Oct 16 14:25:20 MK-Soft-VM5 sshd[21530]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.80.204 
Oct 16 14:25:22 MK-Soft-VM5 sshd[21530]: Failed password for invalid user support!@# from 106.12.80.204 port 54152 ssh2
...

SSH Brute Force, server-1 sshd[32765]: Failed password for root from 106.12.80.204 port 52534 ssh2

Sep 25 07:05:53 www2 sshd\[56007\]: Invalid user urbankare from 106.12.80.204Sep 25 07:05:55 www2 sshd\[56007\]: Failed password for invalid user urbankare from 106.12.80.204 port 50586 ssh2Sep 25 07:09:19 www2 sshd\[56264\]: Invalid user sysa from 106.12.80.204
...

Sep  1 00:10:27 SilenceServices sshd[14407]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.80.204
Sep  1 00:10:29 SilenceServices sshd[14407]: Failed password for invalid user htpguides from 106.12.80.204 port 44138 ssh2
Sep  1 00:13:21 SilenceServices sshd[16547]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.80.204

Aug 29 09:26:54 localhost sshd\[106026\]: Invalid user egghead from 106.12.80.204 port 54002
Aug 29 09:26:54 localhost sshd\[106026\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.80.204
Aug 29 09:26:56 localhost sshd\[106026\]: Failed password for invalid user egghead from 106.12.80.204 port 54002 ssh2
Aug 29 09:29:51 localhost sshd\[106116\]: Invalid user oy from 106.12.80.204 port 52062
Aug 29 09:29:51 localhost sshd\[106116\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.80.204
...

Aug 29 06:12:23 localhost sshd\[99661\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.80.204  user=root
Aug 29 06:12:25 localhost sshd\[99661\]: Failed password for root from 106.12.80.204 port 32846 ssh2
Aug 29 06:15:39 localhost sshd\[99767\]: Invalid user download from 106.12.80.204 port 59132
Aug 29 06:15:39 localhost sshd\[99767\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.80.204
Aug 29 06:15:41 localhost sshd\[99767\]: Failed password for invalid user download from 106.12.80.204 port 59132 ssh2
...

Invalid user admin from 106.12.80.204 port 35616

2019-07-11T00:23:42.586621enmeeting.mahidol.ac.th sshd\[6073\]: User root from 106.12.80.204 not allowed because not listed in AllowUsers
2019-07-11T00:23:42.711736enmeeting.mahidol.ac.th sshd\[6073\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.80.204  user=root
2019-07-11T00:23:44.604087enmeeting.mahidol.ac.th sshd\[6073\]: Failed password for invalid user root from 106.12.80.204 port 39980 ssh2
...

Brute force SMTP login attempted.
...

Unauthorized SSH login attempts

Jul  3 09:05:37 MK-Soft-VM6 sshd\[27015\]: Invalid user WinD3str0y from 106.12.80.204 port 58590
Jul  3 09:05:37 MK-Soft-VM6 sshd\[27015\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.80.204
Jul  3 09:05:39 MK-Soft-VM6 sshd\[27015\]: Failed password for invalid user WinD3str0y from 106.12.80.204 port 58590 ssh2
...

Port scan denied

2020-08-18T00:22:54.551625vps773228.ovh.net sshd[5721]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.80.246
2020-08-18T00:22:54.534006vps773228.ovh.net sshd[5721]: Invalid user guest from 106.12.80.246 port 16588
2020-08-18T00:22:56.213108vps773228.ovh.net sshd[5721]: Failed password for invalid user guest from 106.12.80.246 port 16588 ssh2
2020-08-18T00:28:46.461957vps773228.ovh.net sshd[5820]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.80.246  user=root
2020-08-18T00:28:48.449410vps773228.ovh.net sshd[5820]: Failed password for root from 106.12.80.246 port 19193 ssh2
...

Port scan denied

1596055655 - 07/30/2020 03:47:35 Host: 106.12.80.62/106.12.80.62 Port: 6379 TCP Blocked
...

Invalid user nuevo from 106.12.80.246 port 17941

SASL PLAIN auth failed: ruser=...

2020-05-26T14:38:59.062339  sshd[20443]: Invalid user uplink from 106.12.80.138 port 57132
2020-05-26T14:38:59.077545  sshd[20443]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.80.138
2020-05-26T14:38:59.062339  sshd[20443]: Invalid user uplink from 106.12.80.138 port 57132
2020-05-26T14:39:00.517458  sshd[20443]: Failed password for invalid user uplink from 106.12.80.138 port 57132 ssh2
...

May 16 04:41:23 PorscheCustomer sshd[22082]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.80.246
May 16 04:41:25 PorscheCustomer sshd[22082]: Failed password for invalid user test from 106.12.80.246 port 63341 ssh2
May 16 04:46:44 PorscheCustomer sshd[22277]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.80.246
...

2020-05-14T14:20:11.1675111240 sshd\[2038\]: Invalid user support from 106.12.80.138 port 47392
2020-05-14T14:20:11.1723681240 sshd\[2038\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.80.138
2020-05-14T14:20:13.1762671240 sshd\[2038\]: Failed password for invalid user support from 106.12.80.138 port 47392 ssh2
...

$f2bV_matches

$f2bV_matches

May  8 16:15:28 dev0-dcde-rnet sshd[27599]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.80.246
May  8 16:15:30 dev0-dcde-rnet sshd[27599]: Failed password for invalid user deb from 106.12.80.246 port 38886 ssh2
May  8 16:21:35 dev0-dcde-rnet sshd[27647]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.80.246

May  8 04:58:25 pi sshd[16206]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.80.138 
May  8 04:58:27 pi sshd[16206]: Failed password for invalid user ghost from 106.12.80.138 port 33596 ssh2

May  5 01:14:26 haigwepa sshd[1796]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.80.138 
May  5 01:14:28 haigwepa sshd[1796]: Failed password for invalid user sm from 106.12.80.138 port 45738 ssh2
...

2020-04-21T03:52:16.895090abusebot.cloudsearch.cf sshd[4800]: Invalid user oracle from 106.12.80.138 port 42120
2020-04-21T03:52:16.900642abusebot.cloudsearch.cf sshd[4800]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.80.138
2020-04-21T03:52:16.895090abusebot.cloudsearch.cf sshd[4800]: Invalid user oracle from 106.12.80.138 port 42120
2020-04-21T03:52:18.599970abusebot.cloudsearch.cf sshd[4800]: Failed password for invalid user oracle from 106.12.80.138 port 42120 ssh2
2020-04-21T03:57:37.069271abusebot.cloudsearch.cf sshd[5117]: Invalid user rz from 106.12.80.138 port 50160
2020-04-21T03:57:37.075008abusebot.cloudsearch.cf sshd[5117]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.80.138
2020-04-21T03:57:37.069271abusebot.cloudsearch.cf sshd[5117]: Invalid user rz from 106.12.80.138 port 50160
2020-04-21T03:57:38.844263abusebot.cloudsearch.cf sshd[5117]: Failed password for invalid user 
...

Jul 31 02:36:38 intra sshd\[4258\]: Invalid user toor from 172.81.250.106Jul 31 02:36:40 intra sshd\[4258\]: Failed password for invalid user toor from 172.81.250.106 port 51550 ssh2Jul 31 02:41:32 intra sshd\[4311\]: Invalid user arun from 172.81.250.106Jul 31 02:41:35 intra sshd\[4311\]: Failed password for invalid user arun from 172.81.250.106 port 46606 ssh2Jul 31 02:46:28 intra sshd\[4394\]: Invalid user abc from 172.81.250.106Jul 31 02:46:30 intra sshd\[4394\]: Failed password for invalid user abc from 172.81.250.106 port 41698 ssh2
...

pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.218.243.137  user=root
Failed password for root from 173.218.243.137 port 36218 ssh2
Invalid user hwang from 173.218.243.137 port 32908
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.218.243.137
Failed password for invalid user hwang from 173.218.243.137 port 32908 ssh2

Jul 31 00:39:23 host sshd\[2511\]: Invalid user software from 129.204.254.4 port 47878
Jul 31 00:39:23 host sshd\[2511\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.254.4
...

Port scan attempt detected by AWS-CCS, CTS, India

Port scan on 16 port(s): 9968 9982 10037 10040 10046 10049 10053 10058 10066 45012 45061 45150 45199 45535 45589 45698

Jul 31 00:40:48 bouncer sshd\[13651\]: Invalid user admin from 173.244.209.5 port 43522
Jul 31 00:40:48 bouncer sshd\[13651\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.244.209.5 
Jul 31 00:40:50 bouncer sshd\[13651\]: Failed password for invalid user admin from 173.244.209.5 port 43522 ssh2
...

Jul 31 05:53:26 vibhu-HP-Z238-Microtower-Workstation sshd\[19818\]: Invalid user 1 from 84.91.128.47
Jul 31 05:53:26 vibhu-HP-Z238-Microtower-Workstation sshd\[19818\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.91.128.47
Jul 31 05:53:28 vibhu-HP-Z238-Microtower-Workstation sshd\[19818\]: Failed password for invalid user 1 from 84.91.128.47 port 35354 ssh2
Jul 31 05:58:04 vibhu-HP-Z238-Microtower-Workstation sshd\[19940\]: Invalid user slash from 84.91.128.47
Jul 31 05:58:04 vibhu-HP-Z238-Microtower-Workstation sshd\[19940\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.91.128.47
...

2019-07-30 17:40:27 H=(ludonet.it) [157.25.23.231]:52808 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/query/ip/157.25.23.231)
2019-07-30 17:40:28 H=(ludonet.it) [157.25.23.231]:52808 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/query/ip/157.25.23.231)
2019-07-30 17:40:28 H=(ludonet.it) [157.25.23.231]:52808 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/query/ip/157.25.23.231)
...

Jul 31 00:13:07 **** sshd[6447]: User root from 202.75.216.136 not allowed because not listed in AllowUsers

Jul 31 03:44:07 srv-4 sshd\[15701\]: Invalid user amber from 5.187.148.10
Jul 31 03:44:07 srv-4 sshd\[15701\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.187.148.10
Jul 31 03:44:08 srv-4 sshd\[15701\]: Failed password for invalid user amber from 5.187.148.10 port 48388 ssh2
...

Jul 31 01:42:16 ubuntu-2gb-nbg1-dc3-1 sshd[30518]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.84.157.178
Jul 31 01:42:18 ubuntu-2gb-nbg1-dc3-1 sshd[30518]: Failed password for invalid user prog from 222.84.157.178 port 56076 ssh2
...

2019-07-30T23:43:59.508689abusebot-7.cloudsearch.cf sshd\[30114\]: Invalid user ubnt from 178.32.105.63 port 50724

Jul 31 00:40:01 [munged] sshd[22724]: Invalid user webster from 219.91.232.10 port 43666
Jul 31 00:40:01 [munged] sshd[22724]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.91.232.10

2019-07-30 17:39:52 H=(liss.it) [186.72.74.70]:51015 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS)
2019-07-30 17:39:53 H=(liss.it) [186.72.74.70]:51015 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/query/ip/186.72.74.70)
2019-07-30 17:39:53 H=(liss.it) [186.72.74.70]:51015 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/query/ip/186.72.74.70)
...

Jul 31 02:46:57 lnxded63 sshd[32729]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.179.120.70