结论:整体可用,但存在需要关注的节点。 本次巡检 11 台 VPS:1 台无明显异常,10 台需要关注;本轮只读检查,没有执行重启、修复、删除或升级。
影响说明:“需关注”不等于已宕机;它表示 SSH、资源用量、systemd、关键服务或最近错误日志中有信号需要人工确认。本任务严格只读。
| 节点 | 状态 | 发现的问题 | 失败单元/错误线索 | Top CPU | 建议 |
|---|---|---|---|---|---|
| JP 64.118.144.182 | 需关注 | 最近 journal 存在错误/拒绝/崩溃类日志 | PID PPID COMMAND %CPU %MEM 690 1 agent 0.5 1.4 95543 981 sshd 0.5 1.2 684 1 fail2ban-server 0.1 5.5 94983 2 kworker/0:1-cgr 0.0 0.0 17 2 rcu_preempt 0.0 0.0 94947 2 kworker/u256:2- 0.0 0.0 95310 2 kworker/u256:3- 0.0 0.0 | 继续跟踪重复日志源,区分一次性错误和持续错误。 | |
| USB 161.153.95.69 | 需关注 | 最近 journal 存在错误/拒绝/崩溃类日志 | PID PPID COMMAND %CPU %MEM 778268 778267 ps 100 0.4 778201 1 systemd 43.0 1.1 778202 2 kworker/0:3-eve 4.6 0.0 778197 668901 sshd 1.8 1.0 656693 1 agent 0.9 1.3 1186 869 gomon 0.0 1.5 861 1 fail2ban-server 0.0 3.7 | 继续跟踪重复日志源,区分一次性错误和持续错误。 | |
| DE 47.254.140.158 | 需关注 | systemd failed units 非空; 最近 journal 存在错误/拒绝/崩溃类日志 | aegis.service loaded failed failed Aegis Service | PID PPID COMMAND %CPU %MEM 1877092 1 agent 0.4 0.7 1305 1 AliYunDunMonito 0.4 2.4 978 1 AliYunDun 0.1 0.5 2237708 940 python 0.0 8.3 2276110 1955528 sshd 0.0 0.8 1285 1 aliyun-service. 0.0 0.5 795 1 AliYunDunUpdate 0.0 0.2 | 授权后按单服务查看日志、备份配置,再决定 reset-failed/修复。 继续跟踪重复日志源,区分一次性错误和持续错误。 |
| HK 82.158.88.91 | 需关注 | 最近 journal 存在错误/拒绝/崩溃类日志 | PID PPID COMMAND %CPU %MEM 1617829 1617828 ps 100 0.1 1617774 634 sshd 1.5 0.5 1097848 1 agent 0.8 0.6 586 1 fail2ban-server 0.1 3.8 1 0 systemd 0.1 0.6 130 1 systemd-journal 0.0 9.3 1560607 1 xray 0.0 2.2 | 继续跟踪重复日志源,区分一次性错误和持续错误。 | |
| TK 103.232.213.10 | 需关注 | 最近 journal 存在错误/拒绝/崩溃类日志 | PID PPID COMMAND %CPU %MEM 1719323 1 sshd 0.5 1.1 1390398 1 agent 0.3 1.1 1 0 systemd 0.0 0.9 2 0 kthreadd 0.0 0.0 3 2 rcu_gp 0.0 0.0 4 2 rcu_par_gp 0.0 0.0 5 2 slub_flushwq 0.0 0.0 | 继续跟踪重复日志源,区分一次性错误和持续错误。 | |
| AR 129.146.59.53 | 需关注 | 最近 journal 存在错误/拒绝/崩溃类日志 | PID PPID COMMAND %CPU %MEM 222669 222472 ssh 3.7 0.0 222672 222472 ssh 3.7 0.0 222673 222472 ssh 3.7 0.0 222674 222472 ssh 3.7 0.0 204667 204164 restic 3.0 0.4 1112 1 agent 1.6 0.0 2453 2255 redis-server 0.4 0.0 | 继续跟踪重复日志源,区分一次性错误和持续错误。 | |
| KRB 161.118.130.5 | 需关注 | 最近 journal 存在错误/拒绝/崩溃类日志 | PID PPID COMMAND %CPU %MEM 883697 883696 ps 100 0.4 883464 1 systemd 2.7 1.1 883642 514110 sshd 1.0 1.0 444386 1 agent 0.9 1.3 1158 866 gomon 0.0 1.5 851 1 fail2ban-server 0.0 4.1 1 0 systemd 0.0 1.2 | 继续跟踪重复日志源,区分一次性错误和持续错误。 | |
| US 186.244.244.52 | 需关注 | 最近 journal 存在错误/拒绝/崩溃类日志 | PID PPID COMMAND %CPU %MEM 1056096 1056095 ps 1300 0.0 1056039 458425 sshd 8.9 0.2 402990 1 agent 1.7 0.3 1013835 1000 python 0.2 4.7 927 1 containerd 0.2 1.4 1 0 systemd 0.2 0.3 830 1 fail2ban-server 0.1 1.4 | 继续跟踪重复日志源,区分一次性错误和持续错误。 | |
| HKA 38.76.188.244 | 需关注 | 最近 journal 存在错误/拒绝/崩溃类日志 | PID PPID COMMAND %CPU %MEM 32487 32486 ps 142 0.0 32490 32486 cut 28.5 0.0 32480 32432 bash 21.9 0.0 32432 812 sshd 5.0 0.2 766 1 agent 3.2 0.3 2004 879 python 0.8 3.5 764 1 fail2ban-server 0.4 1.0 | 继续跟踪重复日志源,区分一次性错误和持续错误。 | |
| HKY 185.155.235.171 | 需关注 | 最近 journal 存在错误/拒绝/崩溃类日志 | PID PPID COMMAND %CPU %MEM 207354 1 systemd 14.0 0.9 207350 169322 sshd 1.0 1.1 130085 1 agent 0.6 1.2 152369 1 fail2ban-server 0.1 2.0 1 0 systemd 0.0 1.0 2 0 kthreadd 0.0 0.0 3 2 rcu_gp 0.0 0.0 | 继续跟踪重复日志源,区分一次性错误和持续错误。 |
| 节点 | 结果 | 主机/系统 | 运行与负载 | 内存 | 磁盘/inode | 关键服务 | 端口摘要 | 异常摘要 |
|---|---|---|---|---|---|---|---|---|
| JP 64.118.144.182 ssh exit=0 2.8s | 需关注 | JP Ubuntu 24.04.4 LTS | up 1 week, 3 days, 22 hours, 37 minutes load 0.00 0.01 0.00 / CPU 1 | 362/849MB 43% | 3.9G/9.8G 42% inode 97K/625K 16% | 运行中 xray 未安装/不适用 sing-box 运行中 nginx N/A hermes N/A docker | 0.0.0.0:22| 0.0.0.0:80| 0.0.0.0:443| 127.0.0.1:8081| [::]:22| [::]:80| | 最近 journal 存在错误/拒绝/崩溃类日志 |
| KR 131.186.27.212 ssh exit=0 5.4s | 正常 | instance-20260422-2348 Ubuntu 24.04.4 LTS | up 3 weeks, 1 day, 24 minutes load 0.08 0.03 0.01 / CPU 2 | 483/954MB 51% | 4.4G/48G 10% inode 180K/6.2M 3% | 运行中 xray N/A sing-box 运行中 nginx N/A hermes N/A docker | 0.0.0.0:443| 0.0.0.0:443| 0.0.0.0:80| 0.0.0.0:22| 127.0.0.1:8081| [::]:22| | 无 |
| USB 161.153.95.69 ssh exit=0 3.0s | 需关注 | instance-20260423-0151 Ubuntu 24.04.4 LTS | up 3 weeks, 1 day, 24 minutes load 0.00 0.02 0.00 / CPU 2 | 448/954MB 47% | 5.3G/48G 12% inode 136K/6.2M 3% | 运行中 xray N/A sing-box 运行中 nginx N/A hermes N/A docker | 0.0.0.0:443| 0.0.0.0:443| 127.0.0.1:8081| 0.0.0.0:80| 0.0.0.0:22| [::]:22| | 最近 journal 存在错误/拒绝/崩溃类日志 |
| DE 47.254.140.158 ssh exit=0 2.4s | 需关注 | iZgw8bgfuauyw9zjm1qsftZ Ubuntu 24.04.4 LTS | up 3 weeks, 19 hours, 21 minutes load 0.00 0.00 0.00 / CPU 2 | 571/1613MB 35% | 19G/40G 51% inode 231K/2.5M 10% | 运行中 xray N/A sing-box 运行中 nginx N/A hermes N/A docker | 127.0.0.1:8000| 0.0.0.0:22| 0.0.0.0:80| 0.0.0.0:443| [::]:22| [::]:80| [::]:443| | systemd failed units 非空; 最近 journal 存在错误/拒绝/崩溃类日志 |
| HK 82.158.88.91 ssh exit=0 3.5s | 需关注 | serq25t4zyrk3xk Ubuntu 24.04.4 LTS | up 3 weeks, 1 day, 24 minutes load 0.01 0.01 0.00 / CPU 2 | 452/1967MB 23% | 11G/39G 27% inode 259K/5.0M 6% | 运行中 xray N/A sing-box 运行中 nginx N/A hermes N/A docker | 0.0.0.0:22| 0.0.0.0:80| 0.0.0.0:443| 0.0.0.0:443| 127.0.0.1:8081| [::]:22| [::]:80| | 最近 journal 存在错误/拒绝/崩溃类日志 |
| TK 103.232.213.10 ssh exit=0 1.7s | 需关注 | jppro1-2023101300230338 Ubuntu 22.04.5 LTS | up 3 weeks, 1 day, 24 minutes load 0.02 0.01 0.00 / CPU 1 | 288/957MB 30% | 8.8G/20G 47% inode 187K/1.3M 15% | 运行中 xray N/A sing-box 运行中 nginx N/A hermes N/A docker | 0.0.0.0:80| 0.0.0.0:443| [::]:80| *:22| *:23007| | 最近 journal 存在错误/拒绝/崩溃类日志 |
| AR 129.146.59.53 local exit=0 0.1s | 需关注 | instance-20260423-0914 Ubuntu 24.04.4 LTS | up 7 hours, 41 minutes load 0.20 0.18 0.10 / CPU 4 | 3339/23975MB 14% | 50G/116G 43% inode 1.1M/15M 8% | 未安装/不适用 xray N/A sing-box 运行中 nginx 运行中 hermes 运行中 docker | 127.0.0.1:5240| 127.0.0.1:8088| 127.0.0.1:8317| 0.0.0.0:443| 0.0.0.0:80| 0.0.0.0:22| [::]:443| | 最近 journal 存在错误/拒绝/崩溃类日志 |
| KRB 161.118.130.5 ssh exit=0 6.4s | 需关注 | instance-20260429-1226 Ubuntu 24.04.4 LTS | up 3 weeks, 1 day, 24 minutes load 0.00 0.00 0.00 / CPU 2 | 454/954MB 48% | 3.1G/45G 8% inode 129K/5.8M 3% | N/A xray N/A sing-box 运行中 nginx N/A hermes N/A docker | 0.0.0.0:443| 0.0.0.0:443| 127.0.0.1:8081| 0.0.0.0:80| 0.0.0.0:22| [::]:80| [::]:22| | 最近 journal 存在错误/拒绝/崩溃类日志 |
| US 186.244.244.52 ssh exit=0 3.4s | 需关注 | ser0570106010 Ubuntu 24.04.4 LTS | up 2 weeks, 1 day, 23 hours, 2 minutes load 0.10 0.04 0.01 / CPU 4 | 939/3915MB 24% | 13G/29G 42% inode 271K/3.7M 8% | N/A xray N/A sing-box 运行中 nginx N/A hermes 运行中 docker | 0.0.0.0:443| 0.0.0.0:8317| 0.0.0.0:80| 0.0.0.0:22| 0.0.0.0:8085| [::]:8317| [::]:22| [::]:8085| | 最近 journal 存在错误/拒绝/崩溃类日志 |
| HKA 38.76.188.244 ssh exit=0 9.8s | 需关注 | ser4062572352 Ubuntu 24.04.4 LTS | up 2 days, 21 hours, 58 minutes load 0.44 0.21 0.11 / CPU 4 | 731/3915MB 19% | 13G/29G 43% inode 337K/3.7M 9% | N/A xray N/A sing-box 运行中 nginx N/A hermes 运行中 docker | 0.0.0.0:80| 0.0.0.0:22| [::]:80| [::]:22| *:443| | 最近 journal 存在错误/拒绝/崩溃类日志 |
| HKY 185.155.235.171 ssh exit=0 2.5s | 需关注 | hks2-202404291529122cb8ee Ubuntu 22.04.5 LTS | up 2 weeks, 1 day, 22 hours, 47 minutes load 0.00 0.00 0.00 / CPU 1 | 183/957MB 19% | 1.9G/9.8G 20% inode 63K/625K 11% | 运行中 xray N/A sing-box N/A nginx N/A hermes N/A docker | 0.0.0.0:22| [::]:22| | 最近 journal 存在错误/拒绝/崩溃类日志 |
| 节点 | 最近错误(截断展示) |
|---|---|
| JP | May 23 03:40:52 JP sshd[89659]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 39280 ssh2 [preauth] May 23 03:42:00 JP sshd[89661]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 36813 ssh2 [preauth] May 23 04:43:09 JP sshd[90743]: error: maximum authentication attempts exceeded for invalid user valarie from 213.209.159.56 port 32881 ssh2 [preauth] May 23 04:51:02 JP sshd[90772]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 8750 ssh2 [preauth] May 23 04:52:11 JP sshd[90778]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 48077 ssh2 [preauth] May 23 05:49:37 JP sshd[91058]: error: maximum authentication attempts exceeded for invalid user arian from 213.209.159.56 port 18172 ssh2 [preauth] May 23 05:57:56 JP sshd[91097]: fatal: userauth_pubkey: parse publickey packet: incomplete message [preauth] May 23 06:01:12 JP sshd[91115]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 52477 ssh2 [preauth] May 23 06:02:25 JP sshd[91119]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 10667 ssh2 [preauth] May 23 06:03:07 JP sshd[91121]: error: maximum authentication attempts exceeded for invalid user telecomadmin from 193.46.255.86 port 17937 ssh2 [preauth] May 23 06:32:34 JP sshd[91393]: error: maximum authentication attempts exceeded for root from 59.26.193.177 port 59392 ssh2 [preauth] May 23 06:32:36 JP sshd[91395]: error: maximum authentication attempts exceeded for root from 59.26.193.177 port 59754 ssh2 [preauth] May 23 06:32:38 JP sshd[91397]: error: maximum authentication attempts exceeded for root from 59.26.193.177 port 60118 ssh2 [preauth] May 23 07:43:40 JP sshd[91851]: error: maximum authentication attempts exceeded for invalid user armon from 213.209.159.56 port 47353 ssh2 [preauth] May 23 07:54:39 JP sshd[91892]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 50815 ssh2 [preauth] May 23 07:55:41 JP sshd[91901]: error: maximum authentication a |
| KR | May 17 18:37:42 instance-20260422-2348 (sd-exec-[1242845]: /usr/lib/systemd/system-generators/systemd-gpt-auto-generator failed with exit status 1. May 17 18:37:44 instance-20260422-2348 (sd-exec-[1242896]: /usr/lib/systemd/system-generators/systemd-gpt-auto-generator failed with exit status 1. May 17 18:37:45 instance-20260422-2348 (sd-exec-[1242946]: /usr/lib/systemd/system-generators/systemd-gpt-auto-generator failed with exit status 1. May 17 18:37:46 instance-20260422-2348 (sd-exec-[1242996]: /usr/lib/systemd/system-generators/systemd-gpt-auto-generator failed with exit status 1. May 17 18:37:48 instance-20260422-2348 (sd-exec-[1243046]: /usr/lib/systemd/system-generators/systemd-gpt-auto-generator failed with exit status 1. |
| USB | May 22 17:24:39 instance-20260423-0151 sshd[770567]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 28819 ssh2 [preauth] May 22 17:28:12 instance-20260423-0151 sshd[770578]: error: maximum authentication attempts exceeded for invalid user scarlet from 213.209.159.56 port 9951 ssh2 [preauth] May 22 18:27:56 instance-20260423-0151 sshd[770905]: error: kex_exchange_identification: read: Connection reset by peer May 22 18:34:32 instance-20260423-0151 sshd[770954]: error: maximum authentication attempts exceeded for invalid user susie from 213.209.159.56 port 26378 ssh2 [preauth] May 22 18:34:44 instance-20260423-0151 sshd[770956]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 31519 ssh2 [preauth] May 22 18:35:38 instance-20260423-0151 sshd[770969]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 11706 ssh2 [preauth] May 22 19:40:47 instance-20260423-0151 sshd[771231]: error: maximum authentication attempts exceeded for invalid user tamar from 213.209.159.56 port 42704 ssh2 [preauth] May 22 19:45:05 instance-20260423-0151 sshd[771253]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 36592 ssh2 [preauth] May 22 19:46:07 instance-20260423-0151 sshd[771259]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 50315 ssh2 [preauth] May 22 20:47:15 instance-20260423-0151 sshd[771585]: error: maximum authentication attempts exceeded for invalid user valarie from 213.209.159.56 port 11613 ssh2 [preauth] May 22 20:55:19 instance-20260423-0151 sshd[771643]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 59404 ssh2 [preauth] May 22 20:56:24 instance-20260423-0151 sshd[771653]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 52328 ssh2 [preauth] May 22 21:09:04 instance-20260423-0151 sshd[771715]: error: kex_exchange_identification: read: Connection reset by peer May 22 21:53:39 instance-20260423-0151 sshd[771979]: error: maximum authentication attempts exceeded for inva |
| DE | May 23 06:50:25 iZgw8bgfuauyw9zjm1qsftZ sshd[2268534]: error: maximum authentication attempts exceeded for invalid user armon from 213.209.159.56 port 10489 ssh2 [preauth] May 23 07:04:14 iZgw8bgfuauyw9zjm1qsftZ sshd[2268600]: error: maximum authentication attempts exceeded for admin from 2.57.121.112 port 54540 ssh2 [preauth] May 23 07:05:09 iZgw8bgfuauyw9zjm1qsftZ sshd[2268605]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 11431 ssh2 [preauth] May 23 08:28:59 iZgw8bgfuauyw9zjm1qsftZ sshd[2268998]: error: kex_exchange_identification: read: Connection reset by peer May 23 08:33:22 iZgw8bgfuauyw9zjm1qsftZ sshd[2269017]: error: kex_exchange_identification: read: Connection reset by peer May 23 09:07:00 iZgw8bgfuauyw9zjm1qsftZ sshd[2269177]: error: maximum authentication attempts exceeded for invalid user claude from 213.209.159.56 port 18900 ssh2 [preauth] May 23 09:12:45 iZgw8bgfuauyw9zjm1qsftZ sshd[2269212]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 31226 ssh2 [preauth] May 23 09:16:33 iZgw8bgfuauyw9zjm1qsftZ sshd[2269240]: error: maximum authentication attempts exceeded for admin from 2.57.121.112 port 60905 ssh2 [preauth] May 23 09:24:15 iZgw8bgfuauyw9zjm1qsftZ sshd[2269283]: error: kex_exchange_identification: read: Connection reset by peer May 23 09:38:48 iZgw8bgfuauyw9zjm1qsftZ sshd[2269358]: error: kex_protocol_error: type 20 seq 2 [preauth] May 23 09:38:48 iZgw8bgfuauyw9zjm1qsftZ sshd[2269358]: error: kex_protocol_error: type 30 seq 3 [preauth] May 23 09:38:49 iZgw8bgfuauyw9zjm1qsftZ sshd[2269358]: error: kex_protocol_error: type 20 seq 4 [preauth] May 23 09:38:49 iZgw8bgfuauyw9zjm1qsftZ sshd[2269358]: error: kex_protocol_error: type 30 seq 5 [preauth] May 23 09:38:51 iZgw8bgfuauyw9zjm1qsftZ sshd[2269358]: error: kex_protocol_error: type 20 seq 6 [preauth] May 23 09:38:51 iZgw8bgfuauyw9zjm1qsftZ sshd[2269358]: error: kex_protocol_error: type 30 seq 7 [preauth] May 23 09:48:41 iZgw8bgfuauyw9zjm1qsftZ sshd[2269406]: error: maximum authentication attempts exceeded for invalid user ubnt from 193.46.255.86 port 12904 ssh2 [preauth] May 23 10:16:53 iZgw8bgfuauyw9zjm |
| HK | May 22 19:01:04 serq25t4zyrk3xk sshd[1605196]: error: kex_exchange_identification: read: Connection reset by peer May 22 20:45:59 serq25t4zyrk3xk sshd[1606848]: error: kex_exchange_identification: read: Connection reset by peer May 22 20:48:14 serq25t4zyrk3xk sshd[1606888]: error: kex_exchange_identification: read: Connection reset by peer May 22 20:55:08 serq25t4zyrk3xk sshd[1606994]: error: kex_exchange_identification: read: Connection reset by peer May 22 23:15:13 serq25t4zyrk3xk sshd[1608976]: error: kex_exchange_identification: read: Connection reset by peer May 22 23:31:19 serq25t4zyrk3xk sshd[1609185]: error: kex_exchange_identification: read: Connection reset by peer May 23 00:10:51 serq25t4zyrk3xk sshd[1609889]: error: maximum authentication attempts exceeded for invalid user armon from 213.209.159.56 port 6876 ssh2 [preauth] May 23 00:19:53 serq25t4zyrk3xk sshd[1610023]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 32084 ssh2 [preauth] May 23 00:20:57 serq25t4zyrk3xk sshd[1610036]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 40371 ssh2 [preauth] May 23 01:35:45 serq25t4zyrk3xk sshd[1610883]: error: kex_exchange_identification: read: Connection reset by peer May 23 02:02:51 serq25t4zyrk3xk sshd[1611179]: error: maximum authentication attempts exceeded for invalid user claude from 213.209.159.56 port 65394 ssh2 [preauth] May 23 02:03:30 serq25t4zyrk3xk sshd[1611184]: error: maximum authentication attempts exceeded for invalid user ubnt from 193.46.255.86 port 40222 ssh2 [preauth] May 23 02:05:50 serq25t4zyrk3xk sshd[1611217]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 35548 ssh2 [preauth] May 23 02:09:38 serq25t4zyrk3xk sshd[1611257]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 18095 ssh2 [preauth] May 23 03:33:07 serq25t4zyrk3xk sshd[1612563]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 46986 ssh2 [preauth] May 23 03:36:49 serq25t4zyrk3xk sshd[1612604]: error: maximum authentication attempts exceeded for invalid u |
| TK | May 21 07:47:11 jppro1-2023101300230338 sshd[1699559]: error: kex_exchange_identification: client sent invalid protocol identifier "MGLNDD_103.232.213.10_22" May 21 08:04:02 jppro1-2023101300230338 sshd[1699668]: error: kex_exchange_identification: Connection closed by remote host May 21 09:43:28 jppro1-2023101300230338 sshd[1701763]: error: kex_protocol_error: type 20 seq 2 [preauth] May 21 09:43:28 jppro1-2023101300230338 sshd[1701763]: error: kex_protocol_error: type 30 seq 3 [preauth] May 21 09:43:28 jppro1-2023101300230338 sshd[1701763]: error: kex_protocol_error: type 20 seq 4 [preauth] May 21 09:43:28 jppro1-2023101300230338 sshd[1701763]: error: kex_protocol_error: type 30 seq 5 [preauth] May 21 09:43:30 jppro1-2023101300230338 sshd[1701763]: error: kex_protocol_error: type 20 seq 6 [preauth] May 21 09:43:30 jppro1-2023101300230338 sshd[1701763]: error: kex_protocol_error: type 30 seq 7 [preauth] May 21 10:59:46 jppro1-2023101300230338 sshd[1702129]: error: kex_exchange_identification: Connection closed by remote host May 21 13:10:33 jppro1-2023101300230338 sshd[1702777]: error: kex_exchange_identification: Connection closed by remote host May 21 13:50:13 jppro1-2023101300230338 sshd[1703010]: error: kex_exchange_identification: Connection closed by remote host May 21 13:51:29 jppro1-2023101300230338 sshd[1703017]: error: kex_exchange_identification: Connection closed by remote host May 21 14:43:06 jppro1-2023101300230338 sshd[1703259]: error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" May 21 14:43:06 jppro1-2023101300230338 sshd[1703262]: error: kex_exchange_identification: client sent invalid protocol identifier "GET /favicon.ico HTTP/1.1" May 21 14:54:16 jppro1-2023101300230338 sshd[1703316]: error: kex_exchange_identification: Connection closed by remote host May 21 15:18:09 jppro1-2023101300230338 sshd[1703437]: error: kex_exchange_identification: Connection closed by remote host May 21 16:10:49 jppro1-2023101300230338 sshd[1703703]: error: kex_exchange_identification: Connection closed by remote host May 21 18:39:15 jppro1-2023101300230338 sshd[1704480]: error: kex_exchange_identification: Connection close |
| AR | May 23 06:10:07 instance-20260423-0914 sshd[1846166]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 8222 ssh2 [preauth] May 23 07:26:33 instance-20260423-0914 sshd[1874972]: error: maximum authentication attempts exceeded for invalid user armon from 213.209.159.56 port 43913 ssh2 [preauth] May 23 07:38:44 instance-20260423-0914 sshd[1879493]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 19640 ssh2 [preauth] May 23 07:39:40 instance-20260423-0914 sshd[1879827]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 12201 ssh2 [preauth] May 23 09:11:51 instance-20260423-0914 sshd[1914032]: error: kex_exchange_identification: read: Connection reset by peer May 23 09:32:29 instance-20260423-0914 sshd[1921740]: error: maximum authentication attempts exceeded for invalid user claude from 213.209.159.56 port 65356 ssh2 [preauth] May 23 09:36:55 instance-20260423-0914 sshd[1923388]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 28113 ssh2 [preauth] May 23 09:40:46 instance-20260423-0914 sshd[1924800]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 50282 ssh2 [preauth] May 23 09:50:46 instance-20260423-0914 sshd[1928481]: error: kex_exchange_identification: read: Connection reset by peer May 23 11:06:03 instance-20260423-0914 sshd[1958308]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 46361 ssh2 [preauth] May 23 11:07:33 instance-20260423-0914 sshd[1958871]: error: maximum authentication attempts exceeded for invalid user jacky from 213.209.159.56 port 8346 ssh2 [preauth] May 23 11:10:19 instance-20260423-0914 sshd[1960377]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 37210 ssh2 [preauth] May 23 11:21:18 instance-20260423-0914 networkctl[2045711]: Interface "vethaec0872" not found. May 23 11:21:18 instance-20260423-0914 networkctl[2045722]: Interface "vethfeaf55d" not found. May 23 11:21:18 instance-20260423-0914 networkctl[2045743]: Interface "veth7ad269 |
| KRB | May 22 10:02:11 instance-20260429-1226 sshd[872465]: error: maximum authentication attempts exceeded for invalid user kaylene from 213.209.159.56 port 11869 ssh2 [preauth] May 22 10:32:38 instance-20260429-1226 sshd[872614]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 48373 ssh2 [preauth] May 22 11:09:31 instance-20260429-1226 sshd[872792]: error: maximum authentication attempts exceeded for invalid user keasia from 213.209.159.56 port 49868 ssh2 [preauth] May 22 12:17:05 instance-20260429-1226 sshd[873198]: error: maximum authentication attempts exceeded for invalid user keren from 213.209.159.56 port 62451 ssh2 [preauth] May 22 12:27:44 instance-20260429-1226 sshd[873281]: error: Protocol major versions differ: 2 vs. 1 May 22 13:23:53 instance-20260429-1226 sshd[873571]: error: maximum authentication attempts exceeded for invalid user leena from 213.209.159.56 port 25860 ssh2 [preauth] May 22 13:57:38 instance-20260429-1226 sshd[874117]: error: maximum authentication attempts exceeded for invalid user support from 193.46.255.86 port 41518 ssh2 [preauth] May 22 14:30:19 instance-20260429-1226 sshd[874318]: error: maximum authentication attempts exceeded for invalid user malina from 213.209.159.56 port 37993 ssh2 [preauth] May 22 15:36:43 instance-20260429-1226 sshd[875334]: error: maximum authentication attempts exceeded for invalid user pricilla from 213.209.159.56 port 19388 ssh2 [preauth] May 22 16:43:24 instance-20260429-1226 sshd[875776]: error: maximum authentication attempts exceeded for invalid user ryanne from 213.209.159.56 port 41682 ssh2 [preauth] May 22 17:49:54 instance-20260429-1226 sshd[876159]: error: maximum authentication attempts exceeded for invalid user scarlet from 213.209.159.56 port 56890 ssh2 [preauth] May 22 18:56:09 instance-20260429-1226 sshd[876573]: error: maximum authentication attempts exceeded for invalid user susie from 213.209.159.56 port 10773 ssh2 [preauth] May 22 19:03:17 instance-20260429-1226 sshd[876602]: error: maximum authentication attempts exceeded for invalid user user from 193.46.255.86 port 21295 ssh2 [preauth] May 22 20:02:29 instance-20260429-1226 sshd[876989]: |
| US | May 22 17:45:08 ser0570106010 sshd[1042023]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 43381 ssh2 [preauth] May 22 17:48:18 ser0570106010 sshd[1042127]: error: maximum authentication attempts exceeded for invalid user scarlet from 213.209.159.56 port 35270 ssh2 [preauth] May 22 17:55:00 ser0570106010 sshd[1042144]: error: kex_exchange_identification: read: Connection reset by peer May 22 17:55:13 ser0570106010 sshd[1042147]: fatal: userauth_pubkey: parse publickey packet: incomplete message [preauth] May 22 18:54:31 ser0570106010 sshd[1042307]: error: maximum authentication attempts exceeded for invalid user susie from 213.209.159.56 port 55153 ssh2 [preauth] May 22 18:54:43 ser0570106010 sshd[1042309]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 50841 ssh2 [preauth] May 22 18:55:49 ser0570106010 sshd[1042313]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 11134 ssh2 [preauth] May 22 20:00:49 ser0570106010 sshd[1042774]: error: maximum authentication attempts exceeded for invalid user tamar from 213.209.159.56 port 34836 ssh2 [preauth] May 22 20:05:10 ser0570106010 sshd[1042794]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 44268 ssh2 [preauth] May 22 20:06:23 ser0570106010 sshd[1042839]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 34660 ssh2 [preauth] May 22 21:07:19 ser0570106010 sshd[1043309]: error: maximum authentication attempts exceeded for invalid user valarie from 213.209.159.56 port 46192 ssh2 [preauth] May 22 21:10:33 ser0570106010 sshd[1043355]: error: kex_protocol_error: type 20 seq 2 [preauth] May 22 21:10:33 ser0570106010 sshd[1043355]: error: kex_protocol_error: type 30 seq 3 [preauth] May 22 21:10:35 ser0570106010 sshd[1043355]: error: kex_protocol_error: type 20 seq 4 [preauth] May 22 21:10:35 ser0570106010 sshd[1043355]: error: kex_protocol_error: type 30 seq 5 [preauth] May 22 21:10:37 ser0570106010 sshd[1043355]: error: kex_protocol_error: type 20 seq 6 [preauth] May 22 21:10:37 ser0570106010 sshd[10433 |
| HKA | May 22 19:27:07 ser4062572352 sshd[23739]: error: kex_protocol_error: type 20 seq 2 [preauth] May 22 19:27:07 ser4062572352 sshd[23739]: error: kex_protocol_error: type 30 seq 3 [preauth] May 22 19:27:08 ser4062572352 sshd[23739]: error: kex_protocol_error: type 20 seq 4 [preauth] May 22 19:27:08 ser4062572352 sshd[23739]: error: kex_protocol_error: type 30 seq 5 [preauth] May 22 19:27:10 ser4062572352 sshd[23739]: error: kex_protocol_error: type 20 seq 6 [preauth] May 22 19:27:10 ser4062572352 sshd[23739]: error: kex_protocol_error: type 30 seq 7 [preauth] May 22 19:49:23 ser4062572352 sshd[23875]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 24676 ssh2 [preauth] May 22 19:50:30 ser4062572352 sshd[23885]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 54957 ssh2 [preauth] May 22 20:02:26 ser4062572352 sshd[23957]: error: kex_exchange_identification: read: Connection reset by peer May 22 20:59:38 ser4062572352 sshd[24225]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 50451 ssh2 [preauth] May 22 21:00:43 ser4062572352 sshd[24228]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 54844 ssh2 [preauth] May 22 22:09:40 ser4062572352 sshd[24570]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 32503 ssh2 [preauth] May 22 22:10:46 ser4062572352 sshd[24579]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 22172 ssh2 [preauth] May 22 22:26:54 ser4062572352 sshd[24674]: error: kex_exchange_identification: read: Connection reset by peer May 22 22:38:52 ser4062572352 sshd[24771]: error: maximum authentication attempts exceeded for invalid user telecomadmin from 193.46.255.86 port 40584 ssh2 [preauth] May 22 22:47:34 ser4062572352 sshd[24838]: error: kex_exchange_identification: read: Connection reset by peer May 23 00:01:37 ser4062572352 sshd[25644]: error: maximum authentication attempts exceeded for invalid user armon from 213.209.159.56 port 11491 ssh2 [preauth] May 23 00:11:26 ser4062572352 sshd[256 |
| HKY | May 20 07:37:26 hks2-202404291529122cb8ee sshd[200603]: error: kex_protocol_error: type 20 seq 4 [preauth] May 20 07:37:26 hks2-202404291529122cb8ee sshd[200603]: error: kex_protocol_error: type 30 seq 5 [preauth] May 20 07:37:28 hks2-202404291529122cb8ee sshd[200603]: error: kex_protocol_error: type 20 seq 6 [preauth] May 20 07:37:28 hks2-202404291529122cb8ee sshd[200603]: error: kex_protocol_error: type 30 seq 7 [preauth] May 20 08:51:58 hks2-202404291529122cb8ee sshd[200684]: error: kex_exchange_identification: Connection closed by remote host May 20 13:28:43 hks2-202404291529122cb8ee sshd[201386]: error: kex_exchange_identification: Connection closed by remote host May 20 13:28:43 hks2-202404291529122cb8ee sshd[201387]: error: kex_exchange_identification: banner line contains invalid characters May 20 13:28:44 hks2-202404291529122cb8ee sshd[201388]: error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" May 20 13:53:35 hks2-202404291529122cb8ee sshd[201413]: error: kex_protocol_error: type 20 seq 2 [preauth] May 20 13:53:35 hks2-202404291529122cb8ee sshd[201413]: error: kex_protocol_error: type 30 seq 3 [preauth] May 20 13:53:37 hks2-202404291529122cb8ee sshd[201413]: error: kex_protocol_error: type 20 seq 4 [preauth] May 20 13:53:37 hks2-202404291529122cb8ee sshd[201413]: error: kex_protocol_error: type 30 seq 5 [preauth] May 20 13:53:39 hks2-202404291529122cb8ee sshd[201413]: error: kex_protocol_error: type 20 seq 6 [preauth] May 20 13:53:39 hks2-202404291529122cb8ee sshd[201413]: error: kex_protocol_error: type 30 seq 7 [preauth] May 20 16:34:18 hks2-202404291529122cb8ee sshd[201574]: error: kex_exchange_identification: Connection closed by remote host May 21 01:43:23 hks2-202404291529122cb8ee sshd[202142]: error: kex_exchange_identification: banner line contains invalid characters May 21 12:26:05 hks2-202404291529122cb8ee sshd[203389]: error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" May 21 12:26:06 hks2-202404291529122cb8ee sshd[203390]: error: kex_exchange_identification: client sent invalid protocol identifier "GET /favicon.ico HTTP/1.1" May 21 13:08:35 hks2-202404291529 |