sembrerebbe qualcuno che cerca di entrare con ssh e che sta provando un po di password di root

203.194.70.100 corrisponde a un sever di tokio

inetnum: 203.194.70.96 - 203.194.70.111
netname: IDINTDXM
country: ID
descr: Jl. TB Simatupang 1B Graha Elnusa 5th Floor
descr: Pharmacy
admin-c: AI43-AP
tech-c: AI43-AP
status: ASSIGNED NON-PORTABLE
changed: Haruko.Takarabe@ap.att.com 20050517
mnt-by: MAINT-AP-OPENNET
source: APNIC

role: AGNS INTCUST
address: Shinnikko-Building, 2-10-1,
address: Toranomon, Minato-ku,
address: TOKYO, 105-0001, Japan
country: JP
phone: +81-3-3584-6885
fax-no: +81-3-3505-1771
e-mail: ABUSEIC@jp.att.com
trouble: Send Spam or abuse report to ABUSEIC@jp.att.com
trouble: and Please include detailed information and time
admin-c: MH27-AP
tech-c: NS194-AP
nic-hdl: AI43-AP
remarks:
notify: Naoko.Sensui@jp.att.com
mnt-by: MAINT-JP-NEWNS
changed: Naoko.Sensui@jp.att.com 20060306
source: APNIC


andy:~#

se non usi ssh meglio disattivarlo o configurarlo solo per ip sicuri secondo me