(sshd) Failed SSH login from 134.209.194.217 (NL/Netherlands/-): 5 in the last 3600 secs

Jun  7 17:54:20 ws19vmsma01 sshd[241243]: Failed password for root from 134.209.194.217 port 38512 ssh2
...

Jun  4 09:27:14 gw1 sshd[22713]: Failed password for root from 134.209.194.217 port 49650 ssh2
...

Jun  1 13:59:52 abendstille sshd\[25744\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.194.217  user=root
Jun  1 13:59:55 abendstille sshd\[25744\]: Failed password for root from 134.209.194.217 port 60370 ssh2
Jun  1 14:03:18 abendstille sshd\[29068\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.194.217  user=root
Jun  1 14:03:20 abendstille sshd\[29068\]: Failed password for root from 134.209.194.217 port 37574 ssh2
Jun  1 14:06:53 abendstille sshd\[32482\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.194.217  user=root
...

SSH Attack

Invalid user tal from 134.209.194.217 port 52022

Invalid user tal from 134.209.194.217 port 52022

Unauthorized access or intrusion attempt detected from Thor banned IP

Invalid user exportfile from 134.209.194.217 port 51986

(sshd) Failed SSH login from 134.209.194.217 (NL/Netherlands/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: May 16 03:13:32 srv sshd[18839]: Invalid user charlie from 134.209.194.217 port 57418
May 16 03:13:34 srv sshd[18839]: Failed password for invalid user charlie from 134.209.194.217 port 57418 ssh2
May 16 03:21:03 srv sshd[19234]: Invalid user travel from 134.209.194.217 port 55612
May 16 03:21:04 srv sshd[19234]: Failed password for invalid user travel from 134.209.194.217 port 55612 ssh2
May 16 03:24:19 srv sshd[19324]: Invalid user permlink from 134.209.194.217 port 34112

May  2 12:02:36 webhost01 sshd[17748]: Failed password for root from 134.209.194.217 port 40252 ssh2
May  2 12:06:18 webhost01 sshd[17888]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.194.217
...

Apr 11 21:20:13 mail sshd\[18191\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.194.217  user=root
Apr 11 21:20:15 mail sshd\[18191\]: Failed password for root from 134.209.194.217 port 40420 ssh2
Apr 11 21:24:40 mail sshd\[18237\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.194.217  user=root
...

Apr  1 12:53:09 legacy sshd[19541]: Failed password for root from 134.209.194.217 port 57016 ssh2
Apr  1 12:57:48 legacy sshd[19635]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.194.217
Apr  1 12:57:49 legacy sshd[19635]: Failed password for invalid user test from 134.209.194.217 port 41006 ssh2
...

Mar 29 16:43:16 ns382633 sshd\[18632\]: Invalid user konchog from 134.209.194.217 port 49896
Mar 29 16:43:16 ns382633 sshd\[18632\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.194.217
Mar 29 16:43:17 ns382633 sshd\[18632\]: Failed password for invalid user konchog from 134.209.194.217 port 49896 ssh2
Mar 29 16:55:40 ns382633 sshd\[21122\]: Invalid user qgh from 134.209.194.217 port 39126
Mar 29 16:55:40 ns382633 sshd\[21122\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.194.217

Mar 29 01:23:57 ewelt sshd[10463]: Invalid user reception2 from 134.209.194.217 port 39586
Mar 29 01:23:57 ewelt sshd[10463]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.194.217
Mar 29 01:23:57 ewelt sshd[10463]: Invalid user reception2 from 134.209.194.217 port 39586
Mar 29 01:23:59 ewelt sshd[10463]: Failed password for invalid user reception2 from 134.209.194.217 port 39586 ssh2
...

sshd jail - ssh hack attempt

Mar 22 12:23:06 * sshd[21620]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.194.217
Mar 22 12:23:08 * sshd[21620]: Failed password for invalid user distribution from 134.209.194.217 port 59814 ssh2

Too many connections or unauthorized access detected from Arctic banned ip

frenzy

Mar  7 21:21:45 web1 sshd\[27231\]: Invalid user dba from 134.209.194.217
Mar  7 21:21:45 web1 sshd\[27231\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.194.217
Mar  7 21:21:47 web1 sshd\[27231\]: Failed password for invalid user dba from 134.209.194.217 port 45718 ssh2
Mar  7 21:25:21 web1 sshd\[27543\]: Invalid user rongzhengqin from 134.209.194.217
Mar  7 21:25:21 web1 sshd\[27543\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.194.217

SSH Brute Force

Mar  6 05:54:31 minden010 sshd[3529]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.194.217
Mar  6 05:54:33 minden010 sshd[3529]: Failed password for invalid user bitbucket from 134.209.194.217 port 41056 ssh2
Mar  6 05:58:52 minden010 sshd[5015]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.194.217
...

Mar  4 02:15:16 ncomp sshd[29311]: Invalid user gmod from 134.209.194.217
Mar  4 02:15:16 ncomp sshd[29311]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.194.217
Mar  4 02:15:16 ncomp sshd[29311]: Invalid user gmod from 134.209.194.217
Mar  4 02:15:17 ncomp sshd[29311]: Failed password for invalid user gmod from 134.209.194.217 port 42332 ssh2

2020-02-27T19:41:13.761923shield sshd\[24525\]: Invalid user nx from 134.209.194.217 port 56048
2020-02-27T19:41:13.769830shield sshd\[24525\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.194.217
2020-02-27T19:41:15.981894shield sshd\[24525\]: Failed password for invalid user nx from 134.209.194.217 port 56048 ssh2
2020-02-27T19:50:34.071932shield sshd\[26254\]: Invalid user shiyic from 134.209.194.217 port 44944
2020-02-27T19:50:34.078178shield sshd\[26254\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.194.217

$f2bV_matches

Invalid user ljh from 134.209.194.217 port 55684

Unauthorized connection attempt detected from IP address 134.209.194.217 to port 2220 [J]

Invalid user pc from 134.209.194.208 port 43752

Aug 14 05:29:22 firewall sshd[26477]: Failed password for root from 134.209.194.208 port 36092 ssh2
Aug 14 05:33:10 firewall sshd[26559]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.194.208  user=root
Aug 14 05:33:12 firewall sshd[26559]: Failed password for root from 134.209.194.208 port 45362 ssh2
...

$f2bV_matches

Jul 14 15:29:18 debian-2gb-nbg1-2 kernel: \[16991927.823834\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=134.209.194.208 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=34609 PROTO=TCP SPT=44253 DPT=18389 WINDOW=1024 RES=0x00 SYN URGP=0

Jun 19 22:18:19 webhost01 sshd[16242]: Failed password for root from 134.209.194.208 port 40738 ssh2
...

2020-06-14T23:53:55.036466mail.thespaminator.com sshd[23357]: Invalid user admin from 134.209.194.208 port 44884
2020-06-14T23:53:57.178691mail.thespaminator.com sshd[23357]: Failed password for invalid user admin from 134.209.194.208 port 44884 ssh2
...

165. On Jun 13 2020 experienced a Brute Force SSH login attempt -> 18 unique times by 134.209.194.208.

Jun 12 00:23:05 prod4 sshd\[19151\]: Invalid user admin from 134.209.194.208
Jun 12 00:23:07 prod4 sshd\[19151\]: Failed password for invalid user admin from 134.209.194.208 port 43598 ssh2
Jun 12 00:26:14 prod4 sshd\[20109\]: Failed password for root from 134.209.194.208 port 59622 ssh2
...

Invalid user admin from 134.209.194.208 port 48760

Jun  1 00:26:41 piServer sshd[24239]: Failed password for root from 134.209.194.208 port 55988 ssh2
Jun  1 00:30:10 piServer sshd[24451]: Failed password for root from 134.209.194.208 port 33126 ssh2
...

Too many connections or unauthorized access detected from Arctic banned ip

May  2 08:58:47 ift sshd\[19392\]: Failed password for root from 134.209.194.208 port 36322 ssh2May  2 09:01:15 ift sshd\[20051\]: Invalid user calendar from 134.209.194.208May  2 09:01:18 ift sshd\[20051\]: Failed password for invalid user calendar from 134.209.194.208 port 52366 ssh2May  2 09:03:43 ift sshd\[20179\]: Failed password for root from 134.209.194.208 port 40164 ssh2May  2 09:06:17 ift sshd\[20822\]: Invalid user ld from 134.209.194.208
...

20 attempts against mh-ssh on echoip

Apr 27 17:38:44 h2829583 sshd[4417]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.194.208

Invalid user admin from 134.209.194.208 port 36100

SSH invalid-user multiple login try

191103  8:51:19 \[Warning\] Access denied for user 'root'@'85.93.20.86' \(using password: YES\)
191103  8:56:27 \[Warning\] Access denied for user 'root'@'85.93.20.86' \(using password: YES\)
191103  9:01:35 \[Warning\] Access denied for user 'root'@'85.93.20.86' \(using password: YES\)
...

Nov  3 03:48:57 mockhub sshd[26758]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.90.248.107
Nov  3 03:48:59 mockhub sshd[26758]: Failed password for invalid user hyx123456 from 103.90.248.107 port 43354 ssh2
...

Connection by 164.52.24.178 on port: 6379 got caught by honeypot at 11/3/2019 4:47:22 AM

Nov  2 19:40:40 web9 sshd\[21794\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.108.161  user=root
Nov  2 19:40:42 web9 sshd\[21794\]: Failed password for root from 188.166.108.161 port 43712 ssh2
Nov  2 19:44:37 web9 sshd\[22412\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.108.161  user=root
Nov  2 19:44:39 web9 sshd\[22412\]: Failed password for root from 188.166.108.161 port 55860 ssh2
Nov  2 19:48:39 web9 sshd\[23015\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.108.161  user=root

Automatic report - Banned IP Access

Nov  3 09:52:28 vmanager6029 sshd\[1195\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.32.153.15  user=root
Nov  3 09:52:30 vmanager6029 sshd\[1195\]: Failed password for root from 114.32.153.15 port 35360 ssh2
Nov  3 09:56:24 vmanager6029 sshd\[1252\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.32.153.15  user=root

Nov  2 19:42:15 hanapaa sshd\[29693\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195-159-103-189.customer.powertech.no  user=root
Nov  2 19:42:17 hanapaa sshd\[29693\]: Failed password for root from 195.159.103.189 port 44562 ssh2
Nov  2 19:47:27 hanapaa sshd\[30090\]: Invalid user biz from 195.159.103.189
Nov  2 19:47:27 hanapaa sshd\[30090\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195-159-103-189.customer.powertech.no
Nov  2 19:47:29 hanapaa sshd\[30090\]: Failed password for invalid user biz from 195.159.103.189 port 54576 ssh2

(From francoedward98@gmail.com) Hi!

Did you know that the first page of Goggle search results is where all potential clients will be looking at if they're searching for products/services? Does your website appear on the first page of Google search results when you try searching for your products/services? Most of the time, they would just ignore page 2 and so on since the results listed on the first page seem more relevant and are more credible.

I'm very familiar with all the algorithms and methods that search engines use and I am an expert on how to get the most out of it. I'm a freelance online marketing specialist, and I have helped my clients bring their websites to the first page of web searches for more than 10 years now. Also, the cost of my services is something that small businesses can afford.

I can give you a free consultation so you can be better informed of how your website is doing right now, what can be done and what to expect after if this is something that interests you. Kindly write

email spam

Nov  3 08:50:31 SilenceServices sshd[13546]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.172.45
Nov  3 08:50:33 SilenceServices sshd[13546]: Failed password for invalid user yeziyan from 80.211.172.45 port 60396 ssh2
Nov  3 08:53:56 SilenceServices sshd[14554]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.172.45

Lines containing failures of 129.213.98.219
Nov  1 15:21:18 shared11 sshd[25259]: Invalid user ts3user from 129.213.98.219 port 35872
Nov  1 15:21:18 shared11 sshd[25259]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.213.98.219
Nov  1 15:21:20 shared11 sshd[25259]: Failed password for invalid user ts3user from 129.213.98.219 port 35872 ssh2
Nov  1 15:21:20 shared11 sshd[25259]: Received disconnect from 129.213.98.219 port 35872:11: Bye Bye [preauth]
Nov  1 15:21:20 shared11 sshd[25259]: Disconnected from invalid user ts3user 129.213.98.219 port 35872 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=129.213.98.219

Nov  3 08:22:52 firewall sshd[8418]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.222.163.54
Nov  3 08:22:52 firewall sshd[8418]: Invalid user dockeruser from 195.222.163.54
Nov  3 08:22:55 firewall sshd[8418]: Failed password for invalid user dockeruser from 195.222.163.54 port 55250 ssh2
...

Nov  3 09:23:31 dedicated sshd[30995]: Invalid user mju78ik,m from 180.108.46.237 port 54388

port scan and connect, tcp 22 (ssh)