May 11 13:07:12 ip-172-31-61-156 sshd[2415]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.63.82  user=root
May 11 13:07:15 ip-172-31-61-156 sshd[2415]: Failed password for root from 142.93.63.82 port 58626 ssh2
May 11 13:11:07 ip-172-31-61-156 sshd[2728]: Invalid user andy from 142.93.63.82
May 11 13:11:07 ip-172-31-61-156 sshd[2728]: Invalid user andy from 142.93.63.82
...

prod6
...

May  5 17:08:15 ns382633 sshd\[809\]: Invalid user ding from 142.93.63.82 port 37912
May  5 17:08:15 ns382633 sshd\[809\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.63.82
May  5 17:08:16 ns382633 sshd\[809\]: Failed password for invalid user ding from 142.93.63.82 port 37912 ssh2
May  5 17:22:29 ns382633 sshd\[3414\]: Invalid user batal from 142.93.63.82 port 39880
May  5 17:22:29 ns382633 sshd\[3414\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.63.82

2020-04-11T07:23:42.532619ionos.janbro.de sshd[98757]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.63.82  user=root
2020-04-11T07:23:44.311832ionos.janbro.de sshd[98757]: Failed password for root from 142.93.63.82 port 49472 ssh2
2020-04-11T07:25:40.450172ionos.janbro.de sshd[98777]: Invalid user test from 142.93.63.82 port 57200
2020-04-11T07:25:40.924665ionos.janbro.de sshd[98777]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.63.82
2020-04-11T07:25:40.450172ionos.janbro.de sshd[98777]: Invalid user test from 142.93.63.82 port 57200
2020-04-11T07:25:43.252223ionos.janbro.de sshd[98777]: Failed password for invalid user test from 142.93.63.82 port 57200 ssh2
2020-04-11T07:27:42.448879ionos.janbro.de sshd[98805]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.63.82  user=root
2020-04-11T07:27:44.519685ionos.janbro.de sshd[98805]: Failed pas
...

Invalid user mft from 142.93.63.82 port 44360

$f2bV_matches

Invalid user mft from 142.93.63.82 port 44360

Mar 30 13:52:09 lock-38 sshd[339219]: Failed password for root from 142.93.63.82 port 33204 ssh2
Mar 30 14:00:37 lock-38 sshd[339473]: Failed password for root from 142.93.63.82 port 52564 ssh2
Mar 30 14:04:25 lock-38 sshd[339590]: Failed password for root from 142.93.63.82 port 37076 ssh2
Mar 30 14:08:11 lock-38 sshd[339712]: Failed password for root from 142.93.63.82 port 49828 ssh2
Mar 30 14:12:01 lock-38 sshd[339864]: Failed password for root from 142.93.63.82 port 34348 ssh2
...

2020-03-27T18:12:15.918542abusebot-5.cloudsearch.cf sshd[7486]: Invalid user dnq from 142.93.63.82 port 39990
2020-03-27T18:12:15.925985abusebot-5.cloudsearch.cf sshd[7486]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.63.82
2020-03-27T18:12:15.918542abusebot-5.cloudsearch.cf sshd[7486]: Invalid user dnq from 142.93.63.82 port 39990
2020-03-27T18:12:17.221498abusebot-5.cloudsearch.cf sshd[7486]: Failed password for invalid user dnq from 142.93.63.82 port 39990 ssh2
2020-03-27T18:16:11.104871abusebot-5.cloudsearch.cf sshd[7498]: Invalid user lgq from 142.93.63.82 port 33908
2020-03-27T18:16:11.113928abusebot-5.cloudsearch.cf sshd[7498]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.63.82
2020-03-27T18:16:11.104871abusebot-5.cloudsearch.cf sshd[7498]: Invalid user lgq from 142.93.63.82 port 33908
2020-03-27T18:16:13.142005abusebot-5.cloudsearch.cf sshd[7498]: Failed password for invalid use
...

Mar 26 23:56:04 www2 sshd\[10328\]: Invalid user eil from 142.93.63.82Mar 26 23:56:07 www2 sshd\[10328\]: Failed password for invalid user eil from 142.93.63.82 port 37592 ssh2Mar 26 23:59:19 www2 sshd\[10513\]: Invalid user wpd from 142.93.63.82
...

2020-09-08T12:28:54.128443mail.standpoint.com.ua sshd[339]: Failed password for root from 142.93.63.177 port 38846 ssh2
2020-09-08T12:30:36.229939mail.standpoint.com.ua sshd[600]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.63.177  user=root
2020-09-08T12:30:38.561725mail.standpoint.com.ua sshd[600]: Failed password for root from 142.93.63.177 port 38212 ssh2
2020-09-08T12:32:16.947822mail.standpoint.com.ua sshd[851]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.63.177  user=root
2020-09-08T12:32:18.672929mail.standpoint.com.ua sshd[851]: Failed password for root from 142.93.63.177 port 37602 ssh2
...

2020-09-08T12:28:54.128443mail.standpoint.com.ua sshd[339]: Failed password for root from 142.93.63.177 port 38846 ssh2
2020-09-08T12:30:36.229939mail.standpoint.com.ua sshd[600]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.63.177  user=root
2020-09-08T12:30:38.561725mail.standpoint.com.ua sshd[600]: Failed password for root from 142.93.63.177 port 38212 ssh2
2020-09-08T12:32:16.947822mail.standpoint.com.ua sshd[851]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.63.177  user=root
2020-09-08T12:32:18.672929mail.standpoint.com.ua sshd[851]: Failed password for root from 142.93.63.177 port 37602 ssh2
...

(sshd) Failed SSH login from 142.93.63.177 (US/United States/-): 10 in the last 3600 secs

Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-08-17T11:55:33Z and 2020-08-17T12:06:30Z

Aug 11 06:19:27 vps639187 sshd\[324\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.63.177  user=root
Aug 11 06:19:30 vps639187 sshd\[324\]: Failed password for root from 142.93.63.177 port 57784 ssh2
Aug 11 06:22:46 vps639187 sshd\[426\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.63.177  user=root
...

Invalid user renata from 142.93.63.177 port 34544

Jul 25 05:47:51 web8 sshd\[21965\]: Invalid user robert from 142.93.63.177
Jul 25 05:47:51 web8 sshd\[21965\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.63.177
Jul 25 05:47:54 web8 sshd\[21965\]: Failed password for invalid user robert from 142.93.63.177 port 53484 ssh2
Jul 25 05:50:50 web8 sshd\[23600\]: Invalid user deploy from 142.93.63.177
Jul 25 05:50:50 web8 sshd\[23600\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.63.177

$f2bV_matches

2020-07-15T16:27:22.8251631495-001 sshd[54629]: Invalid user markd from 142.93.63.177 port 44824
2020-07-15T16:27:24.7487511495-001 sshd[54629]: Failed password for invalid user markd from 142.93.63.177 port 44824 ssh2
2020-07-15T16:32:18.1470631495-001 sshd[54887]: Invalid user jenkins from 142.93.63.177 port 33480
2020-07-15T16:32:18.1543761495-001 sshd[54887]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.63.177
2020-07-15T16:32:18.1470631495-001 sshd[54887]: Invalid user jenkins from 142.93.63.177 port 33480
2020-07-15T16:32:19.7093741495-001 sshd[54887]: Failed password for invalid user jenkins from 142.93.63.177 port 33480 ssh2
...

Jun 30 08:30:47 localhost sshd[454776]: Invalid user bro from 142.93.63.177 port 48994
...

no

Jun 22 09:29:04 ns3033917 sshd[14995]: Invalid user gerente from 142.93.63.177 port 42568
Jun 22 09:29:06 ns3033917 sshd[14995]: Failed password for invalid user gerente from 142.93.63.177 port 42568 ssh2
Jun 22 09:33:04 ns3033917 sshd[15066]: Invalid user adam from 142.93.63.177 port 52948
...

Lines containing failures of 142.93.63.177
Jun 20 00:52:07 install sshd[17752]: Invalid user test from 142.93.63.177 port 33188
Jun 20 00:52:07 install sshd[17752]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.63.177
Jun 20 00:52:09 install sshd[17752]: Failed password for invalid user test from 142.93.63.177 port 33188 ssh2
Jun 20 00:52:09 install sshd[17752]: Received disconnect from 142.93.63.177 port 33188:11: Bye Bye [preauth]
Jun 20 00:52:09 install sshd[17752]: Disconnected from invalid user test 142.93.63.177 port 33188 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=142.93.63.177

Automatic report - XMLRPC Attack

WordPress login Brute force / Web App Attack on client site.

port scan and connect, tcp 80 (http)

Feb 18 14:35:43 host sshd[56676]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.155.11.89  user=root
Feb 18 14:35:45 host sshd[56676]: Failed password for root from 122.155.11.89 port 44782 ssh2
...

(From raphaeMoopick@gmail.com) Hello!  bennettchiro.net 
 
Do you know the easiest way to point out your product or services? Sending messages through contact forms can allow you to simply enter the markets of any country (full geographical coverage for all countries of the world).  The advantage of such a mailing  is that the emails that may be sent through it'll find yourself within the mailbox that is meant for such messages. Sending messages using Contact forms isn't blocked by mail systems, which implies it's guaranteed to reach the client. You may be able to send your supply to potential customers who were antecedently unobtainable due to spam filters. 
We offer you to test our service for complimentary. We'll send up to fifty thousand message for you. 
The cost of sending one million messages is us $ 49. 
 
This offer is created automatically. Please use the contact details below to contact us. 
 
Contact us. 
Telegram - @FeedbackMessages 
Skype  live:contactform_18 
Email - make-success@mai

Feb 18 19:42:24 server sshd\[25262\]: Invalid user data from 195.69.222.169
Feb 18 19:42:24 server sshd\[25262\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.69.222.169 
Feb 18 19:42:27 server sshd\[25262\]: Failed password for invalid user data from 195.69.222.169 port 54448 ssh2
Feb 18 19:46:18 server sshd\[26065\]: Invalid user upload from 195.69.222.169
Feb 18 19:46:18 server sshd\[26065\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.69.222.169 
...

23/tcp
[2020-02-18]1pkt

Telnet Server BruteForce Attack

firewall-block, port(s): 9530/tcp

Feb 18 17:28:26 ns382633 sshd\[19438\]: Invalid user iibadmin from 78.96.209.42 port 36156
Feb 18 17:28:26 ns382633 sshd\[19438\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.96.209.42
Feb 18 17:28:29 ns382633 sshd\[19438\]: Failed password for invalid user iibadmin from 78.96.209.42 port 36156 ssh2
Feb 18 17:29:15 ns382633 sshd\[19533\]: Invalid user iibadmin from 78.96.209.42 port 48956
Feb 18 17:29:15 ns382633 sshd\[19533\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.96.209.42

GET /wp-login.php

Invalid user steam from 122.51.78.166 port 53250

Feb 19 00:18:35 luisaranguren wordpress(life.luisaranguren.com)[3130045]: Authentication attempt for unknown user mercurytoxic from 14.165.88.172
...

MultiHost/MultiPort Probe, Scan, Hack -

Feb 18 22:45:46 dedicated sshd[32634]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.175  user=root
Feb 18 22:45:48 dedicated sshd[32634]: Failed password for root from 218.92.0.175 port 48087 ssh2

2020-02-18 16:18:51 dovecot_login authenticator failed for (User) [66.28.37.67]: 535 Incorrect authentication data (set_id=claims@duckdns.org)
...

Feb 18 04:36:08 auw2 sshd\[20152\]: Invalid user test from 182.176.105.181
Feb 18 04:36:08 auw2 sshd\[20152\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.176.105.181
Feb 18 04:36:09 auw2 sshd\[20152\]: Failed password for invalid user test from 182.176.105.181 port 57390 ssh2
Feb 18 04:46:02 auw2 sshd\[21176\]: Invalid user miller from 182.176.105.181
Feb 18 04:46:02 auw2 sshd\[21176\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.176.105.181