Hi there,
Today my connection site-to-site was down and I checked some logs.
I found something wierd, please tell me what it means.
Are the logs below normal? I can see a lot of tentatives of root login failed from IPs that I don't know.
is there anyone trying to hack my srx device?
Jun 9 15:39:23 rotem_brazil_aqa alarmd[1337]: LICENSE_EXPIRED: License for feature wf_key_surfcontrol_cpa(28) expired Jun 9 15:39:48 rotem_brazil_aqa sshd[3155]: Failed password for root from 116.31.116.27 port 62338 ssh2 Jun 9 15:39:48 rotem_brazil_aqa sshd: SSHD_LOGIN_FAILED: Login failed for user 'root' from host '116.31.116.27' Jun 9 15:39:53 rotem_brazil_aqa sshd[3155]: Received disconnect from 116.31.116.27: 11: [preauth] Jun 9 15:40:23 rotem_brazil_aqa alarmd[1337]: LICENSE_EXPIRED: License for feature wf_key_surfcontrol_cpa(28) expired Jun 9 15:40:53 rotem_brazil_aqa sshd[3160]: Failed password for root from 116.31.116.27 port 42071 ssh2 Jun 9 15:40:53 rotem_brazil_aqa sshd: SSHD_LOGIN_FAILED: Login failed for user 'root' from host '116.31.116.27' Jun 9 15:40:58 rotem_brazil_aqa sshd[3160]: Received disconnect from 116.31.116.27: 11: [preauth] Jun 9 15:41:23 rotem_brazil_aqa alarmd[1337]: LICENSE_EXPIRED: License for feature wf_key_surfcontrol_cpa(28) expired Jun 9 15:42:02 rotem_brazil_aqa sshd[3162]: Failed password for root from 116.31.116.27 port 17492 ssh2 Jun 9 15:42:02 rotem_brazil_aqa sshd: SSHD_LOGIN_FAILED: Login failed for user 'root' from host '116.31.116.27' Jun 9 15:42:07 rotem_brazil_aqa sshd[3162]: Received disconnect from 116.31.116.27: 11: [preauth] Jun 9 15:42:23 rotem_brazil_aqa alarmd[1337]: LICENSE_EXPIRED: License for feature wf_key_surfcontrol_cpa(28) expired Jun 9 15:42:28 rotem_brazil_aqa sshd: SSHD_LOGIN_FAILED: Login failed for user 'root' from host '84.38.211.151' Jun 9 15:42:28 rotem_brazil_aqa sshd[3164]: Failed password for root from 84.38.211.151 port 4869 ssh2 Jun 9 15:42:50 rotem_brazil_aqa sshd[3164]: fatal: Read from socket failed: Connection reset by peer [preauth] Jun 9 15:43:10 rotem_brazil_aqa sshd[3166]: Failed password for root from 116.31.116.27 port 49758 ssh2 Jun 9 15:43:10 rotem_brazil_aqa sshd: SSHD_LOGIN_FAILED: Login failed for user 'root' from host '116.31.116.27' Jun 9 15:43:15 rotem_brazil_aqa sshd[3166]: Received disconnect from 116.31.116.27: 11: [preauth] Jun 9 15:43:23 rotem_brazil_aqa alarmd[1337]: LICENSE_EXPIRED: License for feature wf_key_surfcontrol_cpa(28) expired Jun 9 15:44:17 rotem_brazil_aqa sshd[3168]: Failed password for root from 116.31.116.27 port 30031 ssh2 Jun 9 15:44:17 rotem_brazil_aqa sshd: SSHD_LOGIN_FAILED: Login failed for user 'root' from host '116.31.116.27' Jun 9 15:44:22 rotem_brazil_aqa sshd[3168]: Received disconnect from 116.31.116.27: 11: [preauth] Jun 9 15:44:23 rotem_brazil_aqa alarmd[1337]: LICENSE_EXPIRED: License for feature wf_key_surfcontrol_cpa(28) expired
Kind regards.