Quantcast
Channel: Active questions tagged ubuntu - Stack Overflow
Viewing all articles
Browse latest Browse all 5952

Too short auth.log on Ubuntu 22.04 [closed]

$
0
0

there

Suddenly my Ubuntu server write too short auth.log

Mar  6 17:52:03 laphs sshd[13792]: pam_unix(sshd:auth): check pass; user unknownMar  6 17:52:03 laphs sshd[13792]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.225.107.69Mar  6 17:54:52 laphs sshd[13958]: pam_unix(sshd:auth): check pass; user unknownMar  6 17:54:52 laphs sshd[13958]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.179.157.95Mar  6 18:05:29 laphs sshd[15051]: pam_unix(sshd:auth): check pass; user unknownMar  6 18:05:29 laphs sshd[15051]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.179.157.95Mar  6 18:12:41 laphs sshd[15643]: pam_unix(sshd:auth): check pass; user unknownMar  6 18:12:41 laphs sshd[15643]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.190.49.157Mar  6 18:16:23 laphs sshd[15976]: pam_unix(sshd:auth): check pass; user unknownMar  6 18:16:23 laphs sshd[15976]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.190.49.157Mar  6 18:16:41 laphs sshd[16001]: pam_unix(sshd:auth): check pass; user unknownMar  6 18:16:41 laphs sshd[16001]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.179.157.95Mar  6 18:17:17 laphs sshd[16030]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.141.34.151  user=rootMar  6 18:20:11 laphs sshd[16343]: pam_unix(sshd:auth): check pass; user unknownMar  6 18:20:11 laphs sshd[16343]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.225.107.69Mar  6 18:28:06 laphs sshd[16711]: pam_unix(sshd:auth): check pass; user unknown

Last month, auth.log

Jan 15 21:54:58 laphs sshd[1555]: pam_unix(sshd:auth): check pass; user unknownJan 15 21:54:58 laphs sshd[1555]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.83.79.29Jan 15 21:55:00 laphs sshd[1555]: Failed password for invalid user wangkun from 170.83.79.29 port 44724 ssh2Jan 15 21:55:00 laphs sshd[1555]: Received disconnect from 170.83.79.29 port 44724:11: Bye Bye [preauth]Jan 15 21:55:00 laphs sshd[1555]: Disconnected from invalid user wangkun 170.83.79.29 port 44724 [preauth]Jan 15 21:55:03 laphs sshd[1557]: Invalid user huachen from 159.89.132.160 port 32798Jan 15 21:55:03 laphs sshd[1557]: pam_unix(sshd:auth): check pass; user unknownJan 15 21:55:03 laphs sshd[1557]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.132.160Jan 15 21:55:05 laphs sshd[1557]: Failed password for invalid user huachen from 159.89.132.160 port 32798 ssh2Jan 15 21:55:07 laphs sshd[1557]: Received disconnect from 159.89.132.160 port 32798:11: Bye Bye [preauth]Jan 15 21:55:07 laphs sshd[1557]: Disconnected from invalid user huachen 159.89.132.160 port 32798 [preauth]Jan 15 21:55:12 laphs sshd[1651]: Connection closed by authenticating user root 192.168.0.34 port 49550 [preauth]

rsyslog.conf

auth,authpriv.*         /var/log/auth.log*.*;auth,authpriv.none  -/var/log/syslogcron.*              /var/log/cron.log

sshd_config

# LoggingLogLevel DEBUG3

Can not find any solution... Anyone help?


Viewing all articles
Browse latest Browse all 5952

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>