Hello.
I'm not using port 22 as standard SSH port on most of my servers, but I forgot to change port on two servers, one server in the US and one in Norway. Yesterday I did notice that both had got 200 permanent bans in CSF firwall, all from failed SSH logins, most IPs from China.
Is this normal on all servers using port 22 as SSH port?
I have no perm bans on my 15 other servers using a different port, so it has to be port 22. Still, why do China use so much time to try to logon to my personal servers in the US and Norway?
61.147.103.7 # lfd: (sshd) Failed SSH login from 61.147.103.7 (CN/China/-): 5 in the last
3600 secs - Tue Feb 18 16:51:32 2014
222.186.62.62 # lfd: (sshd) Failed SSH login from 222.186.62.62 (CN/China/-): 5 in the last
3600 secs - Tue Feb 18 17:46:18 2014
222.186.62.20 # lfd: (sshd) Failed SSH login from 222.186.62.20 (CN/China/-): 5 in the last
3600 secs - Tue Feb 18 22:42:07 2014
218.2.22.145 # lfd: (sshd) Failed SSH login from 218.2.22.145 (CN/China/-): 5 in the last
3600 secs - Wed Feb 19 00:30:42 2014
176.117.127.168 # lfd: (sshd) Failed SSH login from 176.117.127.168 (RU/Russian
Federation/-): 5 in the last 3600 secs - Wed Feb 19 09:04:22 2014
222.186.62.69 # lfd: (sshd) Failed SSH login from 222.186.62.69 (CN/China/-): 5 in the last
3600 secs - Wed Feb 19 22:00:18 2014
58.221.82.14 # lfd: (sshd) Failed SSH login from 58.221.82.14 (CN/China/-): 5 in the last
3600 secs - Thu Feb 20 03:20:30 2014
64.15.159.20 # lfd: (sshd) Failed SSH login from 64.15.159.20 (CA/Canada/-): 5 in the last
3600 secs - Thu Feb 20 03:30:00 2014
70.33.211.25 # lfd: (sshd) Failed SSH login from 70.33.211.25 (US/United States/-): 5 in the
last 3600 secs - Thu Feb 20 08:06:49 2014
138.91.188.41 # lfd: (sshd) Failed SSH login from 138.91.188.41 (US/United States/-): 5 in
the last 3600 secs - Fri Feb 21 06:02:20 2014
222.84.118.27 # lfd: (sshd) Failed SSH login from 222.84.118.27 (CN/China/-): 5 in the last
3600 secs - Fri Feb 21 07:03:56 2014
115.68.22.162 # lfd: (sshd) Failed SSH login from 115.68.22.162 (KR/Korea, Republic of/-): 5
in the last 3600 secs - Fri Feb 21 16:17:55 2014