I normally never get any bad login SSH attempts, since my port 22 is deeply burried behind a firewall that blocks all but one IP - my VPN.
Yet, I just ran -lastb and to my jaw-dropping surprise it seems that in fact there were two bad loging attempts from another IP - it is listed and reprted to do brute force SSH attacks.
Coincidentally I have recently migrated to CloudFlare CDN and wonder if this may have something to do with it, but how is this even possible?
