STP topology changes

Details for Syslogmessage with ID '1561716162'
Date	Today 14:46:10
Host	10.16.112.126
Syslogtag	stp
Severity	NOTICE
Facility	LOCAL7
Message	STP topology changes

Port 11 has recovered to normal state(Broadcast Storm Control, type: Broadcast).

Details for Syslogmessage with ID '1561716161'
Date	Today 14:46:21
Host	10.16.48.103
Syslogtag	system
Severity	INFO
Facility	LOCAL7
Message	Port 11 has recovered to normal state(Broadcast Storm Control, type: Broadcast).

Port 6 link down

Details for Syslogmessage with ID '1561716160'
Date	Today 14:46:10
Host	10.16.17.102
Syslogtag	interface
Severity	DEBUG
Facility	LOCAL7
Message	Port 6 link down

Port 6 link up

Details for Syslogmessage with ID '1561716159'
Date	Today 14:46:10
Host	10.16.17.102
Syslogtag	interface
Severity	DEBUG
Facility	LOCAL7
Message	Port 6 link up

PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost= ...

Details for Syslogmessage with ID '1561716157'
Date	Today 14:46:09
Host	zabbix
Syslogtag	sshd[13391]:
Severity	NOTICE
Facility	SECURITY
Message	PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.101.88.222 user=root

Received disconnect from 180.101.88.222: 11:

Details for Syslogmessage with ID '1561716156'
Date	Today 14:46:09
Host	zabbix
Syslogtag	sshd[13392]:
Severity	INFO
Facility	AUTH
Message	Received disconnect from 180.101.88.222: 11:

Port 3 link up

Details for Syslogmessage with ID '1561716155'
Date	Today 14:46:10
Host	10.16.192.111
Syslogtag	interface
Severity	DEBUG
Facility	LOCAL7
Message	Port 3 link up

Failed password for root from 180.101.88.222 port 58144 ssh2

Details for Syslogmessage with ID '1561716153'
Date	Today 14:46:08
Host	zabbix
Syslogtag	sshd[13391]:
Severity	INFO
Facility	AUTH
Message	Failed password for root from 180.101.88.222 port 58144 ssh2

Port 28 link up

Details for Syslogmessage with ID '1561716152'
Date	Today 14:46:00
Host	10.16.112.133
Syslogtag	interface
Severity	DEBUG
Facility	LOCAL7
Message	Port 28 link up

Port 28 link down

Details for Syslogmessage with ID '1561716151'
Date	Today 14:46:00
Host	10.16.112.133
Syslogtag	interface
Severity	DEBUG
Facility	LOCAL7
Message	Port 28 link down

Port 5 link down

Details for Syslogmessage with ID '1561716150'
Date	Today 14:46:00
Host	10.16.16.114
Syslogtag	interface
Severity	DEBUG
Facility	LOCAL7
Message	Port 5 link down

Received disconnect from 103.130.215.82 {ip.bkhost.vn} : 11: Bye Bye

Details for Syslogmessage with ID '1561716149'
Date	Today 14:46:08
Host	zabbix
Syslogtag	sshd[13538]:
Severity	INFO
Facility	AUTH
Message	Received disconnect from 103.130.215.82 {ip.bkhost.vn} : 11: Bye Bye

Failed password for root from 103.130.215.82 {ip.bkhost.vn} port 52174 ssh2

Details for Syslogmessage with ID '1561716147'
Date	Today 14:46:08
Host	zabbix
Syslogtag	sshd[13537]:
Severity	INFO
Facility	AUTH
Message	Failed password for root from 103.130.215.82 {ip.bkhost.vn} port 52174 ssh2

Port 11 is out of its packet limit(Broadcast Storm Control, type: Broadcast).

Details for Syslogmessage with ID '1561716146'
Date	Today 14:46:20
Host	10.16.48.103
Syslogtag	system
Severity	INFO
Facility	LOCAL7
Message	Port 11 is out of its packet limit(Broadcast Storm Control, type: Broadcast).

Port 5 link up

Details for Syslogmessage with ID '1561716144'
Date	Today 14:46:00
Host	10.16.16.114
Syslogtag	interface
Severity	DEBUG
Facility	LOCAL7
Message	Port 5 link up

Port 3 link down

Details for Syslogmessage with ID '1561716143'
Date	Today 14:46:00
Host	10.16.192.111
Syslogtag	interface
Severity	DEBUG
Facility	LOCAL7
Message	Port 3 link down

Port 6 link down

Details for Syslogmessage with ID '1561716142'
Date	Today 14:46:00
Host	10.16.17.102
Syslogtag	interface
Severity	DEBUG
Facility	LOCAL7
Message	Port 6 link down

Port 6 link up

Details for Syslogmessage with ID '1561716141'
Date	Today 14:46:00
Host	10.16.17.102
Syslogtag	interface
Severity	DEBUG
Facility	LOCAL7
Message	Port 6 link up

Port 3 link up

Details for Syslogmessage with ID '1561716140'
Date	Today 14:46:00
Host	10.16.192.111
Syslogtag	interface
Severity	DEBUG
Facility	LOCAL7
Message	Port 3 link up

Failed password for root from 180.101.88.222 port 58144 ssh2

Details for Syslogmessage with ID '1561716138'
Date	Today 14:46:06
Host	zabbix
Syslogtag	sshd[13391]:
Severity	INFO
Facility	AUTH
Message	Failed password for root from 180.101.88.222 port 58144 ssh2

Port 5 link down

Details for Syslogmessage with ID '1561716137'
Date	Today 14:46:00
Host	10.16.16.114
Syslogtag	interface
Severity	DEBUG
Facility	LOCAL7
Message	Port 5 link down

pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruse ...

Details for Syslogmessage with ID '1561716136'
Date	Today 14:46:06
Host	zabbix
Syslogtag	sshd[13537]:
Severity	NOTICE
Facility	SECURITY
Message	pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.130.215.82 {ip.bkhost.vn} user=root

Address 103.130.215.82 {ip.bkhost.vn} maps to ip.bkhost.vn, but this does not map back to the ...

Details for Syslogmessage with ID '1561716135'
Date	Today 14:46:06
Host	zabbix
Syslogtag	sshd[13537]:
Severity	INFO
Facility	AUTH
Message	Address 103.130.215.82 {ip.bkhost.vn} maps to ip.bkhost.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!

STP topology changes

Details for Syslogmessage with ID '1561716134'
Date	Today 14:46:00
Host	10.16.112.133
Syslogtag	stp
Severity	NOTICE
Facility	LOCAL7
Message	STP topology changes

Port 28 link up

Details for Syslogmessage with ID '1561716133'
Date	Today 14:46:00
Host	10.16.112.133
Syslogtag	interface
Severity	DEBUG
Facility	LOCAL7
Message	Port 28 link up

Port 28 link down

Details for Syslogmessage with ID '1561716132'
Date	Today 14:46:00
Host	10.16.112.133
Syslogtag	interface
Severity	DEBUG
Facility	LOCAL7
Message	Port 28 link down

Login failed [user: root] [Source: 37.26.63.70] [localport: 23] [Reason: Login A ...

Details for Syslogmessage with ID '1561716131'
Date	Today 14:46:05
Host	88.151.176.42
Syslogtag	SEC_LOGIN-4-LOGIN_FAILED
Severity	WARNING
Facility	LOCAL7
Message	Login failed [user: root] [Source: 37.26.63.70] [localport: 23] [Reason: Login Authentication Failed] at 14:46:04 Aqtau Fri May 17 2024

Port 5 link up

Details for Syslogmessage with ID '1561716130'
Date	Today 14:46:00
Host	10.16.16.114
Syslogtag	interface
Severity	DEBUG
Facility	LOCAL7
Message	Port 5 link up

Received disconnect from 137.220.191.181: 11: Bye Bye

Details for Syslogmessage with ID '1561716129'
Date	Today 14:46:05
Host	zabbix
Syslogtag	sshd[13404]:
Severity	INFO
Facility	AUTH
Message	Received disconnect from 137.220.191.181: 11: Bye Bye

Failed password for invalid user administrador from 137.220.191.181 port 38302 ...

Details for Syslogmessage with ID '1561716127'
Date	Today 14:46:04
Host	zabbix
Syslogtag	sshd[13398]:
Severity	INFO
Facility	AUTH
Message	Failed password for invalid user administrador from 137.220.191.181 port 38302 ssh2

Port 3 link down

Details for Syslogmessage with ID '1561716126'
Date	Today 14:46:00
Host	10.16.192.111
Syslogtag	interface
Severity	DEBUG
Facility	LOCAL7
Message	Port 3 link down

Port 3 link up

Details for Syslogmessage with ID '1561716125'
Date	Today 14:46:00
Host	10.16.192.111
Syslogtag	interface
Severity	DEBUG
Facility	LOCAL7
Message	Port 3 link up

F0: cpp_cp: QFP:0.0 Thread:155 TS:00053443258266642032 %NAT-6-LOG_TRANSLATION: D ...

Details for Syslogmessage with ID '1561716124'
Date	Today 14:46:03
Host	88.151.176.41
Syslogtag	IOSXE-6-PLATFORM
Severity	INFO
Facility	LOCAL6
Message	F0: cpp_cp: QFP:0.0 Thread:155 TS:00053443258266642032 %NAT-6-LOG_TRANSLATION: Deleted Translation UDP 10.236.25.132:15064 77.240.41.3:15064 0.0.0.0:0 0.0.0.0:0 0

F0: cpp_cp: QFP:0.0 Thread:155 TS:00053443258266279237 %NAT-6-LOG_TRANSLATION: D ...

Details for Syslogmessage with ID '1561716123'
Date	Today 14:46:03
Host	88.151.176.41
Syslogtag	IOSXE-6-PLATFORM
Severity	INFO
Facility	LOCAL6
Message	F0: cpp_cp: QFP:0.0 Thread:155 TS:00053443258266279237 %NAT-6-LOG_TRANSLATION: Deleted Translation TCP 10.236.15.219:57066 77.240.41.3:57066 0.0.0.0:0 0.0.0.0:0 0

Port 5 link down

Details for Syslogmessage with ID '1561716122'
Date	Today 14:46:00
Host	10.16.16.114
Syslogtag	interface
Severity	DEBUG
Facility	LOCAL7
Message	Port 5 link down

Failed password for root from 180.101.88.222 port 58144 ssh2

Details for Syslogmessage with ID '1561716120'
Date	Today 14:46:03
Host	zabbix
Syslogtag	sshd[13391]:
Severity	INFO
Facility	AUTH
Message	Failed password for root from 180.101.88.222 port 58144 ssh2

Port 6 link down

Details for Syslogmessage with ID '1561716119'
Date	Today 14:46:00
Host	10.16.17.102
Syslogtag	interface
Severity	DEBUG
Facility	LOCAL7
Message	Port 6 link down

pam_succeed_if(sshd:auth): error retrieving information about user administrado ...

Details for Syslogmessage with ID '1561716118'
Date	Today 14:46:02
Host	zabbix
Syslogtag	sshd[13398]:
Severity	CRIT
Facility	SECURITY
Message	pam_succeed_if(sshd:auth): error retrieving information about user administrador

pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruse ...

Details for Syslogmessage with ID '1561716117'
Date	Today 14:46:02
Host	zabbix
Syslogtag	sshd[13398]:
Severity	NOTICE
Facility	SECURITY
Message	pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.220.191.181

pam_unix(sshd:auth): check pass; user unknown

Details for Syslogmessage with ID '1561716116'
Date	Today 14:46:02
Host	zabbix
Syslogtag	sshd[13398]:
Severity	WARNING
Facility	SECURITY
Message	pam_unix(sshd:auth): check pass; user unknown

input_userauth_request: invalid user administrador

Details for Syslogmessage with ID '1561716115'
Date	Today 14:46:02
Host	zabbix
Syslogtag	sshd[13404]:
Severity	INFO
Facility	AUTH
Message	input_userauth_request: invalid user administrador

Invalid user administrador from 137.220.191.181

Details for Syslogmessage with ID '1561716113'
Date	Today 14:46:02
Host	zabbix
Syslogtag	sshd[13398]:
Severity	INFO
Facility	AUTH
Message	Invalid user administrador from 137.220.191.181

Port 6 link up

Details for Syslogmessage with ID '1561716112'
Date	Today 14:46:00
Host	10.16.17.102
Syslogtag	interface
Severity	DEBUG
Facility	LOCAL7
Message	Port 6 link up

Port 5 link up

Details for Syslogmessage with ID '1561716111'
Date	Today 14:46:00
Host	10.16.16.114
Syslogtag	interface
Severity	DEBUG
Facility	LOCAL7
Message	Port 5 link up

F0: cpp_cp: QFP:0.0 Thread:036 TS:00053443258266058639 %NAT-6-LOG_TRANSLATION: C ...

Details for Syslogmessage with ID '1561716110'
Date	Today 14:46:02
Host	88.151.176.41
Syslogtag	IOSXE-6-PLATFORM
Severity	INFO
Facility	LOCAL6
Message	F0: cpp_cp: QFP:0.0 Thread:036 TS:00053443258266058639 %NAT-6-LOG_TRANSLATION: Created Translation UDP 10.236.28.210:37951 77.240.41.28:8771 8.8.8.8 {dns.google} :53 8.8.8.8 {dns.google} :53 0

F0: cpp_cp: QFP:0.0 Thread:040 TS:00053443258265637117 %NAT-6-LOG_TRANSLATION: D ...

Details for Syslogmessage with ID '1561716109'
Date	Today 14:46:02
Host	88.151.176.41
Syslogtag	IOSXE-6-PLATFORM
Severity	INFO
Facility	LOCAL6
Message	F0: cpp_cp: QFP:0.0 Thread:040 TS:00053443258265637117 %NAT-6-LOG_TRANSLATION: Deleted Translation TCP 10.236.15.247:59564 77.240.41.3:59553 0.0.0.0:0 0.0.0.0:0 0

F0: cpp_cp: QFP:0.0 Thread:136 TS:00053443258265514877 %NAT-6-LOG_TRANSLATION: D ...

Details for Syslogmessage with ID '1561716108'
Date	Today 14:46:02
Host	88.151.176.41
Syslogtag	IOSXE-6-PLATFORM
Severity	INFO
Facility	LOCAL6
Message	F0: cpp_cp: QFP:0.0 Thread:136 TS:00053443258265514877 %NAT-6-LOG_TRANSLATION: Deleted Translation UDP 10.236.20.1:19712 77.240.41.3:4426 0.0.0.0:0 0.0.0.0:0 0

F0: cpp_cp: QFP:0.0 Thread:136 TS:00053443258265338507 %NAT-6-LOG_TRANSLATION: D ...

Details for Syslogmessage with ID '1561716107'
Date	Today 14:46:02
Host	88.151.176.41
Syslogtag	IOSXE-6-PLATFORM
Severity	INFO
Facility	LOCAL6
Message	F0: cpp_cp: QFP:0.0 Thread:136 TS:00053443258265338507 %NAT-6-LOG_TRANSLATION: Deleted Translation UDP 10.236.22.222:27459 77.240.41.3:27459 0.0.0.0:0 0.0.0.0:0 0

F0: cpp_cp: QFP:0.0 Thread:012 TS:00053443258265165869 %NAT-6-LOG_TRANSLATION: D ...

Details for Syslogmessage with ID '1561716106'
Date	Today 14:46:02
Host	88.151.176.41
Syslogtag	IOSXE-6-PLATFORM
Severity	INFO
Facility	LOCAL6
Message	F0: cpp_cp: QFP:0.0 Thread:012 TS:00053443258265165869 %NAT-6-LOG_TRANSLATION: Deleted Translation TCP 10.236.24.172:37095 77.240.41.13:37095 0.0.0.0:0 0.0.0.0:0 0

F0: cpp_cp: QFP:0.0 Thread:064 TS:00053443258265016119 %NAT-6-LOG_TRANSLATION: C ...

Details for Syslogmessage with ID '1561716105'
Date	Today 14:46:02
Host	88.151.176.41
Syslogtag	IOSXE-6-PLATFORM
Severity	INFO
Facility	LOCAL6
Message	F0: cpp_cp: QFP:0.0 Thread:064 TS:00053443258265016119 %NAT-6-LOG_TRANSLATION: Created Translation TCP 10.236.7.63:43377 77.240.41.28:43377 52.58.245.171 {ec2-52-58-245-171.eu-central-1.compute.amazonaws.com} :443 52.58.245.171 {ec2-52-58-245-171.eu-central-1.compute.amazonaws.com} :443 0