> Your IP address [162.253.128.212] has been blocked for attacking sshd

> on our network. Please contact abuse@liquidweb.com if you have

> questions or require more information.

>

> Timezone is EDT/EST unless otherwise noted.

>

>

> Aug 20 11:20:02 karubi sshd[1002680]: Did not receive identification

> string from 162.253.128.212

> Aug 20 11:20:02 karubi sshd[1002681]: Did not receive identification

> string from 162.253.128.212

> Aug 20 11:20:02 karubi sshd[1002682]: Did not receive identification

> string from 162.253.128.212

> Aug 20 11:20:02 karubi sshd[1002686]: Did not receive identification

> string from 162.253.128.212

> Aug 20 11:20:02 karubi sshd[1002691]: Did not receive identification

> string from 162.253.128.212


Created Layer 7 rules to find the responsible parties

Also Read

UK SPAM Static IP Server
X-Originalarrivaltime: 25 Jul 2014 15:11:43.0391 (UTC) FILETIME=[BE648AF0:01CFA81A] MIME-Version:...
Dorkbot Malware Infection
Sir/Ma’am, US-CERT Received a report from a trusted third party of a possible malicious...
NJ Port Scanning
We have blocked someone from your IP space for abuse. Reason: Port Scanning. Log lines are below....
DoS attack from the LiquidVPN Network
Dear Provider I’m George Egri, the Co-Founder and CEO of BitNinja Server Security. I’m writing to...
New Jersey - DDOS from 108.61.1xx.xxx
Recently, we have detected a DDOS attack from 108.61.1xx.xxx:53. Based on the source port number,...