/var/log/authlog.5.gz:Oct 5 08:26:45 redundancia sshd[50144]: Failed password for invalid user dork ...
show more/var/log/authlog.5.gz:Oct 5 08:26:45 redundancia sshd[50144]: Failed password for invalid user dork from 167.71.238.131 port 54378 ssh2
show less
Oct 10 23:04:58 mulde sshd[26650]: Failed password for root from 167.71.238.131 port 44976 ssh2
Oct ...
show moreOct 10 23:04:58 mulde sshd[26650]: Failed password for root from 167.71.238.131 port 44976 ssh2
Oct 10 23:04:59 mulde sshd[26650]: Failed password for root from 167.71.238.131 port 44976 ssh2
Oct 10 23:05:02 mulde sshd[26650]: Failed password for root from 167.71.238.131 port 44976 ssh2
Oct 10 23:05:52 mulde sshd[26906]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.238.131 user=root
Oct 10 23:05:54 mulde sshd[26906]: Failed password for root from 167.71.238.131 port 46472 ssh2
...
show less
Brute-Force
SSH
Anonymous
Failed password for root from 167.71.238.131 port 44900 ssh2
Failed password for root from 167.71.23 ...
show moreFailed password for root from 167.71.238.131 port 44900 ssh2
Failed password for root from 167.71.238.131 port 44900 ssh2
Failed password for root from 167.71.238.131 port 44900 ssh2
show less
Lines containing failures of 167.71.238.131 (max 1000)
Oct 4 19:11:27 ntop sshd[2656728]: User r.r ...
show moreLines containing failures of 167.71.238.131 (max 1000)
Oct 4 19:11:27 ntop sshd[2656728]: User r.r from 167.71.238.131 not allowed because not listed in AllowUsers
Oct 4 19:11:27 ntop sshd[2656728]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.238.131 user=r.r
Oct 4 19:11:29 ntop sshd[2656728]: Failed password for AD user r.r from 167.71.238.131 port 40740 ssh2
Oct 4 19:11:31 ntop sshd[2656728]: Failed password for AD user r.r from 167.71.238.131 port 40740 ssh2
Oct 4 19:11:34 ntop sshd[2656728]: Failed password for AD user r.r from 167.71.238.131 port 40740 ssh2
Oct 4 19:11:35 ntop sshd[2656728]: Connection closed by AD user r.r 167.71.238.131 port 40740 [preauth]
Oct 4 19:11:35 ntop sshd[2656728]: PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.238.131 user=r.r
Oct 4 19:12:36 ntop sshd[2658721]: User r.r from 167.71.238.131 not allowed because not listed in AllowUsers
Oct ........
------------------------------
show less