sshd[****] error

[Romanuy]

sshd[****] error: PAM: authentication error forillegal usr ftp from

Народ я в FreeBSD новичек помогите решить эту ошибку. Вечно в консоли лезет.

[Андрей]

Вариантов только 2:
1. Либо вы сами вводите неверный пароль.
2. Вас атакуют путем перебора логина/пароля.

Покажите полный вывод.

если так:

Код: Выделить всё

sshd[****] error: PAM: authentication error forillegal user ftp from <IP>

то это подбор пары логин/пароль с <IP>, который, возможно, принадлежит некой бот-сети.
Если вместо <IP> указано что-то типа /dev/tty... то это означает, что вы не правильно вводите пароль.

Варианты решения проблемы надо?

[Romanuy]

В общем я очень сильно как еще чайник в этой оси так как мне человек ставил а он сильно занятой и его сейчас фиг докричишься.
вот все достал из логов

Код: Выделить всё


Jun 20 18:35:25 gardnet sshd[81325]: reverse mapping checking getaddrinfo for dsl-201-101-11-227-sta.prod-empresarial.com.mx [201.101.11.227] failed - POSSIBLE BREAK-IN ATTEMPT!
Jun 20 18:35:25 gardnet sshd[81325]: Invalid user eagle from 201.101.11.227
Jun 20 18:35:25 gardnet sshd[81325]: error: PAM: authentication error for illegal user eagle from 201.101.11.227
Jun 20 18:35:25 gardnet sshd[81325]: Failed keyboard-interactive/pam for invalid user eagle from 201.101.11.227 port 32807 ssh2
Jun 20 18:40:12 gardnet sshd[81400]: Invalid user ed from 211.97.71.218
Jun 20 18:40:12 gardnet sshd[81400]: error: PAM: authentication error for illegal user ed from 211.97.71.218
Jun 20 18:40:12 gardnet sshd[81400]: Failed keyboard-interactive/pam for invalid user ed from 211.97.71.218 port 51338 ssh2
Jun 20 18:40:38 gardnet sshd[81403]: Invalid user ed from 117.102.29.26
Jun 20 18:40:38 gardnet sshd[81403]: error: PAM: authentication error for illegal user ed from 117.102.29.26
Jun 20 18:40:38 gardnet sshd[81403]: Failed keyboard-interactive/pam for invalid user ed from 117.102.29.26 port 59485 ssh2
Jun 20 18:41:46 gardnet sshd[81414]: Invalid user ed from 219.142.20.4
Jun 20 18:41:46 gardnet sshd[81414]: error: PAM: authentication error for illegal user ed from 219.142.20.4
Jun 20 18:41:46 gardnet sshd[81414]: Failed keyboard-interactive/pam for invalid user ed from 219.142.20.4 port 36907 ssh2
Jun 20 18:42:42 gardnet sshd[81434]: Invalid user edi from 222.221.12.104
Jun 20 18:42:42 gardnet sshd[81434]: error: PAM: authentication error for illegal user edi from 222.221.12.104
Jun 20 18:42:42 gardnet sshd[81434]: Failed keyboard-interactive/pam for invalid user edi from 222.221.12.104 port 33654 ssh2
Jun 20 18:42:47 gardnet sshd[81437]: Accepted keyboard-interactive/pam for root from 192.168.10.2 port 1700 ssh2
Jun 20 18:42:47 gardnet sshd[81437]: subsystem request for sftp
Jun 20 18:43:34 gardnet sshd[81451]: Invalid user edmund from 202.99.122.55
Jun 20 18:43:34 gardnet sshd[81451]: error: PAM: authentication error for illegal user edmund from 202.99.122.55
Jun 20 18:43:34 gardnet sshd[81451]: Failed keyboard-interactive/pam for invalid user edmund from 202.99.122.55 port 42516 ssh2
Jun 20 18:44:41 gardnet sshd[81474]: Invalid user edith from 61.189.184.76
Jun 20 18:44:42 gardnet sshd[81474]: error: PAM: authentication error for illegal user edith from 61.189.184.76
Jun 20 18:44:42 gardnet sshd[81474]: Failed keyboard-interactive/pam for invalid user edith from 61.189.184.76 port 1967 ssh2
Jun 20 18:47:03 gardnet sshd[81525]: Accepted keyboard-interactive/pam for root from 192.168.10.2 port 1972 ssh2
Jun 20 18:47:03 gardnet sshd[81525]: subsystem request for sftp
Jun 20 18:47:19 gardnet sshd[81531]: Invalid user edna from 208.124.186.154
Jun 20 18:47:20 gardnet sshd[81531]: error: PAM: authentication error for illegal user edna from 208.124.186.154
Jun 20 18:47:20 gardnet sshd[81531]: Failed keyboard-interactive/pam for invalid user edna from 208.124.186.154 port 33127 ssh2
Jun 20 18:48:22 gardnet sshd[81551]: reverse mapping checking getaddrinfo for 96-32-104-98.dhcp.ashv.nc.charter.com [96.32.104.98] failed - POSSIBLE BREAK-IN ATTEMPT!
Jun 20 18:48:22 gardnet sshd[81551]: Invalid user eduardo from 96.32.104.98
Jun 20 18:48:22 gardnet sshd[81551]: error: PAM: authentication error for illegal user eduardo from 96.32.104.98
Jun 20 18:48:22 gardnet sshd[81551]: Failed keyboard-interactive/pam for invalid user eduardo from 96.32.104.98 port 57163 ssh2
Jun 20 18:49:19 gardnet sshd[81562]: Invalid user edu from 165.98.133.98
Jun 20 18:49:19 gardnet sshd[81562]: error: PAM: authentication error for illegal user edu from up.upoli.edu.ni
Jun 20 18:49:19 gardnet sshd[81562]: Failed keyboard-interactive/pam for invalid user edu from 165.98.133.98 port 40660 ssh2
Jun 20 18:52:59 gardnet sshd[81613]: Invalid user edward from 76.7.160.91
Jun 20 18:53:00 gardnet sshd[81613]: error: PAM: authentication error for illegal user edward from 76.7.160.91
Jun 20 18:53:00 gardnet sshd[81613]: Failed keyboard-interactive/pam for invalid user edward from 76.7.160.91 port 7803 ssh2
Jun 20 18:54:28 gardnet sshd[81646]: Invalid user edwin from 97.64.181.131
Jun 20 18:54:29 gardnet sshd[81646]: error: PAM: authentication error for illegal user edwin from 97.64.181.131
Jun 20 18:54:29 gardnet sshd[81646]: Failed keyboard-interactive/pam for invalid user edwin from 97.64.181.131 port 50358 ssh2
Jun 20 18:58:13 gardnet sshd[81715]: Invalid user eee from 64.60.233.164
Jun 20 18:58:13 gardnet sshd[81715]: error: PAM: authentication error for illegal user eee from 64.60.233.164
Jun 20 18:58:13 gardnet sshd[81715]: Failed keyboard-interactive/pam for invalid user eee from 64.60.233.164 port 37101 ssh2
Jun 20 18:58:51 gardnet sshd[81718]: reverse mapping checking getaddrinfo for ptr [70.25.2.57] failed - POSSIBLE BREAK-IN ATTEMPT!
Jun 20 18:58:51 gardnet sshd[81718]: Invalid user edy from 70.25.2.57
Jun 20 18:58:51 gardnet sshd[81718]: error: PAM: authentication error for illegal user edy from 70.25.2.57
Jun 20 18:58:51 gardnet sshd[81718]: Failed keyboard-interactive/pam for invalid user edy from 70.25.2.57 port 34404 ssh2
Jun 20 19:01:11 gardnet sshd[81789]: Invalid user egarcia from 196.211.66.58
Jun 20 19:01:11 gardnet sshd[81789]: error: PAM: authentication error for illegal user egarcia from 196.211.66.58
Jun 20 19:01:11 gardnet sshd[81789]: Failed keyboard-interactive/pam for invalid user egarcia from 196.211.66.58 port 38663 ssh2
Jun 20 19:02:44 gardnet sshd[81800]: Invalid user eggdrop from 58.60.146.34
Jun 20 19:02:45 gardnet sshd[81800]: error: PAM: authentication error for illegal user eggdrop from 58.60.146.34
Jun 20 19:02:45 gardnet sshd[81800]: Failed keyboard-interactive/pam for invalid user eggdrop from 58.60.146.34 port 35632 ssh2
Jun 20 19:03:45 gardnet sshd[81820]: Invalid user ejabberd from 88.79.143.68
Jun 20 19:03:45 gardnet sshd[81820]: error: PAM: authentication error for illegal user ejabberd from 88.79.143.68
Jun 20 19:03:45 gardnet sshd[81820]: Failed keyboard-interactive/pam for invalid user ejabberd from 88.79.143.68 port 32697 ssh2
Jun 20 19:04:01 gardnet sshd[81823]: Invalid user eko from 114.255.59.3
Jun 20 19:04:01 gardnet sshd[81823]: error: PAM: authentication error for illegal user eko from 114.255.59.3
Jun 20 19:04:01 gardnet sshd[81823]: Failed keyboard-interactive/pam for invalid user eko from 114.255.59.3 port 52026 ssh2
Jun 20 19:07:36 gardnet sshd[81878]: Invalid user ela from 216.130.3.209
Jun 20 19:07:37 gardnet sshd[81878]: error: PAM: authentication error for illegal user ela from 216.130.3.209
Jun 20 19:07:37 gardnet sshd[81878]: Failed keyboard-interactive/pam for invalid user ela from 216.130.3.209 port 51288 ssh2
Jun 20 19:09:26 gardnet sshd[81906]: Invalid user ela from 200.247.215.250
Jun 20 19:09:27 gardnet sshd[81906]: error: PAM: authentication error for illegal user ela from 200.247.215.250
Jun 20 19:09:27 gardnet sshd[81906]: Failed keyboard-interactive/pam for invalid user ela from 200.247.215.250 port 38966 ssh2
Jun 20 19:11:32 gardnet sshd[81951]: Invalid user elaine from 58.223.238.7
Jun 20 19:11:32 gardnet sshd[81951]: error: PAM: authentication error for illegal user elaine from 58.223.238.7
Jun 20 19:11:32 gardnet sshd[81951]: Failed keyboard-interactive/pam for invalid user elaine from 58.223.238.7 port 42207 ssh2
Jun 20 19:13:00 gardnet sshd[81971]: Invalid user elaine from 188.20.64.10
Jun 20 19:13:00 gardnet sshd[81971]: error: PAM: authentication error for illegal user elaine from 188.20.64.10
Jun 20 19:13:00 gardnet sshd[81971]: Failed keyboard-interactive/pam for invalid user elaine from 188.20.64.10 port 47718 ssh2
Jun 20 19:15:22 gardnet sshd[82015]: Invalid user elaine from 87.241.33.10
Jun 20 19:15:23 gardnet sshd[82015]: error: PAM: authentication error for illegal user elaine from 87.241.33.10
Jun 20 19:15:23 gardnet sshd[82015]: Failed keyboard-interactive/pam for invalid user elaine from 87.241.33.10 port 58427 ssh2
Jun 20 19:18:08 gardnet sshd[82048]: Invalid user elena from 200.171.178.213
Jun 20 19:18:09 gardnet sshd[82048]: error: PAM: authentication error for illegal user elena from 200.171.178.213
Jun 20 19:18:09 gardnet sshd[82048]: Failed keyboard-interactive/pam for invalid user elena from 200.171.178.213 port 50032 ssh2
Jun 20 19:19:46 gardnet sshd[82062]: Invalid user eli from 220.130.123.5
Jun 20 19:19:47 gardnet sshd[82062]: error: PAM: authentication error for illegal user eli from 220.130.123.5
Jun 20 19:19:47 gardnet sshd[82062]: Failed keyboard-interactive/pam for invalid user eli from 220.130.123.5 port 55832 ssh2
Jun 20 19:21:59 gardnet sshd[82104]: Invalid user elena from 221.226.2.179
Jun 20 19:21:59 gardnet sshd[82104]: error: PAM: authentication error for illegal user elena from 221.226.2.179
Jun 20 19:21:59 gardnet sshd[82104]: Failed keyboard-interactive/pam for invalid user elena from 221.226.2.179 port 39792 ssh2
Jun 20 19:23:42 gardnet sshd[82135]: Invalid user eliane from 207.81.103.10
Jun 20 19:23:43 gardnet sshd[82135]: error: PAM: authentication error for illegal user eliane from 207.81.103.10
Jun 20 19:23:43 gardnet sshd[82135]: Failed keyboard-interactive/pam for invalid user eliane from 207.81.103.10 port 59164 ssh2
Jun 20 19:26:01 gardnet sshd[82175]: reverse mapping checking getaddrinfo for dsl-201-155-11-3-sta.prod-empresarial.com.mx [201.155.11.3] failed - POSSIBLE BREAK-IN ATTEMPT!
Jun 20 19:26:01 gardnet sshd[82175]: Invalid user eliane from 201.155.11.3
Jun 20 19:26:01 gardnet sshd[82175]: error: PAM: authentication error for illegal user eliane from 201.155.11.3
Jun 20 19:26:01 gardnet sshd[82175]: Failed keyboard-interactive/pam for invalid user eliane from 201.155.11.3 port 58798 ssh2
Jun 20 19:27:01 gardnet sshd[82186]: Invalid user eli from 122.96.58.67
Jun 20 19:27:01 gardnet sshd[82186]: error: PAM: authentication error for illegal user eli from 122.96.58.67
Jun 20 19:27:01 gardnet sshd[82186]: Failed keyboard-interactive/pam for invalid user eli from 122.96.58.67 port 60239 ssh2
Jun 20 19:27:28 gardnet sshd[82206]: Invalid user elis from 202.103.52.147
Jun 20 19:27:28 gardnet sshd[82206]: error: PAM: authentication error for illegal user elis from 202.103.52.147
Jun 20 19:27:28 gardnet sshd[82206]: Failed keyboard-interactive/pam for invalid user elis from 202.103.52.147 port 56225 ssh2
Jun 20 19:29:22 gardnet sshd[82225]: Invalid user elisabeth from 203.228.212.28
Jun 20 19:29:22 gardnet sshd[82225]: error: PAM: authentication error for illegal user elisabeth from 203.228.212.28
Jun 20 19:29:22 gardnet sshd[82225]: Failed keyboard-interactive/pam for invalid user elisabeth from 203.228.212.28 port 46480 ssh2
Jun 20 19:30:38 gardnet sshd[82261]: Invalid user ellen from 202.109.115.169
Jun 20 19:30:38 gardnet sshd[82261]: error: PAM: authentication error for illegal user ellen from 202.109.115.169
Jun 20 19:30:38 gardnet sshd[82261]: Failed keyboard-interactive/pam for invalid user ellen from 202.109.115.169 port 47511 ssh2
Jun 20 19:31:13 gardnet sshd[82272]: Invalid user elizabeth from 83.111.52.14
Jun 20 19:31:13 gardnet sshd[82272]: error: PAM: authentication error for illegal user elizabeth from 83.111.52.14
Jun 20 19:31:13 gardnet sshd[82272]: Failed keyboard-interactive/pam for invalid user elizabeth from 83.111.52.14 port 45944 ssh2
Jun 20 19:36:50 gardnet sshd[82351]: reverse mapping checking getaddrinfo for 187-51-47-12.customer.tdatabrasil.net.br [187.51.47.12] failed - POSSIBLE BREAK-IN ATTEMPT!
Jun 20 19:36:50 gardnet sshd[82351]: Invalid user els from 187.51.47.12
Jun 20 19:36:51 gardnet sshd[82351]: error: PAM: authentication error for illegal user els from 187.51.47.12
Jun 20 19:36:51 gardnet sshd[82351]: Failed keyboard-interactive/pam for invalid user els from 187.51.47.12 port 29509 ssh2
Jun 20 19:38:09 gardnet sshd[82372]: Invalid user elvis from 71.138.155.177
Jun 20 19:38:10 gardnet sshd[82372]: error: PAM: authentication error for illegal user elvis from 71.138.155.177
Jun 20 19:38:10 gardnet sshd[82372]: Failed keyboard-interactive/pam for invalid user elvis from 71.138.155.177 port 38346 ssh2
Jun 20 19:38:18 gardnet sshd[82370]: reverse mapping checking getaddrinfo for 35.24.177.222.cq.cq.cta.net.cn [222.177.24.35] failed - POSSIBLE BREAK-IN ATTEMPT!
Jun 20 19:38:18 gardnet sshd[82370]: Invalid user email from 222.177.24.35
Jun 20 19:38:19 gardnet sshd[82370]: error: PAM: authentication error for illegal user email from 222.177.24.35
Jun 20 19:38:19 gardnet sshd[82370]: Failed keyboard-interactive/pam for invalid user email from 222.177.24.35 port 53606 ssh2
Jun 20 19:38:22 gardnet sshd[82375]: Invalid user ellison from 190.41.164.23
Jun 20 19:38:23 gardnet sshd[82375]: error: PAM: authentication error for illegal user ellison from 190.41.164.23
Jun 20 19:38:23 gardnet sshd[82375]: Failed keyboard-interactive/pam for invalid user ellison from 190.41.164.23 port 15818 ssh2
Jun 20 19:40:22 gardnet sshd[82419]: Accepted keyboard-interactive/pam for root from 192.168.10.2 port 4000 ssh2
Jun 20 19:40:22 gardnet sshd[82419]: subsystem request for sftp
Jun 20 19:41:52 gardnet sshd[82433]: Invalid user emi from 217.128.35.244
Jun 20 19:41:53 gardnet sshd[82433]: error: PAM: authentication error for illegal user emi from 217.128.35.244
Jun 20 19:41:53 gardnet sshd[82433]: Failed keyboard-interactive/pam for invalid user emi from 217.128.35.244 port 47286 ssh2
Jun 20 19:41:59 gardnet sshd[82436]: Accepted keyboard-interactive/pam for root from 192.168.10.2 port 4008 ssh2
Jun 20 19:41:59 gardnet sshd[82436]: subsystem request for sftp
Jun 20 19:43:26 gardnet sshd[82467]: Invalid user emiko from 97.64.181.131
Jun 20 19:43:26 gardnet sshd[82467]: error: PAM: authentication error for illegal user emiko from 97.64.181.131
Jun 20 19:43:26 gardnet sshd[82467]: Failed keyboard-interactive/pam for invalid user emiko from 97.64.181.131 port 49291 ssh2
Jun 20 19:44:50 gardnet sshd[82490]: Invalid user emil from 79.188.218.6
Jun 20 19:44:50 gardnet sshd[82490]: error: PAM: authentication error for illegal user emil from 79.188.218.6
Jun 20 19:44:50 gardnet sshd[82490]: Failed keyboard-interactive/pam for invalid user emil from 79.188.218.6 port 54677 ssh2
Jun 20 19:46:45 gardnet sshd[82527]: Invalid user emilie from 221.11.1.82
Jun 20 19:46:45 gardnet sshd[82527]: error: PAM: authentication error for illegal user emilie from 221.11.1.82
Jun 20 19:46:45 gardnet sshd[82527]: Failed keyboard-interactive/pam for invalid user emilie from 221.11.1.82 port 44209 ssh2
Jun 20 19:47:40 gardnet sshd[82538]: reverse mapping checking getaddrinfo for ip-200-13-22-91-mx.marcatel.net.mx [200.13.22.91] failed - POSSIBLE BREAK-IN ATTEMPT!
Jun 20 19:47:40 gardnet sshd[82538]: Invalid user emil from 200.13.22.91
Jun 20 19:47:41 gardnet sshd[82538]: error: PAM: authentication error for illegal user emil from 200.13.22.91
Jun 20 19:47:41 gardnet sshd[82538]: Failed keyboard-interactive/pam for invalid user emil from 200.13.22.91 port 33535 ssh2
Jun 20 19:50:09 gardnet sshd[82588]: reverse mapping checking getaddrinfo for rialat.tux.lv [194.187.100.118] failed - POSSIBLE BREAK-IN ATTEMPT!
Jun 20 19:50:09 gardnet sshd[82588]: Invalid user emilio from 194.187.100.118
Jun 20 19:50:09 gardnet sshd[82588]: error: PAM: authentication error for illegal user emilio from 194.187.100.118
Jun 20 19:50:09 gardnet sshd[82588]: Failed keyboard-interactive/pam for invalid user emilio from 194.187.100.118 port 51404 ssh2
Jun 20 19:52:16 gardnet sshd[82616]: Invalid user emily from 69.250.227.138
Jun 20 19:52:17 gardnet sshd[82616]: error: PAM: authentication error for illegal user emily from 69.250.227.138
Jun 20 19:52:17 gardnet sshd[82616]: Failed keyboard-interactive/pam for invalid user emily from 69.250.227.138 port 53399 ssh2
Jun 20 19:54:23 gardnet sshd[82649]: Invalid user emily from 190.34.172.5
Jun 20 19:54:24 gardnet sshd[82649]: error: PAM: authentication error for illegal user emily from 190.34.172.5
Jun 20 19:54:24 gardnet sshd[82649]: Failed keyboard-interactive/pam for invalid user emily from 190.34.172.5 port 51467 ssh2
Jun 20 19:56:14 gardnet sshd[82686]: Invalid user emma from 87.238.9.15
Jun 20 19:56:15 gardnet sshd[82686]: error: PAM: authentication error for illegal user emma from 87.238.9.15
Jun 20 19:56:15 gardnet sshd[82686]: Failed keyboard-interactive/pam for invalid user emma from 87.238.9.15 port 13981 ssh2
Jun 20 19:57:57 gardnet sshd[82706]: Invalid user emma from 97.94.204.158
Jun 20 19:57:57 gardnet sshd[82706]: error: PAM: authentication error for illegal user emma from 97.94.204.158
Jun 20 19:57:57 gardnet sshd[82706]: Failed keyboard-interactive/pam for invalid user emma from 97.94.204.158 port 8931 ssh2
Jun 20 19:59:04 gardnet sshd[82725]: Invalid user ems from 84.73.149.253
Jun 20 19:59:04 gardnet sshd[82725]: error: PAM: authentication error for illegal user ems from 84.73.149.253
Jun 20 19:59:04 gardnet sshd[82725]: Failed keyboard-interactive/pam for invalid user ems from 84.73.149.253 port 3685 ssh2
Jun 20 20:01:53 gardnet sshd[82789]: reverse mapping checking getaddrinfo for 201-24-4-218.cpece300.ipd.brasiltelecom.net.br [201.24.4.218] failed - POSSIBLE BREAK-IN ATTEMPT!
Jun 20 20:01:53 gardnet sshd[82789]: Invalid user enable from 201.24.4.218
Jun 20 20:01:53 gardnet sshd[82789]: error: PAM: authentication error for illegal user enable from 201.24.4.218
Jun 20 20:01:53 gardnet sshd[82789]: Failed keyboard-interactive/pam for invalid user enable from 201.24.4.218 port 10719 ssh2
Jun 20 20:03:14 gardnet sshd[82817]: reverse mapping checking getaddrinfo for gw-baneasa-v422.comtelnetworks.eu [193.230.208.98] failed - POSSIBLE BREAK-IN ATTEMPT!
Jun 20 20:03:14 gardnet sshd[82817]: Invalid user ene from 193.230.208.98
Jun 20 20:03:15 gardnet sshd[82817]: error: PAM: authentication error for illegal user ene from 193.230.208.98
Jun 20 20:03:15 gardnet sshd[82817]: Failed keyboard-interactive/pam for invalid user ene from 193.230.208.98 port 17802 ssh2
Jun 20 20:06:02 gardnet sshd[82842]: reverse mapping checking getaddrinfo for 59.162.126.18.dsl-kerala-static.vsnl.net.in [59.162.126.18] failed - POSSIBLE BREAK-IN ATTEMPT!
Jun 20 20:06:02 gardnet sshd[82842]: Invalid user eng1 from 59.162.126.18
Jun 20 20:06:02 gardnet sshd[82842]: error: PAM: authentication error for illegal user eng1 from 59.162.126.18
Jun 20 20:06:02 gardnet sshd[82842]: Failed keyboard-interactive/pam for invalid user eng1 from 59.162.126.18 port 26974 ssh2
Jun 20 20:06:28 gardnet sshd[82866]: Invalid user eng from 195.37.252.141
Jun 20 20:06:28 gardnet sshd[82866]: error: PAM: authentication error for illegal user eng from 195.37.252.141
Jun 20 20:06:28 gardnet sshd[82866]: Failed keyboard-interactive/pam for invalid user eng from 195.37.252.141 port 23818 ssh2
Jun 20 20:06:39 gardnet sshd[82869]: Accepted keyboard-interactive/pam for root from 192.168.10.2 port 1284 ssh2
Jun 20 20:06:39 gardnet sshd[82869]: subsystem request for sftp
Jun 20 20:08:21 gardnet sshd[82891]: Invalid user engineering from 216.244.157.116
Jun 20 20:08:22 gardnet sshd[82891]: error: PAM: authentication error for illegal user engineering from 216.244.157.116
Jun 20 20:08:22 gardnet sshd[82891]: Failed keyboard-interactive/pam for invalid user engineering from 216.244.157.116 port 52305 ssh2
Jun 20 20:12:02 gardnet sshd[82960]: Invalid user english from 124.82.237.2
Jun 20 20:12:03 gardnet sshd[82960]: error: PAM: authentication error for illegal user english from 124.82.237.2
Jun 20 20:12:03 gardnet sshd[82960]: Failed keyboard-interactive/pam for invalid user english from 124.82.237.2 port 51164 ssh2
Jun 20 20:12:03 gardnet sshd[82977]: Accepted keyboard-interactive/pam for root from 192.168.10.2 port 1721 ssh2
Jun 20 20:12:03 gardnet sshd[82977]: subsystem request for sftp
Jun 20 20:13:18 gardnet sshd[82994]: Invalid user english from 190.11.19.53
Jun 20 20:13:18 gardnet sshd[82994]: error: PAM: authentication error for illegal user english from 190.11.19.53
Jun 20 20:13:18 gardnet sshd[82994]: Failed keyboard-interactive/pam for invalid user english from 190.11.19.53 port 17181 ssh2
Jun 20 20:14:07 gardnet sshd[83005]: Invalid user enlace from 218.80.235.36
Jun 20 20:14:08 gardnet sshd[83005]: error: PAM: authentication error for illegal user enlace from 218.80.235.36
Jun 20 20:14:08 gardnet sshd[83005]: Failed keyboard-interactive/pam for invalid user enlace from 218.80.235.36 port 57529 ssh2
Jun 20 20:14:45 gardnet sshd[83008]: Invalid user english from 61.29.122.37
Jun 20 20:14:46 gardnet sshd[83008]: error: PAM: authentication error for illegal user english from shotz.com.au
Jun 20 20:14:46 gardnet sshd[83008]: Failed keyboard-interactive/pam for invalid user english from 61.29.122.37 port 54411 ssh2
Jun 20 20:17:22 gardnet sshd[83053]: Invalid user enrico from 217.91.47.111
Jun 20 20:17:22 gardnet sshd[83053]: error: PAM: authentication error for illegal user enrico from 217.91.47.111
Jun 20 20:17:22 gardnet sshd[83053]: Failed keyboard-interactive/pam for invalid user enrico from 217.91.47.111 port 37821 ssh2
Jun 20 20:19:33 gardnet sshd[83081]: Invalid user enrique from 219.151.4.207
Jun 20 20:19:33 gardnet sshd[83081]: error: PAM: authentication error for illegal user enrique from 219.151.4.207
Jun 20 20:19:33 gardnet sshd[83081]: Failed keyboard-interactive/pam for invalid user enrique from 219.151.4.207 port 58004 ssh2
Jun 20 20:20:42 gardnet sshd[83106]: Invalid user eric from 217.136.242.67
Jun 20 20:20:43 gardnet sshd[83106]: error: PAM: authentication error for illegal user eric from 217.136.242.67
Jun 20 20:20:43 gardnet sshd[83106]: Failed keyboard-interactive/pam for invalid user eric from 217.136.242.67 port 38023 ssh2
Jun 20 20:23:50 gardnet sshd[83161]: Invalid user eric from 81.134.118.76
Jun 20 20:23:50 gardnet sshd[83161]: error: PAM: authentication error for illegal user eric from 81.134.118.76
Jun 20 20:23:50 gardnet sshd[83161]: Failed keyboard-interactive/pam for invalid user eric from 81.134.118.76 port 34956 ssh2
Jun 20 20:25:14 gardnet sshd[83200]: Invalid user eric from 64.122.177.164
Jun 20 20:25:14 gardnet sshd[83200]: error: PAM: authentication error for illegal user eric from 64.122.177.164
Jun 20 20:25:14 gardnet sshd[83200]: Failed keyboard-interactive/pam for invalid user eric from 64.122.177.164 port 49046 ssh2
Jun 20 20:25:53 gardnet sshd[83203]: Invalid user eric from 81.223.62.233
Jun 20 20:25:53 gardnet sshd[83203]: error: PAM: authentication error for illegal user eric from 81.223.62.233
Jun 20 20:25:53 gardnet sshd[83203]: Failed keyboard-interactive/pam for invalid user eric from 81.223.62.233 port 44273 ssh2
Jun 20 20:30:58 gardnet sshd[83283]: Invalid user eric from 204.193.6.21
Jun 20 20:30:58 gardnet sshd[83283]: error: PAM: authentication error for illegal user eric from 204.193.6.21
Jun 20 20:30:58 gardnet sshd[83283]: Failed keyboard-interactive/pam for invalid user eric from 204.193.6.21 port 48951 ssh2
Jun 20 20:31:26 gardnet sshd[83294]: Invalid user erica from 83.13.126.74
Jun 20 20:31:26 gardnet sshd[83294]: error: PAM: authentication error for illegal user erica from 83.13.126.74
Jun 20 20:31:26 gardnet sshd[83294]: Failed keyboard-interactive/pam for invalid user erica from 83.13.126.74 port 44489 ssh2
Jun 20 20:33:59 gardnet sshd[83334]: Invalid user erick from 113.100.130.7
Jun 20 20:33:59 gardnet sshd[83334]: error: PAM: authentication error for illegal user erick from 113.100.130.7
Jun 20 20:33:59 gardnet sshd[83334]: Failed keyboard-interactive/pam for invalid user erick from 113.100.130.7 port 42950 ssh2
Jun 20 20:34:39 gardnet sshd[83345]: Accepted keyboard-interactive/pam for root from 192.168.10.2 port 3444 ssh2
Jun 20 20:34:39 gardnet sshd[83345]: subsystem request for sftp
Jun 20 20:35:13 gardnet sshd[83365]: Invalid user ericliu from 206.72.242.4
Jun 20 20:35:14 gardnet sshd[83365]: error: PAM: authentication error for illegal user ericliu from granite.gar.net
Jun 20 20:35:14 gardnet sshd[83365]: Failed keyboard-interactive/pam for invalid user ericliu from 206.72.242.4 port 60845 ssh2
Jun 20 20:36:14 gardnet sshd[83385]: Accepted keyboard-interactive/pam for root from 192.168.10.2 port 3537 ssh2
Jun 20 20:36:14 gardnet sshd[83385]: subsystem request for sftp
Jun 20 20:37:21 gardnet sshd[83399]: Invalid user erik from 207.67.226.88
Jun 20 20:37:21 gardnet sshd[83399]: error: PAM: authentication error for illegal user erik from 207.67.226.88
Jun 20 20:37:21 gardnet sshd[83399]: Failed keyboard-interactive/pam for invalid user erik from 207.67.226.88 port 34882 ssh2
Jun 20 20:39:10 gardnet sshd[83424]: Invalid user erika from 116.228.139.242
Jun 20 20:39:11 gardnet sshd[83424]: error: PAM: authentication error for illegal user erika from 116.228.139.242
Jun 20 20:39:11 gardnet sshd[83424]: Failed keyboard-interactive/pam for invalid user erika from 116.228.139.242 port 36808 ssh2
Jun 20 20:40:35 gardnet sshd[83452]: Invalid user erika from 88.191.50.131
Jun 20 20:40:35 gardnet sshd[83452]: error: PAM: authentication error for illegal user erika from 88.191.50.131
Jun 20 20:40:35 gardnet sshd[83452]: Failed keyboard-interactive/pam for invalid user erika from 88.191.50.131 port 59847 ssh2
Jun 20 20:41:48 gardnet sshd[83463]: Invalid user ernie from 62.99.198.61
Jun 20 20:41:48 gardnet sshd[83463]: error: PAM: authentication error for illegal user ernie from 62.99.198.61
Jun 20 20:41:48 gardnet sshd[83463]: Failed keyboard-interactive/pam for invalid user ernie from 62.99.198.61 port 48087 ssh2
Jun 20 20:44:24 gardnet sshd[83511]: Accepted keyboard-interactive/pam for root from 192.168.10.2 port 4146 ssh2
Jun 20 20:44:24 gardnet sshd[83511]: subsystem request for sftp
Jun 20 20:44:30 gardnet sshd[83517]: Accepted keyboard-interactive/pam for root from 192.168.10.2 port 4147 ssh2
Jun 20 20:44:30 gardnet sshd[83517]: subsystem request for sftp
Jun 20 20:44:35 gardnet sshd[83523]: Invalid user ernst from 190.81.71.218
Jun 20 20:44:36 gardnet sshd[83523]: error: PAM: authentication error for illegal user ernst from 190.81.71.218
Jun 20 20:44:36 gardnet sshd[83523]: Failed keyboard-interactive/pam for invalid user ernst from 190.81.71.218 port 27544 ssh2
Jun 20 20:46:29 gardnet sshd[83559]: Accepted keyboard-interactive/pam for root from 192.168.10.2 port 4199 ssh2
Jun 20 20:46:29 gardnet sshd[83559]: subsystem request for sftp
Jun 20 20:46:45 gardnet sshd[83565]: reverse mapping checking getaddrinfo for 130.226.55.116.broad.km.yn.dynamic.163data.com.cn [116.55.226.130] failed - POSSIBLE BREAK-IN ATTEMPT!
Jun 20 20:46:45 gardnet sshd[83565]: Invalid user erwan from 116.55.226.130
Jun 20 20:46:45 gardnet sshd[83565]: error: PAM: authentication error for illegal user erwan from 116.55.226.130
Jun 20 20:46:45 gardnet sshd[83565]: Failed keyboard-interactive/pam for invalid user erwan from 116.55.226.130 port 28254 ssh2
Jun 20 20:47:59 gardnet sshd[83576]: Accepted keyboard-interactive/pam for root from 192.168.10.2 port 4267 ssh2
Jun 20 20:47:59 gardnet sshd[83576]: subsystem request for sftp
Jun 20 20:49:21 gardnet sshd[83607]: Invalid user esther from 219.95.65.19
Jun 20 20:49:22 gardnet sshd[83607]: error: PAM: authentication error for illegal user esther from 219.95.65.19
Jun 20 20:49:22 gardnet sshd[83607]: Failed keyboard-interactive/pam for invalid user esther from 219.95.65.19 port 51751 ssh2
Jun 20 20:49:23 gardnet sshd[83609]: Invalid user eszter from 83.235.234.133
Jun 20 20:49:23 gardnet sshd[83609]: error: PAM: authentication error for illegal user eszter from 83.235.234.133
Jun 20 20:49:23 gardnet sshd[83609]: Failed keyboard-interactive/pam for invalid user eszter from 83.235.234.133 port 5266 ssh2
Jun 20 20:50:38 gardnet sshd[83635]: Accepted keyboard-interactive/pam for root from 192.168.10.2 port 4479 ssh2
Jun 20 20:50:38 gardnet sshd[83635]: subsystem request for sftp
Jun 20 20:51:55 gardnet sshd[83658]: Invalid user et from 83.19.243.98
Jun 20 20:51:55 gardnet sshd[83658]: error: PAM: authentication error for illegal user et from 83.19.243.98
Jun 20 20:51:55 gardnet sshd[83658]: Failed keyboard-interactive/pam for invalid user et from 83.19.243.98 port 43145 ssh2
Jun 20 20:52:29 gardnet sshd[83661]: Accepted keyboard-interactive/pam for root from 192.168.10.2 port 4550 ssh2
Jun 20 20:52:49 gardnet shutdown: reboot by root:
Jun 20 20:52:51 gardnet sshd[1486]: Received signal 15; terminating.
Jun 20 20:54:06 gardnet sshd[1487]: Server listening on :: port 22.
Jun 20 20:54:06 gardnet sshd[1487]: Server listening on 0.0.0.0 port 22.
Jun 20 20:55:07 gardnet sshd[1689]: Invalid user eva from 193.253.208.37
Jun 20 20:55:07 gardnet sshd[1689]: error: PAM: authentication error for illegal user eva from 193.253.208.37
Jun 20 20:55:07 gardnet sshd[1689]: Failed keyboard-interactive/pam for invalid user eva from 193.253.208.37 port 60975 ssh2
Jun 20 20:55:27 gardnet sshd[1687]: Accepted keyboard-interactive/pam for root from 192.168.10.2 port 4709 ssh2
Jun 20 20:55:59 gardnet sshd[1824]: Accepted keyboard-interactive/pam for root from 192.168.10.2 port 4730 ssh2
Jun 20 20:55:59 gardnet sshd[1824]: subsystem request for sftp
Jun 20 20:56:15 gardnet sshd[1838]: Invalid user eva from 165.98.133.99
Jun 20 20:56:15 gardnet sshd[1838]: error: PAM: authentication error for illegal user eva from 165.98.133.99
Jun 20 20:56:15 gardnet sshd[1838]: Failed keyboard-interactive/pam for invalid user eva from 165.98.133.99 port 45005 ssh2
Jun 20 20:57:19 gardnet sshd[1880]: Invalid user eve from 208.16.72.252
Jun 20 20:57:20 gardnet sshd[1880]: error: PAM: authentication error for illegal user eve from 208.16.72.252
Jun 20 20:57:20 gardnet sshd[1880]: Failed keyboard-interactive/pam for invalid user eve from 208.16.72.252 port 2988 ssh2
Jun 20 20:57:53 gardnet sshd[1919]: Invalid user evans from 81.169.180.154
Jun 20 20:57:53 gardnet sshd[1919]: error: PAM: authentication error for illegal user evans from videva.ifmt.de
Jun 20 20:57:53 gardnet sshd[1919]: Failed keyboard-interactive/pam for invalid user evans from 81.169.180.154 port 46310 ssh2
Jun 20 21:03:01 gardnet sshd[2061]: Invalid user everton from 62.43.68.46
Jun 20 21:03:02 gardnet sshd[2061]: error: PAM: authentication error for illegal user everton from 62.43.68.46
Jun 20 21:03:02 gardnet sshd[2061]: Failed keyboard-interactive/pam for invalid user everton from 62.43.68.46 port 1899 ssh2
Jun 20 21:03:34 gardnet sshd[2081]: Invalid user everton from 218.207.167.200
Jun 20 21:03:36 gardnet sshd[2081]: error: PAM: authentication error for illegal user everton from 218.207.167.200
Jun 20 21:03:36 gardnet sshd[2081]: Failed keyboard-interactive/pam for invalid user everton from 218.207.167.200 port 60937 ssh2
Jun 20 21:04:51 gardnet sshd[2093]: Invalid user exam from 59.151.24.133
Jun 20 21:04:52 gardnet sshd[2093]: error: PAM: authentication error for illegal user exam from 59.151.24.133
Jun 20 21:04:52 gardnet sshd[2093]: Failed keyboard-interactive/pam for invalid user exam from 59.151.24.133 port 52137 ssh2
Jun 20 21:05:50 gardnet sshd[2110]: Invalid user ewhite from 200.45.170.30
Jun 20 21:05:51 gardnet sshd[2110]: error: PAM: authentication error for illegal user ewhite from mx.unsam.edu.ar
Jun 20 21:05:51 gardnet sshd[2110]: Failed keyboard-interactive/pam for invalid user ewhite from 200.45.170.30 port 49170 ssh2
Jun 20 21:06:56 gardnet sshd[2134]: Accepted keyboard-interactive/pam for root from 192.168.10.2 port 4944 ssh2
Jun 20 21:06:56 gardnet sshd[2134]: subsystem request for sftp
Jun 20 21:08:32 gardnet sshd[2215]: Invalid user exim from 87.66.21.73
Jun 20 21:08:33 gardnet sshd[2215]: error: PAM: authentication error for illegal user exim from 87.66.21.73
Jun 20 21:08:33 gardnet sshd[2215]: Failed keyboard-interactive/pam for invalid user exim from 87.66.21.73 port 60251 ssh2
Jun 20 21:10:22 gardnet sshd[2257]: Invalid user export from 173.10.55.109
Jun 20 21:10:23 gardnet sshd[2257]: error: PAM: authentication error for illegal user export from 173.10.55.109
Jun 20 21:10:23 gardnet sshd[2257]: Failed keyboard-interactive/pam for invalid user export from 173.10.55.109 port 16110 ssh2
Jun 20 21:13:22 gardnet sshd[2305]: Invalid user export from 83.19.243.98
Jun 20 21:13:23 gardnet sshd[2305]: error: PAM: authentication error for illegal user export from 83.19.243.98
Jun 20 21:13:23 gardnet sshd[2305]: Failed keyboard-interactive/pam for invalid user export from 83.19.243.98 port 34918 ssh2
Jun 20 21:15:04 gardnet sshd[2338]: reverse mapping checking getaddrinfo for 130.226.55.116.broad.km.yn.dynamic.163data.com.cn [116.55.226.130] failed - POSSIBLE BREAK-IN ATTEMPT!
Jun 20 21:15:04 gardnet sshd[2338]: Invalid user extend from 116.55.226.130
Jun 20 21:15:04 gardnet sshd[2338]: error: PAM: authentication error for illegal user extend from 116.55.226.130
Jun 20 21:15:04 gardnet sshd[2338]: Failed keyboard-interactive/pam for invalid user extend from 116.55.226.130 port 56593 ssh2
Jun 20 21:15:59 gardnet sshd[2344]: Invalid user extra from 193.225.104.130
Jun 20 21:16:00 gardnet sshd[2344]: error: PAM: authentication error for illegal user extra from mail.hgkmovar.hu
Jun 20 21:16:00 gardnet sshd[2344]: Failed keyboard-interactive/pam for invalid user extra from 193.225.104.130 port 51774 ssh2
Jun 20 21:18:35 gardnet sshd[2380]: Invalid user f from 222.68.200.116
Jun 20 21:18:36 gardnet sshd[2380]: error: PAM: authentication error for illegal user f from 222.68.200.116
Jun 20 21:18:36 gardnet sshd[2380]: Failed keyboard-interactive/pam for invalid user f from 222.68.200.116 port 54152 ssh2
Jun 20 21:19:23 gardnet sshd[2398]: Invalid user fabian from 195.117.233.250
Jun 20 21:19:23 gardnet sshd[2398]: error: PAM: authentication error for illegal user fabian from 195.117.233.250
Jun 20 21:19:23 gardnet sshd[2398]: Failed keyboard-interactive/pam for invalid user fabian from 195.117.233.250 port 51326 ssh2
Jun 20 21:21:57 gardnet sshd[2440]: Invalid user fabios from 220.178.16.98
Jun 20 21:21:57 gardnet sshd[2440]: error: PAM: authentication error for illegal user fabios from 220.178.16.98
Jun 20 21:21:57 gardnet sshd[2440]: Failed keyboard-interactive/pam for invalid user fabios from 220.178.16.98 port 41415 ssh2
Jun 20 21:24:28 gardnet sshd[2492]: Invalid user fabio from 200.123.179.93
Jun 20 21:24:28 gardnet sshd[2492]: error: PAM: authentication error for illegal user fabio from 200.123.179.93
Jun 20 21:24:28 gardnet sshd[2492]: Failed keyboard-interactive/pam for invalid user fabio from 200.123.179.93 port 3475 ssh2
Jun 20 21:25:03 gardnet sshd[2516]: Invalid user fabricio from 69.159.244.44
Jun 20 21:25:03 gardnet sshd[2516]: error: PAM: authentication error for illegal user fabricio from 69.159.244.44
Jun 20 21:25:03 gardnet sshd[2516]: Failed keyboard-interactive/pam for invalid user fabricio from 69.159.244.44 port 41100 ssh2
Jun 20 21:27:16 gardnet sshd[2544]: Invalid user faith from 222.68.200.53
Jun 20 21:27:16 gardnet sshd[2544]: error: PAM: authentication error for illegal user faith from 222.68.200.53
Jun 20 21:27:16 gardnet sshd[2544]: Failed keyboard-interactive/pam for invalid user faith from 222.68.200.53 port 35104 ssh2
Jun 20 21:29:49 gardnet sshd[2563]: reverse mapping checking getaddrinfo for 131.226.55.116.broad.km.yn.dynamic.163data.com.cn [116.55.226.131] failed - POSSIBLE BREAK-IN ATTEMPT!
Jun 20 21:29:49 gardnet sshd[2563]: Invalid user fax1 from 116.55.226.131
Jun 20 21:29:49 gardnet sshd[2563]: error: PAM: authentication error for illegal user fax1 from 116.55.226.131
Jun 20 21:29:49 gardnet sshd[2563]: Failed keyboard-interactive/pam for invalid user fax1 from 116.55.226.131 port 11326 ssh2
Jun 20 21:31:54 gardnet sshd[2607]: Invalid user fax from 213.172.54.121
Jun 20 21:31:54 gardnet sshd[2607]: error: PAM: authentication error for illegal user fax from 213.172.54.121
Jun 20 21:31:54 gardnet sshd[2607]: Failed keyboard-interactive/pam for invalid user fax from 213.172.54.121 port 41782 ssh2
Jun 20 21:32:28 gardnet sshd[2618]: Invalid user fax from 196.211.189.210
Jun 20 21:32:29 gardnet sshd[2618]: error: PAM: authentication error for illegal user fax from 196.211.189.210
Jun 20 21:32:29 gardnet sshd[2618]: Failed keyboard-interactive/pam for invalid user fax from 196.211.189.210 port 15142 ssh2
Jun 20 21:35:09 gardnet sshd[2673]: Invalid user federico from 219.142.61.2
Jun 20 21:35:09 gardnet sshd[2673]: error: PAM: authentication error for illegal user federico from 219.142.61.2
Jun 20 21:35:09 gardnet sshd[2673]: Failed keyboard-interactive/pam for invalid user federico from 219.142.61.2 port 55524 ssh2
Jun 20 21:35:21 gardnet sshd[2676]: Invalid user fedora from 85.44.96.186
Jun 20 21:35:22 gardnet sshd[2676]: error: PAM: authentication error for illegal user fedora from 85.44.96.186
Jun 20 21:35:22 gardnet sshd[2676]: Failed keyboard-interactive/pam for invalid user fedora from 85.44.96.186 port 17492 ssh2
Jun 20 21:35:31 gardnet sshd[2680]: Invalid user feedback from 202.99.122.55
Jun 20 21:35:32 gardnet sshd[2680]: error: PAM: authentication error for illegal user feedback from 202.99.122.55
Jun 20 21:35:32 gardnet sshd[2680]: Failed keyboard-interactive/pam for invalid user feedback from 202.99.122.55 port 33012 ssh2
Jun 20 21:36:20 gardnet sshd[2700]: Accepted keyboard-interactive/pam for root from 192.168.10.2 port 2035 ssh2
Jun 20 21:36:20 gardnet sshd[2700]: subsystem request for sftp
Jun 20 21:39:41 gardnet sshd[2739]: Invalid user felipe from 218.83.164.98
Jun 20 21:39:42 gardnet sshd[2739]: error: PAM: authentication error for illegal user felipe from 218.83.164.98
Jun 20 21:39:42 gardnet sshd[2739]: Failed keyboard-interactive/pam for invalid user felipe from 218.83.164.98 port 48413 ssh2
Jun 20 21:41:13 gardnet sshd[2772]: Address 201.232.107.224 maps to static-adsl201-232-107-224.epm.net.co, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Jun 20 21:41:13 gardnet sshd[2772]: Invalid user felix from 201.232.107.224
Jun 20 21:41:13 gardnet sshd[2772]: error: PAM: authentication error for illegal user felix from 201.232.107.224
Jun 20 21:41:13 gardnet sshd[2772]: Failed keyboard-interactive/pam for invalid user felix from 201.232.107.224 port 17445 ssh2
Jun 20 21:42:19 gardnet sshd[2792]: Invalid user felix from 83.136.123.65
Jun 20 21:42:19 gardnet sshd[2792]: error: PAM: authentication error for illegal user felix from 83.136.123.65
Jun 20 21:42:19 gardnet sshd[2792]: Failed keyboard-interactive/pam for invalid user felix from 83.136.123.65 port 45116 ssh2
Jun 20 21:45:13 gardnet sshd[2848]: Invalid user felix from 113.17.144.161
Jun 20 21:45:13 gardnet sshd[2848]: error: PAM: authentication error for illegal user felix from 113.17.144.161
Jun 20 21:45:13 gardnet sshd[2848]: Failed keyboard-interactive/pam for invalid user felix from 113.17.144.161 port 32379 ssh2
Jun 20 21:46:48 gardnet sshd[2866]: Invalid user felix from 80.153.75.40
Jun 20 21:46:49 gardnet sshd[2866]: error: PAM: authentication error for illegal user felix from 80.153.75.40
Jun 20 21:46:49 gardnet sshd[2866]: Failed keyboard-interactive/pam for invalid user felix from 80.153.75.40 port 44793 ssh2
Jun 20 21:48:07 gardnet sshd[2892]: Invalid user fernanda from 202.109.115.169
Jun 20 21:48:08 gardnet sshd[2892]: error: PAM: authentication error for illegal user fernanda from 202.109.115.169
Jun 20 21:48:08 gardnet sshd[2892]: Failed keyboard-interactive/pam for invalid user fernanda from 202.109.115.169 port 43707 ssh2
Jun 20 21:48:51 gardnet sshd[2898]: Invalid user fep from 221.11.38.166
Jun 20 21:48:51 gardnet sshd[2898]: error: PAM: authentication error for illegal user fep from 221.11.38.166
Jun 20 21:48:51 gardnet sshd[2898]: Failed keyboard-interactive/pam for invalid user fep from 221.11.38.166 port 36934 ssh2
Jun 20 21:52:29 gardnet sshd[2964]: Invalid user fernando from 70.78.52.142
Jun 20 21:52:30 gardnet sshd[2964]: error: PAM: authentication error for illegal user fernando from 70.78.52.142
Jun 20 21:52:30 gardnet sshd[2964]: Failed keyboard-interactive/pam for invalid user fernando from 70.78.52.142 port 61199 ssh2
Jun 20 21:54:51 gardnet sshd[2996]: Invalid user ff from 86.58.149.70
Jun 20 21:54:52 gardnet sshd[2996]: error: PAM: authentication error for illegal user ff from 86.58.149.70
Jun 20 21:54:52 gardnet sshd[2996]: Failed keyboard-interactive/pam for invalid user ff from 86.58.149.70 port 47356 ssh2
Jun 20 21:57:28 gardnet sshd[3050]: Invalid user fff from 83.16.96.219
Jun 20 21:57:28 gardnet sshd[3050]: error: PAM: authentication error for illegal user fff from 83.16.96.219
Jun 20 21:57:28 gardnet sshd[3050]: Failed keyboard-interactive/pam for invalid user fff from 83.16.96.219 port 55301 ssh2
Jun 20 21:59:14 gardnet sshd[3069]: Invalid user files from 88.33.180.177
Jun 20 21:59:15 gardnet sshd[3069]: error: PAM: authentication error for illegal user files from 88.33.180.177
Jun 20 21:59:15 gardnet sshd[3069]: Failed keyboard-interactive/pam for invalid user files from 88.33.180.177 port 12786 ssh2
Jun 20 22:00:52 gardnet sshd[3124]: Invalid user filter from 69.159.244.44
Jun 20 22:00:53 gardnet sshd[3124]: error: PAM: authentication error for illegal user filter from 69.159.244.44
Jun 20 22:00:53 gardnet sshd[3124]: Failed keyboard-interactive/pam for invalid user filter from 69.159.244.44 port 42908 ssh2
Jun 20 22:01:36 gardnet sshd[3137]: Invalid user fernando from 62.123.170.141
Jun 20 22:01:36 gardnet sshd[3137]: error: PAM: authentication error for illegal user fernando from 62.123.170.141
Jun 20 22:01:36 gardnet sshd[3137]: Failed keyboard-interactive/pam for invalid user fernando from 62.123.170.141 port 23501 ssh2
Jun 20 22:03:10 gardnet sshd[3165]: Invalid user filter from 200.156.107.97
Jun 20 22:03:10 gardnet sshd[3165]: error: PAM: authentication error for illegal user filter from 200.156.107.97
Jun 20 22:03:10 gardnet sshd[3165]: Failed keyboard-interactive/pam for invalid user filter from 200.156.107.97 port 57088 ssh2
Jun 20 22:05:08 gardnet sshd[3190]: Invalid user fin from 64.122.177.164
Jun 20 22:05:09 gardnet sshd[3190]: error: PAM: authentication error for illegal user fin from 64.122.177.164
Jun 20 22:05:09 gardnet sshd[3190]: Failed keyboard-interactive/pam for invalid user fin from 64.122.177.164 port 33119 ssh2
Jun 20 22:09:40 gardnet sshd[3247]: Invalid user finaid from 211.44.8.184
Jun 20 22:09:41 gardnet sshd[3247]: error: PAM: authentication error for illegal user finaid from 211.44.8.184
Jun 20 22:09:41 gardnet sshd[3247]: Failed keyboard-interactive/pam for invalid user finaid from 211.44.8.184 port 34865 ssh2
Jun 20 22:09:48 gardnet sshd[3250]: Invalid user finance from 24.25.11.200
Jun 20 22:09:48 gardnet sshd[3250]: error: PAM: authentication error for illegal user finance from 24.25.11.200
Jun 20 22:09:48 gardnet sshd[3250]: Failed keyboard-interactive/pam for invalid user finance from 24.25.11.200 port 40198 ssh2
Jun 20 22:10:52 gardnet sshd[3275]: Invalid user fin from 220.201.8.62
Jun 20 22:10:52 gardnet sshd[3275]: error: PAM: authentication error for illegal user fin from 220.201.8.62
Jun 20 22:10:52 gardnet sshd[3275]: Failed keyboard-interactive/pam for invalid user fin from 220.201.8.62 port 21428 ssh2
Jun 20 22:12:50 gardnet sshd[3322]: Invalid user finance from 201.217.215.66
Jun 20 22:12:50 gardnet sshd[3322]: error: PAM: authentication error for illegal user finance from 201.217.215.66
Jun 20 22:12:50 gardnet sshd[3322]: Failed keyboard-interactive/pam for invalid user finance from 201.217.215.66 port 46618 ssh2
Jun 20 22:17:36 gardnet sshd[3390]: Invalid user firebird from 155.210.145.220
Jun 20 22:17:36 gardnet sshd[3390]: error: PAM: authentication error for illegal user firebird from 155.210.145.220
Jun 20 22:17:36 gardnet sshd[3390]: Failed keyboard-interactive/pam for invalid user firebird from 155.210.145.220 port 33496 ssh2
Jun 20 22:17:43 gardnet sshd[3393]: Invalid user firewall from 210.222.3.36
Jun 20 22:17:43 gardnet sshd[3393]: error: PAM: authentication error for illegal user firewall from 210.222.3.36
Jun 20 22:17:43 gardnet sshd[3393]: Failed keyboard-interactive/pam for invalid user firewall from 210.222.3.36 port 1508 ssh2
Jun 20 22:19:10 gardnet sshd[3421]: Invalid user first from 200.161.70.109
Jun 20 22:19:11 gardnet sshd[3421]: error: PAM: authentication error for illegal user first from 200.161.70.109
Jun 20 22:19:11 gardnet sshd[3421]: Failed keyboard-interactive/pam for invalid user first from 200.161.70.109 port 36767 ssh2
Jun 20 22:21:01 gardnet sshd[3446]: reverse mapping checking getaddrinfo for 18-208-63-74.reverse.lstn.net [74.63.208.18] failed - POSSIBLE BREAK-IN ATTEMPT!
Jun 20 22:21:01 gardnet sshd[3446]: Invalid user fiscal from 74.63.208.18
Jun 20 22:21:01 gardnet sshd[3446]: error: PAM: authentication error for illegal user fiscal from 74.63.208.18
Jun 20 22:21:01 gardnet sshd[3446]: Failed keyboard-interactive/pam for invalid user fiscal from 74.63.208.18 port 53166 ssh2
Jun 20 22:22:33 gardnet sshd[3486]: Invalid user fish from 87.216.212.30
Jun 20 22:22:34 gardnet sshd[3486]: error: PAM: authentication error for illegal user fish from 87.216.212.30
Jun 20 22:22:34 gardnet sshd[3486]: Failed keyboard-interactive/pam for invalid user fish from 87.216.212.30 port 13429 ssh2
Jun 20 22:24:31 gardnet sshd[3518]: reverse mapping checking getaddrinfo for static-71-185-194-5.phlapa.fios.verizon.net [71.185.194.5] failed - POSSIBLE BREAK-IN ATTEMPT!
Jun 20 22:24:31 gardnet sshd[3518]: Invalid user flash from 71.185.194.5
Jun 20 22:24:31 gardnet sshd[3518]: error: PAM: authentication error for illegal user flash from 71.185.194.5
Jun 20 22:24:31 gardnet sshd[3518]: Failed keyboard-interactive/pam for invalid user flash from 71.185.194.5 port 42470 ssh2
Jun 20 22:25:48 gardnet sshd[3536]: Invalid user flavio from 97.64.181.131
Jun 20 22:25:49 gardnet sshd[3536]: error: PAM: authentication error for illegal user flavio from 97.64.181.131
Jun 20 22:25:49 gardnet sshd[3536]: Failed keyboard-interactive/pam for invalid user flavio from 97.64.181.131 port 38634 ssh2
Jun 20 22:28:36 gardnet sshd[3572]: Invalid user flavio from 211.143.92.5
Jun 20 22:28:37 gardnet sshd[3572]: error: PAM: authentication error for illegal user flavio from 211.143.92.5
Jun 20 22:28:37 gardnet sshd[3572]: Failed keyboard-interactive/pam for invalid user flavio from 211.143.92.5 port 8173 ssh2
Jun 20 22:30:01 gardnet sshd[3583]: Invalid user flavio from 200.40.132.245
Jun 20 22:30:01 gardnet sshd[3583]: error: PAM: authentication error for illegal user flavio from 200.40.132.245
Jun 20 22:30:01 gardnet sshd[3583]: Failed keyboard-interactive/pam for invalid user flavio from 200.40.132.245 port 56185 ssh2
Jun 20 22:32:26 gardnet sshd[3635]: Invalid user flora from 58.60.146.5
Jun 20 22:32:26 gardnet sshd[3635]: error: PAM: authentication error for illegal user flora from 58.60.146.5
Jun 20 22:32:26 gardnet sshd[3635]: Failed keyboard-interactive/pam for invalid user flora from 58.60.146.5 port 54564 ssh2
Jun 20 22:34:18 gardnet sshd[3676]: reverse mapping checking getaddrinfo for mail-140-206.sim.com.mx [148.233.140.206] failed - POSSIBLE BREAK-IN ATTEMPT!
Jun 20 22:34:18 gardnet sshd[3676]: Invalid user florence from 148.233.140.206
Jun 20 22:34:18 gardnet sshd[3676]: error: PAM: authentication error for illegal user florence from 148.233.140.206
Jun 20 22:34:18 gardnet sshd[3676]: Failed keyboard-interactive/pam for invalid user florence from 148.233.140.206 port 49511 ssh2
Jun 20 22:36:42 gardnet sshd[3710]: Invalid user fm from 190.144.1.98
Jun 20 22:36:42 gardnet sshd[3710]: error: PAM: authentication error for illegal user fm from 190.144.1.98
Jun 20 22:36:42 gardnet sshd[3710]: Failed keyboard-interactive/pam for invalid user fm from 190.144.1.98 port 35581 ssh2
Jun 20 22:39:31 gardnet sshd[3746]: Invalid user flyfox from 189.111.234.49
Jun 20 22:39:32 gardnet sshd[3746]: error: PAM: authentication error for illegal user flyfox from 189.111.234.49
Jun 20 22:39:32 gardnet sshd[3746]: Failed keyboard-interactive/pam for invalid user flyfox from 189.111.234.49 port 33821 ssh2
Jun 20 22:39:50 gardnet sshd[3749]: Invalid user foo from 190.136.179.125
Jun 20 22:39:50 gardnet sshd[3749]: error: PAM: authentication error for illegal user foo from 190.136.179.125
Jun 20 22:39:50 gardnet sshd[3749]: Failed keyboard-interactive/pam for invalid user foo from 190.136.179.125 port 3956 ssh2
Jun 20 22:40:58 gardnet sshd[3774]: Invalid user ford from 125.76.194.33
Jun 20 22:40:59 gardnet sshd[3774]: error: PAM: authentication error for illegal user ford from 125.76.194.33
Jun 20 22:40:59 gardnet sshd[3774]: Failed keyboard-interactive/pam for invalid user ford from 125.76.194.33 port 43162 ssh2
Jun 20 22:43:18 gardnet sshd[3810]: Invalid user forum from 202.100.200.123
Jun 20 22:43:19 gardnet sshd[3810]: error: PAM: authentication error for illegal user forum from 202.100.200.123
Jun 20 22:43:19 gardnet sshd[3810]: Failed keyboard-interactive/pam for invalid user forum from 202.100.200.123 port 19365 ssh2
Jun 20 22:44:37 gardnet sshd[3833]: Invalid user forum from 170.215.143.234
Jun 20 22:44:38 gardnet sshd[3833]: error: PAM: authentication error for illegal user forum from 170.215.143.234
Jun 20 22:44:38 gardnet sshd[3833]: Failed keyboard-interactive/pam for invalid user forum from 170.215.143.234 port 54058 ssh2
Jun 20 22:46:43 gardnet sshd[3877]: Invalid user forum from 81.134.118.76
Jun 20 22:46:44 gardnet sshd[3877]: error: PAM: authentication error for illegal user forum from 81.134.118.76
Jun 20 22:46:44 gardnet sshd[3877]: Failed keyboard-interactive/pam for invalid user forum from 81.134.118.76 port 44796 ssh2
Jun 20 22:48:48 gardnet sshd[4015]: Invalid user forum from 115.94.3.58
Jun 20 22:48:49 gardnet sshd[4015]: error: PAM: authentication error for illegal user forum from 115.94.3.58
Jun 20 22:48:49 gardnet sshd[4015]: Failed keyboard-interactive/pam for invalid user forum from 115.94.3.58 port 50036 ssh2
Jun 20 22:49:18 gardnet sshd[4050]: Invalid user fotos from 123.127.218.135
Jun 20 22:49:18 gardnet sshd[4050]: error: PAM: authentication error for illegal user fotos from 123.127.218.135
Jun 20 22:49:18 gardnet sshd[4050]: Failed keyboard-interactive/pam for invalid user fotos from 123.127.218.135 port 51026 ssh2
Jun 20 22:49:50 gardnet sshd[4081]: Invalid user karla from 212.14.228.46
Jun 20 22:50:04 gardnet sshd[4105]: Invalid user foto from 211.100.49.195
Jun 20 22:50:04 gardnet sshd[4105]: error: PAM: authentication error for illegal user foto from 211.100.49.195
Jun 20 22:50:04 gardnet sshd[4105]: Failed keyboard-interactive/pam for invalid user foto from 211.100.49.195 port 36410 ssh2
Jun 20 22:53:30 gardnet sshd[4141]: Invalid user foundation from 190.68.117.82
Jun 20 22:53:30 gardnet sshd[4141]: error: PAM: authentication error for illegal user foundation from 190.68.117.82
Jun 20 22:53:30 gardnet sshd[4141]: Failed keyboard-interactive/pam for invalid user foundation from 190.68.117.82 port 53470 ssh2
Jun 20 22:55:25 gardnet sshd[4191]: Invalid user franca from 201.36.181.226
Jun 20 22:55:25 gardnet sshd[4191]: error: PAM: authentication error for illegal user franca from mail.rj.senac.br
Jun 20 22:55:25 gardnet sshd[4191]: Failed keyboard-interactive/pam for invalid user franca from 201.36.181.226 port 39085 ssh2
Jun 20 22:57:35 gardnet sshd[4219]: Invalid user francesca from 61.189.184.76
Jun 20 22:57:35 gardnet sshd[4219]: error: PAM: authentication error for illegal user francesca from 61.189.184.76
Jun 20 22:57:35 gardnet sshd[4219]: Failed keyboard-interactive/pam for invalid user francesca from 61.189.184.76 port 17503 ssh2
Jun 20 22:58:44 gardnet sshd[4230]: Invalid user francesca from 200.192.132.236
Jun 20 22:58:45 gardnet sshd[4230]: error: PAM: authentication error for illegal user francesca from 200.192.132.236
Jun 20 22:58:45 gardnet sshd[4230]: Failed keyboard-interactive/pam for invalid user francesca from 200.192.132.236 port 48623 ssh2
Jun 20 23:00:37 gardnet sshd[4291]: Invalid user francesco from 165.98.133.98
Jun 20 23:00:37 gardnet sshd[4291]: error: PAM: authentication error for illegal user francesco from up.upoli.edu.ni
Jun 20 23:00:37 gardnet sshd[4291]: Failed keyboard-interactive/pam for invalid user francesco from 165.98.133.98 port 55779 ssh2
Jun 20 23:02:06 gardnet sshd[4312]: Invalid user francis from 219.143.246.70
Jun 20 23:02:06 gardnet sshd[4312]: error: PAM: authentication error for illegal user francis from 219.143.246.70
Jun 20 23:02:06 gardnet sshd[4312]: Failed keyboard-interactive/pam for invalid user francis from 219.143.246.70 port 47912 ssh2
Jun 20 23:02:45 gardnet sshd[4315]: Invalid user francis from 85.70.21.93
Jun 20 23:02:46 gardnet sshd[4315]: error: PAM: authentication error for illegal user francis from 85.70.21.93
Jun 20 23:02:46 gardnet sshd[4315]: Failed keyboard-interactive/pam for invalid user francis from 85.70.21.93 port 13074 ssh2
Jun 20 23:06:42 gardnet sshd[4378]: reverse mapping checking getaddrinfo for ip-200-13-22-91-mx.marcatel.net.mx [200.13.22.91] failed - POSSIBLE BREAK-IN ATTEMPT!
Jun 20 23:06:42 gardnet sshd[4378]: Invalid user francisco from 200.13.22.91
Jun 20 23:06:43 gardnet sshd[4378]: error: PAM: authentication error for illegal user francisco from 200.13.22.91
Jun 20 23:06:43 gardnet sshd[4378]: Failed keyboard-interactive/pam for invalid user francisco from 200.13.22.91 port 41016 ssh2
Jun 20 23:08:41 gardnet sshd[4397]: Invalid user francy from 201.24.133.98
Jun 20 23:08:41 gardnet sshd[4397]: error: PAM: authentication error for illegal user francy from 201.24.133.98
Jun 20 23:08:41 gardnet sshd[4397]: Failed keyboard-interactive/pam for invalid user francy from 201.24.133.98 port 35967 ssh2
Jun 20 23:09:00 gardnet sshd[4400]: Invalid user frank from 117.102.29.27
Jun 20 23:09:00 gardnet sshd[4400]: error: PAM: authentication error for illegal user frank from 117.102.29.27
Jun 20 23:09:00 gardnet sshd[4400]: Failed keyboard-interactive/pam for invalid user frank from 117.102.29.27 port 41114 ssh2
Jun 20 23:11:51 gardnet sshd[4462]: Invalid user frank from 201.232.117.190
Jun 20 23:11:51 gardnet sshd[4462]: error: PAM: authentication error for illegal user frank from 201.232.117.190
Jun 20 23:11:51 gardnet sshd[4462]: Failed keyboard-interactive/pam for invalid user frank from 201.232.117.190 port 8844 ssh2
Jun 20 23:12:29 gardnet sshd[4486]: Invalid user frank from 83.111.77.91
Jun 20 23:12:30 gardnet sshd[4486]: error: PAM: authentication error for illegal user frank from 83.111.77.91
Jun 20 23:12:30 gardnet sshd[4486]: Failed keyboard-interactive/pam for invalid user frank from 83.111.77.91 port 49264 ssh2
Jun 20 23:12:33 gardnet sshd[4489]: Invalid user frank from 80.153.68.133
Jun 20 23:12:33 gardnet sshd[4489]: error: PAM: authentication error for illegal user frank from 80.153.68.133
Jun 20 23:12:33 gardnet sshd[4489]: Failed keyboard-interactive/pam for invalid user frank from 80.153.68.133 port 44131 ssh2
Jun 20 23:16:54 gardnet sshd[4541]: Invalid user frank from 201.217.215.66
Jun 20 23:16:55 gardnet sshd[4541]: error: PAM: authentication error for illegal user frank from 201.217.215.66
Jun 20 23:16:55 gardnet sshd[4541]: Failed keyboard-interactive/pam for invalid user frank from 201.217.215.66 port 33383 ssh2
Jun 20 23:17:59 gardnet sshd[4552]: Invalid user franke from 62.172.208.14
Jun 20 23:17:59 gardnet sshd[4552]: error: PAM: authentication error for illegal user franke from 62.172.208.14
Jun 20 23:17:59 gardnet sshd[4552]: Failed keyboard-interactive/pam for invalid user franke from 62.172.208.14 port 60659 ssh2
Jun 20 23:20:32 gardnet sshd[4609]: Invalid user fred from 123.127.150.200
Jun 20 23:20:32 gardnet sshd[4609]: error: PAM: authentication error for illegal user fred from 123.127.150.200
Jun 20 23:20:32 gardnet sshd[4609]: Failed keyboard-interactive/pam for invalid user fred from 123.127.150.200 port 38492 ssh2
Jun 20 23:20:41 gardnet sshd[4612]: Invalid user fred from 202.130.105.252
Jun 20 23:20:41 gardnet sshd[4612]: error: PAM: authentication error for illegal user fred from 202.130.105.252
Jun 20 23:20:41 gardnet sshd[4612]: Failed keyboard-interactive/pam for invalid user fred from 202.130.105.252 port 3523 ssh2
Jun 20 23:23:45 gardnet sshd[4660]: Invalid user freddy from 85.89.177.224
Jun 20 23:23:45 gardnet sshd[4660]: error: PAM: authentication error for illegal user freddy from 85.89.177.224
Jun 20 23:23:45 gardnet sshd[4660]: Failed keyboard-interactive/pam for invalid user freddy from 85.89.177.224 port 38378 ssh2
Jun 20 23:25:16 gardnet sshd[4705]: Accepted keyboard-interactive/pam for root from 192.168.10.2 port 4465 ssh2
Jun 20 23:25:16 gardnet sshd[4705]: subsystem request for sftp
Jun 20 23:25:30 gardnet sshd[4711]: Invalid user freedom from 190.253.220.98
Jun 20 23:25:31 gardnet sshd[4711]: error: PAM: authentication error for illegal user freedom from 190.253.220.98
Jun 20 23:25:31 gardnet sshd[4711]: Failed keyboard-interactive/pam for invalid user freedom from 190.253.220.98 port 58881 ssh2
Jun 20 23:27:55 gardnet sshd[4741]: Invalid user frieda from 211.100.49.195
Jun 20 23:27:55 gardnet sshd[4741]: error: PAM: authentication error for illegal user frieda from 211.100.49.195
Jun 20 23:27:55 gardnet sshd[4741]: Failed keyboard-interactive/pam for invalid user frieda from 211.100.49.195 port 54387 ssh2
Jun 20 23:28:37 gardnet sshd[4752]: Invalid user frieda from 90.185.221.97
Jun 20 23:28:37 gardnet sshd[4752]: error: PAM: authentication error for illegal user frieda from 90.185.221.97
Jun 20 23:28:37 gardnet sshd[4752]: Failed keyboard-interactive/pam for invalid user frieda from 90.185.221.97 port 56725 ssh2
Jun 20 23:30:01 gardnet sshd[4763]: Accepted keyboard-interactive/pam for root from 192.168.10.2 port 4516 ssh2
Jun 20 23:30:01 gardnet sshd[4763]: subsystem request for sftp
Jun 20 23:31:43 gardnet sshd[4810]: Accepted keyboard-interactive/pam for root from 192.168.10.2 port 4569 ssh2
Jun 20 23:31:43 gardnet sshd[4810]: subsystem request for sftp
Jun 20 23:34:52 gardnet sshd[4861]: Invalid user fs from 62.68.180.239
Jun 20 23:34:52 gardnet sshd[4861]: error: PAM: authentication error for illegal user fs from 62.68.180.239
Jun 20 23:34:52 gardnet sshd[4861]: Failed keyboard-interactive/pam for invalid user fs from 62.68.180.239 port 3446 ssh2
Jun 20 23:37:21 gardnet sshd[4903]: Invalid user ftp1 from 211.100.49.194
Jun 20 23:37:21 gardnet sshd[4903]: error: PAM: authentication error for illegal user ftp1 from 211.100.49.194
Jun 20 23:37:21 gardnet sshd[4903]: Failed keyboard-interactive/pam for invalid user ftp1 from 211.100.49.194 port 46943 ssh2
Jun 20 23:38:06 gardnet sshd[4914]: Invalid user ftp1 from 59.162.166.118
Jun 20 23:38:06 gardnet sshd[4914]: error: PAM: authentication error for illegal user ftp1 from report.ksrtc.in
Jun 20 23:38:06 gardnet sshd[4914]: Failed keyboard-interactive/pam for invalid user ftp1 from 59.162.166.118 port 12230 ssh2
Jun 20 23:38:11 gardnet sshd[4917]: reverse mapping checking getaddrinfo for reverse.gdsz.cncnet.net [210.21.208.238] failed - POSSIBLE BREAK-IN ATTEMPT!



А вообще мне бы очень сильно хотелось бы чтоб лагов вообще не было или хотя бы по минимум и не критичные

[Андрей]

Это скорее всего бот-сеть.
Вариантов есть 2.
1. Перенести sshd службу на другой порт.
2. Зарезать файрволлом порт 22. Причем зарезать вообще 22 порт или разрешить его для некоторых внешних ip, если оно надо.

[root]

Romanuy
это Инет, привыкай, сканят постоянно, подбор паролей к висящим службам и т.п.
и я бы не назвал это сообщение ошибкой, это скорее предупреждение

как и сказал Андрей можно прикрыть 22 порт фаирволом, открыть только для своих IP-адресов, можно изменить порт 22 на 2222 (делается это в /etc/ssh/sshd_config), а можно поставить например:

Код: Выделить всё

Port:   sshit-0.6_4
Path:   /usr/ports/security/sshit
Info:   Checks for SSH/FTP bruteforce and blocks given IPs
WWW:    http://anp.ath.cx/sshit/

sshit is a perl script, which works along with ipfw, ipfw2, and pf.
It parses the output of syslogd, find out SSH/FTP bruteforce attacks.
If the number of failed login is more than a threshold that administarator
set, sshit will block the source IP via firewall for a while
(administrators can set the period of blocking).

который будет заносить IP-шники, с которых идет перебор, в фаирвол
вот статейка на лисяре: http://www.lissyara.su/articles/freebsd/security/sshit/

[Romanuy]

Romanuy
это Инет, привыкай, сканят постоянно, подбор паролей к висящим службам и т.п.
и я бы не назвал это сообщение ошибкой, это скорее предупреждение

как и сказал Андрей можно прикрыть 22 порт фаирволом, открыть только для своих IP-адресов, можно изменить порт 22 на 2222 (делается это в /etc/ssh/sshd_config), а можно поставить например:

Код: Выделить всё

Port:   sshit-0.6_4
Path:   /usr/ports/security/sshit
Info:   Checks for SSH/FTP bruteforce and blocks given IPs
WWW:    http://anp.ath.cx/sshit/

sshit is a perl script, which works along with ipfw, ipfw2, and pf.
It parses the output of syslogd, find out SSH/FTP bruteforce attacks.
If the number of failed login is more than a threshold that administarator
set, sshit will block the source IP via firewall for a while
(administrators can set the period of blocking).

который будет заносить IP-шники, с которых идет перебор, в фаирвол
вот статейка на лисяре: http://www.lissyara.su/articles/freebsd/security/sshit/

Ого как всего много мне если честно легче пока так ориентироваться когда по полочкам

Вот нашел конфиг вы знающие люди посмотрите что не так в нем

Код: Выделить всё

#   $OpenBSD: sshd_config,v 1.80 2008/07/02 02:24:18 djm Exp $
#   $FreeBSD: src/crypto/openssh/sshd_config,v 1.49.2.1.2.1 2009/10/25 01:10:29 kensmith Exp $

# This is the sshd server system-wide configuration file.  See
# sshd_config(5) for more information.

# This sshd was compiled with PATH=/usr/bin:/bin:/usr/sbin:/sbin

# The strategy used for options in the default sshd_config shipped with
# OpenSSH is to specify options with their default value where
# possible, but leave them commented.  Uncommented options change a
# default value.

# Note that some of FreeBSD's defaults differ from OpenBSD's, and
# FreeBSD has a few additional options.

#VersionAddendum FreeBSD-20090522

#Port 22
#Protocol 2
#AddressFamily any
#ListenAddress 0.0.0.0
#ListenAddress ::

# Disable legacy (protocol version 1) support in the server for new
# installations. In future the default will change to require explicit
# activation of protocol 1
Protocol 2

# HostKey for protocol version 1
#HostKey /etc/ssh/ssh_host_key
# HostKeys for protocol version 2
#HostKey /etc/ssh/ssh_host_rsa_key
#HostKey /etc/ssh/ssh_host_dsa_key

# Lifetime and size of ephemeral version 1 server key
#KeyRegenerationInterval 1h
#ServerKeyBits 1024

# Logging
# obsoletes QuietMode and FascistLogging
#SyslogFacility AUTH
#LogLevel INFO

# Authentication:

#LoginGraceTime 2m
PermitRootLogin yes
#StrictModes yes
#MaxAuthTries 6
#MaxSessions 10

#RSAAuthentication yes
#PubkeyAuthentication yes
#AuthorizedKeysFile   .ssh/authorized_keys

# For this to work you will also need host keys in /etc/ssh/ssh_known_hosts
#RhostsRSAAuthentication no
# similar for protocol version 2
#HostbasedAuthentication no
# Change to yes if you don't trust ~/.ssh/known_hosts for
# RhostsRSAAuthentication and HostbasedAuthentication
#IgnoreUserKnownHosts no
# Don't read the user's ~/.rhosts and ~/.shosts files
#IgnoreRhosts yes

# Change to yes to enable built-in password authentication.
#PasswordAuthentication no
#PermitEmptyPasswords no

# Change to no to disable PAM authentication
#ChallengeResponseAuthentication yes

# Kerberos options
#KerberosAuthentication no
#KerberosOrLocalPasswd yes
#KerberosTicketCleanup yes
#KerberosGetAFSToken no

# GSSAPI options
#GSSAPIAuthentication no
#GSSAPICleanupCredentials yes

# Set this to 'no' to disable PAM authentication, account processing,
# and session processing. If this is enabled, PAM authentication will
# be allowed through the ChallengeResponseAuthentication and
# PasswordAuthentication.  Depending on your PAM configuration,
# PAM authentication via ChallengeResponseAuthentication may bypass
# the setting of "PermitRootLogin without-password".
# If you just want the PAM account and session checks to run without
# PAM authentication, then enable this but set PasswordAuthentication
# and ChallengeResponseAuthentication to 'no'.
#UsePAM yes

#AllowAgentForwarding yes
#AllowTcpForwarding yes
#GatewayPorts no
#X11Forwarding yes
#X11DisplayOffset 10
#X11UseLocalhost yes
#PrintMotd yes
#PrintLastLog yes
#TCPKeepAlive yes
#UseLogin no
#UsePrivilegeSeparation yes
#PermitUserEnvironment no
#Compression delayed
#ClientAliveInterval 0
#ClientAliveCountMax 3
#UseDNS yes
#PidFile /var/run/sshd.pid
#MaxStartups 10
#PermitTunnel no
#ChrootDirectory none

# no default banner path
#Banner none

# override default of no subsystems
Subsystem   sftp   /usr/libexec/sftp-server

# Example of overriding settings on a per-user basis
#Match User anoncvs
#   X11Forwarding no
#   AllowTcpForwarding no
#   ForceCommand cvs server
 

[Андрей]

Вот нашел конфиг вы знающие люди посмотрите что не так в нем

А что в нем смотреть? Каждый точит конфиг под себя.

[MadMax]

если по английски читаете - man 5 sshd_config
там описаны все опции конфига

[root]

Вот нашел конфиг вы знающие люди посмотрите что не так в нем

в нем все так

Каждый точит конфиг под себя.

+1

я уже сказал что если тебя напрягают эти сообщения о попытках подобрать пароль, то тут помогут действия описанные мной выше.
что бы перебросить ssh с 22 порта на 2222, в этом конфиге поправить строчку:

Код: Выделить всё

#Port 22

на

Код: Выделить всё

Port 2222

и перезапустить ssh, лучше по pid`у, т.к. если ты ошибешся, то отвалишся от сервера и обратно уже не попадешь, для этого:
1. ищем процесс sshd:

Код: Выделить всё

 ps -ax | grep sshd

1146 ?? Is 0:00,03 /usr/sbin/sshd

в моем примере pid это 1146
затем отправляем этому pid`у сигнал HUP (перезапуск):

Код: Выделить всё

kill -1 1146

снова смотрим наличие процесса командой ps (как делали выше)
если он на месте, то проверям доступ по ssh к порту 2222

просто порт 2222 очень редко когда сканят

и я бы раскоментарил в конфиге строчку

Код: Выделить всё

Protocol 2

[Romanuy]

а и извиняюсь я по пиду не знаю как делать может по проще есть вариант как его перезапустить ?