Automatic report - Banned IP Access

Oct 10 21:23:15 hell sshd[29153]: Failed password for root from 137.74.41.119 port 49998 ssh2
Oct 10 21:27:30 hell sshd[30247]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.41.119
...

SSH login attempts.

(sshd) Failed SSH login from 137.74.41.119 (FR/France/119.ip-137-74-41.eu): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct  1 12:23:10 optimus sshd[23384]: Invalid user el from 137.74.41.119
Oct  1 12:23:12 optimus sshd[23384]: Failed password for invalid user el from 137.74.41.119 port 38710 ssh2
Oct  1 12:35:01 optimus sshd[27231]: Invalid user Test from 137.74.41.119
Oct  1 12:35:03 optimus sshd[27231]: Failed password for invalid user Test from 137.74.41.119 port 43122 ssh2
Oct  1 12:39:12 optimus sshd[28564]: Invalid user terry from 137.74.41.119

[SID2] Fail2ban detected 5 failed SSH login attempts within 30 minutes. This report was submitted automatically.

Sep 25 04:31:23 sso sshd[9201]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.41.119
Sep 25 04:31:26 sso sshd[9201]: Failed password for invalid user danny from 137.74.41.119 port 43944 ssh2
...

Sep  2 17:29:37 marvibiene sshd[23644]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.41.119 
Sep  2 17:29:39 marvibiene sshd[23644]: Failed password for invalid user yvan from 137.74.41.119 port 40388 ssh2

Invalid user testuser2 from 137.74.41.119 port 60834

Aug 24 09:52:03 scw-6657dc sshd[1142]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.41.119
Aug 24 09:52:03 scw-6657dc sshd[1142]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.41.119
Aug 24 09:52:05 scw-6657dc sshd[1142]: Failed password for invalid user sqoop from 137.74.41.119 port 60238 ssh2
...

Aug 23 12:21:46 scw-6657dc sshd[22179]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.41.119
Aug 23 12:21:46 scw-6657dc sshd[22179]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.41.119
Aug 23 12:21:49 scw-6657dc sshd[22179]: Failed password for invalid user teacher from 137.74.41.119 port 58956 ssh2
...

2020-08-19T22:01:16.421392afi-git.jinr.ru sshd[22749]: Invalid user vyatta from 137.74.41.119 port 41418
2020-08-19T22:01:16.424601afi-git.jinr.ru sshd[22749]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.ip-137-74-41.eu
2020-08-19T22:01:16.421392afi-git.jinr.ru sshd[22749]: Invalid user vyatta from 137.74.41.119 port 41418
2020-08-19T22:01:18.006111afi-git.jinr.ru sshd[22749]: Failed password for invalid user vyatta from 137.74.41.119 port 41418 ssh2
2020-08-19T22:04:56.380763afi-git.jinr.ru sshd[23538]: Invalid user jse from 137.74.41.119 port 48950
...

Aug 16 17:12:05 ns382633 sshd\[16982\]: Invalid user tunnel from 137.74.41.119 port 45152
Aug 16 17:12:05 ns382633 sshd\[16982\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.41.119
Aug 16 17:12:06 ns382633 sshd\[16982\]: Failed password for invalid user tunnel from 137.74.41.119 port 45152 ssh2
Aug 16 17:22:46 ns382633 sshd\[18863\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.41.119  user=root
Aug 16 17:22:48 ns382633 sshd\[18863\]: Failed password for root from 137.74.41.119 port 53846 ssh2

Aug 15 15:26:47 server sshd[13894]: Failed password for root from 137.74.41.119 port 55856 ssh2
Aug 15 15:30:44 server sshd[19071]: Failed password for root from 137.74.41.119 port 37920 ssh2
Aug 15 15:34:37 server sshd[24166]: Failed password for root from 137.74.41.119 port 48212 ssh2

Aug 15 00:31:44 abendstille sshd\[1420\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.41.119  user=root
Aug 15 00:31:46 abendstille sshd\[1420\]: Failed password for root from 137.74.41.119 port 52218 ssh2
Aug 15 00:35:41 abendstille sshd\[5492\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.41.119  user=root
Aug 15 00:35:43 abendstille sshd\[5492\]: Failed password for root from 137.74.41.119 port 34990 ssh2
Aug 15 00:39:37 abendstille sshd\[9158\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.41.119  user=root
...

Aug 11 20:55:26 itv-usvr-01 sshd[26054]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.41.119  user=root
Aug 11 20:55:28 itv-usvr-01 sshd[26054]: Failed password for root from 137.74.41.119 port 36340 ssh2
Aug 11 20:59:41 itv-usvr-01 sshd[26218]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.41.119  user=root
Aug 11 20:59:43 itv-usvr-01 sshd[26218]: Failed password for root from 137.74.41.119 port 46760 ssh2
Aug 11 21:03:41 itv-usvr-01 sshd[26468]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.41.119  user=root
Aug 11 21:03:43 itv-usvr-01 sshd[26468]: Failed password for root from 137.74.41.119 port 57186 ssh2

Bruteforce detected by fail2ban

Aug 15 01:49:51 vps691689 sshd[2335]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.50.202.61
Aug 15 01:49:53 vps691689 sshd[2335]: Failed password for invalid user Robert from 85.50.202.61 port 49918 ssh2
...

Aug 14 19:33:26 vps200512 sshd\[6716\]: Invalid user al from 51.75.123.195
Aug 14 19:33:26 vps200512 sshd\[6716\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.123.195
Aug 14 19:33:28 vps200512 sshd\[6716\]: Failed password for invalid user al from 51.75.123.195 port 37408 ssh2
Aug 14 19:37:43 vps200512 sshd\[6830\]: Invalid user libuuid from 51.75.123.195
Aug 14 19:37:43 vps200512 sshd\[6830\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.123.195

Aug 15 03:12:57 tuotantolaitos sshd[10316]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.24.220.171
Aug 15 03:12:59 tuotantolaitos sshd[10316]: Failed password for invalid user sinus from 78.24.220.171 port 56966 ssh2
...

2019-08-15T01:36:50.0185211240 sshd\[18504\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.129.64.213  user=root
2019-08-15T01:36:51.9235341240 sshd\[18504\]: Failed password for root from 23.129.64.213 port 19600 ssh2
2019-08-15T01:36:54.5583001240 sshd\[18504\]: Failed password for root from 23.129.64.213 port 19600 ssh2
...

Aug 15 02:54:22 server sshd\[22984\]: Invalid user kocenk from 159.89.134.64 port 56300
Aug 15 02:54:22 server sshd\[22984\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.134.64
Aug 15 02:54:25 server sshd\[22984\]: Failed password for invalid user kocenk from 159.89.134.64 port 56300 ssh2
Aug 15 02:58:48 server sshd\[14412\]: Invalid user tanya from 159.89.134.64 port 48750
Aug 15 02:58:48 server sshd\[14412\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.134.64

Aug 15 01:33:15 eventyay sshd[9243]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=130.61.108.56
Aug 15 01:33:16 eventyay sshd[9243]: Failed password for invalid user mzd from 130.61.108.56 port 35824 ssh2
Aug 15 01:37:30 eventyay sshd[10475]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=130.61.108.56
...

Aug 14 19:53:03 econome sshd[17502]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.112.4.11  user=r.r
Aug 14 19:53:06 econome sshd[17502]: Failed password for r.r from 27.112.4.11 port 59058 ssh2
Aug 14 19:53:06 econome sshd[17502]: Received disconnect from 27.112.4.11: 11: Normal Shutdown, Thank you for playing [preauth]
Aug 14 19:53:08 econome sshd[17504]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.112.4.11  user=r.r
Aug 14 19:53:10 econome sshd[17504]: Failed password for r.r from 27.112.4.11 port 37310 ssh2
Aug 14 19:53:10 econome sshd[17504]: Received disconnect from 27.112.4.11: 11: Normal Shutdown, Thank you for playing [preauth]
Aug 14 19:53:12 econome sshd[17506]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.112.4.11  user=r.r
Aug 14 19:53:14 econome sshd[17506]: Failed password for r.r from 27.112.4.11 port 43666 ssh2
Aug 1........
-------------------------------

Registration form abuse

Aug 15 05:33:18 areeb-Workstation sshd\[11135\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.113.45  user=root
Aug 15 05:33:20 areeb-Workstation sshd\[11135\]: Failed password for root from 51.38.113.45 port 35858 ssh2
Aug 15 05:37:44 areeb-Workstation sshd\[11984\]: Invalid user bj from 51.38.113.45
Aug 15 05:37:44 areeb-Workstation sshd\[11984\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.113.45
...

port scan and connect, tcp 23 (telnet)

Automatic report - Port Scan Attack

Aug 15 01:37:36 dedicated sshd[25383]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.102.174  user=root
Aug 15 01:37:38 dedicated sshd[25383]: Failed password for root from 68.183.102.174 port 40812 ssh2

Aug 14 19:32:42 vps200512 sshd\[6697\]: Invalid user Robert from 178.128.115.205
Aug 14 19:32:42 vps200512 sshd\[6697\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.115.205
Aug 14 19:32:45 vps200512 sshd\[6697\]: Failed password for invalid user Robert from 178.128.115.205 port 40308 ssh2
Aug 14 19:37:39 vps200512 sshd\[6820\]: Invalid user usuario from 178.128.115.205
Aug 14 19:37:39 vps200512 sshd\[6820\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.115.205

Aug 15 00:54:14 debian sshd\[1018\]: Invalid user gopher from 159.65.225.184 port 34705
Aug 15 00:54:14 debian sshd\[1018\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.225.184
...

Aug 14 19:31:58 xtremcommunity sshd\[3681\]: Invalid user akhan from 41.190.36.210 port 47086
Aug 14 19:31:58 xtremcommunity sshd\[3681\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.190.36.210
Aug 14 19:32:00 xtremcommunity sshd\[3681\]: Failed password for invalid user akhan from 41.190.36.210 port 47086 ssh2
Aug 14 19:37:36 xtremcommunity sshd\[3921\]: Invalid user mysql0 from 41.190.36.210 port 42741
Aug 14 19:37:36 xtremcommunity sshd\[3921\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.190.36.210
...