Aug 22 00:44:41 SilenceServices sshd[20529]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.44.72
Aug 22 00:44:43 SilenceServices sshd[20529]: Failed password for invalid user serverpilot from 137.74.44.72 port 48472 ssh2
Aug 22 00:49:58 SilenceServices sshd[25005]: Failed password for root from 137.74.44.72 port 38344 ssh2

Aug 11 07:59:08 MK-Soft-VM4 sshd\[16734\]: Invalid user duan from 137.74.44.72 port 59996
Aug 11 07:59:08 MK-Soft-VM4 sshd\[16734\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.44.72
Aug 11 07:59:10 MK-Soft-VM4 sshd\[16734\]: Failed password for invalid user duan from 137.74.44.72 port 59996 ssh2
...

2019-07-28T05:26:45.810429  sshd[17671]: Invalid user txt from 137.74.44.72 port 49376
2019-07-28T05:26:45.824656  sshd[17671]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.44.72
2019-07-28T05:26:45.810429  sshd[17671]: Invalid user txt from 137.74.44.72 port 49376
2019-07-28T05:26:48.339742  sshd[17671]: Failed password for invalid user txt from 137.74.44.72 port 49376 ssh2
2019-07-28T05:32:14.737233  sshd[17733]: Invalid user passwords01 from 137.74.44.72 port 45186
...

Jul 17 09:41:36 km20725 sshd[27649]: Invalid user xu from 137.74.44.72
Jul 17 09:41:38 km20725 sshd[27649]: Failed password for invalid user xu from 137.74.44.72 port 39994 ssh2
Jul 17 09:41:38 km20725 sshd[27649]: Received disconnect from 137.74.44.72: 11: Bye Bye [preauth]
Jul 17 09:46:57 km20725 sshd[27911]: Invalid user customer1 from 137.74.44.72
Jul 17 09:47:00 km20725 sshd[27911]: Failed password for invalid user customer1 from 137.74.44.72 port 47684 ssh2
Jul 17 09:47:00 km20725 sshd[27911]: Received disconnect from 137.74.44.72: 11: Bye Bye [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=137.74.44.72

Jul 18 05:21:56 eventyay sshd[15114]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.44.72
Jul 18 05:21:57 eventyay sshd[15114]: Failed password for invalid user matheus from 137.74.44.72 port 40546 ssh2
Jul 18 05:26:24 eventyay sshd[16156]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.44.72
...

Jul 15 17:44:06 ubuntu-2gb-nbg1-dc3-1 sshd[3152]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.44.72
Jul 15 17:44:08 ubuntu-2gb-nbg1-dc3-1 sshd[3152]: Failed password for invalid user liang from 137.74.44.72 port 40342 ssh2
...

Jul 14 22:30:23 mail sshd\[32122\]: Invalid user redmine from 137.74.44.72 port 45610
Jul 14 22:30:23 mail sshd\[32122\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.44.72
Jul 14 22:30:25 mail sshd\[32122\]: Failed password for invalid user redmine from 137.74.44.72 port 45610 ssh2
Jul 14 22:35:05 mail sshd\[32214\]: Invalid user hang from 137.74.44.72 port 44254
Jul 14 22:35:05 mail sshd\[32214\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.44.72
...

Jul 14 16:20:14 mail sshd\[17870\]: Failed password for invalid user vijay from 137.74.44.72 port 54538 ssh2
Jul 14 16:40:07 mail sshd\[18147\]: Invalid user tomas from 137.74.44.72 port 58066
...

5x Failed Password

Jun 28 19:21:02 abendstille sshd\[30976\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.44.162  user=root
Jun 28 19:21:04 abendstille sshd\[30976\]: Failed password for root from 137.74.44.162 port 55796 ssh2
Jun 28 19:24:11 abendstille sshd\[1633\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.44.162  user=root
Jun 28 19:24:12 abendstille sshd\[1633\]: Failed password for root from 137.74.44.162 port 54324 ssh2
Jun 28 19:27:10 abendstille sshd\[4697\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.44.162  user=root
...

Jun 23 05:58:13  sshd\[30918\]: User root from 162.ip-137-74-44.eu not allowed because not listed in AllowUsersJun 23 05:58:15  sshd\[30918\]: Failed password for invalid user root from 137.74.44.162 port 41538 ssh2
...

Jun 15 15:58:37 dignus sshd[1858]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.44.162
Jun 15 15:58:39 dignus sshd[1858]: Failed password for invalid user musikbot from 137.74.44.162 port 47880 ssh2
Jun 15 16:01:40 dignus sshd[2193]: Invalid user jenkins from 137.74.44.162 port 47860
Jun 15 16:01:40 dignus sshd[2193]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.44.162
Jun 15 16:01:42 dignus sshd[2193]: Failed password for invalid user jenkins from 137.74.44.162 port 47860 ssh2
...

$f2bV_matches

2020-06-11T22:49:26.794722afi-git.jinr.ru sshd[19998]: Invalid user 123 from 137.74.44.162 port 34916
2020-06-11T22:49:28.943785afi-git.jinr.ru sshd[19998]: Failed password for invalid user 123 from 137.74.44.162 port 34916 ssh2
2020-06-11T22:52:28.669333afi-git.jinr.ru sshd[21200]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.ip-137-74-44.eu  user=root
2020-06-11T22:52:30.800638afi-git.jinr.ru sshd[21200]: Failed password for root from 137.74.44.162 port 35514 ssh2
2020-06-11T22:55:38.740773afi-git.jinr.ru sshd[21862]: Invalid user nagios from 137.74.44.162 port 36242
...

prod8
...

Jun  8 14:38:16 vps639187 sshd\[4587\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.44.162  user=root
Jun  8 14:38:18 vps639187 sshd\[4587\]: Failed password for root from 137.74.44.162 port 46643 ssh2
Jun  8 14:41:42 vps639187 sshd\[4603\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.44.162  user=root
...

Jun  7 18:13:12 mail sshd\[62591\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.44.162  user=root
...

May 29 22:25:29 ws25vmsma01 sshd[213731]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.44.162
May 29 22:25:31 ws25vmsma01 sshd[213731]: Failed password for invalid user matnat from 137.74.44.162 port 53475 ssh2
...

odoo8
...

2020-05-23T04:17:56.349661ionos.janbro.de sshd[99425]: Invalid user ckl from 137.74.44.162 port 35894
2020-05-23T04:17:58.460525ionos.janbro.de sshd[99425]: Failed password for invalid user ckl from 137.74.44.162 port 35894 ssh2
2020-05-23T04:21:08.314532ionos.janbro.de sshd[99432]: Invalid user zgb from 137.74.44.162 port 38244
2020-05-23T04:21:08.429725ionos.janbro.de sshd[99432]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.44.162
2020-05-23T04:21:08.314532ionos.janbro.de sshd[99432]: Invalid user zgb from 137.74.44.162 port 38244
2020-05-23T04:21:10.458961ionos.janbro.de sshd[99432]: Failed password for invalid user zgb from 137.74.44.162 port 38244 ssh2
2020-05-23T04:24:21.903142ionos.janbro.de sshd[99451]: Invalid user pid from 137.74.44.162 port 40570
2020-05-23T04:24:22.019482ionos.janbro.de sshd[99451]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.44.162
2020-05-23T04:24:21.9031
...

Invalid user mongo from 137.74.44.162 port 45713

May 10 16:09:12 onepixel sshd[2846834]: Invalid user ping from 137.74.44.162 port 42376
May 10 16:09:12 onepixel sshd[2846834]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.44.162 
May 10 16:09:12 onepixel sshd[2846834]: Invalid user ping from 137.74.44.162 port 42376
May 10 16:09:13 onepixel sshd[2846834]: Failed password for invalid user ping from 137.74.44.162 port 42376 ssh2
May 10 16:12:36 onepixel sshd[2847183]: Invalid user server1 from 137.74.44.162 port 46263

2020-05-03T10:04:01.639459abusebot-8.cloudsearch.cf sshd[25276]: Invalid user tecnici from 137.74.44.162 port 39443
2020-05-03T10:04:01.648114abusebot-8.cloudsearch.cf sshd[25276]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.ip-137-74-44.eu
2020-05-03T10:04:01.639459abusebot-8.cloudsearch.cf sshd[25276]: Invalid user tecnici from 137.74.44.162 port 39443
2020-05-03T10:04:04.024614abusebot-8.cloudsearch.cf sshd[25276]: Failed password for invalid user tecnici from 137.74.44.162 port 39443 ssh2
2020-05-03T10:07:50.356240abusebot-8.cloudsearch.cf sshd[25514]: Invalid user shu from 137.74.44.162 port 44397
2020-05-03T10:07:50.362373abusebot-8.cloudsearch.cf sshd[25514]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.ip-137-74-44.eu
2020-05-03T10:07:50.356240abusebot-8.cloudsearch.cf sshd[25514]: Invalid user shu from 137.74.44.162 port 44397
2020-05-03T10:07:52.507074abusebot-8.cloudsearch.cf sshd[
...

Aug  4 21:38:37 abendstille sshd\[8794\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.235.78.100  user=root
Aug  4 21:38:39 abendstille sshd\[8794\]: Failed password for root from 191.235.78.100 port 38310 ssh2
Aug  4 21:43:25 abendstille sshd\[13884\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.235.78.100  user=root
Aug  4 21:43:26 abendstille sshd\[13884\]: Failed password for root from 191.235.78.100 port 51156 ssh2
Aug  4 21:48:17 abendstille sshd\[19269\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.235.78.100  user=root
...

08/04/2020-13:59:52.844624 114.113.127.182 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433

ET DROP Dshield Block Listed Source group 1 - port: 13995 proto: tcp cat: Misc Attackbytes: 60

(smtpauth) Failed SMTP AUTH login from 208.73.86.250 (US/United States/-): 5 in the last 3600 secs

Aug  4 17:09:53 XXX sshd[51323]: Invalid user pi from 39.64.243.83 port 56614

18245/tcp 10000/tcp 8649/tcp...
[2020-06-04/08-03]308pkt,171pt.(tcp),29pt.(udp)

2020-08-04T19:31:51.337403shield sshd\[18287\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.110.227  user=root
2020-08-04T19:31:53.272990shield sshd\[18287\]: Failed password for root from 114.67.110.227 port 47506 ssh2
2020-08-04T19:34:11.042629shield sshd\[18722\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.110.227  user=root
2020-08-04T19:34:13.067788shield sshd\[18722\]: Failed password for root from 114.67.110.227 port 64012 ssh2
2020-08-04T19:36:34.769130shield sshd\[19203\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.110.227  user=root

Aug  4 21:41:35 PorscheCustomer sshd[17947]: Failed password for root from 134.122.53.154 port 42050 ssh2
Aug  4 21:45:16 PorscheCustomer sshd[18076]: Failed password for root from 134.122.53.154 port 53952 ssh2
...

Aug  4 19:47:21 roki sshd[7883]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.34.236.202  user=root
Aug  4 19:47:24 roki sshd[7883]: Failed password for root from 144.34.236.202 port 44656 ssh2
Aug  4 19:54:19 roki sshd[8374]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.34.236.202  user=root
Aug  4 19:54:22 roki sshd[8374]: Failed password for root from 144.34.236.202 port 38212 ssh2
Aug  4 19:59:18 roki sshd[8697]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.34.236.202  user=root
...

"Unauthorized connection attempt on SSHD detected"

Aug  4 21:22:45 mout sshd[21219]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.151.254  user=root
Aug  4 21:22:47 mout sshd[21219]: Failed password for root from 118.24.151.254 port 35188 ssh2

Port probing on unauthorized port 445

(sshd) Failed SSH login from 106.54.105.9 (CN/China/-): 5 in the last 3600 secs

1596563967 - 08/04/2020 19:59:27 Host: 84.78.91.2/84.78.91.2 Port: 445 TCP Blocked

SSH Brute Force