Oct  7 12:45:07 friendsofhawaii sshd\[3124\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.238.236.78  user=root
Oct  7 12:45:09 friendsofhawaii sshd\[3124\]: Failed password for root from 115.238.236.78 port 49938 ssh2
Oct  7 12:49:17 friendsofhawaii sshd\[3442\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.238.236.78  user=root
Oct  7 12:49:19 friendsofhawaii sshd\[3442\]: Failed password for root from 115.238.236.78 port 56982 ssh2
Oct  7 12:53:26 friendsofhawaii sshd\[3745\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.238.236.78  user=root

Oct  4 14:19:53 ns37 sshd[4061]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.238.236.78

2019-09-29T10:38:31.3279981495-001 sshd\[16079\]: Failed password for invalid user student from 115.238.236.78 port 34056 ssh2
2019-09-29T10:50:14.1567761495-001 sshd\[17029\]: Invalid user ts3bot3 from 115.238.236.78 port 57042
2019-09-29T10:50:14.1640711495-001 sshd\[17029\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.238.236.78
2019-09-29T10:50:16.0575341495-001 sshd\[17029\]: Failed password for invalid user ts3bot3 from 115.238.236.78 port 57042 ssh2
2019-09-29T10:56:04.1874621495-001 sshd\[17512\]: Invalid user t from 115.238.236.78 port 40308
2019-09-29T10:56:04.1943051495-001 sshd\[17512\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.238.236.78
...

Sep 28 14:11:31 mail sshd[13889]: Invalid user uv from 115.238.236.78
Sep 28 14:11:31 mail sshd[13889]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.238.236.78
Sep 28 14:11:31 mail sshd[13889]: Invalid user uv from 115.238.236.78
Sep 28 14:11:33 mail sshd[13889]: Failed password for invalid user uv from 115.238.236.78 port 39226 ssh2
Sep 28 14:29:40 mail sshd[9570]: Invalid user vagrant from 115.238.236.78
...

Nov  3 16:38:15 debian sshd\[9582\]: Invalid user Sporting2016 from 115.238.236.74 port 20349
Nov  3 16:38:15 debian sshd\[9582\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.238.236.74
Nov  3 16:38:17 debian sshd\[9582\]: Failed password for invalid user Sporting2016 from 115.238.236.74 port 20349 ssh2
...

Oct 31 18:38:11 MK-Soft-VM4 sshd[21332]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.238.236.74 
Oct 31 18:38:13 MK-Soft-VM4 sshd[21332]: Failed password for invalid user 321 from 115.238.236.74 port 34131 ssh2
...

Invalid user samplee from 115.238.236.74 port 27997

2019-10-28T14:51:27.156761tmaserv sshd\[32627\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.238.236.74  user=root
2019-10-28T14:51:29.209637tmaserv sshd\[32627\]: Failed password for root from 115.238.236.74 port 51729 ssh2
2019-10-28T14:56:29.989941tmaserv sshd\[386\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.238.236.74  user=root
2019-10-28T14:56:32.504643tmaserv sshd\[386\]: Failed password for root from 115.238.236.74 port 5135 ssh2
2019-10-28T15:07:10.197662tmaserv sshd\[860\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.238.236.74  user=root
2019-10-28T15:07:11.708957tmaserv sshd\[860\]: Failed password for root from 115.238.236.74 port 61608 ssh2
...

Oct 28 07:47:56 vps691689 sshd[20999]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.238.236.74
Oct 28 07:47:58 vps691689 sshd[20999]: Failed password for invalid user ipko from 115.238.236.74 port 18605 ssh2
...

Oct 28 01:50:50 hosting sshd[1201]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.238.236.74  user=root
Oct 28 01:50:52 hosting sshd[1201]: Failed password for root from 115.238.236.74 port 18769 ssh2
Oct 28 02:04:02 hosting sshd[2116]: Invalid user openfire from 115.238.236.74 port 7068
Oct 28 02:04:02 hosting sshd[2116]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.238.236.74
Oct 28 02:04:02 hosting sshd[2116]: Invalid user openfire from 115.238.236.74 port 7068
Oct 28 02:04:04 hosting sshd[2116]: Failed password for invalid user openfire from 115.238.236.74 port 7068 ssh2
...

Oct 27 06:55:22 vpn01 sshd[2549]: Failed password for root from 115.238.236.74 port 10600 ssh2
...

Oct 26 16:54:11 plusreed sshd[4007]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.238.236.74  user=root
Oct 26 16:54:13 plusreed sshd[4007]: Failed password for root from 115.238.236.74 port 10087 ssh2
...

Oct 26 15:49:58 * sshd[19998]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.238.236.74
Oct 26 15:49:59 * sshd[19998]: Failed password for invalid user backups from 115.238.236.74 port 37809 ssh2

Oct 26 11:32:36 meumeu sshd[13822]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.238.236.74 
Oct 26 11:32:37 meumeu sshd[13822]: Failed password for invalid user sdtdserver from 115.238.236.74 port 35112 ssh2
Oct 26 11:38:03 meumeu sshd[14352]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.238.236.74 
...

web-1 [ssh_2] SSH Attack

Oct 24 20:36:57 MK-Soft-VM6 sshd[7292]: Failed password for root from 115.238.236.74 port 37310 ssh2
...

Sep 30 10:50:57 vtv3 sshd\[29608\]: Invalid user fedora from 115.238.236.74 port 56978
Sep 30 10:50:57 vtv3 sshd\[29608\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.238.236.74
Sep 30 10:50:59 vtv3 sshd\[29608\]: Failed password for invalid user fedora from 115.238.236.74 port 56978 ssh2
Sep 30 10:57:01 vtv3 sshd\[430\]: Invalid user prueba from 115.238.236.74 port 1062
Sep 30 10:57:01 vtv3 sshd\[430\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.238.236.74
Sep 30 11:10:13 vtv3 sshd\[7453\]: Invalid user temp from 115.238.236.74 port 27190
Sep 30 11:10:13 vtv3 sshd\[7453\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.238.236.74
Sep 30 11:10:15 vtv3 sshd\[7453\]: Failed password for invalid user temp from 115.238.236.74 port 27190 ssh2
Sep 30 11:14:34 vtv3 sshd\[9450\]: Invalid user guest from 115.238.236.74 port 37710
Sep 30 11:14:34 vtv3 sshd\[9450\]: pam_u

Oct 22 19:48:07 vmanager6029 sshd\[19269\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.238.236.74  user=root
Oct 22 19:48:09 vmanager6029 sshd\[19269\]: Failed password for root from 115.238.236.74 port 27917 ssh2
Oct 22 19:52:27 vmanager6029 sshd\[19354\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.238.236.74  user=root

Oct 22 08:10:00 icinga sshd[18987]: Failed password for root from 115.238.236.74 port 5667 ssh2
...

firewall-block, port(s): 1433/tcp

Dec  1 08:13:18 hpm sshd\[10043\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.42.224  user=root
Dec  1 08:13:20 hpm sshd\[10043\]: Failed password for root from 182.61.42.224 port 40708 ssh2
Dec  1 08:16:43 hpm sshd\[10352\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.42.224  user=bin
Dec  1 08:16:44 hpm sshd\[10352\]: Failed password for bin from 182.61.42.224 port 47160 ssh2
Dec  1 08:22:45 hpm sshd\[10945\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.42.224  user=root

Automatic report - Banned IP Access

01.12.2019 18:39:04 SSH access blocked by firewall

2019-12-01T15:46:23.872432abusebot.cloudsearch.cf sshd\[30372\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.168.115.36  user=smmsp

Dec  1 05:36:55 php1 sshd\[2363\]: Invalid user edwrad from 35.236.26.62
Dec  1 05:36:55 php1 sshd\[2363\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.236.26.62
Dec  1 05:36:57 php1 sshd\[2363\]: Failed password for invalid user edwrad from 35.236.26.62 port 49114 ssh2
Dec  1 05:42:22 php1 sshd\[2943\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.236.26.62  user=root
Dec  1 05:42:23 php1 sshd\[2943\]: Failed password for root from 35.236.26.62 port 56946 ssh2

MultiHost/MultiPort Probe, Scan, Hack -

Dec  1 17:27:38 dedicated sshd[14857]: Invalid user now from 179.183.212.67 port 49655

firewall-block, port(s): 139/tcp

Dec  1 08:01:41 hpm sshd\[8767\]: Invalid user server from 147.50.3.30
Dec  1 08:01:41 hpm sshd\[8767\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.50.3.30
Dec  1 08:01:43 hpm sshd\[8767\]: Failed password for invalid user server from 147.50.3.30 port 15807 ssh2
Dec  1 08:05:37 hpm sshd\[9138\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.50.3.30  user=root
Dec  1 08:05:39 hpm sshd\[9138\]: Failed password for root from 147.50.3.30 port 32743 ssh2

\[2019-12-01 13:19:31\] NOTICE\[2754\] chan_sip.c: Registration from '\' failed for '81.30.152.54:51074' - Wrong password
\[2019-12-01 13:19:31\] SECURITY\[2765\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-12-01T13:19:31.102-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="8951",SessionID="0x7f26c4022278",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/81.30.152.54/51074",Challenge="496290bc",ReceivedChallenge="496290bc",ReceivedHash="dd6e083604a34b589113e346376dfdb6"
\[2019-12-01 13:20:03\] NOTICE\[2754\] chan_sip.c: Registration from '\' failed for '81.30.152.54:58473' - Wrong password
\[2019-12-01 13:20:03\] SECURITY\[2765\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-12-01T13:20:03.817-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="315",SessionID="0x7f26c4022278",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/81.30.152.54/5

firewall-block, port(s): 4300/tcp

Dec  1 16:39:00 MK-Soft-VM7 sshd[22905]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.169.152.105 
Dec  1 16:39:03 MK-Soft-VM7 sshd[22905]: Failed password for invalid user w from 112.169.152.105 port 49190 ssh2
...

As always with amazon web services

Dec  1 11:38:30 firewall sshd[5238]: Invalid user karvonen from 81.201.60.150
Dec  1 11:38:32 firewall sshd[5238]: Failed password for invalid user karvonen from 81.201.60.150 port 35337 ssh2
Dec  1 11:41:36 firewall sshd[5294]: Invalid user admin from 81.201.60.150
...