Skip to content

Instantly share code, notes, and snippets.

@robherley
Created November 1, 2018 23:00
Show Gist options
  • Save robherley/664395c0add125985669b0f59365c5f0 to your computer and use it in GitHub Desktop.
Save robherley/664395c0add125985669b0f59365c5f0 to your computer and use it in GitHub Desktop.
Nov 1 21:24:44 winston sshd[27764]: Disconnected from invalid user pz 23.102.255.235 port 45534 [preauth]
Nov 1 21:25:23 winston sshd[27941]: Invalid user ali from 95.156.31.74 port 50926
Nov 1 21:25:23 winston sshd[27941]: Connection closed by invalid user ali 95.156.31.74 port 50926 [preauth]
Nov 1 21:26:29 winston sshd[28020]: Invalid user mumbleserver from 79.134.4.138 port 60780
Nov 1 21:26:29 winston sshd[28020]: Connection closed by invalid user mumbleserver 79.134.4.138 port 60780 [preauth]
Nov 1 21:26:55 winston sshd[28131]: Received disconnect from 125.65.42.183 port 39167:11: [preauth]
Nov 1 21:26:55 winston sshd[28131]: Disconnected from authenticating user root 125.65.42.183 port 39167 [preauth]
Nov 1 21:27:46 winston sshd[28203]: Invalid user pz from 23.102.255.235 port 34854
Nov 1 21:27:46 winston sshd[28203]: Received disconnect from 23.102.255.235 port 34854:11: Normal Shutdown, Thank you for playing [preauth]
Nov 1 21:27:46 winston sshd[28203]: Disconnected from invalid user pz 23.102.255.235 port 34854 [preauth]
Nov 1 21:31:03 winston sshd[28707]: Invalid user q2server from 23.102.255.235 port 52381
Nov 1 21:31:03 winston sshd[28707]: Received disconnect from 23.102.255.235 port 52381:11: Normal Shutdown, Thank you for playing [preauth]
Nov 1 21:31:03 winston sshd[28707]: Disconnected from invalid user q2server 23.102.255.235 port 52381 [preauth]
Nov 1 21:32:07 winston sshd[28890]: Invalid user admin from 109.73.46.142 port 52008
Nov 1 21:32:07 winston sshd[28890]: Connection closed by invalid user admin 109.73.46.142 port 52008 [preauth]
Nov 1 21:34:02 winston sshd[29145]: Invalid user q2 from 23.102.255.235 port 41693
Nov 1 21:34:03 winston sshd[29145]: Received disconnect from 23.102.255.235 port 41693:11: Normal Shutdown, Thank you for playing [preauth]
Nov 1 21:34:03 winston sshd[29145]: Disconnected from invalid user q2 23.102.255.235 port 41693 [preauth]
Nov 1 21:35:01 winston CRON[29333]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 1 21:35:01 winston CRON[29333]: pam_unix(cron:session): session closed for user root
Nov 1 21:35:19 winston sshd[29342]: Connection closed by 181.15.88.133 port 38095 [preauth]
Nov 1 21:35:30 winston sshd[29402]: Received disconnect from 175.117.145.239 port 29277:11: Normal Shutdown, Thank you for playing [preauth]
Nov 1 21:35:30 winston sshd[29402]: Disconnected from authenticating user root 175.117.145.239 port 29277 [preauth]
Nov 1 21:35:46 winston sshd[29410]: Invalid user ubuntu from 41.230.11.21 port 41622
Nov 1 21:35:47 winston sshd[29410]: Connection closed by invalid user ubuntu 41.230.11.21 port 41622 [preauth]
Nov 1 21:36:58 winston sshd[29546]: Invalid user q2 from 23.102.255.235 port 59260
Nov 1 21:36:58 winston sshd[29546]: Received disconnect from 23.102.255.235 port 59260:11: Normal Shutdown, Thank you for playing [preauth]
Nov 1 21:36:58 winston sshd[29546]: Disconnected from invalid user q2 23.102.255.235 port 59260 [preauth]
Nov 1 21:38:34 winston sshd[29848]: Invalid user uftp from 175.117.145.239 port 46345
Nov 1 21:38:34 winston sshd[29848]: Received disconnect from 175.117.145.239 port 46345:11: Normal Shutdown, Thank you for playing [preauth]
Nov 1 21:38:34 winston sshd[29848]: Disconnected from invalid user uftp 175.117.145.239 port 46345 [preauth]
Nov 1 21:39:53 winston sshd[29982]: Invalid user q3server from 23.102.255.235 port 48571
Nov 1 21:39:54 winston sshd[29982]: Received disconnect from 23.102.255.235 port 48571:11: Normal Shutdown, Thank you for playing [preauth]
Nov 1 21:39:54 winston sshd[29982]: Disconnected from invalid user q3server 23.102.255.235 port 48571 [preauth]
Nov 1 21:41:33 winston sshd[30178]: Received disconnect from 125.65.42.178 port 46580:11: [preauth]
Nov 1 21:41:33 winston sshd[30178]: Disconnected from authenticating user root 125.65.42.178 port 46580 [preauth]
Nov 1 21:41:48 winston sshd[30289]: Invalid user default from 175.117.145.239 port 63407
Nov 1 21:41:48 winston sshd[30289]: Received disconnect from 175.117.145.239 port 63407:11: Normal Shutdown, Thank you for playing [preauth]
Nov 1 21:41:48 winston sshd[30289]: Disconnected from invalid user default 175.117.145.239 port 63407 [preauth]
Nov 1 21:41:57 winston sshd[30294]: Invalid user admin from 197.156.72.154 port 38745
Nov 1 21:41:57 winston sshd[30294]: Connection closed by invalid user admin 197.156.72.154 port 38745 [preauth]
Nov 1 21:43:03 winston sshd[30424]: Invalid user q3 from 23.102.255.235 port 37911
Nov 1 21:43:03 winston sshd[30424]: Received disconnect from 23.102.255.235 port 37911:11: Normal Shutdown, Thank you for playing [preauth]
Nov 1 21:43:03 winston sshd[30424]: Disconnected from invalid user q3 23.102.255.235 port 37911 [preauth]
Nov 1 21:46:16 winston sshd[30911]: Invalid user bot from 95.156.31.74 port 40884
Nov 1 21:46:16 winston sshd[30911]: Connection closed by invalid user bot 95.156.31.74 port 40884 [preauth]
Nov 1 21:46:16 winston sshd[30913]: Invalid user q3 from 23.102.255.235 port 55448
Nov 1 21:46:16 winston sshd[30913]: Received disconnect from 23.102.255.235 port 55448:11: Normal Shutdown, Thank you for playing [preauth]
Nov 1 21:46:16 winston sshd[30913]: Disconnected from invalid user q3 23.102.255.235 port 55448 [preauth]
Nov 1 21:48:03 winston sshd[31115]: Invalid user admin from 63.139.133.35 port 41624
Nov 1 21:48:03 winston sshd[31115]: Received disconnect from 63.139.133.35 port 41624:11: Normal Shutdown, Thank you for playing [preauth]
Nov 1 21:48:03 winston sshd[31115]: Disconnected from invalid user admin 63.139.133.35 port 41624 [preauth]
Nov 1 21:48:53 winston sshd[31289]: Invalid user ubuntu from 153.19.40.20 port 57442
Nov 1 21:48:53 winston sshd[31289]: Connection closed by invalid user ubuntu 153.19.40.20 port 57442 [preauth]
Nov 1 21:49:18 winston sshd[31357]: Invalid user qlserver from 23.102.255.235 port 44748
Nov 1 21:49:19 winston sshd[31357]: Received disconnect from 23.102.255.235 port 44748:11: Normal Shutdown, Thank you for playing [preauth]
Nov 1 21:49:19 winston sshd[31357]: Disconnected from invalid user qlserver 23.102.255.235 port 44748 [preauth]
Nov 1 21:50:48 winston sshd[31549]: Invalid user kiran from 63.139.133.35 port 58841
Nov 1 21:50:48 winston sshd[31549]: Received disconnect from 63.139.133.35 port 58841:11: Normal Shutdown, Thank you for playing [preauth]
Nov 1 21:50:48 winston sshd[31549]: Disconnected from invalid user kiran 63.139.133.35 port 58841 [preauth]
Nov 1 21:52:10 winston sshd[31738]: Invalid user gl from 23.102.255.235 port 34035
Nov 1 21:52:10 winston sshd[31738]: Received disconnect from 23.102.255.235 port 34035:11: Normal Shutdown, Thank you for playing [preauth]
Nov 1 21:52:10 winston sshd[31738]: Disconnected from invalid user gl 23.102.255.235 port 34035 [preauth]
Nov 1 21:53:28 winston sshd[31923]: Received disconnect from 61.184.247.12 port 51790:11: [preauth]
Nov 1 21:53:28 winston sshd[31923]: Disconnected from authenticating user root 61.184.247.12 port 51790 [preauth]
Nov 1 21:53:49 winston sshd[31984]: Invalid user octro from 63.139.133.35 port 47840
Nov 1 21:53:49 winston sshd[31984]: Received disconnect from 63.139.133.35 port 47840:11: Normal Shutdown, Thank you for playing [preauth]
Nov 1 21:53:49 winston sshd[31984]: Disconnected from invalid user octro 63.139.133.35 port 47840 [preauth]
Nov 1 21:54:02 winston sshd[31988]: Invalid user vlc from 217.36.223.29 port 58773
Nov 1 21:54:02 winston sshd[31988]: Connection closed by invalid user vlc 217.36.223.29 port 58773 [preauth]
Nov 1 21:54:51 winston sshd[32113]: Invalid user ventas from 164.132.43.198 port 42021
Nov 1 21:54:51 winston sshd[32113]: Connection closed by invalid user ventas 164.132.43.198 port 42021 [preauth]
Nov 1 21:55:11 winston sshd[32179]: Invalid user gl from 23.102.255.235 port 51584
Nov 1 21:55:11 winston sshd[32179]: Received disconnect from 23.102.255.235 port 51584:11: Normal Shutdown, Thank you for playing [preauth]
Nov 1 21:55:11 winston sshd[32179]: Disconnected from invalid user gl 23.102.255.235 port 51584 [preauth]
Nov 1 21:55:27 winston sshd[32171]: Connection closed by 78.29.42.145 port 42762 [preauth]
Nov 1 21:57:10 winston sshd[32438]: Invalid user check from 109.73.46.142 port 41920
Nov 1 21:57:10 winston sshd[32438]: Connection closed by invalid user check 109.73.46.142 port 41920 [preauth]
Nov 1 21:58:17 winston sshd[32568]: Invalid user qwserver from 23.102.255.235 port 40907
Nov 1 21:58:17 winston sshd[32568]: Received disconnect from 23.102.255.235 port 40907:11: Normal Shutdown, Thank you for playing [preauth]
Nov 1 21:58:17 winston sshd[32568]: Disconnected from invalid user qwserver 23.102.255.235 port 40907 [preauth]
Nov 1 21:59:18 winston sshd[32747]: Received disconnect from 115.238.245.14 port 46493:11: [preauth]
Nov 1 21:59:18 winston sshd[32747]: Disconnected from authenticating user root 115.238.245.14 port 46493 [preauth]
Nov 1 22:01:36 winston sshd[605]: Invalid user qw from 23.102.255.235 port 58449
Nov 1 22:01:37 winston sshd[605]: Received disconnect from 23.102.255.235 port 58449:11: Normal Shutdown, Thank you for playing [preauth]
Nov 1 22:01:37 winston sshd[605]: Disconnected from invalid user qw 23.102.255.235 port 58449 [preauth]
Nov 1 22:04:37 winston sshd[1109]: Invalid user qw from 23.102.255.235 port 47779
Nov 1 22:04:37 winston sshd[1109]: Received disconnect from 23.102.255.235 port 47779:11: Normal Shutdown, Thank you for playing [preauth]
Nov 1 22:04:37 winston sshd[1109]: Disconnected from invalid user qw 23.102.255.235 port 47779 [preauth]
Nov 1 22:06:26 winston sshd[1505]: Invalid user amit from 41.230.11.21 port 59748
Nov 1 22:06:26 winston sshd[1505]: Connection closed by invalid user amit 41.230.11.21 port 59748 [preauth]
Nov 1 22:07:10 winston sshd[1595]: Invalid user cloud from 95.156.31.74 port 59068
Nov 1 22:07:10 winston sshd[1595]: Connection closed by invalid user cloud 95.156.31.74 port 59068 [preauth]
Nov 1 22:07:33 winston sshd[1660]: Invalid user roserver from 23.102.255.235 port 37087
Nov 1 22:07:34 winston sshd[1660]: Received disconnect from 23.102.255.235 port 37087:11: Normal Shutdown, Thank you for playing [preauth]
Nov 1 22:07:34 winston sshd[1660]: Disconnected from invalid user roserver 23.102.255.235 port 37087 [preauth]
Nov 1 22:10:30 winston sshd[2195]: Invalid user ro from 23.102.255.235 port 54628
Nov 1 22:10:30 winston sshd[2195]: Received disconnect from 23.102.255.235 port 54628:11: Normal Shutdown, Thank you for playing [preauth]
Nov 1 22:10:30 winston sshd[2195]: Disconnected from invalid user ro 23.102.255.235 port 54628 [preauth]
Nov 1 22:13:41 winston sshd[2681]: Invalid user ro from 23.102.255.235 port 43951
Nov 1 22:13:41 winston sshd[2681]: Received disconnect from 23.102.255.235 port 43951:11: Normal Shutdown, Thank you for playing [preauth]
Nov 1 22:13:41 winston sshd[2681]: Disconnected from invalid user ro 23.102.255.235 port 43951 [preauth]
Nov 1 22:13:55 winston sshd[2676]: Invalid user admin from 5.188.10.76 port 38305
Nov 1 22:13:59 winston sshd[2676]: Disconnecting invalid user admin 5.188.10.76 port 38305: Change of username or service not allowed: (admin,ssh-connection) -> (user,ssh-connection) [preauth]
Nov 1 22:17:01 winston CRON[3178]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 1 22:17:01 winston CRON[3178]: pam_unix(cron:session): session closed for user root
Nov 1 22:17:02 winston sshd[3181]: Invalid user ricochetserver from 23.102.255.235 port 33278
Nov 1 22:17:02 winston sshd[3181]: Received disconnect from 23.102.255.235 port 33278:11: Normal Shutdown, Thank you for playing [preauth]
Nov 1 22:17:02 winston sshd[3181]: Disconnected from invalid user ricochetserver 23.102.255.235 port 33278 [preauth]
Nov 1 22:20:10 winston sshd[3586]: Connection closed by 52.80.199.241 port 48048 [preauth]
Nov 1 22:20:12 winston sshd[3640]: Invalid user ricochet from 23.102.255.235 port 50835
Nov 1 22:20:12 winston sshd[3640]: Received disconnect from 23.102.255.235 port 50835:11: Normal Shutdown, Thank you for playing [preauth]
Nov 1 22:20:12 winston sshd[3640]: Disconnected from invalid user ricochet 23.102.255.235 port 50835 [preauth]
Nov 1 22:22:15 winston sshd[3949]: Invalid user ubuntu from 109.73.46.142 port 60104
Nov 1 22:22:15 winston sshd[3949]: Connection closed by invalid user ubuntu 109.73.46.142 port 60104 [preauth]
Nov 1 22:22:52 winston sshd[4025]: Invalid user ryder from 91.134.140.32 port 51162
Nov 1 22:22:52 winston sshd[4025]: Received disconnect from 91.134.140.32 port 51162:11: Normal Shutdown, Thank you for playing [preauth]
Nov 1 22:22:52 winston sshd[4025]: Disconnected from invalid user ryder 91.134.140.32 port 51162 [preauth]
Nov 1 22:23:05 winston sshd[4032]: Invalid user ricochet from 23.102.255.235 port 40142
Nov 1 22:23:05 winston sshd[4032]: Received disconnect from 23.102.255.235 port 40142:11: Normal Shutdown, Thank you for playing [preauth]
Nov 1 22:23:05 winston sshd[4032]: Disconnected from invalid user ricochet 23.102.255.235 port 40142 [preauth]
Nov 1 22:25:38 winston sshd[4467]: Invalid user matt from 91.134.140.32 port 56934
Nov 1 22:25:38 winston sshd[4467]: Received disconnect from 91.134.140.32 port 56934:11: Normal Shutdown, Thank you for playing [preauth]
Nov 1 22:25:38 winston sshd[4467]: Disconnected from invalid user matt 91.134.140.32 port 56934 [preauth]
Nov 1 22:26:04 winston sshd[4477]: Invalid user rustserver from 23.102.255.235 port 57696
Nov 1 22:26:04 winston sshd[4477]: Received disconnect from 23.102.255.235 port 57696:11: Normal Shutdown, Thank you for playing [preauth]
Nov 1 22:26:04 winston sshd[4477]: Disconnected from invalid user rustserver 23.102.255.235 port 57696 [preauth]
Nov 1 22:28:12 winston sshd[4817]: Invalid user wildfly from 95.156.31.74 port 48990
Nov 1 22:28:12 winston sshd[4817]: Connection closed by invalid user wildfly 95.156.31.74 port 48990 [preauth]
Nov 1 22:28:36 winston sshd[4882]: Invalid user secret from 91.134.140.32 port 34476
Nov 1 22:28:36 winston sshd[4882]: Received disconnect from 91.134.140.32 port 34476:11: Normal Shutdown, Thank you for playing [preauth]
Nov 1 22:28:36 winston sshd[4882]: Disconnected from invalid user secret 91.134.140.32 port 34476 [preauth]
Nov 1 22:29:13 winston sshd[4999]: Invalid user rust from 23.102.255.235 port 47029
Nov 1 22:29:14 winston sshd[4999]: Received disconnect from 23.102.255.235 port 47029:11: Normal Shutdown, Thank you for playing [preauth]
Nov 1 22:29:14 winston sshd[4999]: Disconnected from invalid user rust 23.102.255.235 port 47029 [preauth]
Nov 1 22:32:38 winston sshd[5448]: Invalid user rust from 23.102.255.235 port 36353
Nov 1 22:32:38 winston sshd[5448]: Received disconnect from 23.102.255.235 port 36353:11: Normal Shutdown, Thank you for playing [preauth]
Nov 1 22:32:38 winston sshd[5448]: Disconnected from invalid user rust 23.102.255.235 port 36353 [preauth]
Nov 1 22:35:44 winston sshd[5879]: Invalid user sampserver from 23.102.255.235 port 53909
Nov 1 22:35:44 winston sshd[5879]: Received disconnect from 23.102.255.235 port 53909:11: Normal Shutdown, Thank you for playing [preauth]
Nov 1 22:35:44 winston sshd[5879]: Disconnected from invalid user sampserver 23.102.255.235 port 53909 [preauth]
Nov 1 22:37:06 winston sshd[6068]: Invalid user csserver from 41.230.11.21 port 49656
Nov 1 22:37:07 winston sshd[6068]: Connection closed by invalid user csserver 41.230.11.21 port 49656 [preauth]
Nov 1 22:38:40 winston sshd[6316]: Invalid user samp from 23.102.255.235 port 43221
Nov 1 22:38:40 winston sshd[6316]: Received disconnect from 23.102.255.235 port 43221:11: Normal Shutdown, Thank you for playing [preauth]
Nov 1 22:38:40 winston sshd[6316]: Disconnected from invalid user samp 23.102.255.235 port 43221 [preauth]
Nov 1 22:39:36 winston sshd[6458]: Accepted publickey for rob from 100.1.172.225 port 50233 ssh2: RSA SHA256:lPdVUM/hYSIViIXoHGmyu87UVJiE2b2z8EMNtosg9mI
Nov 1 22:39:36 winston sshd[6458]: pam_unix(sshd:session): session opened for user rob by (uid=0)
Nov 1 22:39:36 winston systemd-logind[842]: New session 1180 of user rob.
Nov 1 22:39:52 winston sudo: rob : TTY=pts/0 ; PWD=/home/rob ; USER=root ; COMMAND=/usr/bin/apt-get install build-essential libncurses5-dev libpcap-dev
Nov 1 22:39:52 winston sudo: pam_unix(sudo:session): session opened for user root by rob(uid=0)
Nov 1 22:39:57 winston sudo: pam_unix(sudo:session): session closed for user root
Nov 1 22:41:38 winston sshd[7754]: Invalid user samp from 23.102.255.235 port 60777
Nov 1 22:41:38 winston sshd[7754]: Received disconnect from 23.102.255.235 port 60777:11: Normal Shutdown, Thank you for playing [preauth]
Nov 1 22:41:38 winston sshd[7754]: Disconnected from invalid user samp 23.102.255.235 port 60777 [preauth]
Nov 1 22:42:59 winston sudo: rob : TTY=pts/0 ; PWD=/home/rob/dev/nethogs/src ; USER=root ; COMMAND=./nethogs
Nov 1 22:42:59 winston sudo: pam_unix(sudo:session): session opened for user root by rob(uid=0)
Nov 1 22:43:48 winston sudo: pam_unix(sudo:session): session closed for user root
Nov 1 22:44:37 winston sudo: rob : TTY=pts/0 ; PWD=/home/rob/dev/nethogs/src ; USER=root ; COMMAND=./nethogs
Nov 1 22:44:37 winston sudo: pam_unix(sudo:session): session opened for user root by rob(uid=0)
Nov 1 22:44:48 winston sshd[8420]: Invalid user ss3server from 23.102.255.235 port 50074
Nov 1 22:44:48 winston sshd[8420]: Received disconnect from 23.102.255.235 port 50074:11: Normal Shutdown, Thank you for playing [preauth]
Nov 1 22:44:48 winston sshd[8420]: Disconnected from invalid user ss3server 23.102.255.235 port 50074 [preauth]
Nov 1 22:45:04 winston sudo: pam_unix(sudo:session): session closed for user root
Nov 1 22:46:01 winston sudo: rob : TTY=pts/0 ; PWD=/home/rob/dev/nethogs/src ; USER=root ; COMMAND=./nethogs
Nov 1 22:46:01 winston sudo: pam_unix(sudo:session): session opened for user root by rob(uid=0)
Nov 1 22:46:22 winston sudo: pam_unix(sudo:session): session closed for user root
Nov 1 22:46:23 winston sudo: rob : TTY=pts/0 ; PWD=/home/rob/dev/nethogs/src ; USER=root ; COMMAND=./nethogs
Nov 1 22:46:23 winston sudo: pam_unix(sudo:session): session opened for user root by rob(uid=0)
Nov 1 22:47:05 winston sshd[8924]: Invalid user debian from 109.73.46.142 port 49978
Nov 1 22:47:05 winston sshd[8924]: Connection closed by invalid user debian 109.73.46.142 port 49978 [preauth]
Nov 1 22:47:39 winston sudo: pam_unix(sudo:session): session closed for user root
Nov 1 22:48:12 winston sshd[9082]: Invalid user ss3 from 23.102.255.235 port 39391
Nov 1 22:48:12 winston sshd[9082]: Received disconnect from 23.102.255.235 port 39391:11: Normal Shutdown, Thank you for playing [preauth]
Nov 1 22:48:12 winston sshd[9082]: Disconnected from invalid user ss3 23.102.255.235 port 39391 [preauth]
Nov 1 22:49:02 winston sudo: rob : TTY=pts/0 ; PWD=/home/rob/dev/nethogs/src ; USER=root ; COMMAND=./nethogs
Nov 1 22:49:02 winston sudo: pam_unix(sudo:session): session opened for user root by rob(uid=0)
Nov 1 22:49:46 winston sshd[9356]: Invalid user admin from 153.19.40.20 port 48312
Nov 1 22:49:46 winston sshd[9356]: Connection closed by invalid user admin 153.19.40.20 port 48312 [preauth]
Nov 1 22:50:41 winston sudo: pam_unix(sudo:session): session closed for user root
Nov 1 22:51:21 winston sshd[9586]: Invalid user ss3 from 23.102.255.235 port 56937
Nov 1 22:51:21 winston sshd[9586]: Received disconnect from 23.102.255.235 port 56937:11: Normal Shutdown, Thank you for playing [preauth]
Nov 1 22:51:21 winston sshd[9586]: Disconnected from invalid user ss3 23.102.255.235 port 56937 [preauth]
Nov 1 22:54:18 winston sshd[10054]: Invalid user sbserver from 23.102.255.235 port 46251
Nov 1 22:54:19 winston sshd[10054]: Received disconnect from 23.102.255.235 port 46251:11: Normal Shutdown, Thank you for playing [preauth]
Nov 1 22:54:19 winston sshd[10054]: Disconnected from invalid user sbserver 23.102.255.235 port 46251 [preauth]
Nov 1 22:56:04 winston sudo: rob : TTY=pts/0 ; PWD=/home/rob/dev/nethogs/src ; USER=root ; COMMAND=/bin/cat /var/log/auth.log
Nov 1 22:56:04 winston sudo: pam_unix(sudo:session): session opened for user root by rob(uid=0)
Nov 1 22:56:04 winston sudo: pam_unix(sudo:session): session closed for user root
Nov 1 22:56:59 winston sshd[10448]: Received disconnect from 125.65.42.178 port 44726:11: [preauth]
Nov 1 22:56:59 winston sshd[10448]: Disconnected from authenticating user root 125.65.42.178 port 44726 [preauth]
Nov 1 22:57:21 winston sshd[10510]: Invalid user sb from 23.102.255.235 port 35566
Nov 1 22:57:21 winston sshd[10510]: Received disconnect from 23.102.255.235 port 35566:11: Normal Shutdown, Thank you for playing [preauth]
Nov 1 22:57:21 winston sshd[10510]: Disconnected from invalid user sb 23.102.255.235 port 35566 [preauth]
Nov 1 22:59:13 winston sudo: rob : TTY=pts/0 ; PWD=/home/rob/dev/nethogs/src ; USER=root ; COMMAND=/usr/bin/tail -n 200 /var/log/auth.log
Nov 1 22:59:13 winston sudo: pam_unix(sudo:session): session opened for user root by rob(uid=0)
Nov 1 22:59:13 winston sudo: pam_unix(sudo:session): session closed for user root
Nov 1 22:59:14 winston sshd[10816]: Received disconnect from 61.184.247.8 port 37153:11: [preauth]
Nov 1 22:59:14 winston sshd[10816]: Disconnected from authenticating user root 61.184.247.8 port 37153 [preauth]
Nov 1 22:59:28 winston sudo: rob : TTY=pts/0 ; PWD=/home/rob/dev/nethogs/src ; USER=root ; COMMAND=/usr/bin/tail -n 200 /var/log/auth.log
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment