May 31 19:07:10 tuxlinux sshd[2449]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.214.91  user=root
May 31 19:07:11 tuxlinux sshd[2449]: Failed password for root from 14.29.214.91 port 37747 ssh2
May 31 19:07:10 tuxlinux sshd[2449]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.214.91  user=root
May 31 19:07:11 tuxlinux sshd[2449]: Failed password for root from 14.29.214.91 port 37747 ssh2
May 31 19:13:06 tuxlinux sshd[3999]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.214.91  user=root
...

May 26 03:09:55 eventyay sshd[17927]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.214.91
May 26 03:09:56 eventyay sshd[17927]: Failed password for invalid user vidlogo1 from 14.29.214.91 port 37903 ssh2
May 26 03:14:30 eventyay sshd[18070]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.214.91
...

May 13 05:59:49 ArkNodeAT sshd\[18887\]: Invalid user sales from 14.29.214.91
May 13 05:59:49 ArkNodeAT sshd\[18887\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.214.91
May 13 05:59:51 ArkNodeAT sshd\[18887\]: Failed password for invalid user sales from 14.29.214.91 port 44818 ssh2

May 10 07:52:04 v22018086721571380 sshd[31752]: Failed password for invalid user system from 14.29.214.91 port 60336 ssh2

Apr 15 13:57:48 ns392434 sshd[8959]: Invalid user king from 14.29.214.91 port 45703
Apr 15 13:57:48 ns392434 sshd[8959]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.214.91
Apr 15 13:57:48 ns392434 sshd[8959]: Invalid user king from 14.29.214.91 port 45703
Apr 15 13:57:50 ns392434 sshd[8959]: Failed password for invalid user king from 14.29.214.91 port 45703 ssh2
Apr 15 14:07:45 ns392434 sshd[9346]: Invalid user office1 from 14.29.214.91 port 37373
Apr 15 14:07:45 ns392434 sshd[9346]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.214.91
Apr 15 14:07:45 ns392434 sshd[9346]: Invalid user office1 from 14.29.214.91 port 37373
Apr 15 14:07:47 ns392434 sshd[9346]: Failed password for invalid user office1 from 14.29.214.91 port 37373 ssh2
Apr 15 14:12:02 ns392434 sshd[9489]: Invalid user info from 14.29.214.91 port 58731

$f2bV_matches

Invalid user vuf from 14.29.214.91 port 48560

SSH login attempts brute force.

Mar  4 09:01:53 localhost sshd\[10754\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.214.91  user=root
Mar  4 09:01:56 localhost sshd\[10754\]: Failed password for root from 14.29.214.91 port 40805 ssh2
Mar  4 09:09:04 localhost sshd\[11087\]: Invalid user minecraft from 14.29.214.91
Mar  4 09:09:04 localhost sshd\[11087\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.214.91
Mar  4 09:09:06 localhost sshd\[11087\]: Failed password for invalid user minecraft from 14.29.214.91 port 49627 ssh2
...

Unauthorized connection attempt detected from IP address 14.29.214.91 to port 2220 [J]

Jun 12 07:28:46 ns381471 sshd[5145]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.214.188
Jun 12 07:28:48 ns381471 sshd[5145]: Failed password for invalid user zenenko from 14.29.214.188 port 46278 ssh2

Jun 10 13:59:03 game-panel sshd[25531]: Failed password for root from 14.29.214.3 port 38462 ssh2
Jun 10 14:03:47 game-panel sshd[25697]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.214.3
Jun 10 14:03:49 game-panel sshd[25697]: Failed password for invalid user sundapeng from 14.29.214.3 port 33621 ssh2

Jun  9 09:18:04 cp sshd[17482]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.214.188
Jun  9 09:18:04 cp sshd[17482]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.214.188

Jun  7 05:54:11 vmi345603 sshd[24965]: Failed password for root from 14.29.214.3 port 32986 ssh2
...

Jun  6 23:43:44 legacy sshd[13707]: Failed password for root from 14.29.214.3 port 38542 ssh2
Jun  6 23:48:17 legacy sshd[13932]: Failed password for root from 14.29.214.3 port 34143 ssh2
...

May 19 22:12:25 pi sshd[16701]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.214.207 
May 19 22:12:27 pi sshd[16701]: Failed password for invalid user lpm from 14.29.214.207 port 43038 ssh2

May 27 20:10:07 prod4 sshd\[7738\]: Failed password for root from 14.29.214.3 port 47243 ssh2
May 27 20:15:16 prod4 sshd\[10050\]: Invalid user management from 14.29.214.3
May 27 20:15:18 prod4 sshd\[10050\]: Failed password for invalid user management from 14.29.214.3 port 43095 ssh2
...

Failed password for invalid user ts3bot from 14.29.214.207 port 49962 ssh2

May 27 07:29:31 piServer sshd[7734]: Failed password for root from 14.29.214.3 port 56231 ssh2
May 27 07:34:18 piServer sshd[8184]: Failed password for root from 14.29.214.3 port 51857 ssh2
...

May 24 14:16:07 [host] sshd[11641]: Invalid user b
May 24 14:16:07 [host] sshd[11641]: pam_unix(sshd:
May 24 14:16:08 [host] sshd[11641]: Failed passwor

Invalid user lgv from 14.29.214.188 port 33750

20 attempts against mh-ssh on echoip

2020-05-20T17:03:44.505680-07:00 suse-nuc sshd[11251]: Invalid user wyn from 14.29.214.233 port 36656
...

May 15 05:30:10 vps sshd[1114]: Failed password for root from 14.29.214.188 port 36955 ssh2
May 15 05:57:44 vps sshd[2900]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.214.188 
May 15 05:57:45 vps sshd[2900]: Failed password for invalid user guest from 14.29.214.188 port 45756 ssh2
...

Invalid user admin from 14.29.214.207 port 33943

Oct 15 18:44:28 php1 sshd\[16780\]: Invalid user runescape from 42.159.114.184
Oct 15 18:44:28 php1 sshd\[16780\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.159.114.184
Oct 15 18:44:30 php1 sshd\[16780\]: Failed password for invalid user runescape from 42.159.114.184 port 40224 ssh2
Oct 15 18:50:01 php1 sshd\[17376\]: Invalid user 12345 from 42.159.114.184
Oct 15 18:50:01 php1 sshd\[17376\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.159.114.184

2019-10-16T05:53:24.303012abusebot-4.cloudsearch.cf sshd\[32384\]: Invalid user fake from 104.244.77.210 port 56192

Oct 16 03:27:50 sshgateway sshd\[31121\]: Invalid user tesla from 118.25.39.110
Oct 16 03:27:50 sshgateway sshd\[31121\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.39.110
Oct 16 03:27:53 sshgateway sshd\[31121\]: Failed password for invalid user tesla from 118.25.39.110 port 45192 ssh2

invalid login attempt

Oct 16 07:36:15 tux-35-217 sshd\[10246\]: Invalid user angel from 150.109.116.241 port 10245
Oct 16 07:36:15 tux-35-217 sshd\[10246\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.109.116.241
Oct 16 07:36:18 tux-35-217 sshd\[10246\]: Failed password for invalid user angel from 150.109.116.241 port 10245 ssh2
Oct 16 07:40:10 tux-35-217 sshd\[10266\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.109.116.241  user=root
...

Fail2Ban Ban Triggered

Invalid user Qaz@12 from 162.243.94.34 port 55174
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.243.94.34
Failed password for invalid user Qaz@12 from 162.243.94.34 port 55174 ssh2
Invalid user wang0326 from 162.243.94.34 port 45993
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.243.94.34

pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.215  user=root
Failed password for root from 222.186.175.215 port 40666 ssh2
Failed password for root from 222.186.175.215 port 40666 ssh2
Failed password for root from 222.186.175.215 port 40666 ssh2
Failed password for root from 222.186.175.215 port 40666 ssh2

Oct 14 08:41:12 eola sshd[11530]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.37.210.85  user=r.r
Oct 14 08:41:14 eola sshd[11530]: Failed password for r.r from 81.37.210.85 port 39054 ssh2
Oct 14 08:41:14 eola sshd[11530]: Received disconnect from 81.37.210.85 port 39054:11: Bye Bye [preauth]
Oct 14 08:41:14 eola sshd[11530]: Disconnected from 81.37.210.85 port 39054 [preauth]
Oct 14 08:53:56 eola sshd[11812]: Invalid user celery from 81.37.210.85 port 42374
Oct 14 08:53:56 eola sshd[11812]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.37.210.85 
Oct 14 08:53:58 eola sshd[11812]: Failed password for invalid user celery from 81.37.210.85 port 42374 ssh2
Oct 14 08:53:58 eola sshd[11812]: Received disconnect from 81.37.210.85 port 42374:11: Bye Bye [preauth]
Oct 14 08:53:58 eola sshd[11812]: Disconnected from 81.37.210.85 port 42374 [preauth]
Oct 14 08:58:06 eola sshd[11959]: pam_........
-------------------------------

2019-10-16T07:11:30.639143lon01.zurich-datacenter.net sshd\[27598\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.191.194.9  user=root
2019-10-16T07:11:32.190585lon01.zurich-datacenter.net sshd\[27598\]: Failed password for root from 190.191.194.9 port 57191 ssh2
2019-10-16T07:16:01.281301lon01.zurich-datacenter.net sshd\[27696\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.191.194.9  user=root
2019-10-16T07:16:03.033909lon01.zurich-datacenter.net sshd\[27696\]: Failed password for root from 190.191.194.9 port 48237 ssh2
2019-10-16T07:20:42.354811lon01.zurich-datacenter.net sshd\[27774\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.191.194.9  user=root
...

Oct 16 07:52:42 mout sshd[11217]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.179.183.30  user=root
Oct 16 07:52:44 mout sshd[11217]: Failed password for root from 31.179.183.30 port 47974 ssh2

Oct 15 23:29:25 debian sshd\[24560\]: Invalid user database from 178.62.189.46 port 47076
Oct 15 23:29:25 debian sshd\[24560\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.189.46
Oct 15 23:29:27 debian sshd\[24560\]: Failed password for invalid user database from 178.62.189.46 port 47076 ssh2
...

F2B jail: sshd. Time: 2019-10-16 08:04:44, Reported by: VKReport

Oct 16 09:58:01 microserver sshd[24614]: Invalid user toby from 218.27.204.33 port 33036
Oct 16 09:58:01 microserver sshd[24614]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.27.204.33
Oct 16 09:58:03 microserver sshd[24614]: Failed password for invalid user toby from 218.27.204.33 port 33036 ssh2
Oct 16 10:03:25 microserver sshd[25309]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.27.204.33  user=root
Oct 16 10:03:26 microserver sshd[25309]: Failed password for root from 218.27.204.33 port 40504 ssh2

Automated report (2019-10-16T05:29:51+00:00). Misbehaving bot detected at this address.