Unauthorized connection attempt detected from IP address 175.24.109.49 to port 3323 [T]

SSH Brute-Force. Ports scanning.

2020-04-17T21:19:14.840877abusebot-7.cloudsearch.cf sshd[26869]: Invalid user git from 175.24.109.49 port 40004
2020-04-17T21:19:14.848280abusebot-7.cloudsearch.cf sshd[26869]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.24.109.49
2020-04-17T21:19:14.840877abusebot-7.cloudsearch.cf sshd[26869]: Invalid user git from 175.24.109.49 port 40004
2020-04-17T21:19:16.838097abusebot-7.cloudsearch.cf sshd[26869]: Failed password for invalid user git from 175.24.109.49 port 40004 ssh2
2020-04-17T21:24:32.619955abusebot-7.cloudsearch.cf sshd[27371]: Invalid user info from 175.24.109.49 port 38516
2020-04-17T21:24:32.625680abusebot-7.cloudsearch.cf sshd[27371]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.24.109.49
2020-04-17T21:24:32.619955abusebot-7.cloudsearch.cf sshd[27371]: Invalid user info from 175.24.109.49 port 38516
2020-04-17T21:24:34.605313abusebot-7.cloudsearch.cf sshd[27371]: Failed passwor
...

Mar 25 06:42:57 *** sshd[28215]: Invalid user kasutaja from 175.24.109.49

Mar 24 16:21:20 lanister sshd[21273]: Invalid user student from 175.24.109.49
Mar 24 16:21:20 lanister sshd[21273]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.24.109.49
Mar 24 16:21:20 lanister sshd[21273]: Invalid user student from 175.24.109.49
Mar 24 16:21:21 lanister sshd[21273]: Failed password for invalid user student from 175.24.109.49 port 47494 ssh2

Mar 20 09:52:16 ncomp sshd[19078]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.24.109.49  user=root
Mar 20 09:52:18 ncomp sshd[19078]: Failed password for root from 175.24.109.49 port 43404 ssh2
Mar 20 10:22:43 ncomp sshd[20759]: Invalid user user from 175.24.109.49

Mar 19 22:19:45 ovpn sshd\[14554\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.24.109.49  user=root
Mar 19 22:19:47 ovpn sshd\[14554\]: Failed password for root from 175.24.109.49 port 45070 ssh2
Mar 19 22:28:15 ovpn sshd\[16710\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.24.109.49  user=root
Mar 19 22:28:16 ovpn sshd\[16710\]: Failed password for root from 175.24.109.49 port 56664 ssh2
Mar 19 22:36:46 ovpn sshd\[18968\]: Invalid user db2fenc3 from 175.24.109.49
Mar 19 22:36:46 ovpn sshd\[18968\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.24.109.49

Invalid user ftptest from 175.24.109.49 port 33128

Feb 16 14:53:34 firewall sshd[12195]: Invalid user elle from 175.24.109.49
Feb 16 14:53:36 firewall sshd[12195]: Failed password for invalid user elle from 175.24.109.49 port 57696 ssh2
Feb 16 14:57:00 firewall sshd[12309]: Invalid user redhat from 175.24.109.49
...

Jan 31 00:10:12 eddieflores sshd\[30823\]: Invalid user naganjana from 175.24.109.49
Jan 31 00:10:12 eddieflores sshd\[30823\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.24.109.49
Jan 31 00:10:14 eddieflores sshd\[30823\]: Failed password for invalid user naganjana from 175.24.109.49 port 45098 ssh2
Jan 31 00:13:40 eddieflores sshd\[31202\]: Invalid user bahumathi from 175.24.109.49
Jan 31 00:13:40 eddieflores sshd\[31202\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.24.109.49

Aug 25 13:49:38 dignus sshd[29833]: Invalid user gl from 175.24.109.125 port 34772
Aug 25 13:49:38 dignus sshd[29833]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.24.109.125
Aug 25 13:49:40 dignus sshd[29833]: Failed password for invalid user gl from 175.24.109.125 port 34772 ssh2
Aug 25 13:51:16 dignus sshd[30046]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.24.109.125  user=ubuntu
Aug 25 13:51:19 dignus sshd[30046]: Failed password for ubuntu from 175.24.109.125 port 32988 ssh2
...

DATE:2020-08-23 13:03:29,IP:175.24.109.125,MATCHES:10,PORT:ssh

Jun 14 08:51:04 sip sshd[6052]: Failed password for root from 175.24.109.64 port 43520 ssh2
Jun 14 09:05:22 sip sshd[11289]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.24.109.64
Jun 14 09:05:24 sip sshd[11289]: Failed password for invalid user maint from 175.24.109.64 port 51186 ssh2

Jun  4 05:52:31 vpn01 sshd[21098]: Failed password for root from 175.24.109.64 port 36578 ssh2
...

web-1 [ssh] SSH Attack

(sshd) Failed SSH login from 175.24.109.133 (CN/China/-): 5 in the last 3600 secs

SSH brute-force attempt

$f2bV_matches

2020-04-05T09:09:45.100266abusebot.cloudsearch.cf sshd[4919]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.24.109.20  user=root
2020-04-05T09:09:46.786183abusebot.cloudsearch.cf sshd[4919]: Failed password for root from 175.24.109.20 port 46342 ssh2
2020-04-05T09:12:33.686899abusebot.cloudsearch.cf sshd[5115]: Invalid user phion from 175.24.109.20 port 38268
2020-04-05T09:12:33.693147abusebot.cloudsearch.cf sshd[5115]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.24.109.20
2020-04-05T09:12:33.686899abusebot.cloudsearch.cf sshd[5115]: Invalid user phion from 175.24.109.20 port 38268
2020-04-05T09:12:35.775350abusebot.cloudsearch.cf sshd[5115]: Failed password for invalid user phion from 175.24.109.20 port 38268 ssh2
2020-04-05T09:15:11.774958abusebot.cloudsearch.cf sshd[5290]: Invalid user test from 175.24.109.20 port 58418
...

Invalid user castis from 175.24.109.20 port 34370

Tried sshing with brute force.

(sshd) Failed SSH login from 175.24.109.20 (US/United States/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Mar 22 11:47:47 ubnt-55d23 sshd[22218]: Invalid user test from 175.24.109.20 port 40064
Mar 22 11:47:50 ubnt-55d23 sshd[22218]: Failed password for invalid user test from 175.24.109.20 port 40064 ssh2

Invalid user test from 175.24.109.20 port 34446

Mar 10 11:08:15 auw2 sshd\[23095\]: Invalid user user from 175.24.109.20
Mar 10 11:08:15 auw2 sshd\[23095\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.24.109.20
Mar 10 11:08:18 auw2 sshd\[23095\]: Failed password for invalid user user from 175.24.109.20 port 43278 ssh2
Mar 10 11:13:51 auw2 sshd\[23561\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.24.109.20  user=auw
Mar 10 11:13:53 auw2 sshd\[23561\]: Failed password for auw from 175.24.109.20 port 41372 ssh2

Mar  7 21:29:18 kapalua sshd\[7621\]: Invalid user mauiland from 175.24.109.20
Mar  7 21:29:18 kapalua sshd\[7621\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.24.109.20
Mar  7 21:29:19 kapalua sshd\[7621\]: Failed password for invalid user mauiland from 175.24.109.20 port 40726 ssh2
Mar  7 21:35:24 kapalua sshd\[8020\]: Invalid user ubuntu from 175.24.109.20
Mar  7 21:35:24 kapalua sshd\[8020\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.24.109.20

Dec 25 10:38:23 herz-der-gamer sshd[12256]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.202.206.206  user=server
Dec 25 10:38:25 herz-der-gamer sshd[12256]: Failed password for server from 149.202.206.206 port 56208 ssh2
Dec 25 10:49:43 herz-der-gamer sshd[12405]: Invalid user ny from 149.202.206.206 port 46021
...

1577255078 - 12/25/2019 07:24:38 Host: 101.108.95.237/101.108.95.237 Port: 445 TCP Blocked

You stupid fucking Russian whore I fucked your mother while your daughter sucked my dick and licked my asshole you vodka drinking piece of shit the USA WILL WIPE YALL RUSSIAN PUSSIES OFF THE MAP BITCH

Dec 25 10:08:15 hcbbdb sshd\[29687\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.212  user=root
Dec 25 10:08:17 hcbbdb sshd\[29687\]: Failed password for root from 222.186.175.212 port 22140 ssh2
Dec 25 10:08:27 hcbbdb sshd\[29687\]: Failed password for root from 222.186.175.212 port 22140 ssh2
Dec 25 10:08:31 hcbbdb sshd\[29687\]: Failed password for root from 222.186.175.212 port 22140 ssh2
Dec 25 10:08:35 hcbbdb sshd\[29719\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.212  user=root

Dec 25 05:29:12 vps46666688 sshd[3282]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.124.221
Dec 25 05:29:14 vps46666688 sshd[3282]: Failed password for invalid user heile from 134.175.124.221 port 53554 ssh2
...

Unauthorized connection attempt detected from IP address 103.226.174.227 to port 445

FTP Brute Force

20 attempts against mh-misbehave-ban on sonic.magehost.pro

Dec 25 07:23:37 ArkNodeAT sshd\[22002\]: Invalid user rpc from 175.140.23.248
Dec 25 07:23:37 ArkNodeAT sshd\[22002\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.140.23.248
Dec 25 07:23:39 ArkNodeAT sshd\[22002\]: Failed password for invalid user rpc from 175.140.23.248 port 25702 ssh2

[Fail2ban] nginx-unwanted

Dec 25 06:24:15 l02a.shelladdress.co.uk proftpd[789] 127.0.0.1 (::ffff:192.69.235.189[::ffff:192.69.235.189]): USER pauljohnbirch.com: no such user found from ::ffff:192.69.235.189 [::ffff:192.69.235.189] to ::ffff:185.47.61.71:21
Dec 25 06:24:17 l02a.shelladdress.co.uk proftpd[791] 127.0.0.1 (::ffff:192.69.235.189[::ffff:192.69.235.189]): USER test@pauljohnbirch.com: no such user found from ::ffff:192.69.235.189 [::ffff:192.69.235.189] to ::ffff:185.47.61.71:21
Dec 25 06:24:18 l02a.shelladdress.co.uk proftpd[793] 127.0.0.1 (::ffff:192.69.235.189[::ffff:192.69.235.189]): USER pauljohnbirch: no such user found from ::ffff:192.69.235.189 [::ffff:192.69.235.189] to ::ffff:185.47.61.71:21

Dec 25 07:07:10 server sshd\[17342\]: Invalid user support from 109.232.64.71
Dec 25 07:07:11 server sshd\[17342\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.232.64.71 
Dec 25 07:07:13 server sshd\[17342\]: Failed password for invalid user support from 109.232.64.71 port 53509 ssh2
Dec 25 13:44:43 server sshd\[4660\]: Invalid user ubnt from 109.232.64.71
Dec 25 13:44:44 server sshd\[4660\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.232.64.71 
...

2019-12-25T11:41:43.694457vps751288.ovh.net sshd\[24897\]: Invalid user bailie from 51.68.143.224 port 54322
2019-12-25T11:41:43.704050vps751288.ovh.net sshd\[24897\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=224.ip-51-68-143.eu
2019-12-25T11:41:45.687025vps751288.ovh.net sshd\[24897\]: Failed password for invalid user bailie from 51.68.143.224 port 54322 ssh2
2019-12-25T11:43:14.140705vps751288.ovh.net sshd\[24909\]: Invalid user bullas from 51.68.143.224 port 33512
2019-12-25T11:43:14.151572vps751288.ovh.net sshd\[24909\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=224.ip-51-68-143.eu

Automatic report - Port Scan Attack

Dec 25 08:39:06 wordpress wordpress(www.ruhnke.cloud)[19672]: Blocked authentication attempt for admin from ::ffff:104.248.135.31