Zdravím, mám problém, mám v lokální síti dva posítače s ssh, u jednoho jsem zjistil velký provoz(viz. níže), na druhém vše OK. Obě sshd běží na linuxu na dvou stanicích (jeden ubuntu 20.10 (bez problémů) a jeden 20.04(s velkým provozem)), oba na portech 22. Z vnější sítě jeden přesměrovánám z vnějšího portu 2222 na 22. Dosud vše běhalo bez problémů, problém nastal až po aktualizaci NTB z ubuntu 18.04 na 20.04), ze kterého se připojuji.
Po akualizaci NTB mi to hlasí "unkown service" přes port 2222 -22, pokud port 2222 nechám 22 a počítače přehodím (vnitřní IP) tak mi to nefunguje na tom 2222, ale na druhém to pak běží OK. Používám tunel ssh pro RDP pře reminu. Přes vnější port 2222 to nejde, přes 22 ano, ale někdy až na několikátý pokus.
Co se týče provozu, mám root disabled, ale stejně mě přijde ten provoz velký, a nevím, proč jsou ty ataky na jeden PC. Na obou počítačích mi běží xampp, jeden mám přesměrovaný i pro připojení z venku (ten na kterém je problém). Ne jednom (ten PC bez problémů) ještě běží OPENVPN, ale to by neměl být problém.
Používám modem od O2 Archer MR200, ten moc zabezpečení nepoužívá...
Asi by bylo řešení to ssh xamp pro vnější prostředí zavřít a nechat pouze pro local, a nechat pro vnější jenom OPENVPN, případně co mám dělat...
Díky Hyp
tail -n 500 /var/log/auth.log | grep 'sshd'
Dec 22 22:07:45 ServerLOCAL sshd[767952]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.24.73.223 user=root
Dec 22 22:07:46 ServerLOCAL sshd[767955]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.83.84.209 user=root
Dec 22 22:07:46 ServerLOCAL sshd[767954]: Failed password for root from 79.137.77.131 port 59186 ssh2
Dec 22 22:07:47 ServerLOCAL sshd[767952]: Failed password for root from 211.24.73.223 port 37288 ssh2
Dec 22 22:07:47 ServerLOCAL sshd[767954]: Received disconnect from 79.137.77.131 port 59186:11: Bye Bye [preauth]
Dec 22 22:07:47 ServerLOCAL sshd[767954]: Disconnected from authenticating user root 79.137.77.131 port 59186 [preauth]
Dec 22 22:07:47 ServerLOCAL sshd[767958]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.158.74.141 user=root
Dec 22 22:07:47 ServerLOCAL sshd[767952]: Received disconnect from 211.24.73.223 port 37288:11: Bye Bye [preauth]
Dec 22 22:07:47 ServerLOCAL sshd[767952]: Disconnected from authenticating user root 211.24.73.223 port 37288 [preauth]
Dec 22 22:07:48 ServerLOCAL sshd[767955]: Failed password for root from 190.83.84.209 port 41260 ssh2
Dec 22 22:07:49 ServerLOCAL sshd[767958]: Failed password for root from 129.158.74.141 port 37435 ssh2
Dec 22 22:07:49 ServerLOCAL sshd[767955]: Received disconnect from 190.83.84.209 port 41260:11: Bye Bye [preauth]
Dec 22 22:07:49 ServerLOCAL sshd[767955]: Disconnected from authenticating user root 190.83.84.209 port 41260 [preauth]
Dec 22 22:07:49 ServerLOCAL sshd[767958]: Received disconnect from 129.158.74.141 port 37435:11: Bye Bye [preauth]
Dec 22 22:07:49 ServerLOCAL sshd[767958]: Disconnected from authenticating user root 129.158.74.141 port 37435 [preauth]
Dec 22 22:07:55 ServerLOCAL sshd[767961]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.7.134 user=root
Dec 22 22:07:57 ServerLOCAL sshd[767961]: Failed password for root from 212.64.7.134 port 45290 ssh2
Dec 22 22:08:01 ServerLOCAL sshd[767961]: Received disconnect from 212.64.7.134 port 45290:11: Bye Bye [preauth]
Dec 22 22:08:01 ServerLOCAL sshd[767961]: Disconnected from authenticating user root 212.64.7.134 port 45290 [preauth]
Dec 22 22:08:01 ServerLOCAL sshd[767963]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.254.54.96 user=root
Dec 22 22:08:03 ServerLOCAL sshd[767963]: Failed password for root from 43.254.54.96 port 39602 ssh2
Dec 22 22:08:06 ServerLOCAL sshd[767963]: Received disconnect from 43.254.54.96 port 39602:11: Bye Bye [preauth]
Dec 22 22:08:06 ServerLOCAL sshd[767963]: Disconnected from authenticating user root 43.254.54.96 port 39602 [preauth]
Dec 22 22:08:06 ServerLOCAL sshd[767965]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.126.117.168 user=root
Dec 22 22:08:06 ServerLOCAL sshd[767970]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.175.57 user=root
Dec 22 22:08:09 ServerLOCAL sshd[767965]: Failed password for root from 118.126.117.168 port 58364 ssh2
Dec 22 22:08:09 ServerLOCAL sshd[767970]: Failed password for root from 165.227.175.57 port 55384 ssh2
Dec 22 22:08:11 ServerLOCAL sshd[767970]: Received disconnect from 165.227.175.57 port 55384:11: Bye Bye [preauth]
Dec 22 22:08:11 ServerLOCAL sshd[767970]: Disconnected from authenticating user root 165.227.175.57 port 55384 [preauth]
Dec 22 22:08:11 ServerLOCAL sshd[767965]: Received disconnect from 118.126.117.168 port 58364:11: Bye Bye [preauth]
Dec 22 22:08:11 ServerLOCAL sshd[767965]: Disconnected from authenticating user root 118.126.117.168 port 58364 [preauth]
Dec 22 22:08:28 ServerLOCAL sshd[767973]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.113.157.9 user=root
Dec 22 22:08:29 ServerLOCAL sshd[767976]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.161.246.17 user=root
Dec 22 22:08:30 ServerLOCAL sshd[767973]: Failed password for root from 103.113.157.9 port 57120 ssh2
Dec 22 22:08:31 ServerLOCAL sshd[767973]: Received disconnect from 103.113.157.9 port 57120:11: Bye Bye [preauth]
Dec 22 22:08:31 ServerLOCAL sshd[767973]: Disconnected from authenticating user root 103.113.157.9 port 57120 [preauth]
Dec 22 22:08:32 ServerLOCAL sshd[767976]: Failed password for root from 122.161.246.17 port 7303 ssh2
Dec 22 22:08:34 ServerLOCAL sshd[767976]: Received disconnect from 122.161.246.17 port 7303:11: Bye Bye [preauth]
Dec 22 22:08:34 ServerLOCAL sshd[767976]: Disconnected from authenticating user root 122.161.246.17 port 7303 [preauth]
Dec 22 22:08:39 ServerLOCAL sshd[767980]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.147.179.6 user=root
Dec 22 22:08:40 ServerLOCAL sshd[767980]: Failed password for root from 190.147.179.6 port 40910 ssh2
Dec 22 22:08:41 ServerLOCAL sshd[767980]: Received disconnect from 190.147.179.6 port 40910:11: Bye Bye [preauth]
Dec 22 22:08:41 ServerLOCAL sshd[767980]: Disconnected from authenticating user root 190.147.179.6 port 40910 [preauth]
Dec 22 22:08:41 ServerLOCAL sshd[767982]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.71.68.160 user=root
Dec 22 22:08:43 ServerLOCAL sshd[767982]: Failed password for root from 13.71.68.160 port 1024 ssh2
Dec 22 22:08:44 ServerLOCAL sshd[767982]: Received disconnect from 13.71.68.160 port 1024:11: Bye Bye [preauth]
Dec 22 22:08:44 ServerLOCAL sshd[767982]: Disconnected from authenticating user root 13.71.68.160 port 1024 [preauth]
Dec 22 22:08:44 ServerLOCAL sshd[767985]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.116.212 user=root
Dec 22 22:08:46 ServerLOCAL sshd[767985]: Failed password for root from 46.101.116.212 port 51582 ssh2
Dec 22 22:08:48 ServerLOCAL sshd[767985]: Received disconnect from 46.101.116.212 port 51582:11: Bye Bye [preauth]
Dec 22 22:08:48 ServerLOCAL sshd[767985]: Disconnected from authenticating user root 46.101.116.212 port 51582 [preauth]
Dec 22 22:08:50 ServerLOCAL sshd[767987]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.95.76 user=root
Dec 22 22:08:52 ServerLOCAL sshd[767987]: Failed password for root from 106.54.95.76 port 36542 ssh2
Dec 22 22:08:53 ServerLOCAL sshd[767987]: Received disconnect from 106.54.95.76 port 36542:11: Bye Bye [preauth]
Dec 22 22:08:53 ServerLOCAL sshd[767987]: Disconnected from authenticating user root 106.54.95.76 port 36542 [preauth]
Dec 22 22:08:58 ServerLOCAL sshd[767989]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.139.223 user=root
Dec 22 22:08:59 ServerLOCAL sshd[767989]: Failed password for root from 106.52.139.223 port 40222 ssh2
Dec 22 22:09:02 ServerLOCAL sshd[767989]: Received disconnect from 106.52.139.223 port 40222:11: Bye Bye [preauth]
Dec 22 22:09:02 ServerLOCAL sshd[767989]: Disconnected from authenticating user root 106.52.139.223 port 40222 [preauth]
Dec 22 22:09:05 ServerLOCAL sshd[767978]: Connection closed by 140.143.230.109 port 46594 [preauth]
Dec 22 22:09:15 ServerLOCAL sshd[767994]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.194.141 user=root
Dec 22 22:09:17 ServerLOCAL sshd[767994]: Failed password for root from 138.197.194.141 port 54968 ssh2
Dec 22 22:09:18 ServerLOCAL sshd[767994]: Received disconnect from 138.197.194.141 port 54968:11: Bye Bye [preauth]
Dec 22 22:09:18 ServerLOCAL sshd[767994]: Disconnected from authenticating user root 138.197.194.141 port 54968 [preauth]
Dec 22 22:09:18 ServerLOCAL sshd[767998]: Unable to negotiate with 112.85.42.200 port 41526: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth]
Dec 22 22:09:21 ServerLOCAL sshd[767997]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.0.70.14 user=root
Dec 22 22:09:22 ServerLOCAL sshd[767997]: Failed password for root from 58.0.70.14 port 44574 ssh2
Dec 22 22:09:22 ServerLOCAL sshd[768001]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.145.123.26 user=root
Dec 22 22:09:23 ServerLOCAL sshd[767997]: Received disconnect from 58.0.70.14 port 44574:11: Bye Bye [preauth]
Dec 22 22:09:23 ServerLOCAL sshd[767997]: Disconnected from authenticating user root 58.0.70.14 port 44574 [preauth]
Dec 22 22:09:23 ServerLOCAL sshd[768001]: Failed password for root from 190.145.123.26 port 54748 ssh2
Dec 22 22:09:25 ServerLOCAL sshd[768001]: Received disconnect from 190.145.123.26 port 54748:11: Bye Bye [preauth]
Dec 22 22:09:25 ServerLOCAL sshd[768001]: Disconnected from authenticating user root 190.145.123.26 port 54748 [preauth]
Dec 22 22:09:26 ServerLOCAL sshd[768004]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.232.107.14 user=root
Dec 22 22:09:26 ServerLOCAL sshd[768003]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.83.84.209 user=root
Dec 22 22:09:29 ServerLOCAL sshd[768004]: Failed password for root from 165.232.107.14 port 41316 ssh2
Dec 22 22:09:29 ServerLOCAL sshd[768003]: Failed password for root from 190.83.84.209 port 36416 ssh2
Dec 22 22:09:32 ServerLOCAL sshd[768003]: Received disconnect from 190.83.84.209 port 36416:11: Bye Bye [preauth]
Dec 22 22:09:32 ServerLOCAL sshd[768003]: Disconnected from authenticating user root 190.83.84.209 port 36416 [preauth]
Dec 22 22:09:32 ServerLOCAL sshd[768004]: Received disconnect from 165.232.107.14 port 41316:11: Bye Bye [preauth]
Dec 22 22:09:32 ServerLOCAL sshd[768004]: Disconnected from authenticating user root 165.232.107.14 port 41316 [preauth]
Dec 22 22:09:44 ServerLOCAL sshd[768011]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.195.32 user=root
Dec 22 22:09:44 ServerLOCAL sshd[768009]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.44.138.152 user=root
Dec 22 22:09:46 ServerLOCAL sshd[768011]: Failed password for root from 106.13.195.32 port 59194 ssh2
Dec 22 22:09:46 ServerLOCAL sshd[768009]: Failed password for root from 187.44.138.152 port 36718 ssh2
Dec 22 22:09:46 ServerLOCAL sshd[768011]: Received disconnect from 106.13.195.32 port 59194:11: Bye Bye [preauth]
Dec 22 22:09:46 ServerLOCAL sshd[768011]: Disconnected from authenticating user root 106.13.195.32 port 59194 [preauth]
Dec 22 22:09:47 ServerLOCAL sshd[768009]: Received disconnect from 187.44.138.152 port 36718:11: Bye Bye [preauth]
Dec 22 22:09:47 ServerLOCAL sshd[768009]: Disconnected from authenticating user root 187.44.138.152 port 36718 [preauth]
Dec 22 22:09:52 ServerLOCAL sshd[768015]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.158.213.234 user=root
Dec 22 22:09:53 ServerLOCAL sshd[768015]: Failed password for root from 150.158.213.234 port 34588 ssh2
Dec 22 22:09:54 ServerLOCAL sshd[768015]: Received disconnect from 150.158.213.234 port 34588:11: Bye Bye [preauth]
Dec 22 22:09:54 ServerLOCAL sshd[768015]: Disconnected from authenticating user root 150.158.213.234 port 34588 [preauth]
Dec 22 22:10:02 ServerLOCAL sshd[768020]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.139.68.79 user=root
Dec 22 22:10:04 ServerLOCAL sshd[768020]: Failed password for root from 185.139.68.79 port 58724 ssh2
Dec 22 22:10:06 ServerLOCAL sshd[768020]: Received disconnect from 185.139.68.79 port 58724:11: Bye Bye [preauth]
Dec 22 22:10:06 ServerLOCAL sshd[768020]: Disconnected from authenticating user root 185.139.68.79 port 58724 [preauth]
Dec 22 22:10:11 ServerLOCAL sshd[768025]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.231.0.56 user=root
Dec 22 22:10:12 ServerLOCAL sshd[768026]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.126.117.168 user=root
Dec 22 22:10:13 ServerLOCAL sshd[768025]: Failed password for root from 115.231.0.56 port 39585 ssh2
Dec 22 22:10:13 ServerLOCAL sshd[768025]: Received disconnect from 115.231.0.56 port 39585:11: Bye Bye [preauth]
Dec 22 22:10:13 ServerLOCAL sshd[768025]: Disconnected from authenticating user root 115.231.0.56 port 39585 [preauth]
Dec 22 22:10:14 ServerLOCAL sshd[768026]: Failed password for root from 118.126.117.168 port 55588 ssh2
Dec 22 22:10:15 ServerLOCAL sshd[768029]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.245.61.144 user=root
Dec 22 22:10:16 ServerLOCAL sshd[768026]: Received disconnect from 118.126.117.168 port 55588:11: Bye Bye [preauth]
Dec 22 22:10:16 ServerLOCAL sshd[768026]: Disconnected from authenticating user root 118.126.117.168 port 55588 [preauth]
Dec 22 22:10:17 ServerLOCAL sshd[768029]: Failed password for root from 1.245.61.144 port 55494 ssh2
Dec 22 22:10:18 ServerLOCAL sshd[768029]: Received disconnect from 1.245.61.144 port 55494:11: Bye Bye [preauth]
Dec 22 22:10:18 ServerLOCAL sshd[768029]: Disconnected from authenticating user root 1.245.61.144 port 55494 [preauth]
Dec 22 22:10:34 ServerLOCAL sshd[768033]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.116.212 user=root
Dec 22 22:10:35 ServerLOCAL sshd[768035]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.137.77.131 user=root
Dec 22 22:10:35 ServerLOCAL sshd[768033]: Failed password for root from 46.101.116.212 port 55980 ssh2
Dec 22 22:10:36 ServerLOCAL sshd[768033]: Received disconnect from 46.101.116.212 port 55980:11: Bye Bye [preauth]
Dec 22 22:10:36 ServerLOCAL sshd[768033]: Disconnected from authenticating user root 46.101.116.212 port 55980 [preauth]
Dec 22 22:10:37 ServerLOCAL sshd[768035]: Failed password for root from 79.137.77.131 port 51716 ssh2
Dec 22 22:10:37 ServerLOCAL sshd[768035]: Received disconnect from 79.137.77.131 port 51716:11: Bye Bye [preauth]
Dec 22 22:10:37 ServerLOCAL sshd[768035]: Disconnected from authenticating user root 79.137.77.131 port 51716 [preauth]
Dec 22 22:10:47 ServerLOCAL sshd[768038]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.158.74.141 user=root
Dec 22 22:10:49 ServerLOCAL sshd[768038]: Failed password for root from 129.158.74.141 port 60435 ssh2
Dec 22 22:10:49 ServerLOCAL sshd[768038]: Received disconnect from 129.158.74.141 port 60435:11: Bye Bye [preauth]
Dec 22 22:10:49 ServerLOCAL sshd[768038]: Disconnected from authenticating user root 129.158.74.141 port 60435 [preauth]
Dec 22 22:10:52 ServerLOCAL sshd[768041]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.254.54.96 user=root
Dec 22 22:10:54 ServerLOCAL sshd[768041]: Failed password for root from 43.254.54.96 port 34200 ssh2
Dec 22 22:10:55 ServerLOCAL sshd[768041]: Received disconnect from 43.254.54.96 port 34200:11: Bye Bye [preauth]
Dec 22 22:10:55 ServerLOCAL sshd[768041]: Disconnected from authenticating user root 43.254.54.96 port 34200 [preauth]
Dec 22 22:10:55 ServerLOCAL sshd[768043]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.113.157.9 user=root
Dec 22 22:10:58 ServerLOCAL sshd[768043]: Failed password for root from 103.113.157.9 port 37858 ssh2
Dec 22 22:11:01 ServerLOCAL sshd[768043]: Received disconnect from 103.113.157.9 port 37858:11: Bye Bye [preauth]
Dec 22 22:11:01 ServerLOCAL sshd[768043]: Disconnected from authenticating user root 103.113.157.9 port 37858 [preauth]
Dec 22 22:11:05 ServerLOCAL sshd[768046]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.102.46 user=root
Dec 22 22:11:06 ServerLOCAL sshd[768047]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.83.84.209 user=root
Dec 22 22:11:07 ServerLOCAL sshd[768046]: Failed password for root from 159.65.102.46 port 59380 ssh2
Dec 22 22:11:07 ServerLOCAL sshd[768046]: Received disconnect from 159.65.102.46 port 59380:11: Bye Bye [preauth]
Dec 22 22:11:07 ServerLOCAL sshd[768046]: Disconnected from authenticating user root 159.65.102.46 port 59380 [preauth]
Dec 22 22:11:08 ServerLOCAL sshd[768047]: Failed password for root from 190.83.84.209 port 59810 ssh2
Dec 22 22:11:10 ServerLOCAL sshd[768047]: Received disconnect from 190.83.84.209 port 59810:11: Bye Bye [preauth]
Dec 22 22:11:10 ServerLOCAL sshd[768047]: Disconnected from authenticating user root 190.83.84.209 port 59810 [preauth]
Dec 22 22:11:12 ServerLOCAL sshd[768051]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.147.179.6 user=root
Dec 22 22:11:14 ServerLOCAL sshd[768051]: Failed password for root from 190.147.179.6 port 53272 ssh2
Dec 22 22:11:15 ServerLOCAL sshd[768051]: Received disconnect from 190.147.179.6 port 53272:11: Bye Bye [preauth]
Dec 22 22:11:15 ServerLOCAL sshd[768051]: Disconnected from authenticating user root 190.147.179.6 port 53272 [preauth]
Dec 22 22:11:17 ServerLOCAL sshd[768053]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.70 user=root
Dec 22 22:11:19 ServerLOCAL sshd[768053]: Failed password for root from 49.88.112.70 port 45288 ssh2
Dec 22 22:11:22 ServerLOCAL sshd[768053]: Failed password for root from 49.88.112.70 port 45288 ssh2
Dec 22 22:11:22 ServerLOCAL sshd[768056]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.24.73.223 user=root
Dec 22 22:11:24 ServerLOCAL sshd[768056]: Failed password for root from 211.24.73.223 port 56576 ssh2
Dec 22 22:11:25 ServerLOCAL sshd[768056]: Received disconnect from 211.24.73.223 port 56576:11: Bye Bye [preauth]
Dec 22 22:11:25 ServerLOCAL sshd[768056]: Disconnected from authenticating user root 211.24.73.223 port 56576 [preauth]
Dec 22 22:11:26 ServerLOCAL sshd[768053]: Failed password for root from 49.88.112.70 port 45288 ssh2
Dec 22 22:11:26 ServerLOCAL sshd[768053]: Received disconnect from 49.88.112.70 port 45288:11: [preauth]
Dec 22 22:11:26 ServerLOCAL sshd[768053]: Disconnected from authenticating user root 49.88.112.70 port 45288 [preauth]
Dec 22 22:11:26 ServerLOCAL sshd[768053]: PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.70 user=root
Dec 22 22:11:46 ServerLOCAL sshd[768060]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.175.57 user=root
Dec 22 22:11:48 ServerLOCAL sshd[768060]: Failed password for root from 165.227.175.57 port 48202 ssh2
Dec 22 22:11:48 ServerLOCAL sshd[768060]: Received disconnect from 165.227.175.57 port 48202:11: Bye Bye [preauth]
Dec 22 22:11:48 ServerLOCAL sshd[768060]: Disconnected from authenticating user root 165.227.175.57 port 48202 [preauth]
Dec 22 22:11:51 ServerLOCAL sshd[768062]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.95.76 user=root
Dec 22 22:11:51 ServerLOCAL sshd[768065]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.161.246.17 user=root
Dec 22 22:11:53 ServerLOCAL sshd[768062]: Failed password for root from 106.54.95.76 port 54982 ssh2
Dec 22 22:11:53 ServerLOCAL sshd[768065]: Failed password for root from 122.161.246.17 port 34513 ssh2
Dec 22 22:11:55 ServerLOCAL sshd[768062]: Received disconnect from 106.54.95.76 port 54982:11: Bye Bye [preauth]
Dec 22 22:11:55 ServerLOCAL sshd[768062]: Disconnected from authenticating user root 106.54.95.76 port 54982 [preauth]
Dec 22 22:11:55 ServerLOCAL sshd[768065]: Received disconnect from 122.161.246.17 port 34513:11: Bye Bye [preauth]
Dec 22 22:11:55 ServerLOCAL sshd[768065]: Disconnected from authenticating user root 122.161.246.17 port 34513 [preauth]
Dec 22 22:11:57 ServerLOCAL sshd[768068]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.71.68.160 user=root
Téma: SSH a poblem po aktualizaci na 20.04 (Přečteno 3988 krát)