# DataPlane.org - for operators, by operators
# sshclient
# 2020-09-19 02:00 - 2020-09-26 02:00
#
# The sshclient report is free for non-commercial use ONLY.  If you
# wish to discuss commercial use of this service, please contact us at
# info@dataplane.org.  Redistribution of the sshclient report in whole
# or in part without the express permission of DataPlane is expressly
# prohibited.
#
# This report is made possible through the generous support of people
# like you.  Sensor, processing and distribution systems require
# non-free resources to setup and maintain.  We are always looking for
# financial contributions to help pay the bills and hosting to increase
# visibility.  If you find what we do useful, please consider supporting
# us.
#
# This report is informational.  It is not a block list, but some may
# choose to use it to actively protect their networks and systems.  The
# report is provided on an as-is basis with no expressed warranty or
# guarantee of accuracy.  Use of this data is at your own risk.  If you
# have questions about this report do not hesitate to contact us.
#
# Entries below consist of fields with identifying characteristics of a
# a source IP address that has been seen initiating an SSH connection
# to a remote host.  This report lists hosts that are suspicious of more
# than just port scanning.  These hosts may be SSH server cataloging or
# conducting authentication attack attempts.  Each entry is sorted
# according to a route origination ASN.  An entry for the IP address may
# be listed more than once if there are multiple origin AS (MOAS)
# announcements for the covering prefix.  We use the Team Cymru IP
# address to ASN mapping service to construct an origin AS number and
# name.  For details about this Team Cymru service, see:
#
#   <http://www.team-cymru.org/Services/ip-to-asn.html>.
#
# The report format is as follows:
#
# ASN  |  ASname  |  saddr  |  utc  |  category
#
# Each field is described below.  Please note any special formatting
# rules to aid in processing this file with automated tools and scripts.
# Blank lines may be present to improve the visual display of this file.
# Lines beginning with a hash ('#') character are comment lines.  All
# other lines are report entries.  Each field is separated by a pipe
# symbol ('|') and at least two whitespace characters on either side.
#
#   ASN       Autonomous system number originating a route for the entry
#             IP address. Note, 4-byte ASNs are supported and will be
#             displayed as a 32-bit integer.
#
#   ASname    A descriptive network name for the associated ASN.  The
#             name is truncated to 30 characters.
#
#   saddr     The source IPv4 or IPv6 address that is being reported.
#
#   utc       A last seen timestamp formatted as YYYY-MM-DD HH:MM:SS
#             and in UTC time.
#
#   category  Descriptive tag name for this entry.  For this report,
#             the text sshclient will appear.
#
# A commented footer section shows an aggregate count of ASNs and
# addresses seen in the current report.
#
#
# Statistics
#        ASNs: 0
#   Addresses: 0