![[logo]](logo.png){kind=logo}
If you are running a SSH server somewhere that is attached to the internet, just take a look at the file /var/log/auth.log (or whatever file your distro uses to log login attempts) and search for any line that contains sshd. Something like
grep sshd /var/log/auth.logas root should do the trick. If you scan these lines, and you haven't taken any measures to secure your SSH server, you should quickly become astounded at the number of failed login attempts. Hackers!! or more likely stupid little script kiddies are running automated attacks on any and every SSH server that they can discover. Here is some example output of the above command on my home machine.
Jan 4 20:44:29 pokey sshd[7190]: Did not receive identification string from 210.17.215.224 Jan 4 20:45:58 pokey sshd[7225]: Invalid user test from 210.17.215.224 Jan 4 20:46:00 pokey sshd[7225]: Failed password for invalid user test from 210.17.215.224 port 57022 ssh2 Jan 4 20:46:10 pokey sshd[7231]: Invalid user test from 210.17.215.224 Jan 5 02:03:34 pokey sshd[15087]: Accepted publickey for duane from 192.168.0.101 port 42108 ssh2 Jan 5 04:14:06 pokey sshd[4716]: Did not receive identification string from UNKNOWN Jan 5 04:17:24 pokey sshd[4720]: Invalid user staff from 61.232.12.74 Jan 5 04:17:26 pokey sshd[4720]: Failed password for invalid user staff from 61.232.12.74 port 52011 ssh2 Jan 5 04:17:31 pokey sshd[4722]: Invalid user sales from 61.232.12.74 Jan 5 04:17:33 pokey sshd[4722]: Failed password for invalid user sales from 61.232.12.74 port 56630 ssh2 Jan 5 04:17:36 pokey sshd[4724]: Invalid user recruit from 61.232.12.74 Jan 5 04:17:38 pokey sshd[4724]: Failed password for invalid user recruit from 61.232.12.74 port 35829 ssh2 Jan 5 04:17:41 pokey sshd[4726]: Invalid user alias from 61.232.12.74 Jan 5 04:17:42 pokey sshd[4726]: Failed password for invalid user alias from 61.232.12.74 port 40279 ssh2 Jan 5 04:17:50 pokey sshd[4728]: Invalid user office from 61.232.12.74 Jan 5 04:17:52 pokey sshd[4728]: Failed password for invalid user office from 61.232.12.74 port 43504 ssh2 Jan 5 04:17:59 pokey sshd[4730]: Invalid user samba from 61.232.12.74 Jan 5 04:18:01 pokey sshd[4730]: Failed password for invalid user samba from 61.232.12.74 port 51622 ssh2 Jan 5 04:18:05 pokey sshd[4732]: Invalid user tomcat from 61.232.12.74