Aug 22 00:44:41 SilenceServices sshd[20529]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.44.72
Aug 22 00:44:43 SilenceServices sshd[20529]: Failed password for invalid user serverpilot from 137.74.44.72 port 48472 ssh2
Aug 22 00:49:58 SilenceServices sshd[25005]: Failed password for root from 137.74.44.72 port 38344 ssh2

Aug 11 07:59:08 MK-Soft-VM4 sshd\[16734\]: Invalid user duan from 137.74.44.72 port 59996
Aug 11 07:59:08 MK-Soft-VM4 sshd\[16734\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.44.72
Aug 11 07:59:10 MK-Soft-VM4 sshd\[16734\]: Failed password for invalid user duan from 137.74.44.72 port 59996 ssh2
...

2019-07-28T05:26:45.810429  sshd[17671]: Invalid user txt from 137.74.44.72 port 49376
2019-07-28T05:26:45.824656  sshd[17671]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.44.72
2019-07-28T05:26:45.810429  sshd[17671]: Invalid user txt from 137.74.44.72 port 49376
2019-07-28T05:26:48.339742  sshd[17671]: Failed password for invalid user txt from 137.74.44.72 port 49376 ssh2
2019-07-28T05:32:14.737233  sshd[17733]: Invalid user passwords01 from 137.74.44.72 port 45186
...

Jul 17 09:41:36 km20725 sshd[27649]: Invalid user xu from 137.74.44.72
Jul 17 09:41:38 km20725 sshd[27649]: Failed password for invalid user xu from 137.74.44.72 port 39994 ssh2
Jul 17 09:41:38 km20725 sshd[27649]: Received disconnect from 137.74.44.72: 11: Bye Bye [preauth]
Jul 17 09:46:57 km20725 sshd[27911]: Invalid user customer1 from 137.74.44.72
Jul 17 09:47:00 km20725 sshd[27911]: Failed password for invalid user customer1 from 137.74.44.72 port 47684 ssh2
Jul 17 09:47:00 km20725 sshd[27911]: Received disconnect from 137.74.44.72: 11: Bye Bye [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=137.74.44.72

Jul 18 05:21:56 eventyay sshd[15114]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.44.72
Jul 18 05:21:57 eventyay sshd[15114]: Failed password for invalid user matheus from 137.74.44.72 port 40546 ssh2
Jul 18 05:26:24 eventyay sshd[16156]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.44.72
...

Jul 15 17:44:06 ubuntu-2gb-nbg1-dc3-1 sshd[3152]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.44.72
Jul 15 17:44:08 ubuntu-2gb-nbg1-dc3-1 sshd[3152]: Failed password for invalid user liang from 137.74.44.72 port 40342 ssh2
...

Jul 14 22:30:23 mail sshd\[32122\]: Invalid user redmine from 137.74.44.72 port 45610
Jul 14 22:30:23 mail sshd\[32122\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.44.72
Jul 14 22:30:25 mail sshd\[32122\]: Failed password for invalid user redmine from 137.74.44.72 port 45610 ssh2
Jul 14 22:35:05 mail sshd\[32214\]: Invalid user hang from 137.74.44.72 port 44254
Jul 14 22:35:05 mail sshd\[32214\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.44.72
...

Jul 14 16:20:14 mail sshd\[17870\]: Failed password for invalid user vijay from 137.74.44.72 port 54538 ssh2
Jul 14 16:40:07 mail sshd\[18147\]: Invalid user tomas from 137.74.44.72 port 58066
...

5x Failed Password

Jun 28 19:21:02 abendstille sshd\[30976\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.44.162  user=root
Jun 28 19:21:04 abendstille sshd\[30976\]: Failed password for root from 137.74.44.162 port 55796 ssh2
Jun 28 19:24:11 abendstille sshd\[1633\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.44.162  user=root
Jun 28 19:24:12 abendstille sshd\[1633\]: Failed password for root from 137.74.44.162 port 54324 ssh2
Jun 28 19:27:10 abendstille sshd\[4697\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.44.162  user=root
...

Jun 23 05:58:13  sshd\[30918\]: User root from 162.ip-137-74-44.eu not allowed because not listed in AllowUsersJun 23 05:58:15  sshd\[30918\]: Failed password for invalid user root from 137.74.44.162 port 41538 ssh2
...

Jun 15 15:58:37 dignus sshd[1858]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.44.162
Jun 15 15:58:39 dignus sshd[1858]: Failed password for invalid user musikbot from 137.74.44.162 port 47880 ssh2
Jun 15 16:01:40 dignus sshd[2193]: Invalid user jenkins from 137.74.44.162 port 47860
Jun 15 16:01:40 dignus sshd[2193]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.44.162
Jun 15 16:01:42 dignus sshd[2193]: Failed password for invalid user jenkins from 137.74.44.162 port 47860 ssh2
...

$f2bV_matches

2020-06-11T22:49:26.794722afi-git.jinr.ru sshd[19998]: Invalid user 123 from 137.74.44.162 port 34916
2020-06-11T22:49:28.943785afi-git.jinr.ru sshd[19998]: Failed password for invalid user 123 from 137.74.44.162 port 34916 ssh2
2020-06-11T22:52:28.669333afi-git.jinr.ru sshd[21200]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.ip-137-74-44.eu  user=root
2020-06-11T22:52:30.800638afi-git.jinr.ru sshd[21200]: Failed password for root from 137.74.44.162 port 35514 ssh2
2020-06-11T22:55:38.740773afi-git.jinr.ru sshd[21862]: Invalid user nagios from 137.74.44.162 port 36242
...

prod8
...

Jun  8 14:38:16 vps639187 sshd\[4587\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.44.162  user=root
Jun  8 14:38:18 vps639187 sshd\[4587\]: Failed password for root from 137.74.44.162 port 46643 ssh2
Jun  8 14:41:42 vps639187 sshd\[4603\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.44.162  user=root
...

Jun  7 18:13:12 mail sshd\[62591\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.44.162  user=root
...

May 29 22:25:29 ws25vmsma01 sshd[213731]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.44.162
May 29 22:25:31 ws25vmsma01 sshd[213731]: Failed password for invalid user matnat from 137.74.44.162 port 53475 ssh2
...

odoo8
...

2020-05-23T04:17:56.349661ionos.janbro.de sshd[99425]: Invalid user ckl from 137.74.44.162 port 35894
2020-05-23T04:17:58.460525ionos.janbro.de sshd[99425]: Failed password for invalid user ckl from 137.74.44.162 port 35894 ssh2
2020-05-23T04:21:08.314532ionos.janbro.de sshd[99432]: Invalid user zgb from 137.74.44.162 port 38244
2020-05-23T04:21:08.429725ionos.janbro.de sshd[99432]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.44.162
2020-05-23T04:21:08.314532ionos.janbro.de sshd[99432]: Invalid user zgb from 137.74.44.162 port 38244
2020-05-23T04:21:10.458961ionos.janbro.de sshd[99432]: Failed password for invalid user zgb from 137.74.44.162 port 38244 ssh2
2020-05-23T04:24:21.903142ionos.janbro.de sshd[99451]: Invalid user pid from 137.74.44.162 port 40570
2020-05-23T04:24:22.019482ionos.janbro.de sshd[99451]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.44.162
2020-05-23T04:24:21.9031
...

Invalid user mongo from 137.74.44.162 port 45713

May 10 16:09:12 onepixel sshd[2846834]: Invalid user ping from 137.74.44.162 port 42376
May 10 16:09:12 onepixel sshd[2846834]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.44.162 
May 10 16:09:12 onepixel sshd[2846834]: Invalid user ping from 137.74.44.162 port 42376
May 10 16:09:13 onepixel sshd[2846834]: Failed password for invalid user ping from 137.74.44.162 port 42376 ssh2
May 10 16:12:36 onepixel sshd[2847183]: Invalid user server1 from 137.74.44.162 port 46263

2020-05-03T10:04:01.639459abusebot-8.cloudsearch.cf sshd[25276]: Invalid user tecnici from 137.74.44.162 port 39443
2020-05-03T10:04:01.648114abusebot-8.cloudsearch.cf sshd[25276]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.ip-137-74-44.eu
2020-05-03T10:04:01.639459abusebot-8.cloudsearch.cf sshd[25276]: Invalid user tecnici from 137.74.44.162 port 39443
2020-05-03T10:04:04.024614abusebot-8.cloudsearch.cf sshd[25276]: Failed password for invalid user tecnici from 137.74.44.162 port 39443 ssh2
2020-05-03T10:07:50.356240abusebot-8.cloudsearch.cf sshd[25514]: Invalid user shu from 137.74.44.162 port 44397
2020-05-03T10:07:50.362373abusebot-8.cloudsearch.cf sshd[25514]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.ip-137-74-44.eu
2020-05-03T10:07:50.356240abusebot-8.cloudsearch.cf sshd[25514]: Invalid user shu from 137.74.44.162 port 44397
2020-05-03T10:07:52.507074abusebot-8.cloudsearch.cf sshd[
...

DATE:2019-09-04 18:35:31, IP:177.64.148.162, PORT:ssh SSH brute force auth (ermes)

Sep  4 08:53:41 php2 sshd\[27070\]: Invalid user rica from 103.111.86.255
Sep  4 08:53:41 php2 sshd\[27070\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.111.86.255
Sep  4 08:53:43 php2 sshd\[27070\]: Failed password for invalid user rica from 103.111.86.255 port 37520 ssh2
Sep  4 08:57:48 php2 sshd\[27477\]: Invalid user paula from 103.111.86.255
Sep  4 08:57:48 php2 sshd\[27477\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.111.86.255

Aug 15 16:20:29 Server10 sshd[7248]: Failed password for invalid user root from 51.15.3.205 port 38932 ssh2
Aug 15 16:20:29 Server10 sshd[7248]: error: maximum authentication attempts exceeded for invalid user root from 51.15.3.205 port 38932 ssh2 [preauth]
Aug 15 16:20:33 Server10 sshd[7319]: User root from 51.15.3.205 not allowed because not listed in AllowUsers
Aug 15 16:20:33 Server10 sshd[7319]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.3.205  user=root
Aug 15 16:20:35 Server10 sshd[7319]: Failed password for invalid user root from 51.15.3.205 port 47440 ssh2
Aug 15 16:20:37 Server10 sshd[7319]: Failed password for invalid user root from 51.15.3.205 port 47440 ssh2
Aug 15 16:20:40 Server10 sshd[7319]: Failed password for invalid user root from 51.15.3.205 port 47440 ssh2
Aug 15 16:20:40 Server10 sshd[7319]: error: maximum authentication attempts exceeded for invalid user root from 51.15.3.205 port 47440 ssh2 [preauth]

Sep  4 14:59:17 vpn01 sshd\[26292\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.248.54  user=sync
Sep  4 14:59:19 vpn01 sshd\[26292\]: Failed password for sync from 159.65.248.54 port 48074 ssh2
Sep  4 15:07:31 vpn01 sshd\[26337\]: Invalid user cyan from 159.65.248.54

Automatic report - Port Scan Attack

04.09.2019 17:00:10 Connection to port 32771 blocked by firewall

Sep  4 05:29:07 hiderm sshd\[32413\]: Invalid user guest from 183.48.34.77
Sep  4 05:29:07 hiderm sshd\[32413\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.48.34.77
Sep  4 05:29:09 hiderm sshd\[32413\]: Failed password for invalid user guest from 183.48.34.77 port 45934 ssh2
Sep  4 05:32:38 hiderm sshd\[32727\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.48.34.77  user=root
Sep  4 05:32:40 hiderm sshd\[32727\]: Failed password for root from 183.48.34.77 port 43888 ssh2

Sep  4 08:55:46 friendsofhawaii sshd\[6799\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.98.26.182  user=root
Sep  4 08:55:48 friendsofhawaii sshd\[6799\]: Failed password for root from 218.98.26.182 port 22922 ssh2
Sep  4 08:55:50 friendsofhawaii sshd\[6799\]: Failed password for root from 218.98.26.182 port 22922 ssh2
Sep  4 08:55:53 friendsofhawaii sshd\[6799\]: Failed password for root from 218.98.26.182 port 22922 ssh2
Sep  4 08:55:56 friendsofhawaii sshd\[6819\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.98.26.182  user=root

Sep  4 18:27:03 web8 sshd\[3247\]: Invalid user test from 85.246.129.162
Sep  4 18:27:03 web8 sshd\[3247\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.246.129.162
Sep  4 18:27:05 web8 sshd\[3247\]: Failed password for invalid user test from 85.246.129.162 port 59684 ssh2
Sep  4 18:34:52 web8 sshd\[7078\]: Invalid user nawira from 85.246.129.162
Sep  4 18:34:52 web8 sshd\[7078\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.246.129.162

Sep  4 20:38:55 h2177944 sshd\[5935\]: Invalid user johann from 137.74.44.216 port 51866
Sep  4 20:38:55 h2177944 sshd\[5935\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.44.216
Sep  4 20:38:57 h2177944 sshd\[5935\]: Failed password for invalid user johann from 137.74.44.216 port 51866 ssh2
Sep  4 20:43:15 h2177944 sshd\[6113\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.44.216  user=root
...

2019-09-05T01:14:40.783772enmeeting.mahidol.ac.th sshd\[4234\]: Invalid user cm from 45.55.233.213 port 58068
2019-09-05T01:14:40.797559enmeeting.mahidol.ac.th sshd\[4234\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.233.213
2019-09-05T01:14:42.552631enmeeting.mahidol.ac.th sshd\[4234\]: Failed password for invalid user cm from 45.55.233.213 port 58068 ssh2
...

F2B jail: sshd. Time: 2019-09-04 17:43:29, Reported by: VKReport

Sep  5 01:15:52 webhost01 sshd[18625]: Failed password for root from 23.129.64.100 port 41352 ssh2
Sep  5 01:16:07 webhost01 sshd[18625]: error: maximum authentication attempts exceeded for root from 23.129.64.100 port 41352 ssh2 [preauth]
...

Sep  4 08:26:53 php2 sshd\[24277\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=geri.enn.lu  user=root
Sep  4 08:26:56 php2 sshd\[24277\]: Failed password for root from 185.100.87.206 port 33599 ssh2
Sep  4 08:27:03 php2 sshd\[24277\]: Failed password for root from 185.100.87.206 port 33599 ssh2
Sep  4 08:27:06 php2 sshd\[24277\]: Failed password for root from 185.100.87.206 port 33599 ssh2
Sep  4 08:27:09 php2 sshd\[24277\]: Failed password for root from 185.100.87.206 port 33599 ssh2

\[2019-09-04 14:44:52\] NOTICE\[1829\] chan_sip.c: Registration from '"5000" \' failed for '77.247.109.72:5142' - Wrong password
\[2019-09-04 14:44:52\] SECURITY\[1837\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-04T14:44:52.537-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="5000",SessionID="0x7f7b302cefa8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.109.72/5142",Challenge="2aa19fee",ReceivedChallenge="2aa19fee",ReceivedHash="7a886d765c318973fbd9c9c79fb2de92"
\[2019-09-04 14:44:52\] NOTICE\[1829\] chan_sip.c: Registration from '"5000" \' failed for '77.247.109.72:5142' - Wrong password
\[2019-09-04 14:44:52\] SECURITY\[1837\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-04T14:44:52.735-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="5000",SessionID="0x7f7b30484c18",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UD