May 16 05:37:16 ift sshd\[20188\]: Invalid user web5 from 103.37.150.140May 16 05:37:18 ift sshd\[20188\]: Failed password for invalid user web5 from 103.37.150.140 port 48202 ssh2May 16 05:40:51 ift sshd\[20909\]: Invalid user tester from 103.37.150.140May 16 05:40:53 ift sshd\[20909\]: Failed password for invalid user tester from 103.37.150.140 port 41847 ssh2May 16 05:44:16 ift sshd\[21406\]: Failed password for root from 103.37.150.140 port 35493 ssh2
...

May  8 22:59:48 h2646465 sshd[3819]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.37.150.140  user=root
May  8 22:59:50 h2646465 sshd[3819]: Failed password for root from 103.37.150.140 port 50626 ssh2
May  8 23:10:48 h2646465 sshd[6085]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.37.150.140  user=root
May  8 23:10:50 h2646465 sshd[6085]: Failed password for root from 103.37.150.140 port 49835 ssh2
May  8 23:14:36 h2646465 sshd[6235]: Invalid user notebook from 103.37.150.140
May  8 23:14:36 h2646465 sshd[6235]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.37.150.140
May  8 23:14:36 h2646465 sshd[6235]: Invalid user notebook from 103.37.150.140
May  8 23:14:38 h2646465 sshd[6235]: Failed password for invalid user notebook from 103.37.150.140 port 45770 ssh2
May  8 23:18:20 h2646465 sshd[6874]: Invalid user abner from 103.37.150.140
...

Invalid user test from 103.37.150.140 port 33787

Apr  1 01:39:19 vps sshd[816476]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.37.150.140
Apr  1 01:39:21 vps sshd[816476]: Failed password for invalid user hubsh from 103.37.150.140 port 48337 ssh2
Apr  1 01:43:05 vps sshd[837758]: Invalid user zhanglin from 103.37.150.140 port 42953
Apr  1 01:43:05 vps sshd[837758]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.37.150.140
Apr  1 01:43:07 vps sshd[837758]: Failed password for invalid user zhanglin from 103.37.150.140 port 42953 ssh2
...

Invalid user av from 103.37.150.140 port 46352

2020-03-27T20:25:45.148202abusebot-7.cloudsearch.cf sshd[15251]: Invalid user rzi from 103.37.150.140 port 40972
2020-03-27T20:25:45.155029abusebot-7.cloudsearch.cf sshd[15251]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.37.150.140
2020-03-27T20:25:45.148202abusebot-7.cloudsearch.cf sshd[15251]: Invalid user rzi from 103.37.150.140 port 40972
2020-03-27T20:25:46.750615abusebot-7.cloudsearch.cf sshd[15251]: Failed password for invalid user rzi from 103.37.150.140 port 40972 ssh2
2020-03-27T20:28:50.036133abusebot-7.cloudsearch.cf sshd[15444]: Invalid user voe from 103.37.150.140 port 35700
2020-03-27T20:28:50.040474abusebot-7.cloudsearch.cf sshd[15444]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.37.150.140
2020-03-27T20:28:50.036133abusebot-7.cloudsearch.cf sshd[15444]: Invalid user voe from 103.37.150.140 port 35700
2020-03-27T20:28:52.368401abusebot-7.cloudsearch.cf sshd[15444]: Failed pa
...

2020-03-21T16:42:48.507182ionos.janbro.de sshd[93376]: Invalid user wq from 103.37.150.140 port 35083
2020-03-21T16:42:50.887981ionos.janbro.de sshd[93376]: Failed password for invalid user wq from 103.37.150.140 port 35083 ssh2
2020-03-21T16:45:46.806759ionos.janbro.de sshd[93398]: Invalid user ep from 103.37.150.140 port 54519
2020-03-21T16:45:46.999881ionos.janbro.de sshd[93398]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.37.150.140
2020-03-21T16:45:46.806759ionos.janbro.de sshd[93398]: Invalid user ep from 103.37.150.140 port 54519
2020-03-21T16:45:48.669901ionos.janbro.de sshd[93398]: Failed password for invalid user ep from 103.37.150.140 port 54519 ssh2
2020-03-21T16:48:39.405540ionos.janbro.de sshd[93434]: Invalid user plex from 103.37.150.140 port 45723
2020-03-21T16:48:39.765013ionos.janbro.de sshd[93434]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.37.150.140
2020-03-21T16:48:39.
...

Feb 20 15:28:37 [host] sshd[26280]: Invalid user g
Feb 20 15:28:37 [host] sshd[26280]: pam_unix(sshd:
Feb 20 15:28:39 [host] sshd[26280]: Failed passwor

Feb  8 17:28:01 pornomens sshd\[2324\]: Invalid user nyo from 103.37.150.140 port 56004
Feb  8 17:28:01 pornomens sshd\[2324\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.37.150.140
Feb  8 17:28:04 pornomens sshd\[2324\]: Failed password for invalid user nyo from 103.37.150.140 port 56004 ssh2
...

Unauthorized connection attempt from IP address 103.37.181.221 on Port 445(SMB)

Aug 30 16:56:24 ubuntu-2gb-nbg1-dc3-1 sshd[1622]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.37.160.252
Aug 30 16:56:26 ubuntu-2gb-nbg1-dc3-1 sshd[1622]: Failed password for invalid user temp from 103.37.160.252 port 53838 ssh2
...

Aug 27 22:03:46 wbs sshd\[16503\]: Invalid user clamupdate from 103.37.160.252
Aug 27 22:03:46 wbs sshd\[16503\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.37.160.252
Aug 27 22:03:48 wbs sshd\[16503\]: Failed password for invalid user clamupdate from 103.37.160.252 port 47438 ssh2
Aug 27 22:06:50 wbs sshd\[16758\]: Invalid user ncim from 103.37.160.252
Aug 27 22:06:50 wbs sshd\[16758\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.37.160.252

SSH bruteforce

WordPress wp-login brute force :: 103.37.183.201 0.116 BYPASS [03/Aug/2019:14:38:02  1000] [censored_1] "POST /wp-login.php HTTP/1.1" 200 3972 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"

Aug  2 03:28:57 mail sshd\[15970\]: Failed password for invalid user thiago from 103.37.160.252 port 39396 ssh2
Aug  2 03:48:36 mail sshd\[16237\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.37.160.252  user=root
...

MultiHost/MultiPort Probe, Scan, Hack -

Invalid user xbian from 77.55.213.247 port 53730
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.55.213.247
Failed password for invalid user xbian from 77.55.213.247 port 53730 ssh2
Invalid user fralick from 77.55.213.247 port 38472
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.55.213.247

Dec  1 19:12:15 eddieflores sshd\[19756\]: Invalid user ccccccccc from 150.249.114.20
Dec  1 19:12:15 eddieflores sshd\[19756\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=fp96f97214.tkyc210.ap.nuro.jp
Dec  1 19:12:17 eddieflores sshd\[19756\]: Failed password for invalid user ccccccccc from 150.249.114.20 port 41400 ssh2
Dec  1 19:19:13 eddieflores sshd\[20403\]: Invalid user jerusale from 150.249.114.20
Dec  1 19:19:13 eddieflores sshd\[20403\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=fp96f97214.tkyc210.ap.nuro.jp

Dec  1 18:51:29 hanapaa sshd\[21357\]: Invalid user gwynith from 27.72.105.157
Dec  1 18:51:29 hanapaa sshd\[21357\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.72.105.157
Dec  1 18:51:30 hanapaa sshd\[21357\]: Failed password for invalid user gwynith from 27.72.105.157 port 47150 ssh2
Dec  1 18:58:57 hanapaa sshd\[22111\]: Invalid user squid from 27.72.105.157
Dec  1 18:58:57 hanapaa sshd\[22111\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.72.105.157

Dec  2 05:10:07 game-panel sshd[16239]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.31.37.203
Dec  2 05:10:09 game-panel sshd[16239]: Failed password for invalid user rpc from 186.31.37.203 port 44778 ssh2
Dec  2 05:16:55 game-panel sshd[16501]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.31.37.203

Attacks websites by trying to access known vulnerables of plugins, brute-force of backends or probing of administrative tools

Dec  1 23:51:33 ny01 sshd[1286]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.143.111
Dec  1 23:51:35 ny01 sshd[1286]: Failed password for invalid user yenerich from 106.13.143.111 port 53238 ssh2
Dec  1 23:58:36 ny01 sshd[2894]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.143.111

UTC: 2019-12-01 port: 389/udp

Dec  2 07:18:25 sauna sshd[173783]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.36.23.221
Dec  2 07:18:28 sauna sshd[173783]: Failed password for invalid user clennito from 20.36.23.221 port 2048 ssh2
...

SSH-bruteforce attempts

Dec  2 00:43:28 linuxvps sshd\[47499\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.128  user=root
Dec  2 00:43:30 linuxvps sshd\[47499\]: Failed password for root from 61.177.172.128 port 63296 ssh2
Dec  2 00:43:33 linuxvps sshd\[47499\]: Failed password for root from 61.177.172.128 port 63296 ssh2
Dec  2 00:43:36 linuxvps sshd\[47499\]: Failed password for root from 61.177.172.128 port 63296 ssh2
Dec  2 00:43:39 linuxvps sshd\[47499\]: Failed password for root from 61.177.172.128 port 63296 ssh2

Dec  2 05:12:48 web8 sshd\[15187\]: Invalid user operator from 220.135.48.40
Dec  2 05:12:48 web8 sshd\[15187\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.135.48.40
Dec  2 05:12:50 web8 sshd\[15187\]: Failed password for invalid user operator from 220.135.48.40 port 41388 ssh2
Dec  2 05:20:10 web8 sshd\[18801\]: Invalid user ghazali from 220.135.48.40
Dec  2 05:20:10 web8 sshd\[18801\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.135.48.40

Dec  2 06:10:09 OPSO sshd\[25444\]: Invalid user ginsberg from 80.211.78.155 port 38336
Dec  2 06:10:09 OPSO sshd\[25444\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.78.155
Dec  2 06:10:11 OPSO sshd\[25444\]: Failed password for invalid user ginsberg from 80.211.78.155 port 38336 ssh2
Dec  2 06:16:00 OPSO sshd\[26999\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.78.155  user=mysql
Dec  2 06:16:01 OPSO sshd\[26999\]: Failed password for mysql from 80.211.78.155 port 49374 ssh2

Dec  2 04:57:10 v22018086721571380 sshd[32425]: Failed password for root from 218.92.0.179 port 64607 ssh2
Dec  2 04:57:13 v22018086721571380 sshd[32425]: error: maximum authentication attempts exceeded for root from 218.92.0.179 port 64607 ssh2 [preauth]

Dec  2 07:14:32 sauna sshd[173694]: Failed password for lp from 51.38.185.121 port 46098 ssh2
...