,[email protected] [preauth]
2026-08-01T13:33:29.186234+02:00 pkg-host01.packages.managed-infra.com sshd-session[45149]: Connection closed by 54.67.23.164 port 53516 [preauth]
2026-08-01T13:33:30.737090+02:00 pkg-host01.packages.managed-infra.com sshd-session[45152]: Connection closed by 54.67.23.164 port 53530 [preauth]
2026-08-01T13:33:31.535605+02:00 pkg-host01.packages.managed-infra.com sshd-session[45154]: Unable to negotiate with 54.67.23.164 port 44528: no matching host key type found. Their offer: ssh-rsa,[email protected] [preauth]
show less
Fail2Ban automatic report:
SSH brute-force:
Aug 1 13:27:08 serw sshd[184078]: Connection closed by ...
show moreFail2Ban automatic report:
SSH brute-force:
Aug 1 13:27:08 serw sshd[184078]: Connection closed by 54.67.23.164 port 41426 [preauth]
Aug 1 13:27:09 serw sshd[184080]: Connection closed by 54.67.23.164 port 41428 [preauth]
Aug 1 13:27:09 serw sshd[184082]: Unable to negotiate with 54.67.23.164 port 41438: no matching host key type found. Their offer: ecdsa-sha2-nistp384,[email protected] [preauth]
show less
2026-08-01T11:23:57.682209+00:00 ks6.hofud.com sshd[324764]: Connection closed by 54.67.23.164 port ...
show more2026-08-01T11:23:57.682209+00:00 ks6.hofud.com sshd[324764]: Connection closed by 54.67.23.164 port 52420 [preauth]
2026-08-01T11:23:58.307398+00:00 ks6.hofud.com sshd[324767]: Connection closed by 54.67.23.164 port 52428 [preauth]
2026-08-01T11:23:58.676287+00:00 ks6.hofud.com sshd[324769]: Unable to negotiate with 54.67.23.164 port 52442: no matching host key type found. Their offer: ecdsa-sha2-nistp384,[email protected] [preauth]
2026-08-01T11:23:59.167273+00:00 ks6.hofud.com sshd[324771]: Unable to negotiate with 54.67.23.164 port 52448: no matching host key type found. Their offer: ecdsa-sha2-nistp521,[email protected] [preauth]
2026-08-01T11:24:00.603388+00:00 ks6.hofud.com sshd[324773]: Connection closed by 54.67.23.164 port 52462 [preauth]
...
show less
2026-08-01T11:18:22.731032+00:00 singularity sshd[474074]: Connection closed by 54.67.23.164 port 37 ...
show more2026-08-01T11:18:22.731032+00:00 singularity sshd[474074]: Connection closed by 54.67.23.164 port 37570 [preauth]
2026-08-01T11:18:23.795154+00:00 singularity sshd[474076]: Connection closed by 54.67.23.164 port 37582 [preauth]
2026-08-01T11:18:24.488887+00:00 singularity sshd[474078]: Unable to negotiate with 54.67.23.164 port 37586: no matching host key type found. Their offer: ecdsa-sha2-nistp384,[email protected] [preauth]
...
show less
2026-08-01T13:09:27.567858+02:00 mail.srvfarm.net sshd-session[1215788]: Connection closed by 54.67. ...
show more2026-08-01T13:09:27.567858+02:00 mail.srvfarm.net sshd-session[1215788]: Connection closed by 54.67.23.164 port 49970 [preauth]
2026-08-01T13:09:28.769236+02:00 mail.srvfarm.net sshd-session[1215795]: Connection closed by 54.67.23.164 port 49980 [preauth]
2026-08-01T13:09:29.248764+02:00 mail.srvfarm.net sshd-session[1215803]: Unable to negotiate with 54.67.23.164 port 49988: no matching host key type found. Their offer: ecdsa-sha2-nistp384,[email protected] [preauth]
2026-08-01T13:09:30.244518+02:00 mail.srvfarm.net sshd-session[1215806]: Unable to negotiate with 54.67.23.164 port 49992: no matching host key type found. Their offer: ecdsa-sha2-nistp521,[email protected] [preauth]
2026-08-01T13:09:31.774949+02:00 mail.srvfarm.net sshd-session[1215808]: Connection closed by 54.67.23.164 port 49296 [preauth]
show less