what is this error fatal: Write failed: Broken pipe in log of N7K

martlee2 · ‎03-23-2015

<186>: 2015 Mar 24 08:29:27 HKT: %DAEMON-2-SYSTEM_MSG: fatal: Write failed: Broken pipe .Client is 75.121.220.251,length of packet causing error 84 84 - sshd[684]

i find many brute force guessing login,

what can we do next?

[7m--More--[27m
iled for user root#02# from 222.186.30.115 - sshd[23714]
[7m--More--[27m
2015 Mar 24 07:17:25 xxxx %AUTHPRIV-3-SYSTEM_MSG: pam_aaa:Authentication fa
[7m--More--[27m
iled for user root#02##02# from 222.186.30.115 - sshd[23714]
[7m--More--[27m
2015 Mar 24 07:17:28 xxxx %AUTHPRIV-3-SYSTEM_MSG: pam_aaa:Authentication fa
[7m--More--[27m
iled for user root from 222.186.30.115 - sshd[23715]
[7m--More--[27m
2015 Mar 24 07:17:28 xxxx %AUTHPRIV-3-SYSTEM_MSG: pam_aaa:Authentication fa
[7m--More--[27m
iled for user root#02# from 222.186.30.115 - sshd[23715]
[7m--More--[27m
2015 Mar 24 07:17:28 xxxx %AUTHPRIV-3-SYSTEM_MSG: pam_aaa:Authentication fa
[7m--More--[27m
iled for user root#02##02# from 222.186.30.115 - sshd[23715]
[7m--More--[27m
2015 Mar 24 07:17:31 xxxx %AUTHPRIV-3-SYSTEM_MSG: pam_aaa:Authentication fa
[7m--More--[27m
iled for user root from 222.186.30.115 - sshd[23717]
[7m--More--[27m
2015 Mar 24 07:17:31 xxxx %AUTHPRIV-3-SYSTEM_MSG: pam_aaa:Authentication fa
[7m--More--[27m
iled for user root#02# from 222.186.30.115 - sshd[23717]
[7m--More--[27m
2015 Mar 24 07:17:31 xxxx %AUTHPRIV-3-SYSTEM_MSG: pam_aaa:Authentication fa
[7m--More--[27m
iled for user root#02##02# from 222.186.30.115 - sshd[23717]
[7m--More--[27m
2015 Mar 24 07:17:33 xxxx %AUTHPRIV-3-SYSTEM_MSG: pam_aaa:Authentication fa
[7m--More--[27m
iled for user root from 222.186.30.115 - sshd[23718]
[7m--More--[27m
2015 Mar 24 07:17:33 xxxx %AUTHPRIV-3-SYSTEM_MSG: pam_aaa:Authentication fa
[7m--More--[27m
iled for user root#02# from 222.186.30.115 - sshd[23718]
[7m--More--[27m
2015 Mar 24 07:17:34 xxxx %AUTHPRIV-3-SYSTEM_MSG: pam_aaa:Authentication fa
[7m--More--[27m
iled for user root#02##02# from 222.186.30.115 - sshd[23718]
[7m--More--[27m
2015 Mar 24 07:17:36 xxxx %AUTHPRIV-3-SYSTEM_MSG: pam_aaa:Authentication fa
[7m--More--[27m
iled for user root from 222.186.30.115 - sshd[23719]
[7m--More--[27m
2015 Mar 24 07:17:36 xxxx %AUTHPRIV-3-SYSTEM_MSG: pam_aaa:Authentication fa
[7m--More--[27m
iled for user root#02# from 222.186.30.115 - sshd[23719]
[7m--More--[27m
2015 Mar 24 07:17:36 xxxx %AUTHPRIV-3-SYSTEM_MSG: pam_aaa:Authentication fa

Marvin Rhoads · ‎03-24-2015

Restrict your vty line logins with an access-list to prevent Internet origin login attempts.