From: <li...@la...> - 2017-05-30 08:02:45
|
This looks perfect. Perhaps the IPs that weren't being blocked had hits too far apart. The attacker is a Google Cloud service. Lovely... May 26 01:50:05 theranch sshd[86071]: fatal: Unable to negotiate with 104.154.221.11 port 54157: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1 [pr eauth] May 26 01:50:06 theranch sshd[86073]: fatal: Unable to negotiate with 104.154.221.11 port 54297: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1 [pr eauth] May 26 01:50:07 theranch sshd[86075]: fatal: Unable to negotiate with 104.154.221.11 port 54438: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1 [pr eauth] May 26 01:50:07 theranch sshguard[703]: blacklist: added 104.154.221.11 |