结论：本次只读巡检 14 台，正常 12 台，需关注 2 台；SSH 不通/超时 0 台。 本次没有执行重启、修复、配置修改、删除或升级。
“需关注”表示可能影响代理、网页、机器人网关或后续维护登录；不一定代表业务已经中断。建议按下方异常列表逐台确认，若需要修复再单独授权执行。
| 节点 | 状态 | 系统 | 运行时间/负载 | 资源 | 失败单元 | 异常摘要 |
|---|---|---|---|---|---|---|
| AR | 需关注 exit= | instance-20260423-0914 Ubuntu 24.04.4 LTS | up 1 week, 21 hours, 33 minutes load 0.33,0.13,0.09/4核 | 6934/23975MB 29% 53G/116G 46% inode 1.3M/15M 9% | wg-quick@wg-landing.service loaded failed failed WireGuard via wg-quick(8) for wg/landing | systemd failed units 非空 |
| KRB | 需关注 exit= | instance-20260429-1226 Ubuntu 24.04.4 LTS | up 3 days, 22 hours, 32 minutes load 0.04,0.01,0.00/2核 | 438/954MB 46% 3.5G/45G 8% inode 129K/5.8M 3% | none | 预期 xray 但未发现服务 |
| AU | 在线 exit= | AU Ubuntu 24.04.4 LTS | up 3 days, 22 hours, 31 minutes load 0.05,0.01,0.00/1核 | 171/458MB 37% 3.8G/8.7G 44% inode 116K/1.2M 11% | none | 无 |
| DE | 在线 exit= | iZgw8bgfuauyw9zjm1qsftZ Ubuntu 24.04.4 LTS | up 3 days, 22 hours, 33 minutes load 0.00,0.00,0.00/2核 | 554/1613MB 34% 24G/40G 63% inode 213K/2.5M 9% | none | 无 |
| HKA | 在线 exit= | ser4062572352 Ubuntu 24.04.4 LTS | up 2 days, 54 minutes load 0.00,0.00,0.00/4核 | 674/3915MB 17% 13G/29G 44% inode 342K/3.7M 10% | none | 无 |
| HKY | 在线 exit= | hks2-202404291529122cb8ee Ubuntu 22.04.5 LTS | up 3 days, 21 hours, 1 minute load 0.00,0.00,0.00/1核 | 166/957MB 17% 3.0G/9.8G 32% inode 63K/625K 10% | none | 无 |
| JP | 在线 exit= | JP Ubuntu 24.04.4 LTS | up 3 weeks, 4 days, 22 hours, 50 minutes load 0.00,0.00,0.00/1核 | 382/849MB 45% 4.9G/9.8G 53% inode 97K/625K 16% | none | 无 |
| JPA | 在线 exit= | JPA Ubuntu 24.04.4 LTS | up 2 days, 20 hours, 21 minutes load 0.00,0.00,0.00/2核 | 517/911MB 57% 7.4G/38G 20% inode 213K/4.9M 5% | none | 无 |
| JPB | 在线 exit= | JPB Ubuntu 24.04.4 LTS | up 2 days, 20 hours, 19 minutes load 0.04,0.01,0.00/2核 | 443/911MB 49% 2.5G/38G 7% inode 115K/4.9M 3% | none | 无 |
| KR | 在线 exit= | instance-20260422-2348 Ubuntu 24.04.4 LTS | up 3 days, 22 hours, 33 minutes load 0.08,0.02,0.01/2核 | 429/954MB 45% 5.4G/48G 12% inode 180K/6.2M 3% | none | 无 |
| SG | 在线 exit= | SG Ubuntu 24.04.4 LTS | up 3 days, 22 hours, 32 minutes load 0.05,0.01,0.00/2核 | 612/1907MB 32% 7.6G/58G 14% inode 213K/7.4M 3% | none | 无 |
| UK | 在线 exit= | UK Ubuntu 24.04.4 LTS | up 3 days, 22 hours, 31 minutes load 0.11,0.03,0.01/1核 | 168/458MB 37% 3.8G/8.7G 44% inode 116K/1.2M 11% | none | 无 |
| US | 在线 exit= | ser0570106010 Ubuntu 24.04.4 LTS | up 5 days, 19 hours, 51 minutes load 0.15,0.10,0.09/4核 | 847/3915MB 22% 13G/29G 43% inode 308K/3.7M 9% | none | 无 |
| USB | 在线 exit= | instance-20260423-0151 Ubuntu 24.04.4 LTS | up 2 days, 20 hours, 17 minutes load 0.00,0.00,0.00/2核 | 451/954MB 47% 6.5G/48G 14% inode 136K/6.2M 3% | none | 无 |
| 节点 | xray | sing-box | nginx | hermes-gateway | docker | fail2ban |
|---|---|---|---|---|---|---|
| DE 47.254.140.158 | Result=success,LoadState=loaded,ActiveState=active,SubState=running,UnitFileState=enabled | N/A | Result=success,LoadState=loaded,ActiveState=active,SubState=running,UnitFileState=enabled | N/A | N/A | Result=success,LoadState=loaded,ActiveState=active,SubState=running,UnitFileState=enabled |
| JPA 13.112.210.201 | Result=success,LoadState=loaded,ActiveState=active,SubState=running,UnitFileState=enabled | N/A | N/A | Result=success,LoadState=loaded,ActiveState=active,SubState=running,UnitFileState=enabled | N/A | Result=success,LoadState=loaded,ActiveState=active,SubState=running,UnitFileState=enabled |
| AR 129.146.59.53 | N/A | N/A | Result=success,LoadState=loaded,ActiveState=active,SubState=running,UnitFileState=enabled | Result=success,LoadState=loaded,ActiveState=active,SubState=running,UnitFileState=enabled | Result=success,LoadState=loaded,ActiveState=active,SubState=running,UnitFileState=enabled | Result=success,LoadState=loaded,ActiveState=active,SubState=running,UnitFileState=enabled |
| JP 64.118.144.182 | Result=success,LoadState=loaded,ActiveState=active,SubState=running,UnitFileState=enabled | Result=success,LoadState=not-found,ActiveState=inactive,SubState=dead,UnitFileState= | Result=success,LoadState=loaded,ActiveState=active,SubState=running,UnitFileState=enabled | N/A | N/A | Result=success,LoadState=loaded,ActiveState=active,SubState=running,UnitFileState=enabled |
| USB 161.153.95.69 | Result=success,LoadState=loaded,ActiveState=active,SubState=running,UnitFileState=enabled | N/A | Result=success,LoadState=loaded,ActiveState=active,SubState=running,UnitFileState=enabled | N/A | N/A | Result=success,LoadState=loaded,ActiveState=active,SubState=running,UnitFileState=enabled |
| KR 131.186.27.212 | Result=success,LoadState=loaded,ActiveState=active,SubState=running,UnitFileState=enabled | N/A | Result=success,LoadState=loaded,ActiveState=active,SubState=running,UnitFileState=enabled | N/A | N/A | Result=success,LoadState=loaded,ActiveState=active,SubState=running,UnitFileState=enabled |
| HKA 38.76.188.244 | N/A | N/A | Result=success,LoadState=loaded,ActiveState=active,SubState=running,UnitFileState=enabled | N/A | Result=success,LoadState=loaded,ActiveState=active,SubState=running,UnitFileState=enabled | Result=success,LoadState=loaded,ActiveState=active,SubState=running,UnitFileState=enabled |
| US 186.241.84.19 | N/A | N/A | Result=success,LoadState=loaded,ActiveState=active,SubState=running,UnitFileState=generated | N/A | Result=success,LoadState=loaded,ActiveState=active,SubState=running,UnitFileState=enabled | Result=success,LoadState=loaded,ActiveState=active,SubState=running,UnitFileState=enabled |
| HKY 185.155.235.171 | Result=success,LoadState=loaded,ActiveState=active,SubState=running,UnitFileState=enabled | N/A | N/A | N/A | N/A | Result=success,LoadState=loaded,ActiveState=active,SubState=running,UnitFileState=enabled |
| KRB 161.118.130.5 | N/A | N/A | Result=success,LoadState=loaded,ActiveState=active,SubState=running,UnitFileState=enabled | N/A | N/A | Result=success,LoadState=loaded,ActiveState=active,SubState=running,UnitFileState=enabled |
| SG 52.220.159.135 | Result=success,LoadState=loaded,ActiveState=active,SubState=running,UnitFileState=enabled | N/A | N/A | N/A | N/A | Result=success,LoadState=loaded,ActiveState=active,SubState=running,UnitFileState=enabled |
| UK 167.71.140.103 | Result=success,LoadState=loaded,ActiveState=active,SubState=running,UnitFileState=enabled | N/A | N/A | N/A | N/A | Result=success,LoadState=loaded,ActiveState=active,SubState=running,UnitFileState=enabled |
| AU 134.199.173.24 | Result=success,LoadState=loaded,ActiveState=active,SubState=running,UnitFileState=enabled | N/A | N/A | N/A | N/A | Result=success,LoadState=loaded,ActiveState=active,SubState=running,UnitFileState=enabled |
| JPB 13.112.231.185 | Result=success,LoadState=loaded,ActiveState=active,SubState=running,UnitFileState=enabled | N/A | N/A | N/A | N/A | Result=success,LoadState=loaded,ActiveState=active,SubState=running,UnitFileState=enabled |
: error: maximum authentication attempts exceeded for root from 213.209.159.56 port 19281 ssh2 [preauth]
Jun 07 12:08:39 instance-20260423-0914 sshd[1055213]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 6484 ssh2 [preauth]
Jun 07 12:12:27 instance-20260423-0914 sshd[1056496]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 18149 ssh2 [preauth]
Jun 07 12:28:49 instance-20260423-0914 systemd[1]: Configuration file /etc/systemd/system/hermes-web-ui.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Jun 07 12:28:49 instance-20260423-0914 systemd[1]: Configuration file /etc/systemd/system/memory-tencentdb-master.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Jun 07 13:05:28 instance-20260423-0914 sshd[1074542]: error: Protocol major versions differ: 2 vs. 1
Jun 07 13:20:26 instance-20260423-0914 sshd[1079545]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 41016 ssh2 [preauth]
Jun 07 13:23:17 instance-20260423-0914 sshd[1080515]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 46357 ssh2 [preauth]
Jun 07 14:25:18 instance-20260423-0914 sshd[1101234]: error: maximum authentication attempts exceeded for root from 213.209.159.56 port 32256 ssh2 [preauth]
Jun 07 14:28:27 instance-20260423-0914 sshd[1102713]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 30712 ssh2 [preauth]
Jun 07 14:37:56 instance-20260423-0914 sshd[1105981]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 41843 ssh2 [preauth]
Jun 07 15:36:01 instance-20260423-0914 sshd[1125385]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 48683 ssh2 [preauth]
Jun 07 15:51:52 instance-20260423-0914 sshd[1130667]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 15920 ssh2 [preauth]
Jun 07 16:00:40 instance-20260423-0914 sshd[1133590]: error: maximum authentication attempts exceeded for invalid user ubnt from 213.209.159.56 port 57904 ssh2 [preauth]
Jun 07 16:14:06 instance-20260423-0914 systemd[1]: hermes-gateway-worker.service: Main process exited, code=killed, status=9/KILL
Jun 07 16:14:06 instance-20260423-0914 systemd[1]: hermes-gateway-worker.service: Failed with result 'signal'.
Jun 07 16:42:56 instance-20260423-0914 sshd[1149275]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 36338 ssh2 [preauth]
Jun 07 17:05:30 instance-20260423-0914 sshd[1156932]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 21128 ssh2 [preauth]
Jun 07 17:19:18 instance-20260423-0914 sshd[1161672]: error: kex_exchange_identification: read: Connection reset by peer
Jun 07 17:32:14 instance-20260423-0914 sshd[1166523]: error: maximum authentication attempts exceeded for invalid user admin from 213.209.159.56 port 61803 ssh2 [preauth]
Jun 07 17:50:08 instance-20260423-0914 sshd[1172479]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 5018 ssh2 [preauth]
Jun 07 18:19:00 instance-20260423-0914 sshd[1182173]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 27076 ssh2 [preauth]
Jun 07 18:26:31 instance-20260423-0914 systemd[1]: Configuration file /etc/systemd/system/hermes-web-ui.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Jun 07 18:26:31 instance-20260423-0914 systemd[1]: Configuration file /etc/systemd/system/memory-tencentdb-master.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Jun 07 18:41:16 instance-20260423-0914 sshd[1189691]: error: kex_exchange_identification: read: Connection reset by peer
Jun 07 18:56:56 instance-20260423-0914 sshd[1195061]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 35775 ssh2 [preauth]
Jun 07 19:06:33 instance-20260423-0914 sshd[1198280]: error: maximum authentication attempts exceeded for invalid user admin from 213.209.159.56 port 47576 ssh2 [preauth]
### top_processes
PID PPID COMMAND %CPU %MEM COMMAND
578832 578819 node 0.0 3.1 /usr/bin/node /root/cc-telegram-bridge/node_modules/typescript/lib/tsserver.js --useInferredProjectPerProjectRoot --cancellationPipeName /tmp/2cee588937c8afbf0ef3f4cf2334053e/tscancellation* --locale en --validateDefaultNpmLocation --useNodeIpc
2350 2180 python 0.1 1.6 python main.py --serve-only --host 0.0.0.0 --port 8000
218594 1 hermes 0.2 1.2 /root/.hermes/hermes-agent/venv/bin/python -m hermes_cli.main --profile default gateway run --replace
623309 623262 node 0.0 1.2 /usr/bin/node --require /opt/TencentDB-Agent-Memory/node_modules/tsx/dist/preflight.cjs --import file:///opt/TencentDB-Agent-Memory/node_modules/tsx/dist/loader.mjs /opt/TencentDB-Agent-Memory/src/gateway/server.ts
1379 1128 node 0.0 1.2 /usr/bin/node --require /opt/TencentDB-Agent-Memory/node_modules/tsx/dist/preflight.cjs --import file:///opt/TencentDB-Agent-Memory/node_modules/tsx/dist/loader.mjs src/gateway/server.ts
3998472 3983925 node 0.0 1.1 node /root/.hermes/profiles/news/lsp/bin/bash-language-server start
623310 623263 node 0.0 1.1 /usr/bin/node --require /opt/TencentDB-Agent-Memory/node_modules/tsx/dist/preflight.cjs --import file:///opt/TencentDB-Agent-Memory/node_modules/tsx/dist/loader.mjs /opt/TencentDB-Agent-Memory/src/gateway/server.ts
4177373 4177362 node 0.0 1.1 /usr/bin/node --require /opt/TencentDB-Agent-Memory/node_modules/tsx/dist/preflight.cjs --import file:///opt/TencentDB-Agent-Memory/node_modules/tsx/dist/loader.mjs src/gateway/server.ts
1203225 494779 node 31.0 1.0 node /root/.hermes/profiles/network/lsp/bin/pyright-langserver --stdio
2424 2247 next-server (v 0.0 1.0 next-server (v
494779 1 hermes 0.1 1.0 /root/.hermes/hermes-agent/venv/bin/python -m hermes_cli.main --profile network gateway run --replace
3983925 1 hermes 0.2 0.9 /root/.hermes/hermes-agent/venv/bin/python -m hermes_cli.main --profile news gateway run --replace
1138727 1 hermes 0.2 0.8 /root/.hermes/hermes-agent/venv/bin/python -m hermes_cli.main --profile worker gateway run --replace
494272 1 hermes 0.1 0.8 /root/.hermes/hermes-agent/venv/bin/python -m hermes_cli.main --profile health gateway run --replace
1139218 1139198 node 0.0 0.8 /usr/bin/node /root/.hermes/profiles/worker/lsp/node_modules/typescript/lib/tsserver.js --useInferredProjectPerProjectRoot --cancellationPipeName /tmp/a5d66317775fbc22b34e75a629b90c65/tscancellation* --locale en --validateDefaultNpmLocation --useNodeIpc
3983923 1 hermes 0.1 0.7 /root/.hermes/hermes-agent/venv/bin/python -m hermes_cli.main --profile stock gateway run --replace
1139217 1139198 node 0.0 0.6 /usr/bin/node /root/.hermes/profiles/worker/lsp/node_modules/typescript/lib/tsserver.js --serverMode partialSemantic --useInferredProjectPerProjectRoot --disableAutomaticTypingAcquisition --cancellationPipeName /tmp/1b5fddc3cbe311f8a21ac4cda15ee90b/tscancellation* --locale en --validateDefaultNpmLocation --useNodeIpc
623880 1 node 0.0 0.6 /usr/bin/node /root/cc-telegram-bridge/dist/src/index.js --instance codex
986186 1 node 0.0 0.6 /usr/bin/node /root/cc-telegram-bridge/dist/src/index.js --instance qodercli
mum authentication attempts exceeded for invalid user user from 2.57.121.25 port 40240 ssh2 [preauth]
Jun 06 21:37:42 instance-20260429-1226 sshd[86897]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 11099 ssh2 [preauth]
Jun 06 22:17:39 instance-20260429-1226 sshd[87672]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 21990 ssh2 [preauth]
Jun 06 22:53:42 instance-20260429-1226 sshd[88366]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 14569 ssh2 [preauth]
Jun 06 23:26:48 instance-20260429-1226 sshd[88983]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 36530 ssh2 [preauth]
Jun 07 00:09:19 instance-20260429-1226 sshd[89846]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 19017 ssh2 [preauth]
Jun 07 00:35:43 instance-20260429-1226 sshd[90290]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 54151 ssh2 [preauth]
Jun 07 00:41:55 instance-20260429-1226 sshd[90395]: error: maximum authentication attempts exceeded for invalid user guest from 213.209.159.56 port 38744 ssh2 [preauth]
Jun 07 01:24:33 instance-20260429-1226 sshd[91601]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 23023 ssh2 [preauth]
Jun 07 01:30:40 instance-20260429-1226 sshd[91729]: error: maximum authentication attempts exceeded for invalid user oracle from 213.209.159.56 port 33193 ssh2 [preauth]
Jun 07 01:44:19 instance-20260429-1226 sshd[91947]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 5771 ssh2 [preauth]
Jun 07 01:45:57 instance-20260429-1226 sshd[91977]: error: kex_exchange_identification: read: Connection reset by peer
Jun 07 02:19:43 instance-20260429-1226 sshd[92509]: error: maximum authentication attempts exceeded for invalid user moth3r from 213.209.159.56 port 54257 ssh2 [preauth]
Jun 07 02:39:34 instance-20260429-1226 sshd[92831]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 6988 ssh2 [preauth]
Jun 07 02:52:41 instance-20260429-1226 sshd[93052]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 23886 ssh2 [preauth]
Jun 07 02:59:53 instance-20260429-1226 kernel: workqueue: drm_fb_helper_damage_work hogged CPU for >13333us 67 times, consider switching to WQ_UNBOUND
Jun 07 03:07:59 instance-20260429-1226 sshd[93275]: error: maximum authentication attempts exceeded for invalid user test from 213.209.159.56 port 28180 ssh2 [preauth]
Jun 07 03:54:31 instance-20260429-1226 sshd[93996]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 39549 ssh2 [preauth]
Jun 07 04:00:48 instance-20260429-1226 sshd[94114]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 26049 ssh2 [preauth]
Jun 07 04:39:46 instance-20260429-1226 sshd[94797]: error: maximum authentication attempts exceeded for root from 213.209.159.56 port 58288 ssh2 [preauth]
Jun 07 04:50:02 instance-20260429-1226 sshd[94952]: error: Protocol major versions differ: 2 vs. 1
Jun 07 05:08:55 instance-20260429-1226 sshd[95217]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 37754 ssh2 [preauth]
Jun 07 05:09:17 instance-20260429-1226 sshd[95225]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 35026 ssh2 [preauth]
Jun 07 05:28:01 instance-20260429-1226 sshd[95527]: error: maximum authentication attempts exceeded for root from 213.209.159.56 port 47184 ssh2 [preauth]
Jun 07 06:16:23 instance-20260429-1226 sshd[96087]: error: maximum authentication attempts exceeded for root from 213.209.159.56 port 56284 ssh2 [preauth]
Jun 07 06:16:59 instance-20260429-1226 sshd[96091]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 17357 ssh2 [preauth]
Jun 07 06:23:50 instance-20260429-1226 sshd[96286]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 48716 ssh2 [preauth]
Jun 07 06:33:19 instance-20260429-1226 sshd[96396]: error: maximum authentication attempts exceeded for root from 175.123.187.78 port 53048 ssh2 [preauth]
Jun 07 06:33:26 instance-20260429-1226 sshd[96400]: error: maximum authentication attempts exceeded for root from 175.123.187.78 port 53526 ssh2 [preauth]
Jun 07 06:33:30 instance-20260429-1226 sshd[96402]: error: maximum authentication attempts exceeded for root from 175.123.187.78 port 54120 ssh2 [preauth]
Jun 07 07:24:28 instance-20260429-1226 sshd[96944]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 37809 ssh2 [preauth]
Jun 07 07:37:51 instance-20260429-1226 sshd[97091]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 39778 ssh2 [preauth]
Jun 07 07:52:44 instance-20260429-1226 sshd[97236]: error: maximum authentication attempts exceeded for invalid user ubnt from 213.209.159.56 port 10523 ssh2 [preauth]
Jun 07 08:31:43 instance-20260429-1226 sshd[97645]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 14490 ssh2 [preauth]
Jun 07 08:51:42 instance-20260429-1226 sshd[97889]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 15359 ssh2 [preauth]
Jun 07 09:23:39 instance-20260429-1226 sshd[98252]: error: maximum authentication attempts exceeded for invalid user admin from 213.209.159.56 port 42347 ssh2 [preauth]
Jun 07 09:38:49 instance-20260429-1226 sshd[98427]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 36861 ssh2 [preauth]
Jun 07 10:05:05 instance-20260429-1226 sshd[98780]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 31768 ssh2 [preauth]
Jun 07 10:45:49 instance-20260429-1226 sshd[99252]: error: maximum authentication attempts exceeded for invalid user user from 2.57.121.25 port 15976 ssh2 [preauth]
Jun 07 11:18:29 instance-20260429-1226 sshd[99599]: error: maximum authentication attempts exceeded for invalid user admin from 2.57.121.112 port 60262 ssh2 [preauth]
### top_processes
PID PPID COMMAND %CPU %MEM COMMAND
833 1 fail2ban-server 0.0 4.0 /usr/bin/python3 /usr/bin/fail2ban-server -xf start
2712 1 fwupd 0.0 3.3 /usr/libexec/fwupd/fwupd
369 1 multipathd 0.0 2.8 /sbin/multipathd -d -s
852 1 snapd 0.0 2.6 /usr/lib/snapd/snapd
323 1 systemd-journal 0.0 2.2 /usr/lib/systemd/systemd-journald
944 1 unattended-upgr 0.0 2.1 /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signal
1239 844 gomon 0.0 1.5 /snap/oracle-cloud-agent/current/plugins/gomon/gomon
1260 844 oci-wlp 0.0 1.4 /snap/oracle-cloud-agent/current/plugins/oci-wlp/oci-wlp
884 1 iscsid 0.0 1.4 /usr/sbin/iscsid
1 0 systemd 0.0 1.3 /sbin/init iscsi_auto_skip_initramfs_networking
651 1 systemd-resolve 0.0 1.3 /usr/lib/systemd/systemd-resolved
835 1 agent 0.9 1.3 /opt/komari/agent -e https://nz.loveason.com -t OkhFYgQK8VtyaKNHiyvx1A
844 1 agent 0.0 1.3 /snap/oracle-cloud-agent/116/agent
840 1 updater 0.0 1.2 /snap/oracle-cloud-agent/116/updater/updater
99637 1 systemd 5.4 1.1 /usr/lib/systemd/systemd --user
869 1 udisksd 0.0 1.1 /usr/libexec/udisks2/udisksd
969 967 nginx 0.0 1.1 nginx: worker process
970 967 nginx 0.0 1.1 nginx: worker process
1011 1 ModemManager 0.0 1.1 /usr/sbin/ModemManager