2019-12-02T00:33:11.496917shield sshd\[13503\]: Invalid user nara from 106.12.68.10 port 36512
2019-12-02T00:33:11.503063shield sshd\[13503\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.68.10
2019-12-02T00:33:13.352053shield sshd\[13503\]: Failed password for invalid user nara from 106.12.68.10 port 36512 ssh2
2019-12-02T00:39:45.742242shield sshd\[14524\]: Invalid user tgb from 106.12.68.10 port 47726
2019-12-02T00:39:45.746717shield sshd\[14524\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.68.10

Nov 18 22:25:36 localhost sshd\[6583\]: Invalid user yuvraj from 106.12.68.10 port 59518
Nov 18 22:25:36 localhost sshd\[6583\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.68.10
Nov 18 22:25:37 localhost sshd\[6583\]: Failed password for invalid user yuvraj from 106.12.68.10 port 59518 ssh2

2019-11-14T09:48:40.255055abusebot-4.cloudsearch.cf sshd\[2326\]: Invalid user ajersch from 106.12.68.10 port 39166

5x Failed Password

2019-11-11T04:58:59.888077abusebot-8.cloudsearch.cf sshd\[23521\]: Invalid user evangelia from 106.12.68.10 port 60668

Nov  2 04:37:33 MainVPS sshd[10575]: Invalid user Sujan from 106.12.68.10 port 56788
Nov  2 04:37:33 MainVPS sshd[10575]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.68.10
Nov  2 04:37:33 MainVPS sshd[10575]: Invalid user Sujan from 106.12.68.10 port 56788
Nov  2 04:37:35 MainVPS sshd[10575]: Failed password for invalid user Sujan from 106.12.68.10 port 56788 ssh2
Nov  2 04:42:00 MainVPS sshd[10968]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.68.10  user=root
Nov  2 04:42:02 MainVPS sshd[10968]: Failed password for root from 106.12.68.10 port 37572 ssh2
...

Automatic report - Banned IP Access

Oct 19 18:39:50 friendsofhawaii sshd\[24025\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.68.10  user=root
Oct 19 18:39:53 friendsofhawaii sshd\[24025\]: Failed password for root from 106.12.68.10 port 45042 ssh2
Oct 19 18:45:18 friendsofhawaii sshd\[24443\]: Invalid user con from 106.12.68.10
Oct 19 18:45:18 friendsofhawaii sshd\[24443\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.68.10
Oct 19 18:45:20 friendsofhawaii sshd\[24443\]: Failed password for invalid user con from 106.12.68.10 port 36974 ssh2

Oct 18 08:09:02 vps647732 sshd[13731]: Failed password for root from 106.12.68.10 port 55318 ssh2
...

Oct 16 08:48:43 vpn01 sshd[1311]: Failed password for root from 106.12.68.10 port 52094 ssh2
...

Oct 12 21:13:07 sachi sshd\[2362\]: Invalid user Romania2017 from 106.12.68.10
Oct 12 21:13:07 sachi sshd\[2362\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.68.10
Oct 12 21:13:08 sachi sshd\[2362\]: Failed password for invalid user Romania2017 from 106.12.68.10 port 53992 ssh2
Oct 12 21:18:59 sachi sshd\[2888\]: Invalid user Passwort1@3\$ from 106.12.68.10
Oct 12 21:18:59 sachi sshd\[2888\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.68.10

Oct  7 17:48:18 anodpoucpklekan sshd[6137]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.68.10  user=root
Oct  7 17:48:20 anodpoucpklekan sshd[6137]: Failed password for root from 106.12.68.10 port 46838 ssh2
...

Sep 27 18:12:23 icinga sshd[61352]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.68.10 
Sep 27 18:12:25 icinga sshd[61352]: Failed password for invalid user keffer from 106.12.68.10 port 43106 ssh2
Sep 27 18:31:45 icinga sshd[8888]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.68.10 
...

Sep 17 09:21:28 [host] sshd[3045]: Invalid user gallon from 106.12.68.10
Sep 17 09:21:28 [host] sshd[3045]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.68.10
Sep 17 09:21:30 [host] sshd[3045]: Failed password for invalid user gallon from 106.12.68.10 port 60494 ssh2

Sep 16 15:32:33 MK-Soft-Root1 sshd\[28628\]: Invalid user Pirkka from 106.12.68.10 port 56938
Sep 16 15:32:33 MK-Soft-Root1 sshd\[28628\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.68.10
Sep 16 15:32:35 MK-Soft-Root1 sshd\[28628\]: Failed password for invalid user Pirkka from 106.12.68.10 port 56938 ssh2
...

Sep 12 01:08:52 hb sshd\[22310\]: Invalid user guest from 106.12.68.10
Sep 12 01:08:52 hb sshd\[22310\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.68.10
Sep 12 01:08:54 hb sshd\[22310\]: Failed password for invalid user guest from 106.12.68.10 port 60340 ssh2
Sep 12 01:15:56 hb sshd\[22941\]: Invalid user minecraft from 106.12.68.10
Sep 12 01:15:56 hb sshd\[22941\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.68.10

SIP/5060 Probe, BF, Hack -

SIP/5060 Probe, BF, Hack -

Aug 26 23:55:31 mout sshd[25072]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.68.150  user=root
Aug 26 23:55:33 mout sshd[25072]: Failed password for root from 106.12.68.150 port 53950 ssh2

Aug 26 21:17:56 mout sshd[11802]: Invalid user ftpuser from 106.12.68.150 port 53102
Aug 26 21:17:58 mout sshd[11802]: Failed password for invalid user ftpuser from 106.12.68.150 port 53102 ssh2
Aug 26 21:17:59 mout sshd[11802]: Disconnected from invalid user ftpuser 106.12.68.150 port 53102 [preauth]

Aug 26 12:33:53 plex-server sshd[3986648]: Failed password for root from 106.12.68.244 port 56444 ssh2
Aug 26 12:37:57 plex-server sshd[3988161]: Invalid user wave from 106.12.68.244 port 47686
Aug 26 12:37:57 plex-server sshd[3988161]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.68.244 
Aug 26 12:37:57 plex-server sshd[3988161]: Invalid user wave from 106.12.68.244 port 47686
Aug 26 12:37:59 plex-server sshd[3988161]: Failed password for invalid user wave from 106.12.68.244 port 47686 ssh2
...

DATE:2020-08-25 00:37:52,IP:106.12.68.244,MATCHES:11,PORT:ssh

2020-08-18T12:12:28.781661+02:00  sshd[13137]: Failed password for root from 106.12.68.244 port 51476 ssh2

Aug 16 13:25:49 gospond sshd[13407]: Invalid user mc2 from 106.12.68.150 port 45032
...

Bruteforce detected by fail2ban

Aug  7 19:46:26 ns382633 sshd\[23441\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.68.150  user=root
Aug  7 19:46:27 ns382633 sshd\[23441\]: Failed password for root from 106.12.68.150 port 42160 ssh2
Aug  7 19:53:33 ns382633 sshd\[24416\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.68.150  user=root
Aug  7 19:53:35 ns382633 sshd\[24416\]: Failed password for root from 106.12.68.150 port 42160 ssh2
Aug  7 19:54:42 ns382633 sshd\[24498\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.68.150  user=root

Aug  4 07:25:01 vps46666688 sshd[6008]: Failed password for root from 106.12.68.244 port 33214 ssh2
...

2020-08-02 UTC: (28x) - root(28x)

2020-07-25T23:04:28.679632dmca.cloudsearch.cf sshd[4703]: Invalid user henry from 106.12.68.197 port 44700
2020-07-25T23:04:28.684858dmca.cloudsearch.cf sshd[4703]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.68.197
2020-07-25T23:04:28.679632dmca.cloudsearch.cf sshd[4703]: Invalid user henry from 106.12.68.197 port 44700
2020-07-25T23:04:31.115891dmca.cloudsearch.cf sshd[4703]: Failed password for invalid user henry from 106.12.68.197 port 44700 ssh2
2020-07-25T23:09:23.252596dmca.cloudsearch.cf sshd[4754]: Invalid user chentao from 106.12.68.197 port 51968
2020-07-25T23:09:23.257587dmca.cloudsearch.cf sshd[4754]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.68.197
2020-07-25T23:09:23.252596dmca.cloudsearch.cf sshd[4754]: Invalid user chentao from 106.12.68.197 port 51968
2020-07-25T23:09:25.854115dmca.cloudsearch.cf sshd[4754]: Failed password for invalid user chentao from 106.12.68.19
...

Invalid user sdtdserver from 106.12.68.197 port 49068

Jul 23 22:49:45 abendstille sshd\[27503\]: Invalid user developer from 106.12.68.244
Jul 23 22:49:45 abendstille sshd\[27503\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.68.244
Jul 23 22:49:46 abendstille sshd\[27503\]: Failed password for invalid user developer from 106.12.68.244 port 51774 ssh2
Jul 23 22:54:39 abendstille sshd\[32501\]: Invalid user narendra from 106.12.68.244
Jul 23 22:54:39 abendstille sshd\[32501\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.68.244
...

Unauthorized connection attempt detected from IP address 90.95.26.136 to port 4567 [J]

Unauthorized connection attempt detected from IP address 220.191.208.136 to port 80 [T]

Unauthorized connection attempt detected from IP address 223.229.174.110 to port 1433 [J]

2020-01-22T13:51:34.516995ns386461 sshd\[11386\]: Invalid user proman from 123.195.99.9 port 38762
2020-01-22T13:51:34.521664ns386461 sshd\[11386\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123-195-99-9.dynamic.kbronet.com.tw
2020-01-22T13:51:36.710152ns386461 sshd\[11386\]: Failed password for invalid user proman from 123.195.99.9 port 38762 ssh2
2020-01-22T13:54:14.929840ns386461 sshd\[13694\]: Invalid user fd from 123.195.99.9 port 56314
2020-01-22T13:54:14.934495ns386461 sshd\[13694\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123-195-99-9.dynamic.kbronet.com.tw
...

Unauthorized connection attempt detected from IP address 181.118.123.125 to port 23 [J]

Unauthorized connection attempt detected from IP address 92.24.63.213 to port 81 [J]

Unauthorized connection attempt detected from IP address 186.211.102.163 to port 80 [J]

Unauthorized connection attempt detected from IP address 79.136.252.126 to port 80 [J]

unauthorized connection attempt

Unauthorized connection attempt detected from IP address 150.109.231.21 to port 3390 [J]

Unauthorized connection attempt detected from IP address 220.121.233.141 to port 5555 [J]

Unauthorized connection attempt detected from IP address 103.54.202.195 to port 23 [J]

Unauthorized connection attempt detected from IP address 179.97.202.154 to port 23 [J]

Unauthorized connection attempt detected from IP address 101.109.247.133 to port 80 [J]

Unauthorized connection attempt detected from IP address 125.161.131.47 to port 8080 [J]