Sep 15 00:22:17 markkoudstaal sshd[24990]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.183.0
Sep 15 00:22:19 markkoudstaal sshd[24990]: Failed password for invalid user 123456 from 104.248.183.0 port 41750 ssh2
Sep 15 00:26:32 markkoudstaal sshd[25415]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.183.0

Sep 10 12:45:48 friendsofhawaii sshd\[2701\]: Invalid user testing from 104.248.183.0
Sep 10 12:45:48 friendsofhawaii sshd\[2701\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.183.0
Sep 10 12:45:50 friendsofhawaii sshd\[2701\]: Failed password for invalid user testing from 104.248.183.0 port 43816 ssh2
Sep 10 12:51:54 friendsofhawaii sshd\[3261\]: Invalid user webadmin from 104.248.183.0
Sep 10 12:51:54 friendsofhawaii sshd\[3261\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.183.0

Sep  6 22:18:17 MK-Soft-VM6 sshd\[15206\]: Invalid user 1 from 104.248.183.0 port 35178
Sep  6 22:18:17 MK-Soft-VM6 sshd\[15206\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.183.0
Sep  6 22:18:19 MK-Soft-VM6 sshd\[15206\]: Failed password for invalid user 1 from 104.248.183.0 port 35178 ssh2
...

Sep  6 08:06:22 MK-Soft-Root1 sshd\[27069\]: Invalid user user from 104.248.183.0 port 58628
Sep  6 08:06:22 MK-Soft-Root1 sshd\[27069\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.183.0
Sep  6 08:06:25 MK-Soft-Root1 sshd\[27069\]: Failed password for invalid user user from 104.248.183.0 port 58628 ssh2
...

Sep  1 09:09:20 wbs sshd\[8507\]: Invalid user design from 104.248.183.0
Sep  1 09:09:20 wbs sshd\[8507\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.183.0
Sep  1 09:09:23 wbs sshd\[8507\]: Failed password for invalid user design from 104.248.183.0 port 48550 ssh2
Sep  1 09:13:22 wbs sshd\[8870\]: Invalid user php5 from 104.248.183.0
Sep  1 09:13:22 wbs sshd\[8870\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.183.0

Aug 31 16:16:41 eddieflores sshd\[15432\]: Invalid user squid from 104.248.183.0
Aug 31 16:16:41 eddieflores sshd\[15432\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.183.0
Aug 31 16:16:42 eddieflores sshd\[15432\]: Failed password for invalid user squid from 104.248.183.0 port 43234 ssh2
Aug 31 16:20:32 eddieflores sshd\[15828\]: Invalid user instrume from 104.248.183.0
Aug 31 16:20:32 eddieflores sshd\[15828\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.183.0

Aug 25 03:59:00 TORMINT sshd\[304\]: Invalid user su from 104.248.183.0
Aug 25 03:59:00 TORMINT sshd\[304\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.183.0
Aug 25 03:59:02 TORMINT sshd\[304\]: Failed password for invalid user su from 104.248.183.0 port 44512 ssh2
...

Aug 18 02:31:57 dedicated sshd[31588]: Invalid user ncs from 104.248.183.0 port 54372

Aug 16 23:44:55 hcbb sshd\[4260\]: Invalid user gs from 104.248.183.0
Aug 16 23:44:55 hcbb sshd\[4260\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.183.0
Aug 16 23:44:57 hcbb sshd\[4260\]: Failed password for invalid user gs from 104.248.183.0 port 44874 ssh2
Aug 16 23:49:08 hcbb sshd\[4601\]: Invalid user keya from 104.248.183.0
Aug 16 23:49:08 hcbb sshd\[4601\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.183.0

Aug  8 14:50:37 pkdns2 sshd\[33929\]: Address 104.248.183.0 maps to ashkankamyab.de, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Aug  8 14:50:37 pkdns2 sshd\[33929\]: Invalid user webmaster from 104.248.183.0Aug  8 14:50:39 pkdns2 sshd\[33929\]: Failed password for invalid user webmaster from 104.248.183.0 port 53390 ssh2Aug  8 14:55:12 pkdns2 sshd\[34106\]: Address 104.248.183.0 maps to ashkankamyab.de, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Aug  8 14:55:12 pkdns2 sshd\[34106\]: Invalid user web3 from 104.248.183.0Aug  8 14:55:14 pkdns2 sshd\[34106\]: Failed password for invalid user web3 from 104.248.183.0 port 46442 ssh2
...

Aug  8 10:14:18 pkdns2 sshd\[23216\]: Address 104.248.183.0 maps to ashkankamyab.de, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Aug  8 10:14:18 pkdns2 sshd\[23216\]: Invalid user ui from 104.248.183.0Aug  8 10:14:21 pkdns2 sshd\[23216\]: Failed password for invalid user ui from 104.248.183.0 port 42488 ssh2Aug  8 10:18:50 pkdns2 sshd\[23380\]: Address 104.248.183.0 maps to ashkankamyab.de, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Aug  8 10:18:50 pkdns2 sshd\[23380\]: Invalid user admin from 104.248.183.0Aug  8 10:18:51 pkdns2 sshd\[23380\]: Failed password for invalid user admin from 104.248.183.0 port 35602 ssh2
...

2019-08-03T20:39:21.477243abusebot-6.cloudsearch.cf sshd\[3176\]: Invalid user test02 from 104.248.183.0 port 54616

Apr 17 21:11:32 ubuntu sshd[28067]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.183.0
Apr 17 21:11:35 ubuntu sshd[28067]: Failed password for invalid user justin from 104.248.183.0 port 58094 ssh2
Apr 17 21:13:55 ubuntu sshd[29067]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.183.0
Apr 17 21:13:57 ubuntu sshd[29067]: Failed password for invalid user ban from 104.248.183.0 port 55556 ssh2

Jul 23 13:17:30 MK-Soft-VM7 sshd\[6971\]: Invalid user tn from 104.248.183.0 port 52654
Jul 23 13:17:30 MK-Soft-VM7 sshd\[6971\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.183.0
Jul 23 13:17:32 MK-Soft-VM7 sshd\[6971\]: Failed password for invalid user tn from 104.248.183.0 port 52654 ssh2
...

Jul 18 13:37:14 master sshd[27312]: Failed password for invalid user edward from 104.248.183.0 port 50060 ssh2
Jul 18 13:44:23 master sshd[27336]: Failed password for invalid user anirudh from 104.248.183.0 port 52324 ssh2
Jul 18 13:50:51 master sshd[27348]: Failed password for invalid user david from 104.248.183.0 port 50536 ssh2
Jul 18 13:57:13 master sshd[27371]: Failed password for invalid user rancid from 104.248.183.0 port 48758 ssh2
Jul 18 14:03:49 master sshd[27676]: Failed password for invalid user bei from 104.248.183.0 port 46968 ssh2
Jul 18 14:10:06 master sshd[27703]: Failed password for invalid user lorenzo from 104.248.183.0 port 45184 ssh2
Jul 18 14:16:26 master sshd[27717]: Failed password for invalid user admin from 104.248.183.0 port 43396 ssh2
Jul 18 14:22:54 master sshd[27739]: Failed password for invalid user ubuntu from 104.248.183.0 port 41610 ssh2
Jul 18 14:29:00 master sshd[27766]: Failed password for invalid user ehsan from 104.248.183.0 port 39824 ssh2
Jul 18 14:35:18 master sshd[2

2020-09-13T21:18:40+0200 Failed SSH Authentication/Brute Force Attack. (Server 5)

Sep 13 20:21:06 marvibiene sshd[19729]: Failed password for root from 82.214.97.107 port 38202 ssh2
Sep 13 20:26:13 marvibiene sshd[20091]: Failed password for root from 82.214.97.107 port 34938 ssh2

Sep 13 19:59:40 ns308116 sshd[6929]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.190.84  user=root
Sep 13 19:59:42 ns308116 sshd[6929]: Failed password for root from 106.13.190.84 port 44146 ssh2
Sep 13 20:08:36 ns308116 sshd[18569]: Invalid user Marvan from 106.13.190.84 port 45360
Sep 13 20:08:36 ns308116 sshd[18569]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.190.84
Sep 13 20:08:37 ns308116 sshd[18569]: Failed password for invalid user Marvan from 106.13.190.84 port 45360 ssh2
...

Sep 13 12:10:46 dignus sshd[4295]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.70.180.188  user=root
Sep 13 12:10:48 dignus sshd[4295]: Failed password for root from 118.70.180.188 port 53577 ssh2
Sep 13 12:14:39 dignus sshd[4672]: Invalid user operator from 118.70.180.188 port 50981
Sep 13 12:14:39 dignus sshd[4672]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.70.180.188
Sep 13 12:14:41 dignus sshd[4672]: Failed password for invalid user operator from 118.70.180.188 port 50981 ssh2
...

Sep 13 21:05:23 srv-ubuntu-dev3 sshd[43632]: Invalid user phpagi from 35.230.150.70
Sep 13 21:05:23 srv-ubuntu-dev3 sshd[43632]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.230.150.70
Sep 13 21:05:23 srv-ubuntu-dev3 sshd[43632]: Invalid user phpagi from 35.230.150.70
Sep 13 21:05:25 srv-ubuntu-dev3 sshd[43632]: Failed password for invalid user phpagi from 35.230.150.70 port 52726 ssh2
Sep 13 21:08:52 srv-ubuntu-dev3 sshd[44053]: Invalid user login from 35.230.150.70
Sep 13 21:08:52 srv-ubuntu-dev3 sshd[44053]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.230.150.70
Sep 13 21:08:52 srv-ubuntu-dev3 sshd[44053]: Invalid user login from 35.230.150.70
Sep 13 21:08:53 srv-ubuntu-dev3 sshd[44053]: Failed password for invalid user login from 35.230.150.70 port 57452 ssh2
Sep 13 21:12:14 srv-ubuntu-dev3 sshd[44460]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=
...

Sep 13 19:42:23 ajax sshd[7553]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=166.111.68.25 
Sep 13 19:42:26 ajax sshd[7553]: Failed password for invalid user jewye from 166.111.68.25 port 53348 ssh2

 TCP (SYN) 192.99.175.182:36374 -> port 23, len 60

[2020-09-13 13:33:12] NOTICE[1239] chan_sip.c: Registration from '"1424"' failed for '185.87.108.147:56085' - Wrong password
[2020-09-13 13:33:12] SECURITY[1264] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-13T13:33:12.778-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1424",SessionID="0x7f4d480d6c18",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.87.108.147/56085",Challenge="7c2b0702",ReceivedChallenge="7c2b0702",ReceivedHash="bcd9fd03b87267e9c5780ca714ca514a"
[2020-09-13 13:34:10] NOTICE[1239] chan_sip.c: Registration from '"1422"' failed for '185.87.108.147:11331' - Wrong password
[2020-09-13 13:34:10] SECURITY[1264] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-13T13:34:10.603-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1422",SessionID="0x7f4d482e4338",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UD
...

Icarus honeypot on github

SSH Brute Force

SSH Brute-Force reported by Fail2Ban

 UDP 193.29.15.169:46174 -> port 53, len 64

[H1] Blocked by UFW

20 attempts against mh-ssh on cloud

Invalid user carlos from 111.231.190.106 port 47736