2020-08-17T11:19:45.442438vps1033 sshd[11776]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.120.49
2020-08-17T11:19:45.436875vps1033 sshd[11776]: Invalid user workflow from 180.76.120.49 port 43966
2020-08-17T11:19:47.770149vps1033 sshd[11776]: Failed password for invalid user workflow from 180.76.120.49 port 43966 ssh2
2020-08-17T11:21:26.840576vps1033 sshd[15360]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.120.49  user=root
2020-08-17T11:21:29.034318vps1033 sshd[15360]: Failed password for root from 180.76.120.49 port 59582 ssh2
...

Aug 16 14:47:48 h2779839 sshd[22379]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.121.28  user=root
Aug 16 14:47:50 h2779839 sshd[22379]: Failed password for root from 180.76.121.28 port 43128 ssh2
Aug 16 14:48:53 h2779839 sshd[22395]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.121.28  user=root
Aug 16 14:48:55 h2779839 sshd[22395]: Failed password for root from 180.76.121.28 port 54930 ssh2
Aug 16 14:49:56 h2779839 sshd[22406]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.121.28  user=root
Aug 16 14:49:57 h2779839 sshd[22406]: Failed password for root from 180.76.121.28 port 38512 ssh2
Aug 16 14:50:58 h2779839 sshd[22424]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.121.28  user=root
Aug 16 14:51:00 h2779839 sshd[22424]: Failed password for root from 180.76.121.28 port 49508 ssh2
Aug 
...

Aug 15 17:05:03 ns382633 sshd\[14879\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.120.49  user=root
Aug 15 17:05:05 ns382633 sshd\[14879\]: Failed password for root from 180.76.120.49 port 46108 ssh2
Aug 15 17:10:51 ns382633 sshd\[16218\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.120.49  user=root
Aug 15 17:10:53 ns382633 sshd\[16218\]: Failed password for root from 180.76.120.49 port 55092 ssh2
Aug 15 17:14:07 ns382633 sshd\[16434\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.120.49  user=root

Aug 15 05:57:54 mout sshd[20894]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.120.49  user=root
Aug 15 05:57:56 mout sshd[20894]: Failed password for root from 180.76.120.49 port 48536 ssh2

Aug 14 02:18:07 web1 sshd\[29300\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.120.49  user=root
Aug 14 02:18:09 web1 sshd\[29300\]: Failed password for root from 180.76.120.49 port 53190 ssh2
Aug 14 02:22:24 web1 sshd\[29609\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.120.49  user=root
Aug 14 02:22:26 web1 sshd\[29609\]: Failed password for root from 180.76.120.49 port 56972 ssh2
Aug 14 02:26:47 web1 sshd\[29950\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.120.49  user=root

Aug 12 05:53:51 mail sshd[2436]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.120.49  user=root
Aug 12 05:53:53 mail sshd[2436]: Failed password for root from 180.76.120.49 port 35018 ssh2
...

Aug 10 09:13:08 vm0 sshd[28883]: Failed password for root from 180.76.120.49 port 48294 ssh2
Aug 10 14:56:32 vm0 sshd[16799]: Failed password for root from 180.76.120.49 port 43644 ssh2
...

"Unauthorized connection attempt on SSHD detected"

Aug  6 01:20:48 Ubuntu-1404-trusty-64-minimal sshd\[350\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.120.49  user=root
Aug  6 01:20:50 Ubuntu-1404-trusty-64-minimal sshd\[350\]: Failed password for root from 180.76.120.49 port 52770 ssh2
Aug  6 01:38:17 Ubuntu-1404-trusty-64-minimal sshd\[12188\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.120.49  user=root
Aug  6 01:38:19 Ubuntu-1404-trusty-64-minimal sshd\[12188\]: Failed password for root from 180.76.120.49 port 46382 ssh2
Aug  6 01:43:13 Ubuntu-1404-trusty-64-minimal sshd\[14524\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.120.49  user=root

2020-07-26T10:02:43.835717lavrinenko.info sshd[3289]: Invalid user ci from 180.76.120.49 port 49372
2020-07-26T10:02:43.845673lavrinenko.info sshd[3289]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.120.49
2020-07-26T10:02:43.835717lavrinenko.info sshd[3289]: Invalid user ci from 180.76.120.49 port 49372
2020-07-26T10:02:45.932115lavrinenko.info sshd[3289]: Failed password for invalid user ci from 180.76.120.49 port 49372 ssh2
2020-07-26T10:06:31.331815lavrinenko.info sshd[3488]: Invalid user edna from 180.76.120.49 port 40022
...

Jul 23 07:36:34 scw-tender-jepsen sshd[25419]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.121.28
Jul 23 07:36:35 scw-tender-jepsen sshd[25419]: Failed password for invalid user admin from 180.76.121.28 port 54354 ssh2

ddos

Jul 20 09:26:56 ny01 sshd[18406]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.120.49
Jul 20 09:26:58 ny01 sshd[18406]: Failed password for invalid user yqc from 180.76.120.49 port 44962 ssh2
Jul 20 09:32:51 ny01 sshd[19302]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.120.49

ssh brute force

Jul  9 14:38:45 haigwepa sshd[22808]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.125.100 
Jul  9 14:38:46 haigwepa sshd[22808]: Failed password for invalid user mehta from 180.76.125.100 port 38666 ssh2
...

Invalid user splunk from 221.249.140.17 port 44452

Jun 27 23:00:03 WHD8 dovecot: pop3-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=85.57.145.133, lip=10.64.89.208, session=\<4oJOERepZ7NVOZGF\>
Jun 27 23:00:10 WHD8 dovecot: pop3-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=85.57.145.133, lip=10.64.89.208, session=\
Jun 27 23:15:03 WHD8 dovecot: pop3-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=85.57.145.133, lip=10.64.89.208, session=\
Jun 27 23:15:09 WHD8 dovecot: pop3-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=85.57.145.133, lip=10.64.89.208, session=\
Jun 27 23:30:04 WHD8 dovecot: pop3-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\
...

WordPress wp-login brute force :: 208.109.11.224 0.112 - [27/Jun/2020:20:45:14  0000] [censored_1] "POST /wp-login.php HTTP/1.1" 200 1837 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "HTTP/1.1"

Jun 27 22:45:02 sip sshd[776834]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.105.245.129 
Jun 27 22:45:02 sip sshd[776834]: Invalid user cha from 109.105.245.129 port 54622
Jun 27 22:45:04 sip sshd[776834]: Failed password for invalid user cha from 109.105.245.129 port 54622 ssh2
...

Jun 27 16:04:09 propaganda sshd[44443]: Connection from 152.136.141.254 port 55378 on 10.0.0.160 port 22 rdomain ""
Jun 27 16:04:09 propaganda sshd[44443]: Connection closed by 152.136.141.254 port 55378 [preauth]

Jun 26 20:46:18 s30-ffm-r02 sshd[6141]: Invalid user hugo from 185.50.122.131
Jun 26 20:46:18 s30-ffm-r02 sshd[6141]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.50.122.131 
Jun 26 20:46:20 s30-ffm-r02 sshd[6141]: Failed password for invalid user hugo from 185.50.122.131 port 12263 ssh2
Jun 26 20:58:41 s30-ffm-r02 sshd[6500]: Invalid user don from 185.50.122.131
Jun 26 20:58:41 s30-ffm-r02 sshd[6500]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.50.122.131 
Jun 26 20:58:42 s30-ffm-r02 sshd[6500]: Failed password for invalid user don from 185.50.122.131 port 62197 ssh2
Jun 26 21:01:42 s30-ffm-r02 sshd[6585]: Invalid user zxl from 185.50.122.131
Jun 26 21:01:42 s30-ffm-r02 sshd[6585]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.50.122.131 
Jun 26 21:01:44 s30-ffm-r02 sshd[6585]: Failed password for invalid user zxl from 185.50.122.........
-------------------------------

Unauthorized SSH login attempts

Jun 28 00:33:46 abendstille sshd\[8802\]: Invalid user ann from 181.191.241.6
Jun 28 00:33:46 abendstille sshd\[8802\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.191.241.6
Jun 28 00:33:48 abendstille sshd\[8802\]: Failed password for invalid user ann from 181.191.241.6 port 48630 ssh2
Jun 28 00:37:52 abendstille sshd\[12933\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.191.241.6  user=root
Jun 28 00:37:53 abendstille sshd\[12933\]: Failed password for root from 181.191.241.6 port 48898 ssh2
...

Jun 28 00:47:04 lukav-desktop sshd\[12382\]: Invalid user radware from 103.98.17.75
Jun 28 00:47:04 lukav-desktop sshd\[12382\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.98.17.75
Jun 28 00:47:06 lukav-desktop sshd\[12382\]: Failed password for invalid user radware from 103.98.17.75 port 42474 ssh2
Jun 28 00:52:52 lukav-desktop sshd\[12476\]: Invalid user accounting from 103.98.17.75
Jun 28 00:52:52 lukav-desktop sshd\[12476\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.98.17.75

This client attempted to login to an administrator account on a Website, or abused from another resource.

Fail2Ban Ban Triggered

Invalid user dorian from 129.204.45.15 port 33344

2020-06-28T00:39:58.691756galaxy.wi.uni-potsdam.de sshd[2996]: Invalid user postgres from 104.131.84.222 port 56135
2020-06-28T00:39:58.693691galaxy.wi.uni-potsdam.de sshd[2996]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.84.222
2020-06-28T00:39:58.691756galaxy.wi.uni-potsdam.de sshd[2996]: Invalid user postgres from 104.131.84.222 port 56135
2020-06-28T00:40:00.292299galaxy.wi.uni-potsdam.de sshd[2996]: Failed password for invalid user postgres from 104.131.84.222 port 56135 ssh2
2020-06-28T00:40:24.501482galaxy.wi.uni-potsdam.de sshd[3075]: Invalid user production from 104.131.84.222 port 58972
2020-06-28T00:40:24.503360galaxy.wi.uni-potsdam.de sshd[3075]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.84.222
2020-06-28T00:40:24.501482galaxy.wi.uni-potsdam.de sshd[3075]: Invalid user production from 104.131.84.222 port 58972
2020-06-28T00:40:26.337869galaxy.wi.uni-potsdam.de sshd[307
...

1593298344 - 06/28/2020 00:52:24 Host: 186.93.194.143/186.93.194.143 Port: 445 TCP Blocked

Jun 28 00:12:36 mail sshd[48319]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.70.0.173 
Jun 28 00:12:38 mail sshd[48319]: Failed password for invalid user hydra from 193.70.0.173 port 58772 ssh2
...