Oct  6 19:07:55 sip sshd[1842731]: Failed password for root from 144.217.243.216 port 54740 ssh2
Oct  6 19:11:45 sip sshd[1842746]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.217.243.216  user=root
Oct  6 19:11:47 sip sshd[1842746]: Failed password for root from 144.217.243.216 port 33264 ssh2
...

$f2bV_matches

$f2bV_matches

20 attempts against mh-ssh on echoip

Sep 27 11:17:18 s1 sshd\[7065\]: Invalid user f from 144.217.243.216 port 60736
Sep 27 11:17:18 s1 sshd\[7065\]: Failed password for invalid user f from 144.217.243.216 port 60736 ssh2
Sep 27 11:20:02 s1 sshd\[9993\]: Invalid user storage from 144.217.243.216 port 51386
Sep 27 11:20:02 s1 sshd\[9993\]: Failed password for invalid user storage from 144.217.243.216 port 51386 ssh2
Sep 27 11:22:49 s1 sshd\[13496\]: User root from 144.217.243.216 not allowed because not listed in AllowUsers
Sep 27 11:22:49 s1 sshd\[13496\]: Failed password for invalid user root from 144.217.243.216 port 41984 ssh2
...

144.217.243.216 (CA/Canada/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 18 11:21:08 server5 sshd[7908]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.133.140  user=root
Sep 18 11:21:33 server5 sshd[8239]: Failed password for root from 144.217.243.216 port 57760 ssh2
Sep 18 11:22:12 server5 sshd[8490]: Failed password for root from 138.197.12.179 port 52968 ssh2
Sep 18 11:22:00 server5 sshd[8469]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.209.2  user=root
Sep 18 11:22:03 server5 sshd[8469]: Failed password for root from 167.71.209.2 port 52220 ssh2
Sep 18 11:21:10 server5 sshd[7908]: Failed password for root from 159.65.133.140 port 40382 ssh2

IP Addresses Blocked:

159.65.133.140 (SG/Singapore/-)

21 attempts against mh-ssh on pcx

Sep 17 19:29:19 django-0 sshd[30717]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=216.ip-144-217-243.net  user=root
Sep 17 19:29:21 django-0 sshd[30717]: Failed password for root from 144.217.243.216 port 49024 ssh2
...

144.217.243.216 (CA/Canada/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 17 09:33:56 server2 sshd[6438]: Failed password for root from 202.175.46.170 port 51406 ssh2
Sep 17 09:32:18 server2 sshd[4488]: Failed password for root from 144.217.243.216 port 41102 ssh2
Sep 17 09:34:48 server2 sshd[6873]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.68.197  user=root
Sep 17 09:34:50 server2 sshd[6873]: Failed password for root from 106.12.68.197 port 47514 ssh2
Sep 17 09:35:36 server2 sshd[8148]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.29.223  user=root

IP Addresses Blocked:

202.175.46.170 (MO/Macao/-)

144.217.243.216 (CA/Canada/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 17 00:04:08 server5 sshd[20292]: Failed password for root from 144.217.243.216 port 33708 ssh2
Sep 17 00:06:12 server5 sshd[21566]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.75.240  user=root
Sep 17 00:06:14 server5 sshd[21566]: Failed password for root from 167.99.75.240 port 56970 ssh2
Sep 17 00:06:50 server5 sshd[21997]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.101.207  user=root
Sep 17 00:05:35 server5 sshd[21387]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.159.189.39  user=root
Sep 17 00:05:36 server5 sshd[21387]: Failed password for root from 211.159.189.39 port 38032 ssh2

IP Addresses Blocked:

2020-09-16T13:00:28.742584mail.thespaminator.com sshd[23698]: Invalid user sign from 144.217.243.216 port 37144
2020-09-16T13:00:31.418473mail.thespaminator.com sshd[23698]: Failed password for invalid user sign from 144.217.243.216 port 37144 ssh2
...

Sep  1 09:34:50 server sshd[5669]: Invalid user klaus from 144.217.243.216 port 37648
...

Aug 22 18:27:54 minden010 sshd[15351]: Failed password for root from 144.217.243.216 port 48172 ssh2
Aug 22 18:30:11 minden010 sshd[16214]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.217.243.216
Aug 22 18:30:13 minden010 sshd[16214]: Failed password for invalid user mrj from 144.217.243.216 port 54058 ssh2
...

2020-08-22T03:52:16.484819shield sshd\[18975\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=216.ip-144-217-243.net  user=root
2020-08-22T03:52:18.330819shield sshd\[18975\]: Failed password for root from 144.217.243.216 port 51006 ssh2
2020-08-22T03:56:13.318050shield sshd\[19979\]: Invalid user admin1 from 144.217.243.216 port 59100
2020-08-22T03:56:13.324112shield sshd\[19979\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=216.ip-144-217-243.net
2020-08-22T03:56:15.372834shield sshd\[19979\]: Failed password for invalid user admin1 from 144.217.243.216 port 59100 ssh2

Aug 18 08:10:04 abendstille sshd\[10882\]: Invalid user Administrator from 144.217.243.216
Aug 18 08:10:04 abendstille sshd\[10882\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.217.243.216
Aug 18 08:10:06 abendstille sshd\[10882\]: Failed password for invalid user Administrator from 144.217.243.216 port 51916 ssh2
Aug 18 08:14:03 abendstille sshd\[15108\]: Invalid user kundan from 144.217.243.216
Aug 18 08:14:03 abendstille sshd\[15108\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.217.243.216
...

Dec  8 19:30:54 v22018086721571380 sshd[8736]: Failed password for invalid user dd from 96.48.244.48 port 37286 ssh2

Honeypot attack, port: 1, PTR: PTR record not found

Dec  8 22:50:27 server sshd\[19754\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.57.74.54  user=nobody
Dec  8 22:50:29 server sshd\[19754\]: Failed password for nobody from 178.57.74.54 port 59084 ssh2
Dec  8 22:56:23 server sshd\[21251\]: Invalid user ung from 178.57.74.54
Dec  8 22:56:23 server sshd\[21251\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.57.74.54 
Dec  8 22:56:24 server sshd\[21251\]: Failed password for invalid user ung from 178.57.74.54 port 50162 ssh2
...

Dec  8 20:11:00 jane sshd[18142]: Failed password for sshd from 128.199.81.66 port 49648 ssh2
...

Dec  8 18:10:03 h2177944 sshd\[8197\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.255.84.14  user=root
Dec  8 18:10:04 h2177944 sshd\[8197\]: Failed password for root from 43.255.84.14 port 34188 ssh2
Dec  8 18:17:08 h2177944 sshd\[8517\]: Invalid user spamtrap from 43.255.84.14 port 35031
Dec  8 18:17:08 h2177944 sshd\[8517\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.255.84.14
...

Unauthorized connection attempt detected from IP address 156.0.239.102 to port 445

Dec  8 17:01:49 srv01 sshd[19271]: Invalid user studieveileder from 140.143.57.159 port 40166
Dec  8 17:01:49 srv01 sshd[19271]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.57.159
Dec  8 17:01:49 srv01 sshd[19271]: Invalid user studieveileder from 140.143.57.159 port 40166
Dec  8 17:01:51 srv01 sshd[19271]: Failed password for invalid user studieveileder from 140.143.57.159 port 40166 ssh2
Dec  8 17:08:56 srv01 sshd[19852]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.57.159  user=root
Dec  8 17:08:58 srv01 sshd[19852]: Failed password for root from 140.143.57.159 port 38980 ssh2
...

invalid user

Dec  8 16:58:36 hcbbdb sshd\[24497\]: Invalid user stuhlinger from 45.55.35.40
Dec  8 16:58:36 hcbbdb sshd\[24497\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.35.40
Dec  8 16:58:38 hcbbdb sshd\[24497\]: Failed password for invalid user stuhlinger from 45.55.35.40 port 36786 ssh2
Dec  8 17:04:09 hcbbdb sshd\[25140\]: Invalid user trevor from 45.55.35.40
Dec  8 17:04:09 hcbbdb sshd\[25140\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.35.40

Honeypot attack, port: 23, PTR: PTR record not found

Dec  8 20:57:56 sd-53420 sshd\[7366\]: User root from 139.59.38.94 not allowed because none of user's groups are listed in AllowGroups
Dec  8 20:57:56 sd-53420 sshd\[7366\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.38.94  user=root
Dec  8 20:57:58 sd-53420 sshd\[7366\]: Failed password for invalid user root from 139.59.38.94 port 59456 ssh2
Dec  8 21:06:50 sd-53420 sshd\[8976\]: Invalid user quantum from 139.59.38.94
Dec  8 21:06:50 sd-53420 sshd\[8976\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.38.94
...

Dec  8 19:58:49 loxhost sshd\[2630\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.207.182.133  user=root
Dec  8 19:58:51 loxhost sshd\[2630\]: Failed password for root from 41.207.182.133 port 58538 ssh2
Dec  8 20:05:18 loxhost sshd\[2922\]: Invalid user openelec from 41.207.182.133 port 39840
Dec  8 20:05:18 loxhost sshd\[2922\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.207.182.133
Dec  8 20:05:20 loxhost sshd\[2922\]: Failed password for invalid user openelec from 41.207.182.133 port 39840 ssh2
...

Unauthorized connection attempt detected from IP address 212.3.121.190 to port 445

Dec  8 15:29:15 Ubuntu-1404-trusty-64-minimal sshd\[6577\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.219.148  user=root
Dec  8 15:29:17 Ubuntu-1404-trusty-64-minimal sshd\[6577\]: Failed password for root from 106.13.219.148 port 35568 ssh2
Dec  8 15:45:36 Ubuntu-1404-trusty-64-minimal sshd\[20420\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.219.148  user=root
Dec  8 15:45:38 Ubuntu-1404-trusty-64-minimal sshd\[20420\]: Failed password for root from 106.13.219.148 port 41502 ssh2
Dec  8 15:52:58 Ubuntu-1404-trusty-64-minimal sshd\[24394\]: Invalid user info from 106.13.219.148

Dec  8 18:42:58 mail sshd[11096]: Invalid user titian from 211.194.190.87
Dec  8 18:42:58 mail sshd[11096]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.194.190.87
Dec  8 18:42:58 mail sshd[11096]: Invalid user titian from 211.194.190.87
Dec  8 18:43:00 mail sshd[11096]: Failed password for invalid user titian from 211.194.190.87 port 45690 ssh2
Dec  8 19:34:15 mail sshd[17679]: Invalid user bijoy from 211.194.190.87
...