sneak/hacks
1
0 Fork 1
Code Issues Pull Requests Releases Wiki Activity

add ipabusedb-docker-ssh: report sshd brute-force attempts from docker logs to AbuseIPDB

Browse Source
This commit is contained in:
sneak committed 2026-11-06 19:57:23 -08:00
1 parent fcb956124b
commit 21bda80f88
8 files changed
+658
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

ipabusedb-docker-ssh/loglines_example.txt
+13
View File
@@ -0,0 +1,13 @@
2026-10-06T12:04:24.554951297Z User root from 41.93.28.11 not allowed because not listed in AllowUsers
2026-10-06T12:04:24.595412750Z Connection closed by invalid user root 41.93.28.11 port 51904 [preauth]
2026-10-06T12:04:24.687263829Z Invalid user production from 45.191.4.252 port 38924
2026-10-06T12:04:24.927218990Z Connection closed by invalid user production 45.191.4.252 port 38924 [preauth]
2026-10-06T12:04:28.005424065Z Timeout before authentication for connection from 95.78.250.88 to 172.19.0.29, pid = 307434
2026-10-06T12:04:29.009224164Z User root from 164.77.161.180 not allowed because not listed in AllowUsers
2026-10-06T12:04:29.494569018Z Connection closed by invalid user root 164.77.161.180 port 33916 [preauth]
2026-10-06T12:04:30.222573149Z Invalid user production from 212.128.3.152 port 60626
2026-10-06T12:04:30.266239421Z Connection closed by invalid user production 212.128.3.152 port 60626 [preauth]
2026-10-06T12:04:38.873013329Z Timeout before authentication for connection from 212.19.8.30 to 172.19.0.29, pid = 308210
2026-10-06T12:04:39.622456198Z Received disconnect from 172.19.0.1 port 53534:11: disconnected by user
2026-10-06T12:04:41.066933472Z Received disconnect from 172.19.0.1 port 53540:11: disconnected by user
2026-10-06T12:04:41.413322464Z Received disconnect from 172.19.0.1 port 53552:11: disconnected by user