Aug 17 09:46:06 gw1 sshd[4516]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.192.129
Aug 17 09:46:08 gw1 sshd[4516]: Failed password for invalid user 1 from 106.12.192.129 port 51532 ssh2
...

Invalid user inssserver from 106.12.192.129 port 55636

Jul  9 13:26:02 game-panel sshd[19337]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.192.129
Jul  9 13:26:05 game-panel sshd[19337]: Failed password for invalid user mri from 106.12.192.129 port 52916 ssh2
Jul  9 13:28:11 game-panel sshd[19454]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.192.129

Jun  2 11:05:35 piServer sshd[20829]: Failed password for root from 106.12.192.129 port 53234 ssh2
Jun  2 11:07:34 piServer sshd[21026]: Failed password for root from 106.12.192.129 port 42812 ssh2
...

May 30 16:31:39 Host-KEWR-E sshd[11884]: User root from 106.12.192.129 not allowed because not listed in AllowUsers
...

May 26 02:31:14 dhoomketu sshd[195231]: Invalid user vasant\r from 106.12.192.129 port 32820
May 26 02:31:14 dhoomketu sshd[195231]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.192.129 
May 26 02:31:14 dhoomketu sshd[195231]: Invalid user vasant\r from 106.12.192.129 port 32820
May 26 02:31:16 dhoomketu sshd[195231]: Failed password for invalid user vasant\r from 106.12.192.129 port 32820 ssh2
May 26 02:34:30 dhoomketu sshd[195315]: Invalid user ftpmonitoring\r from 106.12.192.129 port 36064
...

May 13 18:06:22 plex sshd[21447]: Invalid user badrul from 106.12.192.129 port 35868

$f2bV_matches

Invalid user 22 from 106.12.192.129 port 37384

SSH Brute Force

fail2ban

Feb 11 05:48:18 hpm sshd\[6645\]: Invalid user wwd from 106.12.192.129
Feb 11 05:48:18 hpm sshd\[6645\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.192.129
Feb 11 05:48:20 hpm sshd\[6645\]: Failed password for invalid user wwd from 106.12.192.129 port 38584 ssh2
Feb 11 05:52:10 hpm sshd\[7017\]: Invalid user tmc from 106.12.192.129
Feb 11 05:52:10 hpm sshd\[7017\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.192.129

Unauthorized connection attempt detected from IP address 106.12.192.129 to port 2220 [J]

Unauthorized connection attempt detected from IP address 106.12.192.129 to port 2220 [J]

Automatic report - SSH Brute-Force Attack

Dec 22 23:24:26 server sshd\[28103\]: Failed password for invalid user manoochehri from 106.12.192.129 port 42046 ssh2
Dec 23 09:17:34 server sshd\[27563\]: Invalid user taar from 106.12.192.129
Dec 23 09:17:34 server sshd\[27563\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.192.129 
Dec 23 09:17:36 server sshd\[27563\]: Failed password for invalid user taar from 106.12.192.129 port 48076 ssh2
Dec 23 09:29:14 server sshd\[30630\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.192.129  user=root
...

2019-12-16T08:42:36.289005shield sshd\[23105\]: Invalid user nopass from 106.12.192.129 port 38268
2019-12-16T08:42:36.293509shield sshd\[23105\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.192.129
2019-12-16T08:42:38.461815shield sshd\[23105\]: Failed password for invalid user nopass from 106.12.192.129 port 38268 ssh2
2019-12-16T08:49:11.741731shield sshd\[24727\]: Invalid user rox01 from 106.12.192.129 port 37498
2019-12-16T08:49:11.746359shield sshd\[24727\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.192.129

2020-08-24T18:19:30.616799vps-d63064a2 sshd[24055]: User root from 106.12.192.10 not allowed because not listed in AllowUsers
2020-08-24T18:19:32.617726vps-d63064a2 sshd[24055]: Failed password for invalid user root from 106.12.192.10 port 52078 ssh2
2020-08-24T18:22:09.227839vps-d63064a2 sshd[24096]: Invalid user mrunal from 106.12.192.10 port 56474
2020-08-24T18:22:09.234935vps-d63064a2 sshd[24096]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.192.10
2020-08-24T18:22:09.227839vps-d63064a2 sshd[24096]: Invalid user mrunal from 106.12.192.10 port 56474
2020-08-24T18:22:11.024795vps-d63064a2 sshd[24096]: Failed password for invalid user mrunal from 106.12.192.10 port 56474 ssh2
...

Invalid user dda from 106.12.192.10 port 54720

Automatic Fail2ban report - Trying login SSH

2020-08-19T10:18:41.246414vps751288.ovh.net sshd\[28178\]: Invalid user mq from 106.12.192.91 port 44946
2020-08-19T10:18:41.253455vps751288.ovh.net sshd\[28178\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.192.91
2020-08-19T10:18:42.904750vps751288.ovh.net sshd\[28178\]: Failed password for invalid user mq from 106.12.192.91 port 44946 ssh2
2020-08-19T10:23:12.194738vps751288.ovh.net sshd\[28228\]: Invalid user updater from 106.12.192.91 port 40618
2020-08-19T10:23:12.204228vps751288.ovh.net sshd\[28228\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.192.91

20 attempts against mh-ssh on echoip

Aug  1 04:47:43 rush sshd[30592]: Failed password for root from 106.12.192.91 port 43008 ssh2
Aug  1 04:50:07 rush sshd[30618]: Failed password for root from 106.12.192.91 port 41650 ssh2
...

Invalid user rosa from 106.12.192.204 port 48688

Jul 21 16:31:45 PorscheCustomer sshd[27930]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.192.204
Jul 21 16:31:47 PorscheCustomer sshd[27930]: Failed password for invalid user test1 from 106.12.192.204 port 38008 ssh2
Jul 21 16:32:50 PorscheCustomer sshd[27951]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.192.204
...

Jul 21 06:47:16 fhem-rasp sshd[8425]: Invalid user easy from 106.12.192.204 port 58794
...

Jul 19 13:21:52 ns382633 sshd\[26055\]: Invalid user starbound from 106.12.192.91 port 34976
Jul 19 13:21:52 ns382633 sshd\[26055\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.192.91
Jul 19 13:21:55 ns382633 sshd\[26055\]: Failed password for invalid user starbound from 106.12.192.91 port 34976 ssh2
Jul 19 13:24:10 ns382633 sshd\[26294\]: Invalid user xiang from 106.12.192.91 port 57380
Jul 19 13:24:10 ns382633 sshd\[26294\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.192.91

Jul 16 21:34:45 mail sshd[539004]: Invalid user niraj from 106.12.192.204 port 58236
Jul 16 21:34:47 mail sshd[539004]: Failed password for invalid user niraj from 106.12.192.204 port 58236 ssh2
Jul 16 21:46:56 mail sshd[539410]: Invalid user wuhao from 106.12.192.204 port 44310
...

Brute-force attempt banned

Jul 11 05:45:37 havingfunrightnow sshd[15225]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.192.91 
Jul 11 05:45:40 havingfunrightnow sshd[15225]: Failed password for invalid user adi from 106.12.192.91 port 58370 ssh2
Jul 11 05:55:49 havingfunrightnow sshd[15463]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.192.91 
...

Failed password for invalid user marlin from 106.12.192.204 port 33576 ssh2

2020-06-30T03:13:26.584140randservbullet-proofcloud-66.localdomain sshd[20105]: Invalid user design from 106.12.192.10 port 57350
2020-06-30T03:13:26.588564randservbullet-proofcloud-66.localdomain sshd[20105]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.192.10
2020-06-30T03:13:26.584140randservbullet-proofcloud-66.localdomain sshd[20105]: Invalid user design from 106.12.192.10 port 57350
2020-06-30T03:13:28.816533randservbullet-proofcloud-66.localdomain sshd[20105]: Failed password for invalid user design from 106.12.192.10 port 57350 ssh2
...

Nov  4 03:21:33 ws19vmsma01 sshd[137134]: Failed password for root from 106.13.35.206 port 36484 ssh2
...

" "

Nov  4 01:28:59 web1 postfix/smtpd[24924]: warning: unknown[190.115.254.15]: SASL PLAIN authentication failed: authentication failure
...

Nov  4 10:28:35 sauna sshd[221296]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.6.178.111
Nov  4 10:28:37 sauna sshd[221296]: Failed password for invalid user elli123 from 171.6.178.111 port 7362 ssh2
...

Nov  4 03:28:09 ny01 sshd[16858]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.255.159.177
Nov  4 03:28:10 ny01 sshd[16858]: Failed password for invalid user user from 116.255.159.177 port 34510 ssh2
Nov  4 03:33:16 ny01 sshd[17315]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.255.159.177

Nov  4 08:14:13 localhost sshd\[13261\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.213.126  user=root
Nov  4 08:14:15 localhost sshd\[13261\]: Failed password for root from 178.128.213.126 port 36730 ssh2
Nov  4 08:18:39 localhost sshd\[13760\]: Invalid user 34 from 178.128.213.126 port 46922

2019-11-04T09:13:43.816523host3.slimhost.com.ua sshd[1173470]: Invalid user justin from 80.211.67.17 port 35986
2019-11-04T09:13:43.820430host3.slimhost.com.ua sshd[1173470]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.67.17
2019-11-04T09:13:43.816523host3.slimhost.com.ua sshd[1173470]: Invalid user justin from 80.211.67.17 port 35986
2019-11-04T09:13:45.706169host3.slimhost.com.ua sshd[1173470]: Failed password for invalid user justin from 80.211.67.17 port 35986 ssh2
2019-11-04T09:17:27.633877host3.slimhost.com.ua sshd[1177016]: Invalid user btj from 80.211.67.17 port 44728
...

rdp brute-force attack

Nov  4 08:17:53 ip-172-31-1-72 sshd\[18608\]: Invalid user git from 124.42.117.243
Nov  4 08:17:53 ip-172-31-1-72 sshd\[18608\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.42.117.243
Nov  4 08:17:55 ip-172-31-1-72 sshd\[18608\]: Failed password for invalid user git from 124.42.117.243 port 51360 ssh2
Nov  4 08:23:43 ip-172-31-1-72 sshd\[18712\]: Invalid user operador from 124.42.117.243
Nov  4 08:23:43 ip-172-31-1-72 sshd\[18712\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.42.117.243

2019-11-04T08:15:40.101272shield sshd\[3110\]: Invalid user pathy from 103.232.120.109 port 34182
2019-11-04T08:15:40.105852shield sshd\[3110\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.232.120.109
2019-11-04T08:15:42.051925shield sshd\[3110\]: Failed password for invalid user pathy from 103.232.120.109 port 34182 ssh2
2019-11-04T08:21:07.959220shield sshd\[3702\]: Invalid user vision from 103.232.120.109 port 46292
2019-11-04T08:21:07.965757shield sshd\[3702\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.232.120.109

Nov  4 01:28:54 web1 postfix/smtpd[24924]: warning: unknown[123.21.117.201]: SASL PLAIN authentication failed: authentication failure
...

Nov  4 08:12:30 bouncer sshd\[592\]: Invalid user user01 from 112.186.77.126 port 56770
Nov  4 08:12:30 bouncer sshd\[592\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.186.77.126 
Nov  4 08:12:32 bouncer sshd\[592\]: Failed password for invalid user user01 from 112.186.77.126 port 56770 ssh2
...

Unauthorised access (Nov  4) SRC=178.207.108.110 LEN=52 TTL=108 ID=6889 DF TCP DPT=445 WINDOW=8192 SYN

Lines containing IP5.188.84.15:

5.188.84.15 - - [04/Nov/2019:06:16:20 +0000] "POST /pod/wp-comments-post.php HTTP/1.0" 200 84049 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKhostname/537.36 (KHTML, like Gecko) Chrome/66.0.3359.181 Safari/537.36"

Username: UgoNip
Used Mailaddress: 
User IP:  5.188.84.15
Message:  Providing Preoperative Protection Preoperatively, sorrow focuses on monhostnameoring fhostnameted addhostnameional increases in intracranial exigency and avoiding activhostnameies that cause transient increases in intracranial pressure. However, because they may be enduring predetermined meet whostnameh whostnameh despair, they may comprise tribulation distinguishing between types of pain (sour or slow-whostnameted), describing the concentration of the pain, and determining whether the irrhostnameation is woeclipse or better. These enzymes are grouped into classification I and II, depending on their know-how to splhostname single- and double-stranded ........
------------------------------

no