VPS 每 5 天巡检报告

       
LISTEN 0      4096          0.0.0.0:22         0.0.0.0:*    users:(("sshd",pid=981,fd=3),("systemd",pid=1,fd=189))       
LISTEN 0      511           0.0.0.0:80         0.0.0.0:*    users:(("nginx",pid=178954,fd=7),("nginx",pid=141948,fd=7))  
LISTEN 0      4096        127.0.0.1:45987      0.0.0.0:*    users:(("xray",pid=169494,fd=7))                             
LISTEN 0      4096       127.0.0.54:53         0.0.0.0:*    users:(("systemd-resolve",pid=136149,fd=17))                 
LISTEN 0      511           0.0.0.0:443        0.0.0.0:*    users:(("nginx",pid=178954,fd=10),("nginx",pid=141948,fd=10))
LISTEN 0      511           0.0.0.0:11704      0.0.0.0:*    users:(("nginx",pid=178954,fd=9),("nginx",pid=141948,fd=9))  
LISTEN 0      511         127.0.0.1:8081       0.0.0.0:*    users:(("nginx",pid=178954,fd=6),("nginx",pid=141948,fd=6))  
LISTEN 0      4096   64.118.144.182:27262      0.0.0.0:*    users:(("xray",pid=169494,fd=3))                             
LISTEN 0      4096             [::]:22            [::]:*    users:(("sshd",pid=981,fd=4),("systemd",pid=1,fd=190))       
LISTEN 0      511              [::]:80            [::]:*    users:(("nginx",pid=178954,fd=8),("nginx",pid=141948,fd=8))  
===== recent critical logs =====
Jun 02 07:58:47 JP sshd[181919]: error: maximum authentication attempts exceeded for invalid user canaan from 213.209.159.56 port 50436 ssh2 [preauth]
Jun 02 08:21:38 JP sshd[181999]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 7439 ssh2 [preauth]
Jun 02 08:25:58 JP sshd[182010]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 42101 ssh2 [preauth]
Jun 02 09:07:19 JP sshd[182170]: error: maximum authentication attempts exceeded for invalid user darrick from 213.209.159.56 port 49582 ssh2 [preauth]
Jun 02 09:26:41 JP sshd[182227]: error: maximum authentication attempts exceeded for root from 185.104.71.22 port 60172 ssh2 [preauth]
Jun 02 09:35:56 JP sshd[182251]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 41260 ssh2 [preauth]
Jun 02 09:40:11 JP sshd[182262]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 49239 ssh2 [preauth]
Jun 02 10:15:20 JP sshd[182368]: error: maximum authentication attempts exceeded for invalid user edson from 213.209.159.56 port 47324 ssh2 [preauth]
Jun 02 10:18:50 JP sshd[182384]: error: maximum authentication attempts exceeded for root from 103.195.100.210 port 64388 ssh2 [preauth]
Jun 02 10:37:40 JP sshd[182443]: error: maximum authentication attempts exceeded for root from 85.120.81.241 port 44672 ssh2 [preauth]
Jun 02 10:50:08 JP sshd[182499]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 23612 ssh2 [preauth]
Jun 02 10:54:06 JP sshd[182510]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 15937 ssh2 [preauth]
Jun 02 11:06:45 JP sshd[182562]: error: maximum authentication attempts exceeded for root from 209.90.232.251 port 52886 ssh2 [preauth]
Jun 02 11:23:18 JP sshd[182619]: error: maximum authentication attempts exceeded for invalid user favian from 213.209.159.56 port 38716 ssh2 [preauth]
Jun 02 11:34:46 JP sshd[182650]: error: maximum authentication attempts exceeded for root from 192.95.10.204 port 14558 ssh2 [preauth]
Jun 02 12:03:53 JP sshd[182732]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 15895 ssh2 [preauth]
Jun 02 12:08:06 JP sshd[182743]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 44138 ssh2 [preauth]
Jun 02 12:17:02 JP sshd[182774]: error: maximum authentication attempts exceeded for root from 185.255.100.242 port 42744 ssh2 [preauth]
Jun 02 12:30:01 JP sshd[182816]: error: Protocol major versions differ: 2 vs. 1
Jun 02 12:30:57 JP sshd[182821]: error: maximum authentication attempts exceeded for invalid user griffen from 213.209.159.56 port 9099 ssh2 [preauth]
Jun 02 12:33:56 JP sshd[182843]: error: maximum authentication attempts exceeded for root from 128.0.104.44 port 48674 ssh2 [preauth]
Jun 02 12:34:13 JP sshd[182869]: error: kex_exchange_identification: read: Connection reset by peer
Jun 02 13:17:45 JP sshd[183032]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 52482 ssh2 [preauth]
Jun 02 13:21:46 JP sshd[183048]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 35154 ssh2 [preauth]
Jun 02 13:38:23 JP sshd[183097]: error: maximum authentication attempts exceeded for invalid user mack from 213.209.159.56 port 28588 ssh2 [preauth]
Jun 02 13:39:09 JP sshd[183099]: error: kex_exchange_identification: read: Connection reset by peer
Jun 02 13:44:04 JP sshd[183112]: error: maximum authentication attempts exceeded for root from 91.208.197.64 port 57418 ssh2 [preauth]
Jun 02 13:49:23 JP sshd[183123]: error: maximum authentication attempts exceeded for root from 108.181.22.199 port 64754 ssh2 [preauth]
Jun 02 14:00:54 JP sshd[183157]: error: kex_exchange_identification: read: Connection reset by peer
Jun 02 14:11:55 JP sshd[183180]: error: maximum authentication attempts exceeded for root from 148.113.190.153 port 50600 ssh2 [preauth]
Jun 02 14:19:03 JP sshd[183210]: error: kex_protocol_error: type 20 seq 2 [preauth]
Jun 02 14:19:03 JP sshd[183210]: error: kex_protocol_error: type 30 seq 3 [preauth]
Jun 02 14:19:04 JP sshd[183210]: error: kex_protocol_error: type 20 seq 4 [preauth]
Jun 02 14:19:04 JP sshd[183210]: error: kex_protocol_error: type 30 seq 5 [preauth]
Jun 02 14:19:06 JP sshd[183210]: error: kex_protocol_error: type 20 seq 6 [preauth]
Jun 02 14:19:06 JP sshd[183210]: error: kex_protocol_error: type 30 seq 7 [preauth]
Jun 02 14:31:12 JP sshd[183240]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 52091 ssh2 [preauth]
Jun 02 14:35:24 JP sshd[183247]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 42583 ssh2 [preauth]
Jun 02 14:45:40 JP sshd[183287]: error: maximum authentication attempts exceeded for invalid user samual from 213.209.159.56 port 34141 ssh2 [preauth]
Jun 02 14:53:57 JP sshd[183404]: error: maximum authentication attempts exceeded for root from 23.94.189.218 port 42308 ssh2 [preauth]
Jun 02 15:10:15 JP sshd[183444]: error: maximum authentication attempts exceeded for root from 194.120.230.72 port 31278 ssh2 [preauth]
Jun 02 15:16:03 JP sshd[183465]: error: maximum authentication attempts exceeded for root from 210.114.19.195 port 52830 ssh2 [preauth]
Jun 02 15:44:43 JP sshd[183580]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 41313 ssh2 [preauth]
Jun 02 15:48:41 JP sshd[183592]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 21609 ssh2 [preauth]
Jun 02 15:52:15 JP sshd[183608]: error: maximum authentication attempts exceeded for invalid user shay from 213.209.159.56 port 20217 ssh2 [preauth]
Jun 02 15:58:12 JP sshd[183624]: error: maximum authentication attempts exceeded for root from 176.65.131.192 port 34234 ssh2 [preauth]
Jun 02 16:08:35 JP sshd[183661]: error: maximum authentication attempts exceeded for root from 128.0.104.39 port 54396 ssh2 [preauth]
Jun 02 16:14:15 JP sshd[183673]: error: maximum authentication attempts exceeded for root from 198.23.249.85 port 42616 ssh2 [preauth]
Jun 02 16:16:49 JP sshd[183688]: error: maximum authentication attempts exceeded for root from 182.176.84.191 port 45512 ssh2 [preauth]
Jun 02 16:29:11 JP sshd[183720]: error: maximum authentication attempts exceeded for root from 193.142.43.122 port 49130 ssh2 [preauth]
Jun 02 16:43:19 JP sshd[183762]: error: maximum authentication attempts exceeded for root from 194.163.160.47 port 41234 ssh2 [preauth]
Jun 02 16:45:49 JP sshd[183778]: error: maximum authentication attempts exceeded for root from 195.26.87.217 port 45834 ssh2 [preauth]
Jun 02 16:49:33 JP sshd[183782]: error: maximum authentication attempts exceeded for root from 45.148.145.60 port 55578 ssh2 [preauth]
Jun 02 16:57:49 JP sshd[183813]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 12606 ssh2 [preauth]
Jun 02 16:58:41 JP sshd[183816]: error: maximum authentication attempts exceeded for invalid user cami from 213.209.159.56 port 53346 ssh2 [preauth]
Jun 02 17:01:51 JP sshd[183830]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 44112 ssh2 [preauth]
Jun 02 17:03:40 JP sshd[183837]: error: maximum authentication attempts exceeded for root from 179.61.232.245 port 42334 ssh2 [preauth]
Jun 02 17:07:28 JP sshd[183847]: error: maximum authentication attempts exceeded for root from 50.6.197.105 port 39084 ssh2 [preauth]
Jun 02 17:11:14 JP sshd[183865]: error: maximum authentication attempts exceeded for root from 154.16.180.28 port 35754 ssh2 [preauth]
Jun 02 17:12:49 JP sshd[183867]: error: maximum authentication attempts exceeded for root from 68.235.61.155 port 13868 ssh2 [preauth]
Jun 02 17:16:49 JP sshd[183879]: error: maximum authentication attempts exceeded for root from 102.129.186.87 port 2244 ssh2 [preauth]
Jun 02 17:21:05 JP sshd[183901]: error: maximum authentication attempts exceeded for root from 31.42.176.142 port 29716 ssh2 [preauth]
Jun 02 17:51:05 JP sshd[183984]: error: maximum authentication attempts exceeded for root from 96.127.152.236 port 40766 ssh2 [preauth]
Jun 02 17:53:23 JP sshd[183989]: error: maximum authentication attempts exceeded for root from 102.211.234.171 port 44656 ssh2 [preauth]
Jun 02 17:59:13 JP sshd[184018]: error: maximum authentication attempts exceeded for root from 103.112.62.144 port 37642 ssh2 [preauth]
Jun 02 18:04:21 JP sshd[184027]: error: maximum authentication attempts exceeded for invalid user gracyn from 213.209.159.56 port 23246 ssh2 [preauth]
Jun 02 18:08:06 JP sshd[184042]: error: maximum authentication attempts exceeded for root from 51.255.204.163 port 34514 ssh2 [preauth]
Jun 02 18:08:17 JP sshd[184044]: error: maximum authentication attempts exceeded for root from 199.195.248.228 port 28442 ssh2 [preauth]
Jun 02 18:10:32 JP sshd[184047]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 48810 ssh2 [preauth]
Jun 02 18:14:26 JP sshd[184062]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 22081 ssh2 [preauth]
Jun 02 18:14:46 JP sshd[184064]: error: maximum authentication attempts exceeded for root from 38.96.178.216 port 35582 ssh2 [preauth]
Jun 02 18:20:09 JP sshd[184082]: error: maximum authentication attempts exceeded for root from 195.160.220.149 port 17916 ssh2 [preauth]
Jun 02 18:26:39 JP sshd[184106]: error: maximum authentication attempts exceeded for root from 164.90.156.35 port 54476 ssh2 [preauth]
Jun 02 18:32:25 JP sshd[184118]: error: maximum authentication attempts exceeded for root from 209.14.89.9 port 12524 ssh2 [preauth]
Jun 02 18:40:09 JP sshd[184143]: error: maximum authentication attempts exceeded for root from 102.67.141.165 port 58206 ssh2 [preauth]
Jun 02 18:44:20 JP sshd[184155]: error: maximum authentication attempts exceeded for root from 51.81.85.130 port 33900 ssh2 [preauth]
Jun 02 19:00:18 JP sshd[184197]: error: maximum authentication attempts exceeded for root from 195.201.140.251 port 58108 ssh2 [preauth]
Jun 02 19:09:32 JP sshd[184215]: error: maximum authentication attempts exceeded for invalid user jaylee from 213.209.159.56 port 54029 ssh2 [preauth]
Jun 02 19:13:02 JP sshd[184233]: error: maximum authentication attempts exceeded for root from 91.208.197.64 port 42138 ssh2 [preauth]
Jun 02 19:17:24 JP sshd[184254]: error: maximum authentication attempts exceeded for root from 172.93.103.2 port 59460 ssh2 [preauth]

c80-vless_reality_vision
Jun 02 11:17:54 JPA xray[35459]: 2026/06/02 11:17:54.830696 from 171.13.61.183:53015 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
Jun 02 11:17:54 JPA xray[35459]: 2026/06/02 11:17:54.940434 from 172.26.3.247:41603 accepted udp:googleads.g.doubleclick-cn.net:443 [z_direct_outbound] email: edf83c80-vless_reality_vision
Jun 02 11:17:54 JPA xray[35459]: 2026/06/02 11:17:54.953536 from 171.13.61.183:53016 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
Jun 02 11:17:55 JPA xray[35459]: 2026/06/02 11:17:55.035112 from 172.26.3.247:45677 accepted tcp:googleads.g.doubleclick-cn.net:443 [z_direct_outbound] email: edf83c80-vless_reality_vision
Jun 02 11:17:58 JPA xray[35459]: 2026/06/02 11:17:58.241040 from 171.13.61.183:53027 accepted tcp:127.0.0.1:45987 [dokodemo-in-VLESSReality >> z_direct_outbound]
Jun 02 11:17:58 JPA xray[35459]: 2026/06/02 11:17:58.337607 from 172.26.3.247:40785 accepted tcp:video.twimg.com:443 [z_direct_outbound] email: edf83c80-vless_reality_vision
--- hermes-gateway ---
* hermes-gateway.service - Hermes Agent Gateway - Messaging Platform Integration
     Loaded: loaded (/etc/systemd/system/hermes-gateway.service; enabled; preset: enabled)
     Active: active (running) since Mon 2026-06-01 14:51:31 UTC; 20h ago
   Main PID: 47447 (python)
      Tasks: 8 (limit: 1013)
     Memory: 167.5M (peak: 420.2M swap: 30.8M swap peak: 78.1M)
        CPU: 2min 8.426s
     CGroup: /system.slice/hermes-gateway.service
             `-47447 /usr/local/lib/hermes-agent/venv/bin/python -m hermes_cli.main gateway run --replace

Jun 01 14:51:31 JPA systemd[1]: Started hermes-gateway.service - Hermes Agent Gateway - Messaging Platform Integration.
Jun 01 15:12:10 JPA python[47447]: WARNING agent.tool_executor: Tool terminal returned error (0.10s): {"output": "---", "exit_code": 2, "error": null}
===== listening ports =====
State  Recv-Q Send-Q Local Address:Port  Peer Address:PortProcess                                                
LISTEN 0      4096         0.0.0.0:22         0.0.0.0:*    users:(("sshd",pid=899,fd=3),("systemd",pid=1,fd=157))
LISTEN 0      4096    172.26.3.247:443        0.0.0.0:*    users:(("xray",pid=35459,fd=3))                       
LISTEN 0      4096       127.0.0.1:45987      0.0.0.0:*    users:(("xray",pid=35459,fd=6))                       
LISTEN 0      4096      127.0.0.54:53         0.0.0.0:*    users:(("systemd-resolve",pid=15115,fd=17))           
LISTEN 0      4096   127.0.0.53%lo:53         0.0.0.0:*    users:(("systemd-resolve",pid=15115,fd=15))           
LISTEN 0      4096            [::]:22            [::]:*    users:(("sshd",pid=899,fd=4),("systemd",pid=1,fd=158))
===== recent critical logs =====
May 27 21:54:21 JPA sshd[5544]: error: maximum authentication attempts exceeded for invalid user test2 from 218.250.28.248 port 42136 ssh2 [preauth]
May 27 21:54:32 JPA sshd[5548]: error: maximum authentication attempts exceeded for ubuntu from 218.250.28.248 port 38422 ssh2 [preauth]
May 27 21:54:37 JPA sshd[5556]: error: maximum authentication attempts exceeded for ubuntu from 218.250.28.248 port 38424 ssh2 [preauth]
May 27 23:07:01 JPA kernel: workqueue: psi_avgs_work hogged CPU for >10000us 7 times, consider switching to WQ_UNBOUND
May 27 23:58:28 JPA systemd[1]: hermes-gateway.service: Failed with result 'exit-code'.
May 28 02:21:00 JPA kernel: workqueue: psi_avgs_work hogged CPU for >10000us 11 times, consider switching to WQ_UNBOUND
May 28 03:35:01 JPA kernel: workqueue: vmstat_update hogged CPU for >10000us 4 times, consider switching to WQ_UNBOUND
May 28 04:24:45 JPA sshd[8526]: error: kex_exchange_identification: read: Connection reset by peer
May 28 04:48:01 JPA kernel: workqueue: drm_fb_helper_damage_work hogged CPU for >10000us 35 times, consider switching to WQ_UNBOUND
May 28 05:00:01 JPA kernel: workqueue: vmstat_update hogged CPU for >10000us 5 times, consider switching to WQ_UNBOUND
May 28 05:24:02 JPA kernel: workqueue: psi_avgs_work hogged CPU for >10000us 19 times, consider switching to WQ_UNBOUND
May 28 14:24:38 JPA kernel: kauditd_printk_skb: 113 callbacks suppressed
May 28 14:24:46 JPA kernel: kauditd_printk_skb: 1 callbacks suppressed
May 28 14:24:56 JPA (qbalance)[15099]: irqbalance.service: Referenced but unset environment variable evaluates to an empty string: IRQBALANCE_ARGS
May 28 14:28:07 JPA irqbalance[15099]: Cannot change IRQ 26 affinity: No such file or directory
May 28 14:28:07 JPA irqbalance[15099]: IRQ 26 affinity is now unmanaged
May 28 14:37:47 JPA irqbalance[15099]: Cannot change IRQ 25 affinity: Permission denied
May 28 14:37:47 JPA irqbalance[15099]: IRQ 25 affinity is now unmanaged
May 28 14:47:27 JPA systemd[1]: hermes-gateway.service: Failed with result 'exit-code'.
May 28 15:01:13 JPA systemd[1]: hermes-gateway.service: Failed with result 'exit-code'.
May 28 17:10:01 JPA kernel: workqueue: key_garbage_collector hogged CPU for >10000us 4 times, consider switching to WQ_UNBOUND
May 28 18:24:58 JPA kernel: kauditd_printk_skb: 2 callbacks suppressed
May 28 18:48:00 JPA kernel: workqueue: drm_fb_helper_damage_work hogged CPU for >10000us 67 times, consider switching to WQ_UNBOUND
May 28 19:50:38 JPA sshd[18254]: error: kex_exchange_identification: read: Connection reset by peer
May 29 00:52:22 JPA systemd[1]: hermes-gateway.service: Failed with result 'exit-code'.
May 29 01:00:01 JPA kernel: workqueue: key_garbage_collector hogged CPU for >10000us 5 times, consider switching to WQ_UNBOUND
May 29 06:15:01 JPA kernel: workqueue: psi_avgs_work hogged CPU for >10000us 35 times, consider switching to WQ_UNBOUND
May 29 06:24:12 JPA sshd[21265]: error: Protocol major versions differ: 2 vs. 1
May 29 14:46:52 JPA systemd[1]: hermes-gateway.service: Failed with result 'exit-code'.
May 29 15:07:39 JPA sshd[24100]: fatal: userauth_pubkey: parse publickey packet: incomplete message [preauth]
May 29 16:18:01 JPA kernel: workqueue: vmstat_update hogged CPU for >10000us 7 times, consider switching to WQ_UNBOUND
May 29 20:04:16 JPA sshd[25542]: error: kex_exchange_identification: read: Connection reset by peer
May 30 02:08:00 JPA sshd[27452]: error: kex_exchange_identification: read: Connection reset by peer
May 30 05:04:16 JPA sshd[28326]: error: Protocol major versions differ: 2 vs. 1
May 30 06:20:01 JPA kernel: workqueue: drm_fb_helper_damage_work hogged CPU for >10000us 131 times, consider switching to WQ_UNBOUND
May 30 10:39:12 JPA sshd[30055]: fatal: userauth_pubkey: parse publickey packet: incomplete message [preauth]
May 30 15:49:21 JPA sshd[32250]: error: kex_exchange_identification: read: Connection reset by peer
May 30 16:21:00 JPA kernel: workqueue: psi_avgs_work hogged CPU for >10000us 67 times, consider switching to WQ_UNBOUND
May 30 16:30:01 JPA kernel: workqueue: vmstat_update hogged CPU for >10000us 11 times, consider switching to WQ_UNBOUND
May 31 11:00:39 JPA sshd[38044]: error: kex_exchange_identification: read: Connection reset by peer
May 31 16:50:01 JPA kernel: workqueue: key_garbage_collector hogged CPU for >10000us 7 times, consider switching to WQ_UNBOUND
May 31 18:43:38 JPA sshd[41603]: error: maximum authentication attempts exceeded for root from 178.175.167.68 port 50480 ssh2 [preauth]
May 31 18:43:43 JPA sshd[41605]: error: maximum authentication attempts exceeded for root from 178.175.167.68 port 50792 ssh2 [preauth]
May 31 18:43:47 JPA sshd[41607]: error: maximum authentication attempts exceeded for root from 178.175.167.68 port 51080 ssh2 [preauth]
May 31 18:43:55 JPA sshd[41611]: error: maximum authentication attempts exceeded for invalid user admin from 178.175.167.68 port 51578 ssh2 [preauth]
May 31 18:44:01 JPA sshd[41613]: error: maximum authentication attempts exceeded for invalid user admin from 178.175.167.68 port 51918 ssh2 [preauth]
May 31 18:44:10 JPA sshd[41617]: error: maximum authentication attempts exceeded for invalid user oracle from 178.175.167.68 port 52548 ssh2 [preauth]
May 31 18:44:15 JPA sshd[41619]: error: maximum authentication attempts exceeded for invalid user oracle from 178.175.167.68 port 52876 ssh2 [preauth]
May 31 18:44:25 JPA sshd[41623]: error: maximum authentication attempts exceeded for invalid user usuario from 178.175.167.68 port 53470 ssh2 [preauth]
May 31 18:44:30 JPA sshd[41625]: error: maximum authentication attempts exceeded for invalid user usuario from 178.175.167.68 port 53836 ssh2 [preauth]
May 31 18:44:41 JPA sshd[41629]: error: maximum authentication attempts exceeded for invalid user test from 178.175.167.68 port 54516 ssh2 [preauth]
May 31 18:44:47 JPA sshd[41631]: error: maximum authentication attempts exceeded for invalid user test from 178.175.167.68 port 54892 ssh2 [preauth]
May 31 18:44:56 JPA sshd[41635]: error: maximum authentication attempts exceeded for invalid user user from 178.175.167.68 port 55526 ssh2 [preauth]
May 31 18:45:01 JPA sshd[41637]: error: maximum authentication attempts exceeded for invalid user user from 178.175.167.68 port 55898 ssh2 [preauth]
May 31 18:45:11 JPA sshd[41645]: error: maximum authentication attempts exceeded for invalid user ftpuser from 178.175.167.68 port 56532 ssh2 [preauth]
May 31 18:45:16 JPA sshd[41647]: error: maximum authentication attempts exceeded for invalid user ftpuser from 178.175.167.68 port 56834 ssh2 [preauth]
May 31 18:45:25 JPA sshd[41651]: error: maximum authentication attempts exceeded for invalid user test1 from 178.175.167.68 port 57452 ssh2 [preauth]
May 31 18:45:30 JPA sshd[41653]: error: maximum authentication attempts exceeded for invalid user test1 from 178.175.167.68 port 57714 ssh2 [preauth]
May 31 18:45:39 JPA sshd[41657]: error: maximum authentication attempts exceeded for invalid user test2 from 178.175.167.68 port 58340 ssh2 [preauth]
May 31 18:45:44 JPA sshd[41659]: error: maximum authentication attempts exceeded for invalid user test2 from 178.175.167.68 port 58674 ssh2 [preauth]
May 31 18:45:52 JPA sshd[41663]: error: maximum authentication attempts exceeded for ubuntu from 178.175.167.68 port 59208 ssh2 [preauth]
May 31 18:45:57 JPA sshd[41665]: error: maximum authentication attempts exceeded for ubuntu from 178.175.167.68 port 59534 ssh2 [preauth]
Jun 01 00:19:59 JPA sshd[43256]: error: kex_exchange_identification: read: Connection reset by peer
Jun 01 03:54:24 JPA sshd[899]: error: beginning MaxStartups throttling
Jun 01 06:10:40 JPA sshd[44943]: error: kex_exchange_identification: read: Connection reset by peer
Jun 01 11:00:45 JPA sshd[46355]: error: kex_exchange_identification: read: Connection reset by peer
Jun 01 13:20:01 JPA kernel: workqueue: css_free_rwork_fn hogged CPU for >10000us 4 times, consider switching to WQ_UNBOUND
Jun 01 14:51:31 JPA systemd[1]: hermes-gateway.service: Failed with result 'exit-code'.
Jun 01 17:03:02 JPA kernel: workqueue: drm_fb_helper_damage_work hogged CPU for >10000us 259 times, consider switching to WQ_UNBOUND
Jun 01 18:28:02 JPA kernel: workqueue: vmstat_update hogged CPU for >10000us 19 times, consider switching to WQ_UNBOUND
Jun 01 19:31:58 JPA sshd[49378]: error: kex_exchange_identification: read: Connection reset by peer
Jun 01 21:18:35 JPA sshd[49963]: error: kex_exchange_identification: read: Connection reset by peer
Jun 01 23:30:32 JPA sshd[50416]: error: kex_protocol_error: type 20 seq 2 [preauth]
Jun 01 23:30:32 JPA sshd[50416]: error: kex_protocol_error: type 30 seq 3 [preauth]
Jun 01 23:30:33 JPA sshd[50416]: error: kex_protocol_error: type 20 seq 4 [preauth]
Jun 01 23:30:33 JPA sshd[50416]: error: kex_protocol_error: type 30 seq 5 [preauth]
Jun 01 23:30:35 JPA sshd[50416]: error: kex_protocol_error: type 20 seq 6 [preauth]
Jun 01 23:30:35 JPA sshd[50416]: error: kex_protocol_error: type 30 seq 7 [preauth]
Jun 02 02:31:33 JPA sshd[51567]: error: kex_exchange_identification: read: Connection reset by peer
Jun 02 05:30:01 JPA kernel: workqueue: psi_avgs_work hogged CPU for >10000us 131 times, consider switching to WQ_UNBOUND

d[847215]: error: maximum authentication attempts exceeded for invalid user frankie from 213.209.159.56 port 55358 ssh2 [preauth]
Jun 01 12:28:03 instance-20260423-0151 sshd[847451]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 37570 ssh2 [preauth]
Jun 01 12:31:52 instance-20260423-0151 sshd[847463]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 5573 ssh2 [preauth]
Jun 01 12:47:52 instance-20260423-0151 sshd[847526]: error: maximum authentication attempts exceeded for invalid user gracen from 213.209.159.56 port 14398 ssh2 [preauth]
Jun 01 13:06:17 instance-20260423-0151 sshd[847591]: error: maximum authentication attempts exceeded for invalid user username from 193.46.255.86 port 56771 ssh2 [preauth]
Jun 01 13:45:06 instance-20260423-0151 sshd[847781]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 6150 ssh2 [preauth]
Jun 01 13:49:04 instance-20260423-0151 sshd[847793]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 60896 ssh2 [preauth]
Jun 01 14:01:20 instance-20260423-0151 sshd[847864]: error: maximum authentication attempts exceeded for invalid user hayle from 213.209.159.56 port 56470 ssh2 [preauth]
Jun 01 15:01:53 instance-20260423-0151 sshd[848083]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 19253 ssh2 [preauth]
Jun 01 15:05:55 instance-20260423-0151 sshd[848102]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 10317 ssh2 [preauth]
Jun 01 15:14:17 instance-20260423-0151 sshd[848140]: error: maximum authentication attempts exceeded for invalid user kaileigh from 213.209.159.56 port 12470 ssh2 [preauth]
Jun 01 16:18:31 instance-20260423-0151 sshd[848483]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 45784 ssh2 [preauth]
Jun 01 16:22:31 instance-20260423-0151 sshd[848501]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 63419 ssh2 [preauth]
Jun 01 16:26:57 instance-20260423-0151 sshd[848523]: error: maximum authentication attempts exceeded for invalid user keyona from 213.209.159.56 port 15831 ssh2 [preauth]
Jun 01 17:34:34 instance-20260423-0151 sshd[849004]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 13865 ssh2 [preauth]
Jun 01 17:38:32 instance-20260423-0151 sshd[849037]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 34426 ssh2 [preauth]
Jun 01 17:38:40 instance-20260423-0151 sshd[849041]: error: maximum authentication attempts exceeded for invalid user lillianna from 213.209.159.56 port 12472 ssh2 [preauth]
Jun 01 18:49:56 instance-20260423-0151 sshd[849348]: error: maximum authentication attempts exceeded for invalid user michell from 213.209.159.56 port 34779 ssh2 [preauth]
Jun 01 18:50:08 instance-20260423-0151 sshd[849350]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 7822 ssh2 [preauth]
Jun 01 18:54:14 instance-20260423-0151 sshd[849380]: error: Protocol major versions differ: 2 vs. 1
Jun 01 18:54:18 instance-20260423-0151 sshd[849381]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 64056 ssh2 [preauth]
Jun 01 19:34:51 instance-20260423-0151 sshd[849512]: error: maximum authentication attempts exceeded for invalid user telnet from 193.46.255.86 port 29096 ssh2 [preauth]
Jun 01 19:56:23 instance-20260423-0151 sshd[849591]: error: kex_exchange_identification: read: Connection reset by peer
Jun 01 20:00:33 instance-20260423-0151 sshd[849616]: error: maximum authentication attempts exceeded for invalid user nakayla from 213.209.159.56 port 15312 ssh2 [preauth]
Jun 01 20:05:24 instance-20260423-0151 sshd[849627]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 8344 ssh2 [preauth]
Jun 01 20:09:42 instance-20260423-0151 sshd[849641]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 9089 ssh2 [preauth]
Jun 01 21:10:47 instance-20260423-0151 sshd[849946]: error: maximum authentication attempts exceeded for invalid user raeann from 213.209.159.56 port 47411 ssh2 [preauth]
Jun 01 21:20:41 instance-20260423-0151 sshd[849973]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 37480 ssh2 [preauth]
Jun 01 21:24:58 instance-20260423-0151 sshd[849985]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 16004 ssh2 [preauth]
Jun 01 22:20:21 instance-20260423-0151 sshd[850126]: error: maximum authentication attempts exceeded for invalid user zakiya from 213.209.159.56 port 64154 ssh2 [preauth]
Jun 01 22:35:39 instance-20260423-0151 sshd[850162]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 21457 ssh2 [preauth]
Jun 01 22:39:47 instance-20260423-0151 sshd[850172]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 26384 ssh2 [preauth]
Jun 01 23:29:27 instance-20260423-0151 sshd[850374]: error: maximum authentication attempts exceeded for invalid user bradon from 213.209.159.56 port 19090 ssh2 [preauth]
Jun 01 23:50:14 instance-20260423-0151 sshd[850423]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 17011 ssh2 [preauth]
Jun 01 23:54:24 instance-20260423-0151 sshd[850467]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 59162 ssh2 [preauth]
Jun 02 00:38:06 instance-20260423-0151 sshd[850638]: error: maximum authentication attempts exceeded for invalid user canaan from 213.209.159.56 port 51705 ssh2 [preauth]
Jun 02 01:04:30 instance-20260423-0151 sshd[850743]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 15524 ssh2 [preauth]
Jun 02 01:08:43 instance-20260423-0151 sshd[850752]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 22070 ssh2 [preauth]
Jun 02 01:46:25 instance-20260423-0151 sshd[850893]: error: maximum authentication attempts exceeded for invalid user darrick from 213.209.159.56 port 7514 ssh2 [preauth]
Jun 02 01:59:20 instance-20260423-0151 sshd[850939]: error: kex_exchange_identification: read: Connection reset by peer
Jun 02 02:18:44 instance-20260423-0151 sshd[850993]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 27521 ssh2 [preauth]
Jun 02 02:22:42 instance-20260423-0151 sshd[851006]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 57158 ssh2 [preauth]
Jun 02 02:54:10 instance-20260423-0151 sshd[851110]: error: maximum authentication attempts exceeded for invalid user edson from 213.209.159.56 port 33097 ssh2 [preauth]
Jun 02 03:32:42 instance-20260423-0151 sshd[851222]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 22515 ssh2 [preauth]
Jun 02 03:36:41 instance-20260423-0151 sshd[851244]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 54198 ssh2 [preauth]
Jun 02 04:02:01 instance-20260423-0151 sshd[851324]: error: maximum authentication attempts exceeded for invalid user favian from 213.209.159.56 port 34265 ssh2 [preauth]
Jun 02 04:19:44 instance-20260423-0151 sshd[851370]: error: kex_exchange_identification: read: Connection reset by peer
Jun 02 04:46:27 instance-20260423-0151 sshd[851532]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 12616 ssh2 [preauth]
Jun 02 04:50:30 instance-20260423-0151 sshd[851552]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 58373 ssh2 [preauth]
Jun 02 05:09:33 instance-20260423-0151 sshd[851600]: error: maximum authentication attempts exceeded for invalid user griffen from 213.209.159.56 port 16606 ssh2 [preauth]
Jun 02 05:43:33 instance-20260423-0151 sshd[851712]: error: Protocol major versions differ: 2 vs. 1
Jun 02 06:00:04 instance-20260423-0151 sshd[851861]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 32917 ssh2 [preauth]
Jun 02 06:04:04 instance-20260423-0151 sshd[851988]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 21102 ssh2 [preauth]
Jun 02 06:16:47 instance-20260423-0151 sshd[852044]: error: maximum authentication attempts exceeded for invalid user mack from 213.209.159.56 port 46545 ssh2 [preauth]
Jun 02 06:34:13 instance-20260423-0151 sshd[852120]: error: kex_exchange_identification: read: Connection reset by peer
Jun 02 07:13:34 instance-20260423-0151 sshd[852407]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 25262 ssh2 [preauth]
Jun 02 07:17:33 instance-20260423-0151 sshd[852431]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 9158 ssh2 [preauth]
Jun 02 07:23:51 instance-20260423-0151 sshd[852456]: error: maximum authentication attempts exceeded for invalid user samual from 213.209.159.56 port 15621 ssh2 [preauth]
Jun 02 07:51:05 instance-20260423-0151 sshd[852591]: error: kex_exchange_identification: read: Connection reset by peer
Jun 02 08:26:46 instance-20260423-0151 sshd[853269]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 53975 ssh2 [preauth]
Jun 02 08:30:14 instance-20260423-0151 sshd[853275]: error: maximum authentication attempts exceeded for invalid user shay from 213.209.159.56 port 31407 ssh2 [preauth]
Jun 02 08:30:41 instance-20260423-0151 sshd[853281]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 57003 ssh2 [preauth]
Jun 02 08:36:42 instance-20260423-0151 sshd[853303]: error: kex_exchange_identification: read: Connection reset by peer
Jun 02 09:32:44 instance-20260423-0151 sshd[853512]: error: kex_exchange_identification: read: Connection reset by peer
Jun 02 09:33:11 instance-20260423-0151 sshd[853521]: error: kex_exchange_identification: read: Connection reset by peer
Jun 02 09:36:12 instance-20260423-0151 sshd[853542]: error: maximum authentication attempts exceeded for invalid user cami from 213.209.159.56 port 60131 ssh2 [preauth]
Jun 02 09:39:43 instance-20260423-0151 sshd[853552]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 8720 ssh2 [preauth]
Jun 02 09:43:33 instance-20260423-0151 sshd[853567]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 13215 ssh2 [preauth]
Jun 02 10:41:40 instance-20260423-0151 sshd[853857]: error: maximum authentication attempts exceeded for invalid user gracyn from 213.209.159.56 port 19760 ssh2 [preauth]
Jun 02 10:52:07 instance-20260423-0151 sshd[853892]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 52299 ssh2 [preauth]
Jun 02 10:53:52 instance-20260423-0151 kernel: workqueue: blk_mq_run_work_fn hogged CPU for >13333us 19 times, consider switching to WQ_UNBOUND
Jun 02 10:56:04 instance-20260423-0151 sshd[853908]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 10901 ssh2 [preauth]
Jun 02 11:16:06 instance-20260423-0151 sshd[853963]: error: maximum authentication attempts exceeded for root from 38.191.248.41 port 39344 ssh2 [preauth]
Jun 02 11:16:09 instance-20260423-0151 sshd[853965]: error: maximum authentication attempts exceeded for root from 38.191.248.41 port 39592 ssh2 [preauth]
Jun 02 11:16:13 instance-20260423-0151 sshd[853967]: error: maximum authentication attempts exceeded for root from 38.191.248.41 port 39820 ssh2 [preauth]

t from 66.90.98.90 port 10378 ssh2 [preauth]
Jun 02 11:55:57 iZgw8bgfuauyw9zjm1qsftZ sshd[2417555]: error: maximum authentication attempts exceeded for root from 104.243.46.222 port 29382 ssh2 [preauth]
Jun 02 11:59:19 iZgw8bgfuauyw9zjm1qsftZ sshd[2417578]: error: maximum authentication attempts exceeded for root from 107.170.247.81 port 39702 ssh2 [preauth]
Jun 02 12:04:12 iZgw8bgfuauyw9zjm1qsftZ sshd[2417660]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 9782 ssh2 [preauth]
Jun 02 12:08:24 iZgw8bgfuauyw9zjm1qsftZ sshd[2417678]: error: maximum authentication attempts exceeded for admin from 2.57.121.112 port 12206 ssh2 [preauth]
Jun 02 12:10:30 iZgw8bgfuauyw9zjm1qsftZ sshd[2417700]: error: maximum authentication attempts exceeded for root from 5.183.101.141 port 38536 ssh2 [preauth]
Jun 02 12:15:40 iZgw8bgfuauyw9zjm1qsftZ sshd[2417722]: error: maximum authentication attempts exceeded for root from 185.255.100.243 port 33230 ssh2 [preauth]
Jun 02 12:23:50 iZgw8bgfuauyw9zjm1qsftZ sshd[2418052]: error: maximum authentication attempts exceeded for root from 86.111.187.169 port 52282 ssh2 [preauth]
Jun 02 12:31:09 iZgw8bgfuauyw9zjm1qsftZ sshd[2418075]: error: maximum authentication attempts exceeded for invalid user griffen from 213.209.159.56 port 65498 ssh2 [preauth]
Jun 02 12:40:58 iZgw8bgfuauyw9zjm1qsftZ sshd[2418100]: error: maximum authentication attempts exceeded for root from 199.127.60.187 port 34580 ssh2 [preauth]
Jun 02 12:45:16 iZgw8bgfuauyw9zjm1qsftZ sshd[2418112]: error: maximum authentication attempts exceeded for root from 154.16.180.28 port 57046 ssh2 [preauth]
Jun 02 12:51:40 iZgw8bgfuauyw9zjm1qsftZ sshd[2418125]: error: maximum authentication attempts exceeded for root from 89.37.117.103 port 39348 ssh2 [preauth]
Jun 02 13:06:31 iZgw8bgfuauyw9zjm1qsftZ sshd[2418219]: error: kex_exchange_identification: read: Connection reset by peer
Jun 02 13:18:03 iZgw8bgfuauyw9zjm1qsftZ sshd[2418253]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 37278 ssh2 [preauth]
Jun 02 13:22:03 iZgw8bgfuauyw9zjm1qsftZ sshd[2418266]: error: maximum authentication attempts exceeded for admin from 2.57.121.112 port 51844 ssh2 [preauth]
Jun 02 13:24:25 iZgw8bgfuauyw9zjm1qsftZ sshd[2418278]: error: userauth_pubkey: parse key: Invalid key length [preauth]
Jun 02 13:24:25 iZgw8bgfuauyw9zjm1qsftZ sshd[2418278]: error: maximum authentication attempts exceeded for root from 69.175.33.170 port 46740 ssh2 [preauth]
Jun 02 13:24:56 iZgw8bgfuauyw9zjm1qsftZ sshd[2418280]: error: kex_exchange_identification: read: Connection reset by peer
Jun 02 13:27:35 iZgw8bgfuauyw9zjm1qsftZ sshd[2418297]: error: maximum authentication attempts exceeded for root from 103.195.100.210 port 19562 ssh2 [preauth]
Jun 02 13:38:32 iZgw8bgfuauyw9zjm1qsftZ sshd[2418376]: error: maximum authentication attempts exceeded for invalid user mack from 213.209.159.56 port 14228 ssh2 [preauth]
Jun 02 13:48:03 iZgw8bgfuauyw9zjm1qsftZ sshd[2418401]: error: maximum authentication attempts exceeded for root from 103.149.26.43 port 52654 ssh2 [preauth]
Jun 02 13:52:55 iZgw8bgfuauyw9zjm1qsftZ sshd[2418415]: error: maximum authentication attempts exceeded for root from 192.250.227.24 port 36280 ssh2 [preauth]
Jun 02 13:59:48 iZgw8bgfuauyw9zjm1qsftZ sshd[2418450]: error: kex_protocol_error: type 20 seq 2 [preauth]
Jun 02 13:59:48 iZgw8bgfuauyw9zjm1qsftZ sshd[2418450]: error: kex_protocol_error: type 30 seq 3 [preauth]
Jun 02 13:59:49 iZgw8bgfuauyw9zjm1qsftZ sshd[2418450]: error: kex_protocol_error: type 20 seq 4 [preauth]
Jun 02 13:59:49 iZgw8bgfuauyw9zjm1qsftZ sshd[2418450]: error: kex_protocol_error: type 30 seq 5 [preauth]
Jun 02 13:59:51 iZgw8bgfuauyw9zjm1qsftZ sshd[2418450]: error: kex_protocol_error: type 20 seq 6 [preauth]
Jun 02 13:59:51 iZgw8bgfuauyw9zjm1qsftZ sshd[2418450]: error: kex_protocol_error: type 30 seq 7 [preauth]
Jun 02 14:08:11 iZgw8bgfuauyw9zjm1qsftZ sshd[2418559]: error: maximum authentication attempts exceeded for root from 103.195.100.210 port 5664 ssh2 [preauth]
Jun 02 14:09:37 iZgw8bgfuauyw9zjm1qsftZ sshd[2418563]: error: maximum authentication attempts exceeded for root from 89.37.117.103 port 11484 ssh2 [preauth]
Jun 02 14:16:08 iZgw8bgfuauyw9zjm1qsftZ sshd[2418590]: error: maximum authentication attempts exceeded for root from 185.134.49.116 port 42970 ssh2 [preauth]
Jun 02 14:21:19 iZgw8bgfuauyw9zjm1qsftZ sshd[2418613]: error: maximum authentication attempts exceeded for root from 5.183.101.141 port 57604 ssh2 [preauth]
Jun 02 14:22:06 iZgw8bgfuauyw9zjm1qsftZ sshd[2418616]: error: maximum authentication attempts exceeded for root from 45.148.147.191 port 37222 ssh2 [preauth]
Jun 02 14:31:28 iZgw8bgfuauyw9zjm1qsftZ sshd[2418657]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 28472 ssh2 [preauth]
Jun 02 14:34:54 iZgw8bgfuauyw9zjm1qsftZ sshd[2418686]: error: maximum authentication attempts exceeded for root from 185.255.100.12 port 41688 ssh2 [preauth]
Jun 02 14:35:37 iZgw8bgfuauyw9zjm1qsftZ sshd[2418700]: error: maximum authentication attempts exceeded for admin from 2.57.121.112 port 52704 ssh2 [preauth]
Jun 02 14:45:48 iZgw8bgfuauyw9zjm1qsftZ sshd[2418828]: error: maximum authentication attempts exceeded for invalid user samual from 213.209.159.56 port 10594 ssh2 [preauth]
Jun 02 14:46:53 iZgw8bgfuauyw9zjm1qsftZ sshd[2418835]: error: maximum authentication attempts exceeded for root from 51.159.104.219 port 38194 ssh2 [preauth]
Jun 02 14:50:42 iZgw8bgfuauyw9zjm1qsftZ sshd[2418879]: error: kex_exchange_identification: read: Connection reset by peer
Jun 02 14:57:04 iZgw8bgfuauyw9zjm1qsftZ sshd[2418918]: error: maximum authentication attempts exceeded for root from 195.160.220.149 port 48330 ssh2 [preauth]
Jun 02 15:03:41 iZgw8bgfuauyw9zjm1qsftZ sshd[2419063]: error: maximum authentication attempts exceeded for root from 172.96.172.91 port 59260 ssh2 [preauth]
Jun 02 15:04:47 iZgw8bgfuauyw9zjm1qsftZ sshd[2419069]: error: maximum authentication attempts exceeded for root from 185.89.249.3 port 52062 ssh2 [preauth]
Jun 02 15:31:01 iZgw8bgfuauyw9zjm1qsftZ sshd[2419248]: error: maximum authentication attempts exceeded for root from 46.55.211.4 port 57708 ssh2 [preauth]
Jun 02 15:33:15 iZgw8bgfuauyw9zjm1qsftZ sshd[2419260]: error: maximum authentication attempts exceeded for root from 198.23.249.85 port 33518 ssh2 [preauth]
Jun 02 15:39:38 iZgw8bgfuauyw9zjm1qsftZ sshd[2419281]: error: maximum authentication attempts exceeded for root from 62.210.209.225 port 29196 ssh2 [preauth]
Jun 02 15:44:57 iZgw8bgfuauyw9zjm1qsftZ sshd[2419299]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 7356 ssh2 [preauth]
Jun 02 15:48:54 iZgw8bgfuauyw9zjm1qsftZ sshd[2419321]: error: maximum authentication attempts exceeded for admin from 2.57.121.112 port 21805 ssh2 [preauth]
Jun 02 15:50:07 iZgw8bgfuauyw9zjm1qsftZ sshd[2419325]: error: maximum authentication attempts exceeded for root from 142.44.247.134 port 60280 ssh2 [preauth]
Jun 02 15:52:20 iZgw8bgfuauyw9zjm1qsftZ sshd[2419336]: error: maximum authentication attempts exceeded for invalid user shay from 213.209.159.56 port 49935 ssh2 [preauth]
Jun 02 16:01:21 iZgw8bgfuauyw9zjm1qsftZ sshd[2419433]: error: maximum authentication attempts exceeded for root from 104.194.9.81 port 33372 ssh2 [preauth]
Jun 02 16:02:55 iZgw8bgfuauyw9zjm1qsftZ sshd[2419441]: error: kex_exchange_identification: read: Connection reset by peer
Jun 02 16:16:27 iZgw8bgfuauyw9zjm1qsftZ sshd[2419501]: error: maximum authentication attempts exceeded for root from 104.194.8.142 port 42896 ssh2 [preauth]
Jun 02 16:19:31 iZgw8bgfuauyw9zjm1qsftZ sshd[2419533]: error: maximum authentication attempts exceeded for root from 78.111.67.247 port 41664 ssh2 [preauth]
Jun 02 16:30:32 iZgw8bgfuauyw9zjm1qsftZ sshd[2419585]: error: maximum authentication attempts exceeded for root from 103.75.71.17 port 61968 ssh2 [preauth]
Jun 02 16:43:08 iZgw8bgfuauyw9zjm1qsftZ sshd[2419684]: error: maximum authentication attempts exceeded for root from 192.154.229.68 port 37088 ssh2 [preauth]
Jun 02 16:46:39 iZgw8bgfuauyw9zjm1qsftZ sshd[2419706]: error: maximum authentication attempts exceeded for root from 185.191.165.57 port 35210 ssh2 [preauth]
Jun 02 16:58:01 iZgw8bgfuauyw9zjm1qsftZ sshd[2419783]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 18443 ssh2 [preauth]
Jun 02 16:58:44 iZgw8bgfuauyw9zjm1qsftZ sshd[2419787]: error: maximum authentication attempts exceeded for invalid user cami from 213.209.159.56 port 14405 ssh2 [preauth]
Jun 02 16:59:15 iZgw8bgfuauyw9zjm1qsftZ sshd[2419789]: error: maximum authentication attempts exceeded for root from 154.16.180.28 port 54310 ssh2 [preauth]
Jun 02 17:02:00 iZgw8bgfuauyw9zjm1qsftZ sshd[2419890]: error: maximum authentication attempts exceeded for admin from 2.57.121.112 port 35388 ssh2 [preauth]
Jun 02 17:02:46 iZgw8bgfuauyw9zjm1qsftZ sshd[2419901]: error: maximum authentication attempts exceeded for root from 184.154.206.137 port 33230 ssh2 [preauth]
Jun 02 17:20:56 iZgw8bgfuauyw9zjm1qsftZ sshd[2419989]: error: maximum authentication attempts exceeded for root from 89.37.116.208 port 59074 ssh2 [preauth]
Jun 02 17:25:38 iZgw8bgfuauyw9zjm1qsftZ sshd[2420014]: error: maximum authentication attempts exceeded for root from 86.111.176.100 port 53526 ssh2 [preauth]
Jun 02 17:31:32 iZgw8bgfuauyw9zjm1qsftZ sshd[2420041]: error: maximum authentication attempts exceeded for root from 51.159.104.219 port 47160 ssh2 [preauth]
Jun 02 17:36:53 iZgw8bgfuauyw9zjm1qsftZ sshd[2420075]: error: maximum authentication attempts exceeded for root from 194.120.230.28 port 45392 ssh2 [preauth]
Jun 02 17:41:10 iZgw8bgfuauyw9zjm1qsftZ sshd[2420119]: error: maximum authentication attempts exceeded for root from 185.255.100.234 port 44578 ssh2 [preauth]
Jun 02 17:55:46 iZgw8bgfuauyw9zjm1qsftZ sshd[2420312]: error: maximum authentication attempts exceeded for root from 103.75.71.22 port 51986 ssh2 [preauth]
Jun 02 17:55:52 iZgw8bgfuauyw9zjm1qsftZ sshd[2420314]: error: maximum authentication attempts exceeded for root from 185.191.165.57 port 45866 ssh2 [preauth]
Jun 02 18:04:22 iZgw8bgfuauyw9zjm1qsftZ sshd[2420496]: error: maximum authentication attempts exceeded for invalid user gracyn from 213.209.159.56 port 36656 ssh2 [preauth]
Jun 02 18:10:42 iZgw8bgfuauyw9zjm1qsftZ sshd[2420551]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 46383 ssh2 [preauth]
Jun 02 18:14:35 iZgw8bgfuauyw9zjm1qsftZ sshd[2420579]: error: maximum authentication attempts exceeded for admin from 2.57.121.112 port 64348 ssh2 [preauth]
Jun 02 18:20:26 iZgw8bgfuauyw9zjm1qsftZ sshd[2420630]: error: maximum authentication attempts exceeded for root from 87.121.69.138 port 47012 ssh2 [preauth]
Jun 02 18:33:47 iZgw8bgfuauyw9zjm1qsftZ sshd[2420963]: error: maximum authentication attempts exceeded for root from 23.94.14.160 port 42714 ssh2 [preauth]
Jun 02 18:36:28 iZgw8bgfuauyw9zjm1qsftZ sshd[2420977]: error: maximum authentication attempts exceeded for root from 102.129.200.117 port 2464 ssh2 [preauth]
Jun 02 18:48:32 iZgw8bgfuauyw9zjm1qsftZ sshd[2421077]: error: maximum authentication attempts exceeded for root from 192.250.227.24 port 41954 ssh2 [preauth]
Jun 02 19:09:31 iZgw8bgfuauyw9zjm1qsftZ sshd[2421268]: error: maximum authentication attempts exceeded for invalid user jaylee from 213.209.159.56 port 58241 ssh2 [preauth]
Jun 02 19:14:45 iZgw8bgfuauyw9zjm1qsftZ sshd[2421303]: error: maximum authentication attempts exceeded for root from 185.134.49.179 port 51738 ssh2 [preauth]
Jun 02 19:17:33 iZgw8bgfuauyw9zjm1qsftZ sshd[2421322]: error: maximum authentication attempts exceeded for root from 69.175.33.170 port 34568 ssh2 [preauth]
Jun 02 19:17:59 iZgw8bgfuauyw9zjm1qsftZ sshd[2421571]: error: maximum authentication attempts exceeded for root from 45.142.3.73 port 22990 ssh2 [preauth]

                                                                                      
LISTEN 0      511        127.0.0.1:8422       0.0.0.0:*    users:(("node",pid=325358,fd=34))                                                                                                               
LISTEN 0      511        127.0.0.1:8423       0.0.0.0:*    users:(("node",pid=39024,fd=34))                                                                                                                
LISTEN 0      511        127.0.0.1:8420       0.0.0.0:*    users:(("node",pid=55558,fd=34))                                                                                                                
LISTEN 0      511        127.0.0.1:8421       0.0.0.0:*    users:(("node",pid=11426,fd=34))                                                                                                                
LISTEN 0      511        127.0.0.1:8424       0.0.0.0:*    users:(("node",pid=1379,fd=36))                                                                                                                 
LISTEN 0      8192       127.0.0.1:8317       0.0.0.0:*    users:(("cli-proxy-api",pid=2195759,fd=10))                                                                                                     
LISTEN 0      511        127.0.0.1:8766       0.0.0.0:*    users:(("node",pid=1140,fd=21))                                                                                                                 
LISTEN 0      8192       127.0.0.1:8820       0.0.0.0:*    users:(("docker-proxy",pid=2647,fd=8))                                                                                                          
LISTEN 0      511             [::]:443           [::]:*    users:(("nginx",pid=2280013,fd=22),("nginx",pid=2280012,fd=22),("nginx",pid=2280011,fd=22),("nginx",pid=2280010,fd=22),("nginx",pid=1352,fd=22))
LISTEN 0      511             [::]:80            [::]:*    users:(("nginx",pid=2280013,fd=21),("nginx",pid=2280012,fd=21),("nginx",pid=2280011,fd=21),("nginx",pid=2280010,fd=21),("nginx",pid=1352,fd=21))
LISTEN 0      8192            [::]:22            [::]:*    users:(("sshd",pid=3350,fd=4),("systemd",pid=1,fd=255))                                                                                         
===== recent critical logs =====
Jun 02 18:03:17 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 18:04:18 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 18:05:18 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 18:06:19 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 18:07:19 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 18:08:20 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 18:09:20 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 18:10:21 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 18:11:21 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 18:12:22 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 18:13:22 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 18:14:23 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 18:15:23 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 18:16:24 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 18:17:24 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 18:18:25 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 18:19:25 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 18:20:26 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 18:21:09 instance-20260423-0914 systemd[1]: Configuration file /etc/systemd/system/hermes-web-ui.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Jun 02 18:21:09 instance-20260423-0914 systemd[1]: Configuration file /etc/systemd/system/memory-tencentdb-master.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Jun 02 18:21:26 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 18:22:27 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 18:23:28 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 18:24:28 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 18:25:29 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 18:26:29 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 18:27:30 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 18:28:30 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 18:29:31 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 18:30:31 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 18:31:32 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 18:32:32 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 18:33:33 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 18:34:33 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 18:35:34 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 18:36:34 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 18:37:35 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 18:38:35 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 18:39:36 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 18:40:36 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 18:41:37 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 18:42:37 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 18:43:38 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 18:44:38 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 18:45:27 instance-20260423-0914 sshd[2312259]: error: maximum authentication attempts exceeded for invalid user gracyn from 213.209.159.56 port 13695 ssh2 [preauth]
Jun 02 18:45:39 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 18:46:39 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 18:47:40 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 18:48:40 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 18:49:41 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 18:50:41 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 18:51:42 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 18:52:42 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 18:53:43 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 18:54:43 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 18:55:44 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 18:56:37 instance-20260423-0914 sshd[2317016]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 6581 ssh2 [preauth]
Jun 02 18:56:44 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 18:57:45 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 18:58:45 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 18:59:46 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 19:00:32 instance-20260423-0914 sshd[2318721]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 45504 ssh2 [preauth]
Jun 02 19:00:46 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 19:01:47 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 19:02:47 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 19:03:48 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 19:04:48 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 19:05:49 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 19:06:49 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 19:07:50 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 19:08:50 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 19:09:51 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 19:10:51 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 19:11:52 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 19:12:52 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 19:13:53 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 19:14:53 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 19:15:54 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 19:16:54 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.
Jun 02 19:17:55 instance-20260423-0914 systemd[1]: snap.cups.cups-browsed.service: Failed with result 'exit-code'.

tance-20260429-1226 sshd[1155695]: error: maximum authentication attempts exceeded for invalid user frankie from 213.209.159.56 port 10010 ssh2 [preauth]
Jun 01 11:59:02 instance-20260429-1226 kernel: workqueue: vmstat_shepherd hogged CPU for >13333us 4 times, consider switching to WQ_UNBOUND
Jun 01 12:36:01 instance-20260429-1226 sshd[1157135]: error: kex_exchange_identification: read: Connection reset by peer
Jun 01 12:40:52 instance-20260429-1226 sshd[1157249]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 12083 ssh2 [preauth]
Jun 01 12:44:39 instance-20260429-1226 sshd[1157363]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 33889 ssh2 [preauth]
Jun 01 12:59:56 instance-20260429-1226 sshd[1158202]: error: maximum authentication attempts exceeded for invalid user gracen from 213.209.159.56 port 9889 ssh2 [preauth]
Jun 01 13:36:03 instance-20260429-1226 sshd[1159209]: error: maximum authentication attempts exceeded for invalid user username from 193.46.255.86 port 39146 ssh2 [preauth]
Jun 01 13:37:05 instance-20260429-1226 sshd[1159236]: error: kex_exchange_identification: read: Connection reset by peer
Jun 01 13:57:49 instance-20260429-1226 sshd[1159794]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 15048 ssh2 [preauth]
Jun 01 14:01:46 instance-20260429-1226 sshd[1159911]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 12440 ssh2 [preauth]
Jun 01 14:13:22 instance-20260429-1226 sshd[1160226]: error: maximum authentication attempts exceeded for invalid user hayle from 213.209.159.56 port 27780 ssh2 [preauth]
Jun 01 15:14:36 instance-20260429-1226 sshd[1161851]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 17748 ssh2 [preauth]
Jun 01 15:18:36 instance-20260429-1226 sshd[1161979]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 10664 ssh2 [preauth]
Jun 01 15:26:17 instance-20260429-1226 sshd[1162188]: error: maximum authentication attempts exceeded for invalid user kaileigh from 213.209.159.56 port 26231 ssh2 [preauth]
Jun 01 16:24:06 instance-20260429-1226 sshd[1164086]: error: kex_exchange_identification: read: Connection reset by peer
Jun 01 16:31:11 instance-20260429-1226 sshd[1164229]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 37718 ssh2 [preauth]
Jun 01 16:35:07 instance-20260429-1226 sshd[1164295]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 53430 ssh2 [preauth]
Jun 01 16:38:46 instance-20260429-1226 sshd[1164378]: error: maximum authentication attempts exceeded for invalid user keyona from 213.209.159.56 port 12178 ssh2 [preauth]
Jun 01 17:47:10 instance-20260429-1226 sshd[1165805]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 50356 ssh2 [preauth]
Jun 01 17:50:31 instance-20260429-1226 sshd[1165875]: error: maximum authentication attempts exceeded for invalid user lillianna from 213.209.159.56 port 53080 ssh2 [preauth]
Jun 01 17:51:07 instance-20260429-1226 sshd[1165882]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 21515 ssh2 [preauth]
Jun 01 19:01:41 instance-20260429-1226 sshd[1167336]: error: maximum authentication attempts exceeded for invalid user michell from 213.209.159.56 port 57714 ssh2 [preauth]
Jun 01 19:02:39 instance-20260429-1226 sshd[1167355]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 28491 ssh2 [preauth]
Jun 01 19:06:49 instance-20260429-1226 sshd[1167442]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 41801 ssh2 [preauth]
Jun 01 20:04:08 instance-20260429-1226 sshd[1168589]: error: maximum authentication attempts exceeded for invalid user telnet from 193.46.255.86 port 63004 ssh2 [preauth]
Jun 01 20:12:15 instance-20260429-1226 sshd[1168739]: error: maximum authentication attempts exceeded for invalid user nakayla from 213.209.159.56 port 23258 ssh2 [preauth]
Jun 01 20:17:55 instance-20260429-1226 sshd[1168857]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 14789 ssh2 [preauth]
Jun 01 20:22:12 instance-20260429-1226 sshd[1168933]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 38105 ssh2 [preauth]
Jun 01 21:22:23 instance-20260429-1226 sshd[1170062]: error: maximum authentication attempts exceeded for invalid user raeann from 213.209.159.56 port 40113 ssh2 [preauth]
Jun 01 21:33:05 instance-20260429-1226 sshd[1170268]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 44385 ssh2 [preauth]
Jun 01 21:37:22 instance-20260429-1226 sshd[1170345]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 43327 ssh2 [preauth]
Jun 01 22:32:00 instance-20260429-1226 sshd[1171363]: error: maximum authentication attempts exceeded for invalid user zakiya from 213.209.159.56 port 35938 ssh2 [preauth]
Jun 01 22:48:07 instance-20260429-1226 sshd[1171665]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 21422 ssh2 [preauth]
Jun 01 22:52:13 instance-20260429-1226 sshd[1171749]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 45656 ssh2 [preauth]
Jun 01 23:40:57 instance-20260429-1226 sshd[1172786]: error: maximum authentication attempts exceeded for invalid user bradon from 213.209.159.56 port 44287 ssh2 [preauth]
Jun 02 00:02:39 instance-20260429-1226 sshd[1173230]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 16953 ssh2 [preauth]
Jun 02 00:06:51 instance-20260429-1226 sshd[1173310]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 12196 ssh2 [preauth]
Jun 02 00:33:32 instance-20260429-1226 sshd[1173940]: error: kex_exchange_identification: read: Connection reset by peer
Jun 02 00:37:29 instance-20260429-1226 sshd[1174057]: error: kex_exchange_identification: read: Connection reset by peer
Jun 02 00:49:30 instance-20260429-1226 sshd[1174370]: error: maximum authentication attempts exceeded for invalid user canaan from 213.209.159.56 port 6277 ssh2 [preauth]
Jun 02 01:16:55 instance-20260429-1226 sshd[1174967]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 17000 ssh2 [preauth]
Jun 02 01:21:01 instance-20260429-1226 sshd[1175064]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 31666 ssh2 [preauth]
Jun 02 01:43:51 instance-20260429-1226 sshd[1175515]: error: kex_exchange_identification: read: Connection reset by peer
Jun 02 01:57:40 instance-20260429-1226 sshd[1175782]: error: maximum authentication attempts exceeded for invalid user darrick from 213.209.159.56 port 17993 ssh2 [preauth]
Jun 02 02:31:11 instance-20260429-1226 sshd[1176409]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 28191 ssh2 [preauth]
Jun 02 02:35:08 instance-20260429-1226 sshd[1176469]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 7747 ssh2 [preauth]
Jun 02 03:05:34 instance-20260429-1226 sshd[1177026]: error: maximum authentication attempts exceeded for invalid user edson from 213.209.159.56 port 32241 ssh2 [preauth]
Jun 02 03:07:15 instance-20260429-1226 sshd[1177053]: error: kex_exchange_identification: read: Connection reset by peer
Jun 02 03:45:03 instance-20260429-1226 sshd[1177751]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 12600 ssh2 [preauth]
Jun 02 03:49:00 instance-20260429-1226 sshd[1177811]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 51230 ssh2 [preauth]
Jun 02 04:13:24 instance-20260429-1226 sshd[1178243]: error: maximum authentication attempts exceeded for invalid user favian from 213.209.159.56 port 24998 ssh2 [preauth]
Jun 02 04:58:51 instance-20260429-1226 sshd[1179166]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 10251 ssh2 [preauth]
Jun 02 05:02:51 instance-20260429-1226 sshd[1179245]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 54057 ssh2 [preauth]
Jun 02 05:18:57 instance-20260429-1226 sshd[1179518]: error: Protocol major versions differ: 2 vs. 1
Jun 02 05:20:51 instance-20260429-1226 sshd[1179568]: error: maximum authentication attempts exceeded for invalid user griffen from 213.209.159.56 port 63897 ssh2 [preauth]
Jun 02 06:12:25 instance-20260429-1226 sshd[1180440]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 13367 ssh2 [preauth]
Jun 02 06:14:54 instance-20260429-1226 sshd[1180483]: error: maximum authentication attempts exceeded for root from 37.110.142.162 port 58914 ssh2 [preauth]
Jun 02 06:15:02 instance-20260429-1226 sshd[1180487]: error: maximum authentication attempts exceeded for root from 37.110.142.162 port 59080 ssh2 [preauth]
Jun 02 06:15:09 instance-20260429-1226 sshd[1180492]: error: maximum authentication attempts exceeded for root from 37.110.142.162 port 59224 ssh2 [preauth]
Jun 02 06:16:25 instance-20260429-1226 sshd[1180516]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 13465 ssh2 [preauth]
Jun 02 06:28:11 instance-20260429-1226 sshd[1180732]: error: maximum authentication attempts exceeded for invalid user mack from 213.209.159.56 port 19061 ssh2 [preauth]
Jun 02 06:59:37 instance-20260429-1226 sshd[1181384]: error: kex_exchange_identification: read: Connection reset by peer
Jun 02 07:25:55 instance-20260429-1226 sshd[1181866]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 11871 ssh2 [preauth]
Jun 02 07:29:49 instance-20260429-1226 sshd[1181956]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 59496 ssh2 [preauth]
Jun 02 07:34:54 instance-20260429-1226 sshd[1182029]: error: maximum authentication attempts exceeded for invalid user samual from 213.209.159.56 port 40475 ssh2 [preauth]
Jun 02 08:39:07 instance-20260429-1226 sshd[1183180]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 24578 ssh2 [preauth]
Jun 02 08:41:21 instance-20260429-1226 sshd[1183215]: error: maximum authentication attempts exceeded for invalid user shay from 213.209.159.56 port 33237 ssh2 [preauth]
Jun 02 08:43:00 instance-20260429-1226 sshd[1183255]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 41343 ssh2 [preauth]
Jun 02 09:47:09 instance-20260429-1226 sshd[1184349]: error: maximum authentication attempts exceeded for invalid user cami from 213.209.159.56 port 31041 ssh2 [preauth]
Jun 02 09:51:56 instance-20260429-1226 sshd[1184439]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 27386 ssh2 [preauth]
Jun 02 09:55:43 instance-20260429-1226 sshd[1184507]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 43627 ssh2 [preauth]
Jun 02 10:52:33 instance-20260429-1226 sshd[1185664]: error: maximum authentication attempts exceeded for invalid user gracyn from 213.209.159.56 port 45530 ssh2 [preauth]
Jun 02 11:04:21 instance-20260429-1226 sshd[1185879]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 14135 ssh2 [preauth]
Jun 02 11:08:17 instance-20260429-1226 sshd[1185971]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 33276 ssh2 [preauth]

10 kernel: [UFW BLOCK] IN=ens17 OUT= MAC=b6:f2:78:00:03:de:00:52:56:00:03:00:08:00 SRC=152.32.185.141 DST=10.0.206.2 LEN=44 TOS=0x00 PREC=0x00 TTL=43 ID=0 DF PROTO=TCP SPT=54734 DPT=9090 WINDOW=1024 RES=0x00 SYN URGP=0 
Jun 02 11:03:54 ser0570106010 kernel: [UFW BLOCK] IN=ens17 OUT= MAC=b6:f2:78:00:03:de:00:52:56:00:03:00:08:00 SRC=78.128.114.22 DST=10.0.206.2 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=18040 PROTO=TCP SPT=54658 DPT=21999 WINDOW=1024 RES=0x00 SYN URGP=0 
Jun 02 11:04:00 ser0570106010 kernel: [UFW BLOCK] IN=ens17 OUT= MAC=b6:f2:78:00:03:de:00:52:56:00:03:00:08:00 SRC=78.128.114.22 DST=10.0.206.2 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=18040 PROTO=TCP SPT=54658 DPT=21999 WINDOW=1024 RES=0x00 SYN URGP=0 
Jun 02 11:04:05 ser0570106010 kernel: [UFW BLOCK] IN=ens17 OUT= MAC=b6:f2:78:00:03:de:00:52:56:00:03:00:08:00 SRC=78.128.114.22 DST=10.0.206.2 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=18040 PROTO=TCP SPT=54658 DPT=21999 WINDOW=1024 RES=0x00 SYN URGP=0 
Jun 02 11:04:05 ser0570106010 kernel: [UFW BLOCK] IN=ens17 OUT= MAC=b6:f2:78:00:03:de:00:52:56:00:03:00:08:00 SRC=210.117.212.121 DST=10.0.206.2 LEN=44 TOS=0x00 PREC=0x00 TTL=236 ID=18557 PROTO=TCP SPT=61234 DPT=5925 WINDOW=1025 RES=0x00 SYN URGP=0 
Jun 02 11:04:07 ser0570106010 kernel: [UFW BLOCK] IN=ens17 OUT= MAC=b6:f2:78:00:03:de:00:52:56:00:03:00:08:00 SRC=95.214.52.233 DST=10.0.206.2 LEN=40 TOS=0x00 PREC=0x00 TTL=237 ID=54321 PROTO=TCP SPT=48282 DPT=3128 WINDOW=65535 RES=0x00 SYN URGP=0 
Jun 02 11:04:37 ser0570106010 kernel: [UFW BLOCK] IN=ens17 OUT= MAC=b6:f2:78:00:03:de:00:52:56:00:03:00:08:00 SRC=195.18.16.7 DST=10.0.206.2 LEN=53 TOS=0x00 PREC=0x00 TTL=46 ID=17872 PROTO=UDP SPT=59177 DPT=27015 LEN=33 
Jun 02 11:04:43 ser0570106010 kernel: [UFW BLOCK] IN=ens17 OUT= MAC=b6:f2:78:00:03:de:00:52:56:00:03:00:08:00 SRC=193.176.31.254 DST=10.0.206.2 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=0 PROTO=TCP SPT=29976 DPT=6056 WINDOW=65535 RES=0x00 SYN URGP=0 
Jun 02 11:04:54 ser0570106010 kernel: [UFW BLOCK] IN=ens17 OUT= MAC=b6:f2:78:00:03:de:00:52:56:00:03:00:08:00 SRC=66.132.172.243 DST=10.0.206.2 LEN=48 TOS=0x00 PREC=0x00 TTL=36 ID=30502 PROTO=UDP SPT=42209 DPT=59077 LEN=28 
Jun 02 11:04:54 ser0570106010 kernel: [UFW BLOCK] IN=ens17 OUT= MAC=b6:f2:78:00:03:de:00:52:56:00:03:00:08:00 SRC=193.163.125.8 DST=10.0.206.2 LEN=44 TOS=0x00 PREC=0x00 TTL=236 ID=1978 PROTO=TCP SPT=49547 DPT=8084 WINDOW=14600 RES=0x00 SYN URGP=0 
Jun 02 11:05:09 ser0570106010 kernel: [UFW BLOCK] IN=ens17 OUT= MAC=b6:f2:78:00:03:de:00:52:56:00:03:00:08:00 SRC=91.191.209.118 DST=10.0.206.2 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=21717 PROTO=TCP SPT=48789 DPT=12941 WINDOW=1024 RES=0x00 SYN URGP=0 
Jun 02 11:05:29 ser0570106010 kernel: [UFW BLOCK] IN=ens17 OUT= MAC=b6:f2:78:00:03:de:00:52:56:00:03:00:08:00 SRC=193.163.125.6 DST=10.0.206.2 LEN=44 TOS=0x00 PREC=0x20 TTL=235 ID=4849 PROTO=TCP SPT=40713 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 
Jun 02 11:05:46 ser0570106010 kernel: [UFW BLOCK] IN=ens17 OUT= MAC=b6:f2:78:00:03:de:00:52:56:00:03:00:08:00 SRC=79.124.62.230 DST=10.0.206.2 LEN=44 TOS=0x00 PREC=0x00 TTL=237 ID=58645 PROTO=TCP SPT=55372 DPT=45353 WINDOW=1025 RES=0x00 SYN URGP=0 
Jun 02 11:06:09 ser0570106010 kernel: [UFW BLOCK] IN=ens17 OUT= MAC=b6:f2:78:00:03:de:00:52:56:00:03:00:08:00 SRC=79.124.58.142 DST=10.0.206.2 LEN=40 TOS=0x00 PREC=0x00 TTL=236 ID=40529 PROTO=TCP SPT=50152 DPT=44398 WINDOW=1024 RES=0x00 SYN URGP=0 
Jun 02 11:06:26 ser0570106010 kernel: [UFW BLOCK] IN=ens17 OUT= MAC=b6:f2:78:00:03:de:00:52:56:00:03:00:08:00 SRC=45.205.1.192 DST=10.0.206.2 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=54321 PROTO=TCP SPT=53468 DPT=26 WINDOW=65535 RES=0x00 SYN URGP=0 
Jun 02 11:07:22 ser0570106010 kernel: [UFW BLOCK] IN=ens17 OUT= MAC=b6:f2:78:00:03:de:00:52:56:00:03:00:08:00 SRC=69.5.169.88 DST=10.0.206.2 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=0 PROTO=TCP SPT=22426 DPT=3209 WINDOW=65535 RES=0x00 SYN URGP=0 
Jun 02 11:07:42 ser0570106010 kernel: [UFW BLOCK] IN=ens17 OUT= MAC=b6:f2:78:00:03:de:00:52:56:00:03:00:08:00 SRC=79.124.62.126 DST=10.0.206.2 LEN=44 TOS=0x00 PREC=0x00 TTL=239 ID=37467 PROTO=TCP SPT=56742 DPT=47949 WINDOW=1025 RES=0x00 SYN URGP=0 
Jun 02 11:07:45 ser0570106010 kernel: [UFW BLOCK] IN=ens17 OUT= MAC=b6:f2:78:00:03:de:00:52:56:00:03:00:08:00 SRC=3.131.24.55 DST=10.0.206.2 LEN=52 TOS=0x00 PREC=0x00 TTL=50 ID=57204 PROTO=TCP SPT=61234 DPT=24000 WINDOW=65535 RES=0x00 SYN URGP=0 
Jun 02 11:07:52 ser0570106010 kernel: [UFW BLOCK] IN=ens17 OUT= MAC=b6:f2:78:00:03:de:00:52:56:00:03:00:08:00 SRC=64.62.156.34 DST=10.0.206.2 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=54321 PROTO=TCP SPT=60515 DPT=4443 WINDOW=65535 RES=0x00 SYN URGP=0 
Jun 02 11:08:04 ser0570106010 kernel: [UFW BLOCK] IN=ens17 OUT= MAC=b6:f2:78:00:03:de:00:52:56:00:03:00:08:00 SRC=45.142.193.10 DST=10.0.206.2 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=53279 PROTO=TCP SPT=54842 DPT=11212 WINDOW=1024 RES=0x00 SYN URGP=0 
Jun 02 11:08:30 ser0570106010 kernel: [UFW BLOCK] IN=ens17 OUT= MAC=b6:f2:78:00:03:de:00:52:56:00:03:00:08:00 SRC=210.117.212.121 DST=10.0.206.2 LEN=44 TOS=0x00 PREC=0x00 TTL=236 ID=49787 PROTO=TCP SPT=61234 DPT=5956 WINDOW=1025 RES=0x00 SYN URGP=0 
Jun 02 11:08:54 ser0570106010 kernel: [UFW BLOCK] IN=ens17 OUT= MAC=b6:f2:78:00:03:de:00:52:56:00:03:00:08:00 SRC=167.94.145.27 DST=10.0.206.2 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=39643 PROTO=TCP SPT=42268 DPT=4730 WINDOW=42340 RES=0x00 SYN URGP=0 
Jun 02 11:09:08 ser0570106010 kernel: [UFW BLOCK] IN=ens17 OUT= MAC=b6:f2:78:00:03:de:00:52:56:00:03:00:08:00 SRC=135.237.126.154 DST=10.0.206.2 LEN=52 TOS=0x00 PREC=0x00 TTL=43 ID=14395 PROTO=TCP SPT=38003 DPT=5357 WINDOW=65535 RES=0x00 SYN URGP=0 
Jun 02 11:09:25 ser0570106010 kernel: [UFW BLOCK] IN=ens17 OUT= MAC=b6:f2:78:00:03:de:00:52:56:00:03:00:08:00 SRC=35.169.206.177 DST=10.0.206.2 LEN=52 TOS=0x00 PREC=0x00 TTL=50 ID=18706 PROTO=TCP SPT=61234 DPT=31112 WINDOW=65535 RES=0x00 SYN URGP=0 
Jun 02 11:10:15 ser0570106010 kernel: [UFW BLOCK] IN=ens17 OUT= MAC=b6:f2:78:00:03:de:00:52:56:00:03:00:08:00 SRC=168.227.155.224 DST=10.0.206.2 LEN=977 TOS=0x00 PREC=0x00 TTL=43 ID=32011 DF PROTO=UDP SPT=6329 DPT=26722 LEN=957 
Jun 02 11:10:18 ser0570106010 kernel: [UFW BLOCK] IN=ens17 OUT= MAC=b6:f2:78:00:03:de:00:52:56:00:03:00:08:00 SRC=20.84.60.216 DST=10.0.206.2 LEN=54 TOS=0x00 PREC=0x00 TTL=45 ID=51414 PROTO=UDP SPT=47727 DPT=8181 LEN=34 
Jun 02 11:10:30 ser0570106010 kernel: [UFW BLOCK] IN=ens17 OUT= MAC=b6:f2:78:00:03:de:00:52:56:00:03:00:08:00 SRC=69.5.169.227 DST=10.0.206.2 LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=0 PROTO=TCP SPT=30895 DPT=11296 WINDOW=65535 RES=0x00 SYN URGP=0 
Jun 02 11:10:45 ser0570106010 kernel: [UFW BLOCK] IN=ens17 OUT= MAC=b6:f2:78:00:03:de:00:52:56:00:03:00:08:00 SRC=18.217.208.51 DST=10.0.206.2 LEN=52 TOS=0x00 PREC=0x00 TTL=50 ID=21781 PROTO=TCP SPT=61234 DPT=8265 WINDOW=65535 RES=0x00 SYN URGP=0 
Jun 02 11:11:06 ser0570106010 kernel: [UFW BLOCK] IN=ens17 OUT= MAC=b6:f2:78:00:03:de:00:52:56:00:03:00:08:00 SRC=210.117.212.121 DST=10.0.206.2 LEN=44 TOS=0x00 PREC=0x00 TTL=236 ID=26554 PROTO=TCP SPT=61234 DPT=5999 WINDOW=1025 RES=0x00 SYN URGP=0 
Jun 02 11:11:25 ser0570106010 kernel: [UFW BLOCK] IN=ens17 OUT= MAC=b6:f2:78:00:03:de:00:52:56:00:03:00:08:00 SRC=35.203.210.19 DST=10.0.206.2 LEN=44 TOS=0x00 PREC=0x00 TTL=240 ID=44776 PROTO=TCP SPT=55939 DPT=48154 WINDOW=1024 RES=0x00 SYN URGP=0 
Jun 02 11:11:55 ser0570106010 kernel: [UFW BLOCK] IN=ens17 OUT= MAC=b6:f2:78:00:03:de:00:52:56:00:03:00:08:00 SRC=217.71.127.125 DST=10.0.206.2 LEN=98 TOS=0x00 PREC=0x00 TTL=48 ID=20607 DF PROTO=UDP SPT=65031 DPT=5353 LEN=78 
Jun 02 11:12:19 ser0570106010 kernel: [UFW BLOCK] IN=ens17 OUT= MAC=b6:f2:78:00:03:de:00:52:56:00:03:00:08:00 SRC=85.11.167.7 DST=10.0.206.2 LEN=40 TOS=0x00 PREC=0x00 TTL=235 ID=54321 PROTO=TCP SPT=55347 DPT=30432 WINDOW=65535 RES=0x00 SYN URGP=0 
Jun 02 11:12:27 ser0570106010 kernel: [UFW BLOCK] IN=ens17 OUT= MAC=b6:f2:78:00:03:de:00:52:56:00:03:00:08:00 SRC=81.19.219.208 DST=10.0.206.2 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=0 PROTO=TCP SPT=61200 DPT=57166 WINDOW=65535 RES=0x00 SYN URGP=0 
Jun 02 11:12:54 ser0570106010 kernel: [UFW BLOCK] IN=ens17 OUT= MAC=b6:f2:78:00:03:de:00:52:56:00:03:00:08:00 SRC=79.124.49.102 DST=10.0.206.2 LEN=40 TOS=0x00 PREC=0x00 TTL=237 ID=36277 PROTO=TCP SPT=50637 DPT=446 WINDOW=1024 RES=0x00 SYN URGP=0 
Jun 02 11:13:19 ser0570106010 kernel: [UFW BLOCK] IN=ens17 OUT= MAC=b6:f2:78:00:03:de:00:52:56:00:03:00:08:00 SRC=65.49.1.24 DST=10.0.206.2 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=54321 PROTO=TCP SPT=45364 DPT=9090 WINDOW=65535 RES=0x00 SYN URGP=0 
Jun 02 11:13:27 ser0570106010 kernel: [UFW BLOCK] IN=ens17 OUT= MAC=b6:f2:78:00:03:de:00:52:56:00:03:00:08:00 SRC=3.142.170.60 DST=10.0.206.2 LEN=52 TOS=0x00 PREC=0x00 TTL=50 ID=34281 PROTO=TCP SPT=61234 DPT=8083 WINDOW=65535 RES=0x00 SYN URGP=0 
Jun 02 11:13:56 ser0570106010 kernel: [UFW BLOCK] IN=ens17 OUT= MAC=b6:f2:78:00:03:de:00:52:56:00:03:00:08:00 SRC=147.185.133.1 DST=10.0.206.2 LEN=44 TOS=0x00 PREC=0x00 TTL=241 ID=15596 PROTO=TCP SPT=54826 DPT=7230 WINDOW=1024 RES=0x00 SYN URGP=0 
Jun 02 11:14:19 ser0570106010 kernel: [UFW BLOCK] IN=ens17 OUT= MAC=b6:f2:78:00:03:de:00:52:56:00:03:00:08:00 SRC=95.214.54.37 DST=10.0.206.2 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=46411 PROTO=TCP SPT=53073 DPT=50021 WINDOW=1024 RES=0x00 SYN URGP=0 
Jun 02 11:14:25 ser0570106010 kernel: [UFW BLOCK] IN=ens17 OUT= MAC=b6:f2:78:00:03:de:00:52:56:00:03:00:08:00 SRC=135.237.126.84 DST=10.0.206.2 LEN=52 TOS=0x00 PREC=0x00 TTL=45 ID=1752 PROTO=TCP SPT=54553 DPT=3000 WINDOW=65535 RES=0x00 SYN URGP=0 
Jun 02 11:14:51 ser0570106010 kernel: [UFW BLOCK] IN=ens17 OUT= MAC=b6:f2:78:00:03:de:00:52:56:00:03:00:08:00 SRC=209.141.46.157 DST=10.0.206.2 LEN=44 TOS=0x00 PREC=0x00 TTL=243 ID=6246 PROTO=TCP SPT=48455 DPT=6432 WINDOW=1025 RES=0x00 SYN URGP=0 
Jun 02 11:15:06 ser0570106010 kernel: [UFW BLOCK] IN=ens17 OUT= MAC=b6:f2:78:00:03:de:00:52:56:00:03:00:08:00 SRC=69.5.169.133 DST=10.0.206.2 LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=0 PROTO=TCP SPT=61248 DPT=52702 WINDOW=65535 RES=0x00 SYN URGP=0 
Jun 02 11:15:25 ser0570106010 kernel: [UFW BLOCK] IN=ens17 OUT= MAC=b6:f2:78:00:03:de:00:52:56:00:03:00:08:00 SRC=5.188.206.34 DST=10.0.206.2 LEN=40 TOS=0x00 PREC=0x00 TTL=237 ID=49247 PROTO=TCP SPT=52530 DPT=28387 WINDOW=1024 RES=0x00 SYN URGP=0 
Jun 02 11:15:48 ser0570106010 kernel: [UFW BLOCK] IN=ens17 OUT= MAC=b6:f2:78:00:03:de:00:52:56:00:03:00:08:00 SRC=205.210.31.134 DST=10.0.206.2 LEN=44 TOS=0x00 PREC=0x00 TTL=241 ID=54321 PROTO=TCP SPT=55144 DPT=771 WINDOW=65535 RES=0x00 SYN URGP=0 
Jun 02 11:16:10 ser0570106010 kernel: [UFW BLOCK] IN=ens17 OUT= MAC=b6:f2:78:00:03:de:00:52:56:00:03:00:08:00 SRC=79.124.49.174 DST=10.0.206.2 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=12371 PROTO=TCP SPT=50073 DPT=44364 WINDOW=1024 RES=0x00 SYN URGP=0 
Jun 02 11:16:30 ser0570106010 kernel: [UFW BLOCK] IN=ens17 OUT= MAC=b6:f2:78:00:03:de:00:52:56:00:03:00:08:00 SRC=66.132.195.19 DST=10.0.206.2 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=34820 PROTO=TCP SPT=56438 DPT=45043 WINDOW=42340 RES=0x00 SYN URGP=0 
Jun 02 11:16:54 ser0570106010 kernel: [UFW BLOCK] IN=ens17 OUT= MAC=b6:f2:78:00:03:de:00:52:56:00:03:00:08:00 SRC=45.142.154.98 DST=10.0.206.2 LEN=44 TOS=0x00 PREC=0x00 TTL=239 ID=43037 PROTO=TCP SPT=58914 DPT=2078 WINDOW=1024 RES=0x00 SYN URGP=0 
Jun 02 11:17:21 ser0570106010 kernel: [UFW BLOCK] IN=ens17 OUT= MAC=b6:f2:78:00:03:de:00:52:56:00:03:00:08:00 SRC=194.88.98.90 DST=10.0.206.2 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=0 PROTO=TCP SPT=49351 DPT=47306 WINDOW=65535 RES=0x00 SYN URGP=0 
Jun 02 11:17:24 ser0570106010 kernel: [UFW BLOCK] IN=ens17 OUT= MAC=b6:f2:78:00:03:de:00:52:56:00:03:00:08:00 SRC=66.132.186.252 DST=10.0.206.2 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=17757 PROTO=TCP SPT=3622 DPT=14000 WINDOW=42340 RES=0x00 SYN URGP=0 
Jun 02 11:17:43 ser0570106010 kernel: [UFW BLOCK] IN=ens17 OUT= MAC=b6:f2:78:00:03:de:00:52:56:00:03:00:08:00 SRC=18.222.201.82 DST=10.0.206.2 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=42087 DF PROTO=TCP SPT=37070 DPT=4443 WINDOW=62727 RES=0x00 SYN URGP=0 

             
LISTEN 0      4096      127.0.0.54:53         0.0.0.0:*    users:(("systemd-resolve",pid=604,fd=17))                                                                                 
LISTEN 0      511             [::]:80            [::]:*    users:(("nginx",pid=858,fd=9),("nginx",pid=857,fd=9),("nginx",pid=856,fd=9),("nginx",pid=855,fd=9),("nginx",pid=853,fd=9))
LISTEN 0      4096            [::]:22            [::]:*    users:(("sshd",pid=827,fd=4),("systemd",pid=1,fd=98))                                                                     
LISTEN 0      4096               *:443              *:*    users:(("network-agent",pid=1417,fd=4))                                                                                   
===== recent critical logs =====
Jun 01 18:43:55 ser4062572352 sshd[63481]: error: maximum authentication attempts exceeded for root from 222.108.39.109 port 58492 ssh2 [preauth]
Jun 01 18:44:27 ser4062572352 sshd[63486]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 8710 ssh2 [preauth]
Jun 01 18:56:58 ser4062572352 sshd[63554]: error: kex_exchange_identification: read: Connection reset by peer
Jun 01 19:51:28 ser4062572352 sshd[64062]: error: maximum authentication attempts exceeded for invalid user nakayla from 213.209.159.56 port 23161 ssh2 [preauth]
Jun 01 19:55:38 ser4062572352 sshd[64107]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 20876 ssh2 [preauth]
Jun 01 19:59:58 ser4062572352 sshd[64131]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 26472 ssh2 [preauth]
Jun 01 21:01:51 ser4062572352 sshd[64564]: error: maximum authentication attempts exceeded for invalid user raeann from 213.209.159.56 port 14555 ssh2 [preauth]
Jun 01 21:10:50 ser4062572352 sshd[64585]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 8551 ssh2 [preauth]
Jun 01 21:15:23 ser4062572352 sshd[64606]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 43307 ssh2 [preauth]
Jun 01 22:11:32 ser4062572352 sshd[65046]: error: maximum authentication attempts exceeded for invalid user zakiya from 213.209.159.56 port 56514 ssh2 [preauth]
Jun 01 22:25:53 ser4062572352 sshd[65130]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 52361 ssh2 [preauth]
Jun 01 22:30:21 ser4062572352 sshd[65159]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 7300 ssh2 [preauth]
Jun 01 22:55:35 ser4062572352 sshd[65289]: error: kex_exchange_identification: read: Connection reset by peer
Jun 01 22:58:34 ser4062572352 sshd[65297]: error: kex_exchange_identification: read: Connection reset by peer
Jun 01 23:20:36 ser4062572352 sshd[65447]: error: maximum authentication attempts exceeded for invalid user bradon from 213.209.159.56 port 36937 ssh2 [preauth]
Jun 01 23:21:35 ser4062572352 sshd[65451]: error: kex_exchange_identification: read: Connection reset by peer
Jun 01 23:40:43 ser4062572352 sshd[67397]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 5898 ssh2 [preauth]
Jun 01 23:44:51 ser4062572352 sshd[67405]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 50213 ssh2 [preauth]
Jun 02 00:29:18 ser4062572352 sshd[67677]: error: maximum authentication attempts exceeded for invalid user canaan from 213.209.159.56 port 20662 ssh2 [preauth]
Jun 02 00:54:57 ser4062572352 sshd[67751]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 13332 ssh2 [preauth]
Jun 02 00:59:08 ser4062572352 sshd[67763]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 21331 ssh2 [preauth]
Jun 02 01:37:33 ser4062572352 sshd[68360]: error: maximum authentication attempts exceeded for invalid user darrick from 213.209.159.56 port 46984 ssh2 [preauth]
Jun 02 02:09:00 ser4062572352 sshd[68583]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 40986 ssh2 [preauth]
Jun 02 02:12:14 ser4062572352 sshd[68640]: error: kex_exchange_identification: read: Connection reset by peer
Jun 02 02:13:23 ser4062572352 sshd[68656]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 8542 ssh2 [preauth]
Jun 02 02:17:31 ser4062572352 sshd[68700]: error: kex_exchange_identification: read: Connection reset by peer
Jun 02 02:21:25 ser4062572352 sshd[68729]: error: kex_exchange_identification: read: Connection reset by peer
Jun 02 02:36:56 ser4062572352 sshd[68839]: error: kex_exchange_identification: read: Connection reset by peer
Jun 02 02:45:33 ser4062572352 sshd[68907]: error: maximum authentication attempts exceeded for invalid user edson from 213.209.159.56 port 20193 ssh2 [preauth]
Jun 02 02:45:45 ser4062572352 sshd[68909]: error: Protocol major versions differ: 2 vs. 1
Jun 02 02:46:48 ser4062572352 sshd[68922]: error: kex_exchange_identification: read: Connection reset by peer
Jun 02 02:56:43 ser4062572352 sshd[68951]: error: kex_exchange_identification: read: Connection reset by peer
Jun 02 03:14:54 ser4062572352 sshd[69066]: error: kex_exchange_identification: read: Connection reset by peer
Jun 02 03:23:21 ser4062572352 sshd[69100]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 28870 ssh2 [preauth]
Jun 02 03:27:13 ser4062572352 sshd[69127]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 16880 ssh2 [preauth]
Jun 02 03:32:42 ser4062572352 sshd[69137]: error: kex_exchange_identification: read: Connection reset by peer
Jun 02 03:53:15 ser4062572352 sshd[69196]: error: maximum authentication attempts exceeded for invalid user favian from 213.209.159.56 port 41113 ssh2 [preauth]
Jun 02 04:34:37 ser4062572352 sshd[69533]: error: kex_exchange_identification: read: Connection reset by peer
Jun 02 04:36:54 ser4062572352 sshd[69538]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 43938 ssh2 [preauth]
Jun 02 04:41:07 ser4062572352 sshd[69548]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 24759 ssh2 [preauth]
Jun 02 05:00:57 ser4062572352 sshd[69677]: error: maximum authentication attempts exceeded for invalid user griffen from 213.209.159.56 port 29811 ssh2 [preauth]
Jun 02 05:45:44 ser4062572352 sshd[69906]: error: kex_exchange_identification: read: Connection reset by peer
Jun 02 05:50:40 ser4062572352 sshd[69947]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 11189 ssh2 [preauth]
Jun 02 05:54:52 ser4062572352 sshd[69979]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 56084 ssh2 [preauth]
Jun 02 06:08:20 ser4062572352 sshd[70150]: error: maximum authentication attempts exceeded for invalid user mack from 213.209.159.56 port 14063 ssh2 [preauth]
Jun 02 07:04:09 ser4062572352 sshd[71822]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 19068 ssh2 [preauth]
Jun 02 07:08:10 ser4062572352 sshd[71835]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 54687 ssh2 [preauth]
Jun 02 07:15:17 ser4062572352 sshd[71852]: error: maximum authentication attempts exceeded for invalid user samual from 213.209.159.56 port 53628 ssh2 [preauth]
Jun 02 08:17:27 ser4062572352 sshd[72315]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 7802 ssh2 [preauth]
Jun 02 08:21:35 ser4062572352 sshd[72327]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 54135 ssh2 [preauth]
Jun 02 08:22:05 ser4062572352 sshd[72331]: error: maximum authentication attempts exceeded for invalid user shay from 213.209.159.56 port 30225 ssh2 [preauth]
Jun 02 08:31:38 ser4062572352 systemd[1]: user@0.service: State 'stop-sigterm' timed out. Killing.
Jun 02 08:31:38 ser4062572352 systemd[1]: user@0.service: Main process exited, code=killed, status=9/KILL
Jun 02 08:31:38 ser4062572352 systemd[1]: user@0.service: Failed with result 'timeout'.
-- Boot b5c87301a4e649e6b97e85aa610dd2b6 --
Jun 02 08:31:50 ser4062572352 kernel: acpi PNP0A03:00: fail to add MMCONFIG information, can't access extended configuration space under this bridge
Jun 02 08:31:50 ser4062572352 kernel: sr 0:0:0:1: Power-on or device reset occurred
Jun 02 08:31:50 ser4062572352 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log.
Jun 02 08:31:50 ser4062572352 systemd-sysctl[370]: Couldn't write '' to 'net/netfilter/nf_conntrack_tcp_timeout_fin_wait', ignoring: No such file or directory
Jun 02 08:31:50 ser4062572352 systemd-sysctl[370]: Couldn't write '' to 'net/nf_conntrack_max', ignoring: No such file or directory
Jun 02 08:31:50 ser4062572352 systemd-sysctl[370]: Couldn't write '' to 'net/ipv4/tcp_collapse_max_bytes', ignoring: No such file or directory
Jun 02 08:31:50 ser4062572352 systemd-sysctl[370]: Couldn't write '' to 'net/netfilter/nf_conntrack_max', ignoring: No such file or directory
Jun 02 08:31:50 ser4062572352 systemd-sysctl[370]: Couldn't write '' to 'net/netfilter/nf_conntrack_tcp_timeout_close_wait', ignoring: No such file or directory
Jun 02 08:31:50 ser4062572352 systemd-sysctl[370]: Couldn't write '' to 'net/netfilter/nf_conntrack_tcp_timeout_time_wait', ignoring: No such file or directory
Jun 02 08:31:50 ser4062572352 systemd-sysctl[370]: Couldn't write '' to 'net/netfilter/nf_conntrack_tcp_timeout_established', ignoring: No such file or directory
Jun 02 08:31:51 ser4062572352 (udev-worker)[405]: ens17: Could not set WakeOnLan to off, ignoring: Operation not supported
Jun 02 08:31:52 ser4062572352 (haveged)[669]: haveged.service: Referenced but unset environment variable evaluates to an empty string: DAEMON_ARGS
Jun 02 08:31:55 ser4062572352 (cron)[757]: cron.service: Referenced but unset environment variable evaluates to an empty string: EXTRA_OPTS
Jun 02 08:31:56 ser4062572352 kernel: kauditd_printk_skb: 124 callbacks suppressed
Jun 02 08:31:57 ser4062572352 systemd[1]: networkd-dispatcher.service: Got notification message from PID 996, but reception only permitted for main PID 765
Jun 02 08:31:57 ser4062572352 systemd[1]: networkd-dispatcher.service: Got notification message from PID 1005, but reception only permitted for main PID 765
Jun 02 08:31:59 ser4062572352 systemd[1]: networkd-dispatcher.service: Got notification message from PID 1299, but reception only permitted for main PID 765
Jun 02 09:09:25 ser4062572352 sshd[1783]: error: kex_exchange_identification: read: Connection reset by peer
Jun 02 09:28:03 ser4062572352 sshd[1839]: error: maximum authentication attempts exceeded for invalid user cami from 213.209.159.56 port 5736 ssh2 [preauth]
Jun 02 09:30:23 ser4062572352 sshd[1847]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 42390 ssh2 [preauth]
Jun 02 09:34:20 ser4062572352 sshd[1862]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 28364 ssh2 [preauth]
Jun 02 10:33:30 ser4062572352 sshd[2155]: error: maximum authentication attempts exceeded for invalid user gracyn from 213.209.159.56 port 48350 ssh2 [preauth]
Jun 02 10:43:02 ser4062572352 sshd[2183]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 35235 ssh2 [preauth]
Jun 02 10:44:56 ser4062572352 sshd[2186]: error: kex_exchange_identification: read: Connection reset by peer
Jun 02 10:46:59 ser4062572352 sshd[2198]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 37438 ssh2 [preauth]

/z_direct_outbound.json] prepend outbound with tag: z_direct_outbound
May 31 15:42:10 hks2-202404291529122cb8ee xray[227892]: 2026/05/31 15:42:10.443645 [Warning] infra/conf: REALITY: Listening on non-443 ports may get your IP blocked by the GFW
===== listening ports =====
State  Recv-Q Send-Q   Local Address:Port  Peer Address:PortProcess                                      
LISTEN 0      4096     127.0.0.53%lo:53         0.0.0.0:*    users:(("systemd-resolve",pid=158402,fd=14))
LISTEN 0      128            0.0.0.0:22         0.0.0.0:*    users:(("sshd",pid=169322,fd=3))            
LISTEN 0      8192   185.155.235.171:443        0.0.0.0:*    users:(("xray",pid=227892,fd=3))            
LISTEN 0      8192         127.0.0.1:45987      0.0.0.0:*    users:(("xray",pid=227892,fd=6))            
LISTEN 0      128               [::]:22            [::]:*    users:(("sshd",pid=169322,fd=4))            
===== recent critical logs =====
May 28 09:25:01 hks2-202404291529122cb8ee sshd[218817]: error: kex_protocol_error: type 30 seq 5 [preauth]
May 28 09:25:03 hks2-202404291529122cb8ee sshd[218817]: error: kex_protocol_error: type 20 seq 6 [preauth]
May 28 09:25:03 hks2-202404291529122cb8ee sshd[218817]: error: kex_protocol_error: type 30 seq 7 [preauth]
May 28 11:14:02 hks2-202404291529122cb8ee systemd-xdg-autostart-generator[218943]: Not generating service for XDG autostart app-snap\x2duserd\x2dautostart@autostart.service, error parsing Exec= line: No such file or directory
May 28 13:15:07 hks2-202404291529122cb8ee sshd[219216]: error: kex_exchange_identification: Connection closed by remote host
May 28 14:21:14 hks2-202404291529122cb8ee systemd-xdg-autostart-generator[219301]: Not generating service for XDG autostart app-snap\x2duserd\x2dautostart@autostart.service, error parsing Exec= line: No such file or directory
May 28 14:26:04 hks2-202404291529122cb8ee systemd-xdg-autostart-generator[219755]: Not generating service for XDG autostart app-snap\x2duserd\x2dautostart@autostart.service, error parsing Exec= line: No such file or directory
May 28 14:26:17 hks2-202404291529122cb8ee systemd[1]: cloud-init-hotplugd.socket: Socket unit configuration has changed while unit has been running, no open socket file descriptor left. The socket unit is not functional until restarted.
May 28 14:26:18 hks2-202404291529122cb8ee systemd[1]: cloud-init-hotplugd.socket: Socket unit configuration has changed while unit has been running, no open socket file descriptor left. The socket unit is not functional until restarted.
May 28 14:34:26 hks2-202404291529122cb8ee systemd-xdg-autostart-generator[220967]: Not generating service for XDG autostart app-snap\x2duserd\x2dautostart@autostart.service, error parsing Exec= line: No such file or directory
May 28 16:23:34 hks2-202404291529122cb8ee sshd[221134]: error: kex_exchange_identification: read: Connection reset by peer
May 28 16:24:38 hks2-202404291529122cb8ee sshd[221135]: error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1"
May 28 16:24:46 hks2-202404291529122cb8ee sshd[221136]: error: kex_exchange_identification: banner line contains invalid characters
May 28 16:47:34 hks2-202404291529122cb8ee sshd[221155]: error: kex_protocol_error: type 20 seq 2 [preauth]
May 28 16:47:34 hks2-202404291529122cb8ee sshd[221155]: error: kex_protocol_error: type 30 seq 3 [preauth]
May 28 16:47:35 hks2-202404291529122cb8ee sshd[221155]: error: kex_protocol_error: type 20 seq 4 [preauth]
May 28 16:47:35 hks2-202404291529122cb8ee sshd[221155]: error: kex_protocol_error: type 30 seq 5 [preauth]
May 28 16:47:37 hks2-202404291529122cb8ee sshd[221155]: error: kex_protocol_error: type 20 seq 6 [preauth]
May 28 16:47:37 hks2-202404291529122cb8ee sshd[221155]: error: kex_protocol_error: type 30 seq 7 [preauth]
May 29 03:23:34 hks2-202404291529122cb8ee sshd[222322]: error: kex_exchange_identification: Connection closed by remote host
May 29 03:23:41 hks2-202404291529122cb8ee sshd[222323]: error: kex_exchange_identification: Connection closed by remote host
May 29 05:09:48 hks2-202404291529122cb8ee sshd[222426]: error: kex_exchange_identification: Connection closed by remote host
May 29 06:53:15 hks2-202404291529122cb8ee sshd[222594]: error: kex_protocol_error: type 20 seq 2 [preauth]
May 29 06:53:15 hks2-202404291529122cb8ee sshd[222594]: error: kex_protocol_error: type 30 seq 3 [preauth]
May 29 06:53:16 hks2-202404291529122cb8ee sshd[222594]: error: kex_protocol_error: type 20 seq 4 [preauth]
May 29 06:53:16 hks2-202404291529122cb8ee sshd[222594]: error: kex_protocol_error: type 30 seq 5 [preauth]
May 29 06:53:18 hks2-202404291529122cb8ee sshd[222594]: error: kex_protocol_error: type 20 seq 6 [preauth]
May 29 06:53:18 hks2-202404291529122cb8ee sshd[222594]: error: kex_protocol_error: type 30 seq 7 [preauth]
May 30 01:00:33 hks2-202404291529122cb8ee systemd-xdg-autostart-generator[223776]: Not generating service for XDG autostart app-snap\x2duserd\x2dautostart@autostart.service, error parsing Exec= line: No such file or directory
May 30 01:01:14 hks2-202404291529122cb8ee systemd-xdg-autostart-generator[223858]: Not generating service for XDG autostart app-snap\x2duserd\x2dautostart@autostart.service, error parsing Exec= line: No such file or directory
May 30 02:46:01 hks2-202404291529122cb8ee sshd[224052]: error: kex_exchange_identification: read: Connection reset by peer
May 30 08:36:54 hks2-202404291529122cb8ee sshd[224474]: error: kex_exchange_identification: Connection closed by remote host
May 30 12:35:28 hks2-202404291529122cb8ee sshd[225331]: error: kex_exchange_identification: Connection closed by remote host
May 31 00:59:10 hks2-202404291529122cb8ee sshd[226126]: error: kex_exchange_identification: Connection closed by remote host
May 31 00:59:10 hks2-202404291529122cb8ee sshd[226127]: error: kex_exchange_identification: client sent invalid protocol identifier "MGLNDD_185.155.235.171_22"
May 31 02:41:26 hks2-202404291529122cb8ee sshd[226276]: error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1"
May 31 02:41:26 hks2-202404291529122cb8ee sshd[226277]: error: kex_exchange_identification: client sent invalid protocol identifier "GET /favicon.ico HTTP/1.1"
May 31 11:11:47 hks2-202404291529122cb8ee sshd[227278]: error: kex_exchange_identification: Connection closed by remote host
May 31 11:11:58 hks2-202404291529122cb8ee sshd[227279]: error: kex_exchange_identification: Connection closed by remote host
May 31 11:12:09 hks2-202404291529122cb8ee sshd[227280]: error: kex_exchange_identification: banner line contains invalid characters
May 31 11:12:13 hks2-202404291529122cb8ee sshd[227281]: error: kex_exchange_identification: Connection closed by remote host
May 31 12:30:59 hks2-202404291529122cb8ee sshd[227379]: error: kex_exchange_identification: client sent invalid protocol identifier "MGLNDD_185.155.235.171_22"
May 31 15:31:14 hks2-202404291529122cb8ee systemd-xdg-autostart-generator[227580]: Not generating service for XDG autostart app-snap\x2duserd\x2dautostart@autostart.service, error parsing Exec= line: No such file or directory
May 31 15:31:43 hks2-202404291529122cb8ee systemd-xdg-autostart-generator[227697]: Not generating service for XDG autostart app-snap\x2duserd\x2dautostart@autostart.service, error parsing Exec= line: No such file or directory
May 31 15:41:43 hks2-202404291529122cb8ee systemd-xdg-autostart-generator[227771]: Not generating service for XDG autostart app-snap\x2duserd\x2dautostart@autostart.service, error parsing Exec= line: No such file or directory
May 31 15:42:09 hks2-202404291529122cb8ee systemd-xdg-autostart-generator[227838]: Not generating service for XDG autostart app-snap\x2duserd\x2dautostart@autostart.service, error parsing Exec= line: No such file or directory
May 31 15:42:56 hks2-202404291529122cb8ee systemd-xdg-autostart-generator[227920]: Not generating service for XDG autostart app-snap\x2duserd\x2dautostart@autostart.service, error parsing Exec= line: No such file or directory
May 31 15:49:09 hks2-202404291529122cb8ee sshd[227983]: error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1"
May 31 19:51:31 hks2-202404291529122cb8ee sshd[228229]: error: kex_exchange_identification: Connection closed by remote host
May 31 21:04:01 hks2-202404291529122cb8ee sshd[228306]: error: kex_exchange_identification: Connection closed by remote host
Jun 01 06:39:55 hks2-202404291529122cb8ee sshd[229050]: error: kex_exchange_identification: Connection closed by remote host
Jun 01 08:50:48 hks2-202404291529122cb8ee sshd[229196]: error: kex_exchange_identification: banner line contains invalid characters
Jun 01 08:51:07 hks2-202404291529122cb8ee sshd[229197]: error: kex_exchange_identification: Connection closed by remote host
Jun 01 08:51:07 hks2-202404291529122cb8ee sshd[229200]: error: Protocol major versions differ: 2 vs. 1
Jun 01 13:01:24 hks2-202404291529122cb8ee sshd[229860]: error: kex_protocol_error: type 20 seq 2 [preauth]
Jun 01 13:01:24 hks2-202404291529122cb8ee sshd[229860]: error: kex_protocol_error: type 30 seq 3 [preauth]
Jun 01 13:01:25 hks2-202404291529122cb8ee sshd[229860]: error: kex_protocol_error: type 20 seq 4 [preauth]
Jun 01 13:01:25 hks2-202404291529122cb8ee sshd[229860]: error: kex_protocol_error: type 30 seq 5 [preauth]
Jun 01 13:01:27 hks2-202404291529122cb8ee sshd[229860]: error: kex_protocol_error: type 20 seq 6 [preauth]
Jun 01 13:01:27 hks2-202404291529122cb8ee sshd[229860]: error: kex_protocol_error: type 30 seq 7 [preauth]
Jun 01 16:32:45 hks2-202404291529122cb8ee sshd[230078]: error: kex_exchange_identification: Connection closed by remote host
Jun 01 16:36:35 hks2-202404291529122cb8ee sshd[230082]: error: kex_exchange_identification: banner line contains invalid characters
Jun 01 20:29:42 hks2-202404291529122cb8ee sshd[230314]: error: kex_protocol_error: type 20 seq 2 [preauth]
Jun 01 20:29:42 hks2-202404291529122cb8ee sshd[230314]: error: kex_protocol_error: type 30 seq 3 [preauth]
Jun 01 20:29:43 hks2-202404291529122cb8ee sshd[230314]: error: kex_protocol_error: type 20 seq 4 [preauth]
Jun 01 20:29:43 hks2-202404291529122cb8ee sshd[230314]: error: kex_protocol_error: type 30 seq 5 [preauth]
Jun 01 20:29:45 hks2-202404291529122cb8ee sshd[230314]: error: kex_protocol_error: type 20 seq 6 [preauth]
Jun 01 20:29:45 hks2-202404291529122cb8ee sshd[230314]: error: kex_protocol_error: type 30 seq 7 [preauth]
Jun 02 01:43:03 hks2-202404291529122cb8ee sshd[230679]: error: kex_exchange_identification: banner line contains invalid characters
Jun 02 03:27:11 hks2-202404291529122cb8ee sshd[230836]: error: kex_protocol_error: type 20 seq 2 [preauth]
Jun 02 03:27:11 hks2-202404291529122cb8ee sshd[230836]: error: kex_protocol_error: type 30 seq 3 [preauth]
Jun 02 03:27:13 hks2-202404291529122cb8ee sshd[230836]: error: kex_protocol_error: type 20 seq 4 [preauth]
Jun 02 03:27:13 hks2-202404291529122cb8ee sshd[230836]: error: kex_protocol_error: type 30 seq 5 [preauth]
Jun 02 03:27:15 hks2-202404291529122cb8ee sshd[230836]: error: kex_protocol_error: type 20 seq 6 [preauth]
Jun 02 03:27:15 hks2-202404291529122cb8ee sshd[230836]: error: kex_protocol_error: type 30 seq 7 [preauth]
Jun 02 04:03:50 hks2-202404291529122cb8ee sshd[230876]: error: kex_exchange_identification: read: Connection reset by peer
Jun 02 07:13:50 hks2-202404291529122cb8ee sshd[231143]: error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1"
Jun 02 07:13:58 hks2-202404291529122cb8ee sshd[231144]: error: kex_exchange_identification: banner line contains invalid characters
Jun 02 08:48:37 hks2-202404291529122cb8ee sshd[231242]: error: kex_exchange_identification: Connection closed by remote host
Jun 02 11:17:35 hks2-202404291529122cb8ee systemd-xdg-autostart-generator[231816]: Not generating service for XDG autostart app-snap\x2duserd\x2dautostart@autostart.service, error parsing Exec= line: No such file or directory