2019-12-03T09:55:07.253061suse-nuc sshd[25483]: Invalid user ejy123 from 187.72.118.191 port 52938
...

Invalid user ahrenholtz from 187.72.118.191 port 59630

ssh brute force

Dec 19 11:58:05 plusreed sshd[4770]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.72.118.191  user=root
Dec 19 11:58:07 plusreed sshd[4770]: Failed password for root from 187.72.118.191 port 54614 ssh2
...

Dec 18 17:11:49 sauna sshd[34161]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.72.118.191
Dec 18 17:11:51 sauna sshd[34161]: Failed password for invalid user online from 187.72.118.191 port 55614 ssh2
...

2019-12-17T20:11:30.331638abusebot-7.cloudsearch.cf sshd\[10348\]: Invalid user britta from 187.72.118.191 port 43246
2019-12-17T20:11:30.337940abusebot-7.cloudsearch.cf sshd\[10348\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.72.118.191
2019-12-17T20:11:32.490907abusebot-7.cloudsearch.cf sshd\[10348\]: Failed password for invalid user britta from 187.72.118.191 port 43246 ssh2
2019-12-17T20:20:57.449350abusebot-7.cloudsearch.cf sshd\[10394\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.72.118.191  user=nobody

$f2bV_matches

2019-12-13T15:49:14.572140shield sshd\[7904\]: Invalid user webmast123 from 187.72.118.191 port 39610
2019-12-13T15:49:14.577782shield sshd\[7904\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.72.118.191
2019-12-13T15:49:17.256957shield sshd\[7904\]: Failed password for invalid user webmast123 from 187.72.118.191 port 39610 ssh2
2019-12-13T15:58:28.070764shield sshd\[10873\]: Invalid user 0123456789 from 187.72.118.191 port 39418
2019-12-13T15:58:28.076518shield sshd\[10873\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.72.118.191

2019-12-13T14:55:24.060136shield sshd\[28780\]: Invalid user schaer from 187.72.118.191 port 35954
2019-12-13T14:55:24.065762shield sshd\[28780\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.72.118.191
2019-12-13T14:55:26.323547shield sshd\[28780\]: Failed password for invalid user schaer from 187.72.118.191 port 35954 ssh2
2019-12-13T15:04:33.963576shield sshd\[29678\]: Invalid user 123456 from 187.72.118.191 port 33228
2019-12-13T15:04:33.969427shield sshd\[29678\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.72.118.191

Dec 10 10:39:23 *** sshd[23700]: User root from 187.72.118.191 not allowed because not listed in AllowUsers

SSH login attempts.

Dec  6 08:16:33 ns3042688 sshd\[9289\]: Invalid user jaime from 187.72.118.191
Dec  6 08:16:33 ns3042688 sshd\[9289\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.72.118.191 
Dec  6 08:16:35 ns3042688 sshd\[9289\]: Failed password for invalid user jaime from 187.72.118.191 port 49420 ssh2
Dec  6 08:25:14 ns3042688 sshd\[11206\]: Invalid user ckl from 187.72.118.191
Dec  6 08:25:14 ns3042688 sshd\[11206\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.72.118.191 
...

Failed password for root from 187.72.118.191 port 35880 ssh2

Dec  3 15:24:19 linuxvps sshd\[54623\]: Invalid user noelyn from 187.72.118.191
Dec  3 15:24:19 linuxvps sshd\[54623\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.72.118.191
Dec  3 15:24:20 linuxvps sshd\[54623\]: Failed password for invalid user noelyn from 187.72.118.191 port 36894 ssh2
Dec  3 15:33:43 linuxvps sshd\[60595\]: Invalid user nfs from 187.72.118.191
Dec  3 15:33:43 linuxvps sshd\[60595\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.72.118.191

Nov 28 20:59:44 hanapaa sshd\[24021\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.72.118.191  user=root
Nov 28 20:59:46 hanapaa sshd\[24021\]: Failed password for root from 187.72.118.191 port 51278 ssh2
Nov 28 21:03:41 hanapaa sshd\[24310\]: Invalid user server from 187.72.118.191
Nov 28 21:03:41 hanapaa sshd\[24310\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.72.118.191
Nov 28 21:03:42 hanapaa sshd\[24310\]: Failed password for invalid user server from 187.72.118.191 port 60006 ssh2

Nov 29 05:56:04 lnxweb62 sshd[24616]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.72.118.191
Nov 29 05:56:05 lnxweb62 sshd[24616]: Failed password for invalid user gorin from 187.72.118.191 port 49584 ssh2
Nov 29 05:59:39 lnxweb62 sshd[26458]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.72.118.191

Nov 26 23:53:29 MK-Soft-VM4 sshd[18018]: Failed password for root from 187.72.118.191 port 55948 ssh2
...

Nov 20 23:38:50 lnxweb62 sshd[14727]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.72.118.191

Nov 10 14:12:43 server sshd\[3936\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.72.118.191  user=root
Nov 10 14:12:45 server sshd\[3936\]: Failed password for root from 187.72.118.191 port 58662 ssh2
Nov 10 14:32:50 server sshd\[9297\]: Invalid user admin from 187.72.118.191
Nov 10 14:32:50 server sshd\[9297\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.72.118.191 
Nov 10 14:32:52 server sshd\[9297\]: Failed password for invalid user admin from 187.72.118.191 port 35232 ssh2
...

Failed password for invalid user aites from 187.72.118.191 port 46724 ssh2
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.72.118.191  user=root
Failed password for root from 187.72.118.191 port 56538 ssh2
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.72.118.191  user=root
Failed password for root from 187.72.118.191 port 38112 ssh2

Oct  8 22:21:56 ncomp sshd[1335]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.72.118.191  user=root
Oct  8 22:21:58 ncomp sshd[1335]: Failed password for root from 187.72.118.191 port 59368 ssh2
Oct  8 22:43:38 ncomp sshd[1663]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.72.118.191  user=root
Oct  8 22:43:40 ncomp sshd[1663]: Failed password for root from 187.72.118.191 port 50470 ssh2

2019-10-08T13:52:52.316612shield sshd\[32115\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.72.118.191  user=root
2019-10-08T13:52:54.285476shield sshd\[32115\]: Failed password for root from 187.72.118.191 port 37590 ssh2
2019-10-08T13:57:49.692910shield sshd\[32578\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.72.118.191  user=root
2019-10-08T13:57:51.435741shield sshd\[32578\]: Failed password for root from 187.72.118.191 port 49698 ssh2
2019-10-08T14:02:46.654963shield sshd\[544\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.72.118.191  user=root

Jun  7 14:51:49 lukav-desktop sshd\[29505\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.167.43  user=root
Jun  7 14:51:51 lukav-desktop sshd\[29505\]: Failed password for root from 122.51.167.43 port 37578 ssh2
Jun  7 14:56:34 lukav-desktop sshd\[29581\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.167.43  user=root
Jun  7 14:56:36 lukav-desktop sshd\[29581\]: Failed password for root from 122.51.167.43 port 34736 ssh2
Jun  7 15:01:24 lukav-desktop sshd\[29627\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.167.43  user=root

Automatic report - Port Scan Attack

(mod_security) mod_security (id:20000005) triggered by 175.176.75.4 (PH/Philippines/-): 5 in the last 300 secs

Unauthorized connection attempt from IP address 69.194.92.245 on Port 445(SMB)

Jun  7 13:28:18 estefan sshd[23112]: reveeclipse mapping checking getaddrinfo for host-87-12-196-87.business.telecomhostnamealia.hostname [87.12.196.87] failed - POSSIBLE BREAK-IN ATTEMPT!
Jun  7 13:28:18 estefan sshd[23112]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=87.12.196.87  user=r.r
Jun  7 13:28:20 estefan sshd[23112]: Failed password for r.r from 87.12.196.87 port 57476 ssh2
Jun  7 13:28:20 estefan sshd[23113]: Received disconnect from 87.12.196.87: 11: Bye Bye
Jun  7 14:00:39 estefan sshd[23242]: reveeclipse mapping checking getaddrinfo for host-87-12-196-87.business.telecomhostnamealia.hostname [87.12.196.87] failed - POSSIBLE BREAK-IN ATTEMPT!
Jun  7 14:00:39 estefan sshd[23242]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=87.12.196.87  user=r.r
Jun  7 14:00:40 estefan sshd[23242]: Failed password for r.r from 87.12.196.87 port 46532 ssh2
Jun  7 14:00:40 estefan sshd[232........
-------------------------------

 TCP (SYN) 59.127.75.190:55473 -> port 23, len 40

Unauthorized connection attempt from IP address 89.37.2.65 on Port 445(SMB)

2020-06-07T21:31:35.525331  sshd[8631]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.238  user=root
2020-06-07T21:31:37.116510  sshd[8631]: Failed password for root from 222.186.173.238 port 48682 ssh2
2020-06-07T21:31:40.979871  sshd[8631]: Failed password for root from 222.186.173.238 port 48682 ssh2
2020-06-07T21:31:35.525331  sshd[8631]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.238  user=root
2020-06-07T21:31:37.116510  sshd[8631]: Failed password for root from 222.186.173.238 port 48682 ssh2
2020-06-07T21:31:40.979871  sshd[8631]: Failed password for root from 222.186.173.238 port 48682 ssh2
...

Unauthorized connection attempt from IP address 171.253.20.209 on Port 445(SMB)

Jun  7 17:46:33 MainVPS sshd[17433]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.122.221.210  user=root
Jun  7 17:46:35 MainVPS sshd[17433]: Failed password for root from 45.122.221.210 port 49684 ssh2
Jun  7 17:50:35 MainVPS sshd[20761]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.122.221.210  user=root
Jun  7 17:50:36 MainVPS sshd[20761]: Failed password for root from 45.122.221.210 port 41180 ssh2
Jun  7 17:54:36 MainVPS sshd[24120]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.122.221.210  user=root
Jun  7 17:54:38 MainVPS sshd[24120]: Failed password for root from 45.122.221.210 port 60904 ssh2
...

Unauthorized connection attempt from IP address 115.127.72.163 on Port 445(SMB)

1591531323 - 06/07/2020 14:02:03 Host: 83.149.47.211/83.149.47.211 Port: 445 TCP Blocked

Jun  7 14:01:28 lnxmysql61 sshd[18424]: Failed password for root from 128.199.197.161 port 36944 ssh2
Jun  7 14:01:28 lnxmysql61 sshd[18424]: Failed password for root from 128.199.197.161 port 36944 ssh2

1591531301 - 06/07/2020 14:01:41 Host: 157.32.208.51/157.32.208.51 Port: 445 TCP Blocked

Unauthorized connection attempt from IP address 183.91.2.115 on Port 445(SMB)