2020-08-27T18:20:36.106471+02:00  sshd[20407]: Failed password for invalid user bxm from 187.162.51.63 port 41472 ssh2

2020-08-25T06:13:48.493596shield sshd\[13802\]: Invalid user oracle from 187.162.51.63 port 36198
2020-08-25T06:13:48.511800shield sshd\[13802\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187-162-51-63.static.axtel.net
2020-08-25T06:13:50.473401shield sshd\[13802\]: Failed password for invalid user oracle from 187.162.51.63 port 36198 ssh2
2020-08-25T06:17:45.400344shield sshd\[14055\]: Invalid user nagios from 187.162.51.63 port 39213
2020-08-25T06:17:45.409764shield sshd\[14055\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187-162-51-63.static.axtel.net

Aug 18 09:20:37 ift sshd\[1773\]: Invalid user service from 187.162.51.63Aug 18 09:20:39 ift sshd\[1773\]: Failed password for invalid user service from 187.162.51.63 port 38386 ssh2Aug 18 09:24:24 ift sshd\[2032\]: Failed password for root from 187.162.51.63 port 40971 ssh2Aug 18 09:28:19 ift sshd\[2560\]: Invalid user wlw from 187.162.51.63Aug 18 09:28:21 ift sshd\[2560\]: Failed password for invalid user wlw from 187.162.51.63 port 43557 ssh2
...

Aug 14 11:17:31 lanister sshd[27772]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.162.51.63  user=root
Aug 14 11:17:33 lanister sshd[27772]: Failed password for root from 187.162.51.63 port 54290 ssh2
Aug 14 11:21:33 lanister sshd[27819]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.162.51.63  user=root
Aug 14 11:21:36 lanister sshd[27819]: Failed password for root from 187.162.51.63 port 57840 ssh2

Fail2Ban - SSH Bruteforce Attempt

Jul 19 00:11:51 abendstille sshd\[3409\]: Invalid user glh from 187.162.51.63
Jul 19 00:11:51 abendstille sshd\[3409\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.162.51.63
Jul 19 00:11:54 abendstille sshd\[3409\]: Failed password for invalid user glh from 187.162.51.63 port 49769 ssh2
Jul 19 00:16:19 abendstille sshd\[7916\]: Invalid user luka from 187.162.51.63
Jul 19 00:16:19 abendstille sshd\[7916\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.162.51.63
...

2020-07-14T14:42:02+0000 Failed SSH Authentication/Brute Force Attack. (Server 6)

Jul 12 19:10:28 sso sshd[20774]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.162.51.63
Jul 12 19:10:30 sso sshd[20774]: Failed password for invalid user leon from 187.162.51.63 port 59545 ssh2
...

Invalid user sysmanager from 187.162.51.63 port 55679

Multiple SSH authentication failures from 187.162.51.63

2020-06-24T08:45:37.767010amanda2.illicoweb.com sshd\[15284\]: Invalid user ths from 187.162.51.63 port 41722
2020-06-24T08:45:37.770609amanda2.illicoweb.com sshd\[15284\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187-162-51-63.static.axtel.net
2020-06-24T08:45:40.120741amanda2.illicoweb.com sshd\[15284\]: Failed password for invalid user ths from 187.162.51.63 port 41722 ssh2
2020-06-24T08:55:05.173935amanda2.illicoweb.com sshd\[15806\]: Invalid user misp from 187.162.51.63 port 42768
2020-06-24T08:55:05.180624amanda2.illicoweb.com sshd\[15806\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187-162-51-63.static.axtel.net
...

Jun 22 19:59:43 nextcloud sshd\[25955\]: Invalid user zg from 187.162.51.63
Jun 22 19:59:43 nextcloud sshd\[25955\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.162.51.63
Jun 22 19:59:45 nextcloud sshd\[25955\]: Failed password for invalid user zg from 187.162.51.63 port 42747 ssh2

SSH Brute-Force. Ports scanning.

Jun  8 14:04:44 Ubuntu-1404-trusty-64-minimal sshd\[27454\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.162.51.63  user=root
Jun  8 14:04:45 Ubuntu-1404-trusty-64-minimal sshd\[27454\]: Failed password for root from 187.162.51.63 port 43713 ssh2
Jun  8 14:18:06 Ubuntu-1404-trusty-64-minimal sshd\[5734\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.162.51.63  user=root
Jun  8 14:18:08 Ubuntu-1404-trusty-64-minimal sshd\[5734\]: Failed password for root from 187.162.51.63 port 40880 ssh2
Jun  8 14:21:26 Ubuntu-1404-trusty-64-minimal sshd\[8337\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.162.51.63  user=root

Jun  6 18:03:29 ny01 sshd[13203]: Failed password for root from 187.162.51.63 port 45245 ssh2
Jun  6 18:07:06 ny01 sshd[13669]: Failed password for root from 187.162.51.63 port 46723 ssh2

Aug 26 09:53:57 debian sshd\[32716\]: Invalid user kramer from 23.253.253.225 port 52032
Aug 26 09:53:57 debian sshd\[32716\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.253.253.225
...

" "

\[2019-08-26 04:27:29\] NOTICE\[1829\] chan_sip.c: Registration from '\' failed for '195.154.33.152:2309' - Wrong password
\[2019-08-26 04:27:29\] SECURITY\[1837\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-08-26T04:27:29.189-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2912",SessionID="0x7f7b3038f128",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/195.154.33.152/54705",Challenge="1bfb1e39",ReceivedChallenge="1bfb1e39",ReceivedHash="33e9b3dc6d86bdf9f5d1e7e351ded514"
\[2019-08-26 04:35:09\] NOTICE\[1829\] chan_sip.c: Registration from '\' failed for '195.154.33.152:2381' - Wrong password
\[2019-08-26 04:35:09\] SECURITY\[1837\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-08-26T04:35:09.803-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2913",SessionID="0x7f7b300df5b8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/195.154.

Aug 25 22:33:03 wbs sshd\[7984\]: Invalid user git from 37.139.21.75
Aug 25 22:33:03 wbs sshd\[7984\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.139.21.75
Aug 25 22:33:05 wbs sshd\[7984\]: Failed password for invalid user git from 37.139.21.75 port 43908 ssh2
Aug 25 22:38:08 wbs sshd\[8432\]: Invalid user euclid from 37.139.21.75
Aug 25 22:38:08 wbs sshd\[8432\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.139.21.75

Aug 26 08:28:02 heissa sshd\[22740\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.174  user=root
Aug 26 08:28:04 heissa sshd\[22740\]: Failed password for root from 112.85.42.174 port 50542 ssh2
Aug 26 08:28:07 heissa sshd\[22740\]: Failed password for root from 112.85.42.174 port 50542 ssh2
Aug 26 08:28:10 heissa sshd\[22740\]: Failed password for root from 112.85.42.174 port 50542 ssh2
Aug 26 08:28:12 heissa sshd\[22740\]: Failed password for root from 112.85.42.174 port 50542 ssh2

Aug 25 22:16:25 friendsofhawaii sshd\[3570\]: Invalid user xmodem from 59.179.17.140
Aug 25 22:16:25 friendsofhawaii sshd\[3570\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.179.17.140
Aug 25 22:16:27 friendsofhawaii sshd\[3570\]: Failed password for invalid user xmodem from 59.179.17.140 port 42576 ssh2
Aug 25 22:21:42 friendsofhawaii sshd\[4041\]: Invalid user git from 59.179.17.140
Aug 25 22:21:42 friendsofhawaii sshd\[4041\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.179.17.140

Honeypot attack, port: 23, PTR: d54C5DF2C.access.telenet.be.

Fail2Ban - SSH Bruteforce Attempt

Aug 26 10:58:14 relay postfix/smtpd\[8057\]: warning: unknown\[80.82.77.18\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 26 10:58:31 relay postfix/smtpd\[7458\]: warning: unknown\[80.82.77.18\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 26 10:58:48 relay postfix/smtpd\[8193\]: warning: unknown\[80.82.77.18\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 26 10:59:09 relay postfix/smtpd\[10335\]: warning: unknown\[80.82.77.18\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 26 10:59:29 relay postfix/smtpd\[3926\]: warning: unknown\[80.82.77.18\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...

Aug 26 10:17:57 lnxded63 sshd[3899]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.196.231
Aug 26 10:17:59 lnxded63 sshd[3899]: Failed password for invalid user Test from 106.13.196.231 port 53158 ssh2
Aug 26 10:21:07 lnxded63 sshd[4164]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.196.231

Automatic report - Port Scan Attack

Aug 26 10:24:44 webhost01 sshd[12280]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.241.50.141
Aug 26 10:24:46 webhost01 sshd[12280]: Failed password for invalid user dsc from 81.241.50.141 port 44464 ssh2
...

Aug 26 04:42:46 xtremcommunity sshd\[15113\]: Invalid user juan from 116.236.138.107 port 25027
Aug 26 04:42:46 xtremcommunity sshd\[15113\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.236.138.107
Aug 26 04:42:48 xtremcommunity sshd\[15113\]: Failed password for invalid user juan from 116.236.138.107 port 25027 ssh2
Aug 26 04:51:36 xtremcommunity sshd\[15535\]: Invalid user abc1 from 116.236.138.107 port 13381
Aug 26 04:51:36 xtremcommunity sshd\[15535\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.236.138.107
...

Aug 25 22:34:47 php2 sshd\[25070\]: Invalid user sandeep@123 from 107.170.249.81
Aug 25 22:34:47 php2 sshd\[25070\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.170.249.81
Aug 25 22:34:50 php2 sshd\[25070\]: Failed password for invalid user sandeep@123 from 107.170.249.81 port 44311 ssh2
Aug 25 22:39:07 php2 sshd\[25606\]: Invalid user molina5651 from 107.170.249.81
Aug 25 22:39:07 php2 sshd\[25606\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.170.249.81

Aug 26 05:24:51 tuxlinux sshd[9244]: Invalid user dp from 51.254.131.137 port 58884
Aug 26 05:24:51 tuxlinux sshd[9244]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.254.131.137 
Aug 26 05:24:51 tuxlinux sshd[9244]: Invalid user dp from 51.254.131.137 port 58884
Aug 26 05:24:51 tuxlinux sshd[9244]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.254.131.137 
Aug 26 05:24:51 tuxlinux sshd[9244]: Invalid user dp from 51.254.131.137 port 58884
Aug 26 05:24:51 tuxlinux sshd[9244]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.254.131.137 
Aug 26 05:24:53 tuxlinux sshd[9244]: Failed password for invalid user dp from 51.254.131.137 port 58884 ssh2
...