[rede-164-62] (sshd) Failed SSH login from 101.37.85.222 (CN/China/-): 5 in the last 3600 secs; Port ... show more[rede-164-62] (sshd) Failed SSH login from 101.37.85.222 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 1 11:13:39 sshd[23414]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.37.85.222 user=[USERNAME] show less
Oct 1 14:34:54 ns37 sshd[28310]: Failed password for root from 101.37.85.222 port 48854 ssh2
... show moreOct 1 14:34:54 ns37 sshd[28310]: Failed password for root from 101.37.85.222 port 48854 ssh2
Oct 1 14:38:12 ns37 sshd[28995]: Failed password for root from 101.37.85.222 port 46852 ssh2
... show less
SSH Brute force: 49 attempts were recorded from 101.37.85.222
2024-10-01T11:49:46+02:00 Invali ... show moreSSH Brute force: 49 attempts were recorded from 101.37.85.222
2024-10-01T11:49:46+02:00 Invalid user test_user from 101.37.85.222 port 53006
2024-10-01T11:51:13+02:00 Invalid user superman from 101.37.85.222 port 40674
2024-10-01T11:52:15+02:00 Invalid user sopuser from 101.37.85.222 port 54718
2024-10-01T11:53:20+02:00 Disconnected from authenticating user root 101.37.85.222 port 40538 [preauth]
2024-10-01T11:54:13+02:00 Invalid user usuario from 101.37.85.222 port 54578
2024-10-01T11:55:12+02:00 Invalid user tomcat from 101.37.85.222 port 40386
2024-10-01T11:56:03+02:00 Invalid user ubuntu from 101.37.85.222 port 54436
2024-10-01T11:56:59+02:00 Invalid user test from 101.37.85.222 port 40246
2024-10-01T11:58:08+02:00 Disconnected from authenticating user root 101.37.85.222 port 54294 [preauth]
2024-10-01T11:59:04+02:00 Invalid user support from 101.37.85.222 port 40102
2024-10-01T11:59 show less
Oct 1 02:44:02 cohoe sshd[2883846]: Failed password for invalid user test_user from 101.37.85.222 p ... show moreOct 1 02:44:02 cohoe sshd[2883846]: Failed password for invalid user test_user from 101.37.85.222 port 48322 ssh2
Oct 1 02:50:43 cohoe sshd[2884179]: Invalid user superman from 101.37.85.222 port 38050
Oct 1 02:50:43 cohoe sshd[2884179]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.37.85.222
Oct 1 02:50:45 cohoe sshd[2884179]: Failed password for invalid user superman from 101.37.85.222 port 38050 ssh2
Oct 1 02:51:37 cohoe sshd[2884198]: Invalid user sopuser from 101.37.85.222 port 52098
... show less