Hello. Today I gave a look at the sshd logs to see if everything was ok and I found a lot of login attempts like these :
can someone explains if it is a normal behavior ? really someone wants to login inside my system ?
Code:
sshd[8427]: Failed keyboard-interactive/pam for invalid user joro from 171.245.46.121 port 44986 ssh2
sshd[8427]: Connection closed by invalid user joro 171.245.46.121 port 44986 [preauth]
sshd[8409]: Invalid user sakura from 116.110.85.5 port 41606
sshd[8409]: Postponed keyboard-interactive for invalid user sakura from 116.110.85.5 port 41606 ssh2 [preauth]
sshd[8409]: error: PAM: Authentication error for illegal user sakura from 116.110.85.5
sshd[8409]: Failed keyboard-interactive/pam for invalid user sakura from 116.110.85.5 port 41606 ssh2
sshd[8409]: Connection closed by invalid user sakura 116.110.85.5 port 41606 [preauth]
sshd[8448]: Address 116.98.168.134 maps to dynamic-ip-adsl.viettel.vn, but this does not map back to the address.
sshd[8448]: Invalid user kelly from 116.98.168.134 port 46446
can someone explains if it is a normal behavior ? really someone wants to login inside my system ?