| 2026-09-11 13:28:06 | web01 | 203.0.113.5 | info | sshd | auth_failure,generic_error | Failed password for invalid user admin from 203.0.113.5 port 51244 ssh2 |
| 2026-09-11 13:28:06 | web01 | 203.0.113.5 | info | sshd | auth_failure,generic_error | Failed password for invalid user admin from 203.0.113.5 port 51245 ssh2 |
| 2026-09-11 13:28:06 | web01 | 203.0.113.5 | info | sshd | auth_failure,generic_error | Failed password for root from 203.0.113.5 port 51246 ssh2 |
| 2026-09-11 13:28:06 | web01 | 203.0.113.5 | info | sshd | auth_failure,generic_error | Failed password for root from 203.0.113.5 port 51247 ssh2 |
| 2026-09-11 13:28:06 | web01 | 203.0.113.5 | info | sshd | auth_failure,generic_error | Failed password for invalid user test from 203.0.113.5 port 51248 ssh2 |
| 2026-09-11 13:28:06 | web01 | 203.0.113.5 | info | sshd | auth_failure,generic_error | Failed password for root from 203.0.113.5 port 51249 ssh2 |
| 2026-09-11 13:28:06 | web01 | 203.0.113.5 | info | sshd | auth_success_root,root_login_external | Accepted password for root from 203.0.113.5 port 51250 ssh2 |
| 2026-09-11 13:28:06 | web01 | - | info | sudo | sudo_command | abraham : TTY=pts/0 ; PWD=/home/abraham ; USER=root ; COMMAND=/usr/bin/systemctl restart nginx |
| 2026-09-11 13:28:06 | web01 | - | error | nginx | generic_error | 2026/09/11 10:02:00 [error] 1234#0: *5 connect() failed (111: Connection refused) |
| 2026-09-11 13:28:06 | web01 | 10.0.0.5 | info | sshd | auth_success_root | Accepted password for root from 10.0.0.5 port 51260 ssh2 |