I can confirm that this IP had been actively and repeatedly hitting honeypots in the community honeypot network I'm a part of.
On Mon, Nov 27, 2017 at 11:10 AM, Jerry Geis <jerry.g...@gmail.com> wrote: > hi All, > > I happened to login to one of my servers today and saw 96000 failed login > attempts. shown below is the address its coming from. I added it to my > firewall to drop. > > Failed password for root from 123.183.209.135 port 14299 ssh2 > > FYI - others might be seeing it also. > > Jerry > _______________________________________________ > CentOS mailing list > CentOS@centos.org > https://lists.centos.org/mailman/listinfo/centos > _______________________________________________ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
