> Your IP address [162.253.128.212] has been blocked for attacking sshd

> on our network. Please contact abuse@liquidweb.com if you have

> questions or require more information.

>

> Timezone is EDT/EST unless otherwise noted.

>

>

> Aug 20 11:20:02 karubi sshd[1002680]: Did not receive identification

> string from 162.253.128.212

> Aug 20 11:20:02 karubi sshd[1002681]: Did not receive identification

> string from 162.253.128.212

> Aug 20 11:20:02 karubi sshd[1002682]: Did not receive identification

> string from 162.253.128.212

> Aug 20 11:20:02 karubi sshd[1002686]: Did not receive identification

> string from 162.253.128.212

> Aug 20 11:20:02 karubi sshd[1002691]: Did not receive identification

> string from 162.253.128.212


Created Layer 7 rules to find the responsible parties

Also Read

Dorkbot Malware Infection
Sir/Ma’am, US-CERT Received a report from a trusted third party of a possible malicious...
IDS Alert
our IDS found suspicious activity from 178.162.197.1, please investigate! The packets form a...
IP address(es) were blacklisted from the PlayStation Network
To whom it may concern, Pursuant to Sony Network Entertainment International LLC ("SNEI")...
NJ Port Scanning
We have blocked someone from your IP space for abuse. Reason: Port Scanning. Log lines are below....
UK SPAM Static IP Server
X-Originalarrivaltime: 25 Jul 2014 15:11:43.0391 (UTC) FILETIME=[BE648AF0:01CFA81A] MIME-Version:...