2021-07-25T22:57:16.247111rev-crew.info sshd[141034]: Connection from 167.71.203.2 port 37126 on 49. ...
show more2021-07-25T22:57:16.247111rev-crew.info sshd[141034]: Connection from 167.71.203.2 port 37126 on 49.12.87.27 port 22 rdomain ""
2021-07-25T22:57:16.650704rev-crew.info sshd[141034]: Unable to negotiate with 167.71.203.2 port 37126: no matching key exchange method found. Their offer: diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth]
2021-07-25T22:58:46.639492rev-crew.info sshd[141072]: Connection from 167.71.203.2 port 38776 on 49.12.87.27 port 22 rdomain ""
2021-07-25T22:58:46.825255rev-crew.info sshd[141072]: Unable to negotiate with 167.71.203.2 port 38776: no matching key exchange method found. Their offer: diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth]
...
show less
Brute-Force
SSH
Anonymous
Jul 26 06:26:22 mail sshd[26247]: Failed password for root from 167.71.203.2 port 36132 ssh2
...
Lines containing failures of 167.71.203.2 (max 1000)
Jul 21 12:29:59 hecnet-us-east-gw sshd[28146]: ...
show moreLines containing failures of 167.71.203.2 (max 1000)
Jul 21 12:29:59 hecnet-us-east-gw sshd[28146]: Connection from 167.71.203.2 port 47238 on 10.0.0.199 port 22 rdomain ""
Jul 21 12:32:40 hecnet-us-east-gw sshd[28215]: Connection from 167.71.203.2 port 59128 on 10.0.0.199 port 22 rdomain ""
Jul 21 12:32:43 hecnet-us-east-gw sshd[28215]: User r.r from 167.71.203.2 not allowed because not listed in AllowUsers
Jul 21 12:32:43 hecnet-us-east-gw sshd[28215]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.203.2 user=r.r
Jul 21 12:32:45 hecnet-us-east-gw sshd[28215]: Failed password for invalid user r.r from 167.71.203.2 port 59128 ssh2
Jul 21 12:32:47 hecnet-us-east-gw sshd[28215]: Received disconnect from 167.71.203.2 port 59128:11: Normal Shutdown, Thank you for playing [preauth]
Jul 21 12:32:47 hecnet-us-east-gw sshd[28215]: Disconnected from invalid user r.r 167.71.203.2 port 59128 [preauth]
Jul 21 12:33:28 hecnet-us-east-g........
------------------------------
show less