[root@lekaowang /]# vi /var/log/secure
Jan 23 04:05:04 lekaowang su: pam_unix(su:session): session opened for user postgres by (uid=0)
Jan 23 04:05:04 lekaowang su: pam_unix(su:session): session closed for user postgres
Jan 23 04:09:59 lekaowang sshd[7707]: Invalid user a1a1 from 61.132.244.14
Jan 22 20:09:59 lekaowang sshd[7708]: input_userauth_request: invalid user a1a1
Jan 23 04:09:59 lekaowang sshd[7707]: pam_unix(sshd:auth): check pass; user unknown
Jan 23 04:09:59 lekaowang sshd[7707]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=smtp3.vip.ah163.com
Jan 23 04:09:59 lekaowang sshd[7707]: pam_succeed_if(sshd:auth): error retrieving information about user a1a1
Jan 23 04:10:02 lekaowang sshd[7707]: Failed password for invalid user a1a1 from 61.132.244.14 port 53883 ssh2
Jan 22 20:10:02 lekaowang sshd[7708]: Received disconnect from 61.132.244.14: 11: Bye Bye
Jan 23 04:10:02 lekaowang su: pam_unix(su:session): session opened for user postgres by (uid=0)
Jan 23 04:10:02 lekaowang su: pam_unix(su:session): session closed for user postgres
Jan 23 04:10:02 lekaowang sshd[7735]: Invalid user a1tech from 61.132.244.14
Jan 22 20:10:02 lekaowang sshd[7736]: input_userauth_request: invalid user a1tech
"/var/log/secure" 78797L, 8363965C