Sep 15 03:46:53 sip sshd[17282]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.226.130
Sep 15 03:46:55 sip sshd[17282]: Failed password for invalid user user from 167.71.226.130 port 36310 ssh2
Sep 15 03:58:54 sip sshd[20543]: Failed password for root from 167.71.226.130 port 44498 ssh2

Sep  9 08:11:29 root sshd[20155]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.226.130 
...

Sep  9 08:11:29 root sshd[20155]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.226.130 
...

Lines containing failures of 167.71.226.130
Aug 20 22:47:28 rancher sshd[32207]: Invalid user class from 167.71.226.130 port 51680
Aug 20 22:47:28 rancher sshd[32207]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.226.130
Aug 20 22:47:30 rancher sshd[32207]: Failed password for invalid user class from 167.71.226.130 port 51680 ssh2
Aug 20 22:47:31 rancher sshd[32207]: Received disconnect from 167.71.226.130 port 51680:11: Bye Bye [preauth]
Aug 20 22:47:31 rancher sshd[32207]: Disconnected from invalid user class 167.71.226.130 port 51680 [preauth]
Aug 20 22:50:19 rancher sshd[32319]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.226.130  user=r.r
Aug 20 22:50:22 rancher sshd[32319]: Failed password for r.r from 167.71.226.130 port 58454 ssh2
Aug 20 22:50:23 rancher sshd[32319]: Received disconnect from 167.71.226.130 port 58454:11: Bye Bye [preauth]
Aug 20 22:50:23 rancher s........
------------------------------

$f2bV_matches

(sshd) Failed SSH login from 167.71.226.158 (IN/India/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Mar  5 15:37:23 ubnt-55d23 sshd[14155]: Invalid user cpanelphppgadmin from 167.71.226.158 port 34418
Mar  5 15:37:25 ubnt-55d23 sshd[14155]: Failed password for invalid user cpanelphppgadmin from 167.71.226.158 port 34418 ssh2

Invalid user test from 167.71.226.158 port 50300

Feb 10 04:53:12 game-panel sshd[30679]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.226.158
Feb 10 04:53:14 game-panel sshd[30679]: Failed password for invalid user koz from 167.71.226.158 port 50336 ssh2
Feb 10 04:56:09 game-panel sshd[30850]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.226.158

Unauthorized connection attempt detected from IP address 167.71.226.158 to port 2220 [J]

Jan  7 20:27:14 wbs sshd\[21698\]: Invalid user bruce from 167.71.226.158
Jan  7 20:27:14 wbs sshd\[21698\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.226.158
Jan  7 20:27:16 wbs sshd\[21698\]: Failed password for invalid user bruce from 167.71.226.158 port 46676 ssh2
Jan  7 20:29:47 wbs sshd\[21893\]: Invalid user rli from 167.71.226.158
Jan  7 20:29:47 wbs sshd\[21893\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.226.158

Jan  1 09:04:41 vps691689 sshd[6699]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.226.158
Jan  1 09:04:42 vps691689 sshd[6699]: Failed password for invalid user nine from 167.71.226.158 port 36194 ssh2
...

Dec 25 17:53:27 dev0-dcde-rnet sshd[28381]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.226.158
Dec 25 17:53:29 dev0-dcde-rnet sshd[28381]: Failed password for invalid user comnetwork from 167.71.226.158 port 36854 ssh2
Dec 25 17:56:16 dev0-dcde-rnet sshd[28389]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.226.158

Dec 23 18:13:42 webhost01 sshd[4740]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.226.158
Dec 23 18:13:44 webhost01 sshd[4740]: Failed password for invalid user dena from 167.71.226.158 port 53736 ssh2
...

Dec 21 11:46:51 TORMINT sshd\[29704\]: Invalid user Pa55word@12345 from 167.71.226.158
Dec 21 11:46:51 TORMINT sshd\[29704\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.226.158
Dec 21 11:46:53 TORMINT sshd\[29704\]: Failed password for invalid user Pa55word@12345 from 167.71.226.158 port 48232 ssh2
...

Dec  2 06:04:42 plusreed sshd[6436]: Invalid user travis from 167.71.226.158
...

Dec  2 01:24:50 plusreed sshd[29719]: Invalid user harue from 167.71.226.158
...

Nov 28 22:31:50 jane sshd[12524]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.226.158 
Nov 28 22:31:51 jane sshd[12524]: Failed password for invalid user beezie from 167.71.226.158 port 53738 ssh2
...

Nov 24 20:59:08 auw2 sshd\[4637\]: Invalid user kreie from 167.71.226.158
Nov 24 20:59:08 auw2 sshd\[4637\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.226.158
Nov 24 20:59:10 auw2 sshd\[4637\]: Failed password for invalid user kreie from 167.71.226.158 port 37474 ssh2
Nov 24 21:03:02 auw2 sshd\[5113\]: Invalid user aiuandhiga from 167.71.226.158
Nov 24 21:03:02 auw2 sshd\[5113\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.226.158

Nov 21 19:52:02 gw1 sshd[13210]: Failed password for root from 167.71.226.158 port 56280 ssh2
...

2019-12-23T05:51:14.740838vps751288.ovh.net sshd\[6892\]: Invalid user akule from 112.198.43.130 port 58011
2019-12-23T05:51:14.752508vps751288.ovh.net sshd\[6892\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.198.43.130
2019-12-23T05:51:16.668203vps751288.ovh.net sshd\[6892\]: Failed password for invalid user akule from 112.198.43.130 port 58011 ssh2
2019-12-23T05:54:57.510847vps751288.ovh.net sshd\[6924\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.198.43.130  user=root
2019-12-23T05:54:59.707518vps751288.ovh.net sshd\[6924\]: Failed password for root from 112.198.43.130 port 47167 ssh2

Dec 23 05:56:26 sd-53420 sshd\[19776\]: User root from 218.92.0.165 not allowed because none of user's groups are listed in AllowGroups
Dec 23 05:56:26 sd-53420 sshd\[19776\]: Failed none for invalid user root from 218.92.0.165 port 54161 ssh2
Dec 23 05:56:27 sd-53420 sshd\[19776\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.165  user=root
Dec 23 05:56:29 sd-53420 sshd\[19776\]: Failed password for invalid user root from 218.92.0.165 port 54161 ssh2
Dec 23 05:56:40 sd-53420 sshd\[19776\]: Failed password for invalid user root from 218.92.0.165 port 54161 ssh2
...

MultiHost/MultiPort Probe, Scan, Hack -

Dec 22 19:07:17 kapalua sshd\[20771\]: Invalid user evie from 202.88.246.161
Dec 22 19:07:17 kapalua sshd\[20771\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.88.246.161
Dec 22 19:07:19 kapalua sshd\[20771\]: Failed password for invalid user evie from 202.88.246.161 port 36856 ssh2
Dec 22 19:13:41 kapalua sshd\[21503\]: Invalid user stamboulie from 202.88.246.161
Dec 22 19:13:41 kapalua sshd\[21503\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.88.246.161

Dec 23 06:53:41 pkdns2 sshd\[54128\]: Failed password for root from 178.116.236.42 port 60092 ssh2Dec 23 06:54:13 pkdns2 sshd\[54167\]: Invalid user kjs from 178.116.236.42Dec 23 06:54:15 pkdns2 sshd\[54167\]: Failed password for invalid user kjs from 178.116.236.42 port 33940 ssh2Dec 23 06:54:45 pkdns2 sshd\[54171\]: Invalid user vhost from 178.116.236.42Dec 23 06:54:47 pkdns2 sshd\[54171\]: Failed password for invalid user vhost from 178.116.236.42 port 36032 ssh2Dec 23 06:55:16 pkdns2 sshd\[54245\]: Invalid user admin from 178.116.236.42
...

Dec 23 07:39:13 server sshd\[809\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.ip-51-68-44.eu  user=root
Dec 23 07:39:16 server sshd\[809\]: Failed password for root from 51.68.44.158 port 44668 ssh2
Dec 23 07:50:13 server sshd\[4036\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.ip-51-68-44.eu  user=root
Dec 23 07:50:15 server sshd\[4036\]: Failed password for root from 51.68.44.158 port 52882 ssh2
Dec 23 07:54:58 server sshd\[4927\]: Invalid user stingel from 51.68.44.158
Dec 23 07:54:58 server sshd\[4927\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.ip-51-68-44.eu 
...

Dec 23 01:47:25 server sshd\[831\]: Failed password for root from 49.88.112.61 port 37031 ssh2
Dec 23 01:47:26 server sshd\[817\]: Failed password for root from 49.88.112.61 port 60738 ssh2
Dec 23 08:25:05 server sshd\[13160\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.61  user=root
Dec 23 08:25:06 server sshd\[13162\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.61  user=root
Dec 23 08:25:06 server sshd\[13160\]: Failed password for root from 49.88.112.61 port 9243 ssh2
...

(smtpauth) Failed SMTP AUTH login from 185.36.81.174 (LT/Republic of Lithuania/-): 5 in the last 3600 secs

Dec 23 05:05:39 game-panel sshd[542]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.141.132.233
Dec 23 05:05:40 game-panel sshd[542]: Failed password for invalid user guest from 74.141.132.233 port 50098 ssh2
Dec 23 05:11:56 game-panel sshd[883]: Failed password for sshd from 74.141.132.233 port 56896 ssh2

12/23/2019-06:30:51.012199 198.211.120.59 Protocol: 17 ET INFO Session Traversal Utilities for NAT (STUN Binding Response)

1577076913 - 12/23/2019 05:55:13 Host: 114.40.79.70/114.40.79.70 Port: 445 TCP Blocked

Dec 23 05:55:24 debian-2gb-nbg1-2 kernel: \[729672.183243\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=193.56.28.14 DST=195.201.40.59 LEN=121 TOS=0x00 PREC=0x00 TTL=238 ID=54321 PROTO=UDP SPT=52838 DPT=1900 LEN=101

Attempt to attack host OS, exploiting network vulnerabilities, on 23-12-2019 04:55:08.

2019-12-23T05:29:53.446443shield sshd\[20139\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=84-45-251-243.static.enta.net  user=root
2019-12-23T05:29:55.388556shield sshd\[20139\]: Failed password for root from 84.45.251.243 port 49288 ssh2
2019-12-23T05:34:49.224131shield sshd\[22598\]: Invalid user temp from 84.45.251.243 port 53482
2019-12-23T05:34:49.228457shield sshd\[22598\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=84-45-251-243.static.enta.net
2019-12-23T05:34:51.150451shield sshd\[22598\]: Failed password for invalid user temp from 84.45.251.243 port 53482 ssh2

Port scan on 12 port(s): 52595 52662 52856 52919 52992 53013 53028 53121 53166 53322 53422 53452