2020-10-02T15:21:19.088603server.mjenks.net sshd[97696]: Failed password for invalid user cesar from 142.93.235.47 port 34040 ssh2
2020-10-02T15:24:36.424633server.mjenks.net sshd[98116]: Invalid user vincent from 142.93.235.47 port 43584
2020-10-02T15:24:36.430533server.mjenks.net sshd[98116]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.235.47
2020-10-02T15:24:36.424633server.mjenks.net sshd[98116]: Invalid user vincent from 142.93.235.47 port 43584
2020-10-02T15:24:38.227538server.mjenks.net sshd[98116]: Failed password for invalid user vincent from 142.93.235.47 port 43584 ssh2
...

Oct  2 09:26:13 NPSTNNYC01T sshd[6309]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.235.47
Oct  2 09:26:15 NPSTNNYC01T sshd[6309]: Failed password for invalid user teamspeak from 142.93.235.47 port 41724 ssh2
Oct  2 09:29:50 NPSTNNYC01T sshd[6423]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.235.47
...

Oct  2 08:29:52 NPSTNNYC01T sshd[2744]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.235.47
Oct  2 08:29:54 NPSTNNYC01T sshd[2744]: Failed password for invalid user oracle from 142.93.235.47 port 43022 ssh2
Oct  2 08:33:25 NPSTNNYC01T sshd[2951]: Failed password for root from 142.93.235.47 port 49996 ssh2
...

2020-10-02T08:06:08.925177abusebot-4.cloudsearch.cf sshd[455]: Invalid user test from 142.93.235.47 port 47348
2020-10-02T08:06:08.931647abusebot-4.cloudsearch.cf sshd[455]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.235.47
2020-10-02T08:06:08.925177abusebot-4.cloudsearch.cf sshd[455]: Invalid user test from 142.93.235.47 port 47348
2020-10-02T08:06:10.678886abusebot-4.cloudsearch.cf sshd[455]: Failed password for invalid user test from 142.93.235.47 port 47348 ssh2
2020-10-02T08:09:31.934480abusebot-4.cloudsearch.cf sshd[565]: Invalid user user from 142.93.235.47 port 53400
2020-10-02T08:09:31.942004abusebot-4.cloudsearch.cf sshd[565]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.235.47
2020-10-02T08:09:31.934480abusebot-4.cloudsearch.cf sshd[565]: Invalid user user from 142.93.235.47 port 53400
2020-10-02T08:09:34.225961abusebot-4.cloudsearch.cf sshd[565]: Failed password for invalid
...

Invalid user buero from 142.93.235.47 port 40720

Oct  1 20:57:04 vps-51d81928 sshd[502875]: Failed password for root from 142.93.235.47 port 49712 ssh2
Oct  1 21:00:21 vps-51d81928 sshd[502917]: Invalid user raquel from 142.93.235.47 port 57052
Oct  1 21:00:21 vps-51d81928 sshd[502917]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.235.47 
Oct  1 21:00:21 vps-51d81928 sshd[502917]: Invalid user raquel from 142.93.235.47 port 57052
Oct  1 21:00:23 vps-51d81928 sshd[502917]: Failed password for invalid user raquel from 142.93.235.47 port 57052 ssh2
...

Oct  1 15:08:46 buvik sshd[8732]: Failed password for root from 142.93.235.47 port 49588 ssh2
Oct  1 15:12:20 buvik sshd[9380]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.235.47  user=root
Oct  1 15:12:22 buvik sshd[9380]: Failed password for root from 142.93.235.47 port 55420 ssh2
...

Invalid user buero from 142.93.235.47 port 40720

Sep 29 20:21:14 roki-contabo sshd\[23220\]: Invalid user kay from 142.93.235.47
Sep 29 20:21:14 roki-contabo sshd\[23220\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.235.47
Sep 29 20:21:15 roki-contabo sshd\[23220\]: Failed password for invalid user kay from 142.93.235.47 port 39810 ssh2
Sep 29 20:30:26 roki-contabo sshd\[23460\]: Invalid user admin from 142.93.235.47
Sep 29 20:30:26 roki-contabo sshd\[23460\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.235.47
...

2020-09-29T16:31:11.987059paragon sshd[507041]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.235.47
2020-09-29T16:31:11.983182paragon sshd[507041]: Invalid user nexus from 142.93.235.47 port 44158
2020-09-29T16:31:13.960919paragon sshd[507041]: Failed password for invalid user nexus from 142.93.235.47 port 44158 ssh2
2020-09-29T16:32:21.373722paragon sshd[507060]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.235.47  user=root
2020-09-29T16:32:23.291594paragon sshd[507060]: Failed password for root from 142.93.235.47 port 34876 ssh2
...

Sep 28 23:00:08 rocket sshd[31448]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.235.47
Sep 28 23:00:10 rocket sshd[31448]: Failed password for invalid user test from 142.93.235.47 port 39430 ssh2
...

Aug 26 14:37:38 ajax sshd[5878]: Failed password for root from 142.93.235.47 port 43920 ssh2

Aug 14 23:48:48 [host] sshd[2894]: pam_unix(sshd:a
Aug 14 23:48:50 [host] sshd[2894]: Failed password
Aug 14 23:52:28 [host] sshd[3014]: pam_unix(sshd:a

bruteforce detected

Aug  4 18:11:43 game-panel sshd[14526]: Failed password for root from 142.93.235.47 port 57842 ssh2
Aug  4 18:15:24 game-panel sshd[14740]: Failed password for root from 142.93.235.47 port 41002 ssh2

\[2019-10-20 02:32:37\] NOTICE\[2038\] chan_sip.c: Registration from '\' failed for '195.154.189.69:62131' - Wrong password
\[2019-10-20 02:32:37\] SECURITY\[2046\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-20T02:32:37.485-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3080",SessionID="0x7f6130286de8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/195.154.189.69/62131",Challenge="07d7b2c4",ReceivedChallenge="07d7b2c4",ReceivedHash="39800f789ebab09186b34f6fdd115aa8"
\[2019-10-20 02:36:32\] NOTICE\[2038\] chan_sip.c: Registration from '\' failed for '195.154.189.69:60330' - Wrong password
\[2019-10-20 02:36:32\] SECURITY\[2046\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-20T02:36:32.812-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3085",SessionID="0x7f6130804e48",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/195.15

10/20/2019-07:21:55.560303 77.40.3.109 Protocol: 6 SURICATA SMTP tls rejected

Oct 20 05:45:35 web8 sshd\[14381\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.72.207.11  user=root
Oct 20 05:45:37 web8 sshd\[14381\]: Failed password for root from 206.72.207.11 port 37910 ssh2
Oct 20 05:49:36 web8 sshd\[16370\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.72.207.11  user=root
Oct 20 05:49:38 web8 sshd\[16370\]: Failed password for root from 206.72.207.11 port 49068 ssh2
Oct 20 05:53:38 web8 sshd\[18496\]: Invalid user informix from 206.72.207.11

Oct 20 07:54:45 mc1 kernel: \[2837243.746275\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=103.240.140.10 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=52385 PROTO=TCP SPT=3335 DPT=380 WINDOW=8192 RES=0x00 SYN URGP=0 
Oct 20 07:54:45 mc1 kernel: \[2837243.766623\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=103.240.140.10 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=52384 PROTO=TCP SPT=1958 DPT=377 WINDOW=8192 RES=0x00 SYN URGP=0 
Oct 20 07:54:45 mc1 kernel: \[2837243.776136\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=103.240.140.10 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=52387 PROTO=TCP SPT=2344 DPT=376 WINDOW=8192 RES=0x00 SYN URGP=0 
Oct 20 07:54:45 mc1 kernel: \[2837243.783661\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=103.240.140.10 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=52386 PROTO=TCP SPT=3917 D
...

Oct 20 08:09:35 vtv3 sshd\[28543\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.187.76  user=root
Oct 20 08:09:37 vtv3 sshd\[28543\]: Failed password for root from 46.101.187.76 port 54621 ssh2
Oct 20 08:12:51 vtv3 sshd\[30336\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.187.76  user=root
Oct 20 08:12:54 vtv3 sshd\[30336\]: Failed password for root from 46.101.187.76 port 45735 ssh2
Oct 20 08:16:17 vtv3 sshd\[32156\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.187.76  user=root
Oct 20 08:29:35 vtv3 sshd\[5994\]: Invalid user nagios from 46.101.187.76 port 57817
Oct 20 08:29:35 vtv3 sshd\[5994\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.187.76
Oct 20 08:29:37 vtv3 sshd\[5994\]: Failed password for invalid user nagios from 46.101.187.76 port 57817 ssh2
Oct 20 08:32:58 vtv3 sshd\[7887\]: pam_un

Oct 20 12:57:11 webhost01 sshd[7540]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.120.192.98
Oct 20 12:57:12 webhost01 sshd[7540]: Failed password for invalid user support from 222.120.192.98 port 34600 ssh2
...

Oct 19 18:22:12 friendsofhawaii sshd\[22335\]: Invalid user yeidc2007 from 111.230.157.219
Oct 19 18:22:12 friendsofhawaii sshd\[22335\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.230.157.219
Oct 19 18:22:14 friendsofhawaii sshd\[22335\]: Failed password for invalid user yeidc2007 from 111.230.157.219 port 37594 ssh2
Oct 19 18:27:51 friendsofhawaii sshd\[22782\]: Invalid user cache123\$%\^ from 111.230.157.219
Oct 19 18:27:51 friendsofhawaii sshd\[22782\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.230.157.219

2019-09-08T17:24:14.304870suse-nuc sshd[6416]: Invalid user test from 180.101.221.152 port 52602
...

2019-09-30T15:08:31.645989suse-nuc sshd[6179]: Invalid user sander from 178.33.233.54 port 38663
...

web-1 [ssh_2] SSH Attack

Oct 20 06:57:52 xeon sshd[43336]: Failed password for invalid user ftpuser from 106.13.119.163 port 48860 ssh2

Oct 20 06:22:37 server sshd\[17209\]: Invalid user tsbot from 183.234.60.150
Oct 20 06:22:37 server sshd\[17209\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.234.60.150 
Oct 20 06:22:40 server sshd\[17209\]: Failed password for invalid user tsbot from 183.234.60.150 port 42106 ssh2
Oct 20 06:54:38 server sshd\[24739\]: Invalid user chimistry from 183.234.60.150
Oct 20 06:54:38 server sshd\[24739\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.234.60.150 
...

Invalid user jkapkea from 221.125.165.59 port 49576

Invalid user php from 164.132.53.185 port 44684

Invalid user li from 163.172.61.214 port 34221