Sep 10 23:28:48 kamergaz sshd[2134015]: Disconnecting authenticating user root 221.6.21.162 port 368 ...
show moreSep 10 23:28:48 kamergaz sshd[2134015]: Disconnecting authenticating user root 221.6.21.162 port 3689: Change of username or service not allowed: (root,ssh-connection) -> (test,ssh-connection) [preauth]
Sep 10 23:28:49 kamergaz sshd[2134130]: Invalid user test from 221.6.21.162 port 3690
Sep 10 23:28:49 kamergaz sshd[2134130]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.6.21.162
Sep 10 23:28:51 kamergaz sshd[2134130]: Failed password for invalid user test from 221.6.21.162 port 3690 ssh2
Sep 10 23:28:55 kamergaz sshd[2134130]: Failed password for invalid user test from 221.6.21.162 port 3690 ssh2
show less
Sep 10 13:18:31 fisher sshd[20072]: Failed password for root from 221.6.21.162 port 3615 ssh2
Sep 10 ...
show moreSep 10 13:18:31 fisher sshd[20072]: Failed password for root from 221.6.21.162 port 3615 ssh2
Sep 10 13:18:33 fisher sshd[20072]: Failed password for root from 221.6.21.162 port 3615 ssh2
...
show less
Sep 10 02:39:42 web2 sshd\[9661\]: Failed password for root from 221.6.21.162 port 3651 ssh2Sep 10 0 ...
show moreSep 10 02:39:42 web2 sshd\[9661\]: Failed password for root from 221.6.21.162 port 3651 ssh2Sep 10 02:39:51 web2 sshd\[9663\]: Invalid user test from 221.6.21.162Sep 10 02:39:53 web2 sshd\[9663\]: Failed password for invalid user test from 221.6.21.162 port 3652 ssh2Sep 10 02:39:55 web2 sshd\[9663\]: Failed password for invalid user test from 221.6.21.162 port 3652 ssh2Sep 10 02:39:58 web2 sshd\[9663\]: Failed password for invalid user test from 221.6.21.162 port 3652 ssh2Sep 10 02:39:59 web2 sshd\[9665\]: Invalid user dev from 221.6.21.162
...
show less
[AUTORAVALT][[08/09/2024 - 22:19:11 -03:00 UTC]
Attack from [Lan Li]
[221.6.21.162]-[RANGE:221.6.21. ...
show more[AUTORAVALT][[08/09/2024 - 22:19:11 -03:00 UTC]
Attack from [Lan Li]
[221.6.21.162]-[RANGE:221.6.21.160 - 221.6.21.191]
Action: BLocKed
FTP Brute-Force -> Running brute force credentials on the FTP server.
Brute-Force -> Credential brute-force attacks on webpage logins and services like SSH, FTP, SIP, SMTP, RDP, etc.
]
...
show less
Sep 8 12:34:45 mailserver sshd[705265]: Failed password for root from 221.6.21.162 port 3564 ssh2
S ...
show moreSep 8 12:34:45 mailserver sshd[705265]: Failed password for root from 221.6.21.162 port 3564 ssh2
Sep 8 12:34:58 mailserver sshd[705265]: Disconnecting authenticating user root 221.6.21.162 port 3564: Change of username or service not allowed: (root,ssh-connection) -> (test,ssh-connection) [preauth]
Sep 8 12:34:59 mailserver sshd[705370]: Invalid user test from 221.6.21.162 port 3565
...
show less
[AUTORAVALT][[07/09/2024 - 05:51:50 -03:00 UTC]
Attack from [Lan Li]
[221.6.21.162]-[RANGE:221.6.21. ...
show more[AUTORAVALT][[07/09/2024 - 05:51:50 -03:00 UTC]
Attack from [Lan Li]
[221.6.21.162]-[RANGE:221.6.21.160 - 221.6.21.191]
Action: BLocKed
FTP Brute-Force -> Running brute force credentials on the FTP server.
Brute-Force -> Credential brute-force attacks on webpage logins and services like SSH, FTP, SIP, SMTP, RDP, etc.
]
...
show less