|Performing Maintenance Tasks|
Aspera® recommends that you review your SSH log periodically for signs of a potential attack. Launch sshd in the Event source menu to display only SSH Server events. You may also apply other conditions when needed.. To see only SSH Server events, select to show the filter settings. In the , select
With a filter applied, you can review the logs in the Event Viewer main window, or select .txt or .csv format.to export a log file using
Look for invalid users in the log, especially a series of login attempts with common user names from the same address, usually in alphabetical order. For example:
... Mar 10 18:48:02 sku sshd: Failed password for invalid user alex from 184.108.40.206 port 1585 ssh2 ... Mar 14 23:25:52 sku sshd: Failed password for invalid user alice from 220.127.116.11 port 1585 ssh2 ...
If you have identified attacks: