2020-09-18T07:40:54.859224mail.thespaminator.com sshd[24903]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.157.193  user=root
2020-09-18T07:40:56.618932mail.thespaminator.com sshd[24903]: Failed password for root from 163.172.157.193 port 52664 ssh2
...

Sep 18 10:32:22 Ubuntu-1404-trusty-64-minimal sshd\[23543\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.157.193  user=root
Sep 18 10:32:24 Ubuntu-1404-trusty-64-minimal sshd\[23543\]: Failed password for root from 163.172.157.193 port 58698 ssh2
Sep 18 10:35:43 Ubuntu-1404-trusty-64-minimal sshd\[25078\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.157.193  user=root
Sep 18 10:35:45 Ubuntu-1404-trusty-64-minimal sshd\[25078\]: Failed password for root from 163.172.157.193 port 34706 ssh2
Sep 18 10:38:22 Ubuntu-1404-trusty-64-minimal sshd\[26391\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.157.193  user=root

Automatic report - Banned IP Access

Aug 19 15:20:12 electroncash sshd[12177]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.157.193 
Aug 19 15:20:12 electroncash sshd[12177]: Invalid user student from 163.172.157.193 port 38040
Aug 19 15:20:14 electroncash sshd[12177]: Failed password for invalid user student from 163.172.157.193 port 38040 ssh2
Aug 19 15:24:03 electroncash sshd[13341]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.157.193  user=root
Aug 19 15:24:05 electroncash sshd[13341]: Failed password for root from 163.172.157.193 port 45878 ssh2
...

Aug 17 20:14:06 pornomens sshd\[26982\]: Invalid user paul from 163.172.157.193 port 57032
Aug 17 20:14:06 pornomens sshd\[26982\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.157.193
Aug 17 20:14:08 pornomens sshd\[26982\]: Failed password for invalid user paul from 163.172.157.193 port 57032 ssh2
...

Aug  4 21:19:49 Ubuntu-1404-trusty-64-minimal sshd\[5818\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.157.193  user=root
Aug  4 21:19:50 Ubuntu-1404-trusty-64-minimal sshd\[5818\]: Failed password for root from 163.172.157.193 port 52236 ssh2
Aug  4 22:00:15 Ubuntu-1404-trusty-64-minimal sshd\[11602\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.157.193  user=root
Aug  4 22:00:17 Ubuntu-1404-trusty-64-minimal sshd\[11602\]: Failed password for root from 163.172.157.193 port 46232 ssh2
Aug  4 22:03:55 Ubuntu-1404-trusty-64-minimal sshd\[31128\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.157.193  user=root

*Port Scan* detected from 163.172.157.193 (FR/France/Île-de-France/Paris/193-157-172-163.instances.scw.cloud). 4 hits in the last 210 seconds

Jul 31 02:16:56 *hidden* sshd[11513]: Failed password for *hidden* from 163.172.157.193 port 58366 ssh2 Jul 31 02:20:04 *hidden* sshd[11937]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.157.193 user=root Jul 31 02:20:06 *hidden* sshd[11937]: Failed password for *hidden* from 163.172.157.193 port 56054 ssh2

Automatic report BANNED IP

SSH authentication failure x 6 reported by Fail2Ban
...

Invalid user daniel from 163.172.157.193 port 47092

Jul 20 01:37:06 vps647732 sshd[22638]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.157.193
Jul 20 01:37:08 vps647732 sshd[22638]: Failed password for invalid user test from 163.172.157.193 port 38756 ssh2
...

Jul 18 14:27:32 santamaria sshd\[30975\]: Invalid user valter from 163.172.157.193
Jul 18 14:27:32 santamaria sshd\[30975\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.157.193
Jul 18 14:27:35 santamaria sshd\[30975\]: Failed password for invalid user valter from 163.172.157.193 port 34618 ssh2
...

Jul 17 13:09:44 game-panel sshd[8637]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.157.193
Jul 17 13:09:46 game-panel sshd[8637]: Failed password for invalid user nic from 163.172.157.193 port 41610 ssh2
Jul 17 13:13:39 game-panel sshd[8799]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.157.193

Jul  9 15:25:11 ns382633 sshd\[28272\]: Invalid user harris from 163.172.157.193 port 48064
Jul  9 15:25:11 ns382633 sshd\[28272\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.157.193
Jul  9 15:25:12 ns382633 sshd\[28272\]: Failed password for invalid user harris from 163.172.157.193 port 48064 ssh2
Jul  9 15:36:09 ns382633 sshd\[30031\]: Invalid user bianka from 163.172.157.193 port 42284
Jul  9 15:36:09 ns382633 sshd\[30031\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.157.193

Apr 29 15:14:59 sd-126173 sshd[10431]: Invalid user rh from 163.172.157.139 port 46494
Apr 29 15:15:55 sd-126173 sshd[10446]: User root from 163.172.157.139 not allowed because not listed in AllowUsers

prod3
...

(sshd) Failed SSH login from 163.172.157.162 (FR/France/162-157-172-163.rev.cloud.scaleway.com): 5 in the last 3600 secs

2020-03-01T01:11:36.297166linuxbox-skyline sshd[71741]: Invalid user robert from 163.172.157.162 port 50952
...

Multiple SSH login attempts.

Unauthorized connection attempt detected from IP address 163.172.157.162 to port 2220 [J]

21 attempts against mh-ssh on cloud.magehost.pro

Unauthorized connection attempt detected from IP address 163.172.157.162 to port 2220 [J]

Brute-force attempt banned

Dec 15 02:27:52 php1 sshd\[20932\]: Invalid user norec from 163.172.157.162
Dec 15 02:27:52 php1 sshd\[20932\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.157.162
Dec 15 02:27:55 php1 sshd\[20932\]: Failed password for invalid user norec from 163.172.157.162 port 43192 ssh2
Dec 15 02:33:26 php1 sshd\[21556\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.157.162  user=root
Dec 15 02:33:28 php1 sshd\[21556\]: Failed password for root from 163.172.157.162 port 50880 ssh2

Dec 13 10:28:07 game-panel sshd[13536]: Failed password for root from 163.172.157.162 port 49894 ssh2
Dec 13 10:33:27 game-panel sshd[13710]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.157.162
Dec 13 10:33:30 game-panel sshd[13710]: Failed password for invalid user furmaniak from 163.172.157.162 port 58526 ssh2

Dec 12 09:03:10 srv206 sshd[11000]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.157.162  user=root
Dec 12 09:03:13 srv206 sshd[11000]: Failed password for root from 163.172.157.162 port 35446 ssh2
Dec 12 09:10:15 srv206 sshd[11049]: Invalid user wwwrun from 163.172.157.162
...

Dec  3 18:26:48 sd-53420 sshd\[17858\]: Invalid user stephe from 163.172.157.162
Dec  3 18:26:48 sd-53420 sshd\[17858\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.157.162
Dec  3 18:26:49 sd-53420 sshd\[17858\]: Failed password for invalid user stephe from 163.172.157.162 port 59546 ssh2
Dec  3 18:32:12 sd-53420 sshd\[18834\]: Invalid user dcc from 163.172.157.162
Dec  3 18:32:12 sd-53420 sshd\[18834\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.157.162
...

Aug  5 14:07:07 meumeu sshd[14682]: Failed password for invalid user demos from 163.172.157.162 port 43202 ssh2
Aug  5 14:11:25 meumeu sshd[15138]: Failed password for invalid user hc from 163.172.157.162 port 37078 ssh2
...

Nov 29 02:50:14 eddieflores sshd\[8915\]: Invalid user warm from 163.172.157.162
Nov 29 02:50:14 eddieflores sshd\[8915\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.157.162
Nov 29 02:50:16 eddieflores sshd\[8915\]: Failed password for invalid user warm from 163.172.157.162 port 42204 ssh2
Nov 29 02:53:25 eddieflores sshd\[9134\]: Invalid user Pa55w0rd123 from 163.172.157.162
Nov 29 02:53:25 eddieflores sshd\[9134\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.157.162

Automatic report - XMLRPC Attack

Unauthorized connection attempt detected from IP address 121.157.223.85 to port 5555 [J]

Automatic report - XMLRPC Attack

Unauthorized connection attempt detected from IP address 46.101.103.191 to port 22 [J]

Unauthorized connection attempt from IP address 65.91.52.175 on Port 445(SMB)

(sshd) Failed SSH login from 193.70.0.93 (FR/France/93.ip-193-70-0.eu): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Mar  1 08:06:50 amsweb01 sshd[28740]: Invalid user sinusbot from 193.70.0.93 port 52648
Mar  1 08:06:52 amsweb01 sshd[28740]: Failed password for invalid user sinusbot from 193.70.0.93 port 52648 ssh2
Mar  1 08:11:42 amsweb01 sshd[31204]: Invalid user igor from 193.70.0.93 port 34236
Mar  1 08:11:45 amsweb01 sshd[31204]: Failed password for invalid user igor from 193.70.0.93 port 34236 ssh2
Mar  1 08:13:20 amsweb01 sshd[32475]: Invalid user minecraft from 193.70.0.93 port 34266

2020-03-01T17:56:13.770486luisaranguren sshd[2813156]: Invalid user admins from 5.132.115.161 port 40368
2020-03-01T17:56:16.025369luisaranguren sshd[2813156]: Failed password for invalid user admins from 5.132.115.161 port 40368 ssh2
...

Unauthorized connection attempt detected from IP address 159.89.160.91 to port 4003 [J]

Automatic report - Port Scan Attack

Mar  1 07:56:53 localhost sshd\[9981\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.167  user=root
Mar  1 07:56:55 localhost sshd\[9981\]: Failed password for root from 222.186.30.167 port 62375 ssh2
Mar  1 07:56:57 localhost sshd\[9981\]: Failed password for root from 222.186.30.167 port 62375 ssh2

Mar  1 07:55:47 debian-2gb-nbg1-2 kernel: \[5304934.395751\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.90 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=5641 PROTO=TCP SPT=56610 DPT=21410 WINDOW=1024 RES=0x00 SYN URGP=0

Mar  1 07:53:35 server sshd[3051962]: Failed none for root from 222.186.175.151 port 2012 ssh2
Mar  1 07:53:37 server sshd[3051962]: Failed password for root from 222.186.175.151 port 2012 ssh2
Mar  1 07:53:39 server sshd[3051962]: Failed password for root from 222.186.175.151 port 2012 ssh2

Honeypot attack, port: 445, PTR: 11.154-241-81.adsl-dyn.isp.belgacom.be.

Honeypot attack, port: 445, PTR: PTR record not found

Honeypot attack, port: 5555, PTR: localhost.