Why am I seeing [11] Thu, 22 Jun 2023 17:31:41 Failed to execute lua script of event OnExceedUSERPASS.
Posted: Thu Jun 22, 2023 11:08 pm
I did not add a lau script fr this. I did turn on antihammer
[02] Thu, 22 Jun 2023 17:19:59 (0062227) Failed to exchange the keys.
[02] Thu, 22 Jun 2023 17:19:59 (0062227) Closed session, disconnected from 111.67.194.160
[02] Thu, 22 Jun 2023 17:19:59 (0062228) Connected from 111.67.194.160 (local address 172.16.107.47, port 22)
[01] Thu, 22 Jun 2023 17:20:01 (0062228) The user admin started SSH authentication.
[01] Thu, 22 Jun 2023 17:20:01 (0062228) Failed in user/password authentication.
[02] Thu, 22 Jun 2023 17:20:01 (0062228) Closed session, disconnected from 111.67.194.160
[02] Thu, 22 Jun 2023 17:20:01 (0062229) Connected from 111.67.194.160 (local address 172.16.107.47, port 22)
[01] Thu, 22 Jun 2023 17:20:03 (0062229) The user root started SSH authentication.
[01] Thu, 22 Jun 2023 17:20:03 (0062229) Failed in user/password authentication.
[02] Thu, 22 Jun 2023 17:20:03 (0062230) Connected from 139.59.212.78 (local address 172.16.107.47, port 22)
[02] Thu, 22 Jun 2023 17:20:03 (0062229) Closed session, disconnected from 111.67.194.160
[02] Thu, 22 Jun 2023 17:20:04 (0062231) Connected from 111.67.194.160 (local address 172.16.107.47, port 22)
[01] Thu, 22 Jun 2023 17:20:04 (0062230) The user sean started SSH authentication.
[01] Thu, 22 Jun 2023 17:20:04 (0062230) Failed in user/password authentication.
[02] Thu, 22 Jun 2023 17:20:04 (0062230) Closed session, disconnected from 139.59.212.78
[01] Thu, 22 Jun 2023 17:20:05 (0062231) The user ubnt started SSH authentication.
[01] Thu, 22 Jun 2023 17:20:05 (0062231) Failed in user/password authentication.
[02] Thu, 22 Jun 2023 17:20:06 (0062231) Closed session, disconnected from 111.67.194.160
[02] Thu, 22 Jun 2023 17:20:06 (0062232) Connected from 111.67.194.160 (local address 172.16.107.47, port 22)
[01] Thu, 22 Jun 2023 17:20:07 (0062232) The user ansible started SSH authentication.
[01] Thu, 22 Jun 2023 17:20:08 (0062232) Failed in user/password authentication.
[02] Thu, 22 Jun 2023 17:20:08 (0062232) Closed session, disconnected from 111.67.194.160
[02] Thu, 22 Jun 2023 17:20:08 (0062233) Connected from 111.67.194.160 (local address 172.16.107.47, port 22)
[01] Thu, 22 Jun 2023 17:20:10 (0062233) The user root started SSH authentication.
[01] Thu, 22 Jun 2023 17:20:10 (0062233) Failed in user/password authentication.
[02] Thu, 22 Jun 2023 17:20:10 IP address:111.67.194.160 is blocked for 180 seconds.
[11] Thu, 22 Jun 2023 17:20:10 Failed to execute lua script of event OnExceedUSERPASS.
[02] Thu, 22 Jun 2023 17:20:10 (0062233) Closed session, disconnected from 111.67.194.160
[02] Thu, 22 Jun 2023 17:20:10 (0000000) Closed session, disconnected from 111.67.194.160. The reason is: The IP 111.67.194.160 is banned temporarily.
[02] Thu, 22 Jun 2023 17:20:11 (0000000) Closed session, disconnected from 111.67.194.160. The reason is: The IP 111.67.194.160 is banned temporarily.
[02] Thu, 22 Jun 2023 17:20:12 (0000000) Closed session, disconnected from 111.67.194.160. The reason is: The IP 111.67.194.160 is banned temporarily.
[02] Thu, 22 Jun 2023 17:20:12 (0000000) Closed session, disconnected from 111.67.194.160. The reason is: The IP 111.67.194.160 is banned
[02] Thu, 22 Jun 2023 17:29:46 (0062308) Closed session, disconnected from 68.178.203.196
[02] Thu, 22 Jun 2023 17:29:55 (0062309) Connected from 180.101.88.235 (local address 172.16.107.47, port 22)
[02] Thu, 22 Jun 2023 17:29:55 (0062310) Connected from 180.101.88.235 (local address 172.16.107.47, port 22)
[01] Thu, 22 Jun 2023 17:29:57 (0062310) The user root started SSH authentication.
[01] Thu, 22 Jun 2023 17:29:58 (0062310) Failed in user/password authentication.
[02] Thu, 22 Jun 2023 17:29:58 IP address:180.101.88.235 is blocked for 180 seconds.
[11] Thu, 22 Jun 2023 17:29:58 Failed to execute lua script of event OnExceedUSERPASS.
[02] Thu, 22 Jun 2023 17:29:58 (0062310) Closed session, disconnected from 180.101.88.235
[02] Thu, 22 Jun 2023 17:30:19 (0000000) Closed session, disconnected from 180.101.88.235. The reason is: The IP 180.101.88.235 is banned temporarily.
[02] Thu, 22 Jun 2023 18:58:46 (0063067) Connected from 117.160.3.132 (local address 172.16.107.47, port 22)
[02] Thu, 22 Jun 2023 18:58:46 (0063068) Connected from 117.160.3.132 (local address 172.16.107.47, port 22)
[02] Thu, 22 Jun 2023 18:58:46 (0063069) Connected from 117.160.3.132 (local address 172.16.107.47, port 22)
[02] Thu, 22 Jun 2023 18:58:46 (0063070) Connected from 117.160.3.132 (local address 172.16.107.47, port 22)
[02] Thu, 22 Jun 2023 18:58:46 (0063071) Connected from 117.160.3.132 (local address 172.16.107.47, port 22)
[02] Thu, 22 Jun 2023 18:58:46 (0063072) Connected from 117.160.3.132 (local address 172.16.107.47, port 22)
[02] Thu, 22 Jun 2023 18:58:46 (0063073) Connected from 117.160.3.132 (local address 172.16.107.47, port 22)
[02] Thu, 22 Jun 2023 18:58:46 (0063074) Connected from 117.160.3.132 (local address 172.16.107.47, port 22)
[02] Thu, 22 Jun 2023 18:58:46 (0063075) Connected from 117.160.3.132 (local address 172.16.107.47, port 22)
[02] Thu, 22 Jun 2023 18:58:47 (0063076) Connected from 117.160.3.132 (local address 172.16.107.47, port 22)
[01] Thu, 22 Jun 2023 18:58:47 (0063067) The user oracle started SSH authentication.
[01] Thu, 22 Jun 2023 18:58:47 (0063068) The user debian started SSH authentication.
[01] Thu, 22 Jun 2023 18:58:47 (0063071) The user deploy started SSH authentication.
[01] Thu, 22 Jun 2023 18:58:47 (0063069) The user root started SSH authentication.
[01] Thu, 22 Jun 2023 18:58:47 (0063072) The user pi started SSH authentication.
[01] Thu, 22 Jun 2023 18:58:47 (0063074) The user test started SSH authentication.
[01] Thu, 22 Jun 2023 18:58:47 (0063073) The user admin started SSH authentication.
[01] Thu, 22 Jun 2023 18:58:47 (0063067) Failed in user/password authentication.
[01] Thu, 22 Jun 2023 18:58:47 (0063068) Failed in user/password authentication.
[01] Thu, 22 Jun 2023 18:58:47 (0063071) Failed in user/password authentication.
[01] Thu, 22 Jun 2023 18:58:47 (0063069) Failed in user/password authentication.
[01] Thu, 22 Jun 2023 18:58:48 (0063072) Failed in user/password authentication.
[02] Thu, 22 Jun 2023 18:58:48 IP address:117.160.3.132 is blocked for 10800 seconds.
[11] Thu, 22 Jun 2023 18:58:48 Failed to execute lua script of event OnExceedUSERPASS.
[01] Thu, 22 Jun 2023 18:58:48 (0063073) Failed in user/password authentication.
[01] Thu, 22 Jun 2023 18:58:48 (0063074) Failed in user/password authentication.
[02] Thu, 22 Jun 2023 18:58:48 (0063072) Closed session, disconnected from 117.160.3.132
[02] Thu, 22 Jun 2023 18:58:48 (0063067) Closed session, disconnected from 117.160.3.132
[01] Thu, 22 Jun 2023 18:58:48 (0063070) The user admin started SSH authentication.
[02] Thu, 22 Jun 2023 18:58:48 (0063068) Closed session, disconnected from 117.160.3.132
[02] Thu, 22 Jun 2023 18:58:48 (0063071) Closed session, disconnected from 117.160.3.132
[02] Thu, 22 Jun 2023 18:58:48 (0063069) Closed session, disconnected from 117.160.3.132
[02] Thu, 22 Jun 2023 18:58:48 (0063073) Closed session, disconnected from 117.160.3.132
[02] Thu, 22 Jun 2023 18:58:48 (0063074) Closed session, disconnected from 117.160.3.132
[01] Thu, 22 Jun 2023 18:58:48 (0063070) Failed in user/password authentication.
[01] Thu, 22 Jun 2023 18:58:48 (0063075) The user wordpress started SSH authentication.
[01] Thu, 22 Jun 2023 18:58:48 (0063076) The user 123456 started SSH authentication.
[01] Thu, 22 Jun 2023 18:58:48 (0063075) Failed in user/password authentication.
[02] Thu, 22 Jun 2023 18:58:48 (0063070) Closed session, disconnected from 117.160.3.132
[02] Thu, 22 Jun 2023 18:58:48 (0063077) Connected from 108.252.209.104 (local address 172.16.107.47, port 22)
[01] Thu, 22 Jun 2023 18:58:48 (0063076) Failed in user/password authentication.
[11] Thu, 22 Jun 2023 18:58:48 Failed to execute lua script of event OnExceedUSERPASS.
[02] Thu, 22 Jun 2023 18:58:48 (0063076) Closed session, disconnected from 117.160.3.132
[02] Thu, 22 Jun 2023 18:58:49 (0063078) Connected from 47.236.24.180 (local address 172.16.107.47, port 22)
[02
[02] Thu, 22 Jun 2023 17:19:59 (0062227) Failed to exchange the keys.
[02] Thu, 22 Jun 2023 17:19:59 (0062227) Closed session, disconnected from 111.67.194.160
[02] Thu, 22 Jun 2023 17:19:59 (0062228) Connected from 111.67.194.160 (local address 172.16.107.47, port 22)
[01] Thu, 22 Jun 2023 17:20:01 (0062228) The user admin started SSH authentication.
[01] Thu, 22 Jun 2023 17:20:01 (0062228) Failed in user/password authentication.
[02] Thu, 22 Jun 2023 17:20:01 (0062228) Closed session, disconnected from 111.67.194.160
[02] Thu, 22 Jun 2023 17:20:01 (0062229) Connected from 111.67.194.160 (local address 172.16.107.47, port 22)
[01] Thu, 22 Jun 2023 17:20:03 (0062229) The user root started SSH authentication.
[01] Thu, 22 Jun 2023 17:20:03 (0062229) Failed in user/password authentication.
[02] Thu, 22 Jun 2023 17:20:03 (0062230) Connected from 139.59.212.78 (local address 172.16.107.47, port 22)
[02] Thu, 22 Jun 2023 17:20:03 (0062229) Closed session, disconnected from 111.67.194.160
[02] Thu, 22 Jun 2023 17:20:04 (0062231) Connected from 111.67.194.160 (local address 172.16.107.47, port 22)
[01] Thu, 22 Jun 2023 17:20:04 (0062230) The user sean started SSH authentication.
[01] Thu, 22 Jun 2023 17:20:04 (0062230) Failed in user/password authentication.
[02] Thu, 22 Jun 2023 17:20:04 (0062230) Closed session, disconnected from 139.59.212.78
[01] Thu, 22 Jun 2023 17:20:05 (0062231) The user ubnt started SSH authentication.
[01] Thu, 22 Jun 2023 17:20:05 (0062231) Failed in user/password authentication.
[02] Thu, 22 Jun 2023 17:20:06 (0062231) Closed session, disconnected from 111.67.194.160
[02] Thu, 22 Jun 2023 17:20:06 (0062232) Connected from 111.67.194.160 (local address 172.16.107.47, port 22)
[01] Thu, 22 Jun 2023 17:20:07 (0062232) The user ansible started SSH authentication.
[01] Thu, 22 Jun 2023 17:20:08 (0062232) Failed in user/password authentication.
[02] Thu, 22 Jun 2023 17:20:08 (0062232) Closed session, disconnected from 111.67.194.160
[02] Thu, 22 Jun 2023 17:20:08 (0062233) Connected from 111.67.194.160 (local address 172.16.107.47, port 22)
[01] Thu, 22 Jun 2023 17:20:10 (0062233) The user root started SSH authentication.
[01] Thu, 22 Jun 2023 17:20:10 (0062233) Failed in user/password authentication.
[02] Thu, 22 Jun 2023 17:20:10 IP address:111.67.194.160 is blocked for 180 seconds.
[11] Thu, 22 Jun 2023 17:20:10 Failed to execute lua script of event OnExceedUSERPASS.
[02] Thu, 22 Jun 2023 17:20:10 (0062233) Closed session, disconnected from 111.67.194.160
[02] Thu, 22 Jun 2023 17:20:10 (0000000) Closed session, disconnected from 111.67.194.160. The reason is: The IP 111.67.194.160 is banned temporarily.
[02] Thu, 22 Jun 2023 17:20:11 (0000000) Closed session, disconnected from 111.67.194.160. The reason is: The IP 111.67.194.160 is banned temporarily.
[02] Thu, 22 Jun 2023 17:20:12 (0000000) Closed session, disconnected from 111.67.194.160. The reason is: The IP 111.67.194.160 is banned temporarily.
[02] Thu, 22 Jun 2023 17:20:12 (0000000) Closed session, disconnected from 111.67.194.160. The reason is: The IP 111.67.194.160 is banned
[02] Thu, 22 Jun 2023 17:29:46 (0062308) Closed session, disconnected from 68.178.203.196
[02] Thu, 22 Jun 2023 17:29:55 (0062309) Connected from 180.101.88.235 (local address 172.16.107.47, port 22)
[02] Thu, 22 Jun 2023 17:29:55 (0062310) Connected from 180.101.88.235 (local address 172.16.107.47, port 22)
[01] Thu, 22 Jun 2023 17:29:57 (0062310) The user root started SSH authentication.
[01] Thu, 22 Jun 2023 17:29:58 (0062310) Failed in user/password authentication.
[02] Thu, 22 Jun 2023 17:29:58 IP address:180.101.88.235 is blocked for 180 seconds.
[11] Thu, 22 Jun 2023 17:29:58 Failed to execute lua script of event OnExceedUSERPASS.
[02] Thu, 22 Jun 2023 17:29:58 (0062310) Closed session, disconnected from 180.101.88.235
[02] Thu, 22 Jun 2023 17:30:19 (0000000) Closed session, disconnected from 180.101.88.235. The reason is: The IP 180.101.88.235 is banned temporarily.
[02] Thu, 22 Jun 2023 18:58:46 (0063067) Connected from 117.160.3.132 (local address 172.16.107.47, port 22)
[02] Thu, 22 Jun 2023 18:58:46 (0063068) Connected from 117.160.3.132 (local address 172.16.107.47, port 22)
[02] Thu, 22 Jun 2023 18:58:46 (0063069) Connected from 117.160.3.132 (local address 172.16.107.47, port 22)
[02] Thu, 22 Jun 2023 18:58:46 (0063070) Connected from 117.160.3.132 (local address 172.16.107.47, port 22)
[02] Thu, 22 Jun 2023 18:58:46 (0063071) Connected from 117.160.3.132 (local address 172.16.107.47, port 22)
[02] Thu, 22 Jun 2023 18:58:46 (0063072) Connected from 117.160.3.132 (local address 172.16.107.47, port 22)
[02] Thu, 22 Jun 2023 18:58:46 (0063073) Connected from 117.160.3.132 (local address 172.16.107.47, port 22)
[02] Thu, 22 Jun 2023 18:58:46 (0063074) Connected from 117.160.3.132 (local address 172.16.107.47, port 22)
[02] Thu, 22 Jun 2023 18:58:46 (0063075) Connected from 117.160.3.132 (local address 172.16.107.47, port 22)
[02] Thu, 22 Jun 2023 18:58:47 (0063076) Connected from 117.160.3.132 (local address 172.16.107.47, port 22)
[01] Thu, 22 Jun 2023 18:58:47 (0063067) The user oracle started SSH authentication.
[01] Thu, 22 Jun 2023 18:58:47 (0063068) The user debian started SSH authentication.
[01] Thu, 22 Jun 2023 18:58:47 (0063071) The user deploy started SSH authentication.
[01] Thu, 22 Jun 2023 18:58:47 (0063069) The user root started SSH authentication.
[01] Thu, 22 Jun 2023 18:58:47 (0063072) The user pi started SSH authentication.
[01] Thu, 22 Jun 2023 18:58:47 (0063074) The user test started SSH authentication.
[01] Thu, 22 Jun 2023 18:58:47 (0063073) The user admin started SSH authentication.
[01] Thu, 22 Jun 2023 18:58:47 (0063067) Failed in user/password authentication.
[01] Thu, 22 Jun 2023 18:58:47 (0063068) Failed in user/password authentication.
[01] Thu, 22 Jun 2023 18:58:47 (0063071) Failed in user/password authentication.
[01] Thu, 22 Jun 2023 18:58:47 (0063069) Failed in user/password authentication.
[01] Thu, 22 Jun 2023 18:58:48 (0063072) Failed in user/password authentication.
[02] Thu, 22 Jun 2023 18:58:48 IP address:117.160.3.132 is blocked for 10800 seconds.
[11] Thu, 22 Jun 2023 18:58:48 Failed to execute lua script of event OnExceedUSERPASS.
[01] Thu, 22 Jun 2023 18:58:48 (0063073) Failed in user/password authentication.
[01] Thu, 22 Jun 2023 18:58:48 (0063074) Failed in user/password authentication.
[02] Thu, 22 Jun 2023 18:58:48 (0063072) Closed session, disconnected from 117.160.3.132
[02] Thu, 22 Jun 2023 18:58:48 (0063067) Closed session, disconnected from 117.160.3.132
[01] Thu, 22 Jun 2023 18:58:48 (0063070) The user admin started SSH authentication.
[02] Thu, 22 Jun 2023 18:58:48 (0063068) Closed session, disconnected from 117.160.3.132
[02] Thu, 22 Jun 2023 18:58:48 (0063071) Closed session, disconnected from 117.160.3.132
[02] Thu, 22 Jun 2023 18:58:48 (0063069) Closed session, disconnected from 117.160.3.132
[02] Thu, 22 Jun 2023 18:58:48 (0063073) Closed session, disconnected from 117.160.3.132
[02] Thu, 22 Jun 2023 18:58:48 (0063074) Closed session, disconnected from 117.160.3.132
[01] Thu, 22 Jun 2023 18:58:48 (0063070) Failed in user/password authentication.
[01] Thu, 22 Jun 2023 18:58:48 (0063075) The user wordpress started SSH authentication.
[01] Thu, 22 Jun 2023 18:58:48 (0063076) The user 123456 started SSH authentication.
[01] Thu, 22 Jun 2023 18:58:48 (0063075) Failed in user/password authentication.
[02] Thu, 22 Jun 2023 18:58:48 (0063070) Closed session, disconnected from 117.160.3.132
[02] Thu, 22 Jun 2023 18:58:48 (0063077) Connected from 108.252.209.104 (local address 172.16.107.47, port 22)
[01] Thu, 22 Jun 2023 18:58:48 (0063076) Failed in user/password authentication.
[11] Thu, 22 Jun 2023 18:58:48 Failed to execute lua script of event OnExceedUSERPASS.
[02] Thu, 22 Jun 2023 18:58:48 (0063076) Closed session, disconnected from 117.160.3.132
[02] Thu, 22 Jun 2023 18:58:49 (0063078) Connected from 47.236.24.180 (local address 172.16.107.47, port 22)
[02