Mar 13 00:25:01 srv-prod sshd[33001]: Connection from 139.99.38.79 port 41200 on 10.0.1.15 port 22
...
show moreMar 13 00:25:01 srv-prod sshd[33001]: Connection from 139.99.38.79 port 41200 on 10.0.1.15 port 22
Mar 13 00:25:02 srv-prod sshd[33001]: Invalid user admin from 139.99.38.79 port 41200
Mar 13 00:25:03 srv-prod sshd[33005]: Connection from 139.99.38.79 port 41201 on 10.0.1.15 port 22
Mar 13 00:25:04 srv-prod sshd[33005]: Invalid user manager from 139.99.38.79 port 41201
Mar 13 00:25:05 srv-prod kernel: [17105.12] [UFW BLOCK] IN=eth0 SRC=139.99.38.79 DST=10.0.1.15 PROTO=TCP SPT=41202 DPT=3306
Mar 13 00:25:05 srv-prod kernel: [17105.14] [UFW BLOCK] IN=eth0 SRC=139.99.38.79 DST=10.0.1.15 PROTO=TCP SPT=41203 DPT=6379
Mar 13 00:25:05 srv-prod kernel: [17105.16] [UFW BLOCK] IN=eth0 SRC=139.99.38.79 DST=10.0.1.15 PROTO=TCP SPT=41204 DPT=8080
Mar 13 00:25:06 srv-prod sshd[33010]: error: kex_exchange_identification: client sent invalid protocol identifier "NmapScan"
Mar 13 00:25:10 srv-prod sshd[33020]: drop connection #10 from [139.99.38.79]:41205 on [10.0.1.15]:22 past MaxStartups
show less