Oct  4 22:28:39 sso sshd[31314]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.227.252.17
Oct  4 22:28:41 sso sshd[31314]: Failed password for invalid user Welcome@123 from 192.227.252.17 port 43948 ssh2
...

Oct  4 21:16:50 sso sshd[28291]: Failed password for root from 192.227.252.17 port 34330 ssh2
...

Oct  3 17:47:28 plusreed sshd[783]: Invalid user msda from 192.227.252.17
...

Sep 28 17:22:52 marvibiene sshd[17186]: Invalid user delia from 192.227.252.17 port 52408
Sep 28 17:22:52 marvibiene sshd[17186]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.227.252.17
Sep 28 17:22:52 marvibiene sshd[17186]: Invalid user delia from 192.227.252.17 port 52408
Sep 28 17:22:54 marvibiene sshd[17186]: Failed password for invalid user delia from 192.227.252.17 port 52408 ssh2
...

Invalid user user from 192.227.252.17 port 40156

Sep 24 09:14:03 hpm sshd\[31469\]: Invalid user admin from 192.227.252.17
Sep 24 09:14:03 hpm sshd\[31469\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.227.252.17
Sep 24 09:14:05 hpm sshd\[31469\]: Failed password for invalid user admin from 192.227.252.17 port 47006 ssh2
Sep 24 09:19:34 hpm sshd\[31974\]: Invalid user pass from 192.227.252.17
Sep 24 09:19:34 hpm sshd\[31974\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.227.252.17

Sep 23 22:22:15 hpm sshd\[6107\]: Invalid user san from 192.227.252.17
Sep 23 22:22:15 hpm sshd\[6107\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.227.252.17
Sep 23 22:22:17 hpm sshd\[6107\]: Failed password for invalid user san from 192.227.252.17 port 56052 ssh2
Sep 23 22:32:14 hpm sshd\[6892\]: Invalid user mikeg from 192.227.252.17
Sep 23 22:32:14 hpm sshd\[6892\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.227.252.17

Sep 22 19:50:48 mail sshd\[5369\]: Invalid user by from 192.227.252.17
Sep 22 19:50:48 mail sshd\[5369\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.227.252.17
Sep 22 19:50:50 mail sshd\[5369\]: Failed password for invalid user by from 192.227.252.17 port 51204 ssh2
...

2019-09-16T02:34:35.131758abusebot-3.cloudsearch.cf sshd\[23616\]: Invalid user admin from 192.227.252.17 port 58070

Sep  7 13:10:56 sachi sshd\[3216\]: Invalid user postgres from 192.227.252.17
Sep  7 13:10:56 sachi sshd\[3216\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.227.252.17
Sep  7 13:10:59 sachi sshd\[3216\]: Failed password for invalid user postgres from 192.227.252.17 port 50634 ssh2
Sep  7 13:16:26 sachi sshd\[3695\]: Invalid user test from 192.227.252.17
Sep  7 13:16:26 sachi sshd\[3695\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.227.252.17

REQUESTED PAGE: /wp-json/contact-form-7/v1/contact-forms/4/feedback

Oct 16 07:21:59 server sshd\[5368\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.227.252.14  user=root
Oct 16 07:22:01 server sshd\[5368\]: Failed password for root from 192.227.252.14 port 55212 ssh2
Oct 16 07:26:14 server sshd\[6641\]: Invalid user sinusbot from 192.227.252.14
Oct 16 07:26:14 server sshd\[6641\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.227.252.14 
Oct 16 07:26:16 server sshd\[6641\]: Failed password for invalid user sinusbot from 192.227.252.14 port 37346 ssh2
...

2019-10-14T18:19:17.004771abusebot-3.cloudsearch.cf sshd\[20461\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.227.252.23  user=root

Oct 14 01:46:27 php1 sshd\[28899\]: Invalid user P@\$\$WORD2017 from 192.227.252.24
Oct 14 01:46:27 php1 sshd\[28899\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.227.252.24
Oct 14 01:46:29 php1 sshd\[28899\]: Failed password for invalid user P@\$\$WORD2017 from 192.227.252.24 port 48838 ssh2
Oct 14 01:50:48 php1 sshd\[29408\]: Invalid user P@\$\$WORD2017 from 192.227.252.24
Oct 14 01:50:48 php1 sshd\[29408\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.227.252.24

Oct 14 14:08:40 nextcloud sshd\[13289\]: Invalid user systemadministrator from 192.227.252.30
Oct 14 14:08:40 nextcloud sshd\[13289\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.227.252.30
Oct 14 14:08:43 nextcloud sshd\[13289\]: Failed password for invalid user systemadministrator from 192.227.252.30 port 45352 ssh2
...

2019-10-13T20:16:33.295264abusebot-4.cloudsearch.cf sshd\[20047\]: Invalid user 1q@W\#E from 192.227.252.28 port 34046

2019-10-13T12:44:29.224348shield sshd\[31994\]: Invalid user Press123 from 192.227.252.14 port 58650
2019-10-13T12:44:29.229737shield sshd\[31994\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.227.252.14
2019-10-13T12:44:30.669572shield sshd\[31994\]: Failed password for invalid user Press123 from 192.227.252.14 port 58650 ssh2
2019-10-13T12:49:01.334029shield sshd\[1714\]: Invalid user o0i9u8y7t6r5e4w3 from 192.227.252.14 port 41982
2019-10-13T12:49:01.341860shield sshd\[1714\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.227.252.14

Oct 13 05:53:46 vpn01 sshd[16551]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.227.252.26
Oct 13 05:53:49 vpn01 sshd[16551]: Failed password for invalid user 123Kitty from 192.227.252.26 port 58030 ssh2
...

Oct 12 20:30:26 root sshd[10437]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.227.252.24 
Oct 12 20:30:28 root sshd[10437]: Failed password for invalid user vfr4BGT% from 192.227.252.24 port 48326 ssh2
Oct 12 20:34:46 root sshd[10471]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.227.252.24 
...

Oct 12 16:05:48 meumeu sshd[2017]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.227.252.27 
Oct 12 16:05:50 meumeu sshd[2017]: Failed password for invalid user P4rol412345 from 192.227.252.27 port 57558 ssh2
Oct 12 16:10:21 meumeu sshd[2714]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.227.252.27 
...

Oct 12 18:03:58 *** sshd[2772]: User root from 192.227.252.23 not allowed because not listed in AllowUsers

Oct 12 06:30:16 firewall sshd[11946]: Failed password for root from 192.227.252.26 port 34048 ssh2
Oct 12 06:35:04 firewall sshd[12060]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.227.252.26  user=root
Oct 12 06:35:06 firewall sshd[12060]: Failed password for root from 192.227.252.26 port 58422 ssh2
...

Automatic report - Banned IP Access

Oct 11 05:30:45 Tower sshd[16006]: Connection from 192.227.252.14 port 43310 on 192.168.10.220 port 22
Oct 11 05:30:46 Tower sshd[16006]: Failed password for root from 192.227.252.14 port 43310 ssh2
Oct 11 05:30:47 Tower sshd[16006]: Received disconnect from 192.227.252.14 port 43310:11: Bye Bye [preauth]
Oct 11 05:30:47 Tower sshd[16006]: Disconnected from authenticating user root 192.227.252.14 port 43310 [preauth]

2019-10-11T09:52:46.223919shield sshd\[6993\]: Invalid user United123 from 192.227.252.23 port 43570
2019-10-11T09:52:46.229581shield sshd\[6993\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.227.252.23
2019-10-11T09:52:48.484485shield sshd\[6993\]: Failed password for invalid user United123 from 192.227.252.23 port 43570 ssh2
2019-10-11T09:59:34.586424shield sshd\[7552\]: Invalid user Parola@1234 from 192.227.252.23 port 45582
2019-10-11T09:59:34.592341shield sshd\[7552\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.227.252.23

Aug  4 11:01:48 OPSO sshd\[30788\]: Invalid user squirrelmail from 61.219.171.213 port 44336
Aug  4 11:01:48 OPSO sshd\[30788\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.219.171.213
Aug  4 11:01:50 OPSO sshd\[30788\]: Failed password for invalid user squirrelmail from 61.219.171.213 port 44336 ssh2
Aug  4 11:06:50 OPSO sshd\[31533\]: Invalid user ubuntu from 61.219.171.213 port 38651
Aug  4 11:06:50 OPSO sshd\[31533\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.219.171.213

Aug  4 02:16:21 localhost sshd\[28970\]: Invalid user 123456 from 210.75.15.198 port 46084
Aug  4 02:16:22 localhost sshd\[28970\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.75.15.198
Aug  4 02:16:23 localhost sshd\[28970\]: Failed password for invalid user 123456 from 210.75.15.198 port 46084 ssh2
Aug  4 02:20:09 localhost sshd\[29115\]: Invalid user iskren123 from 210.75.15.198 port 53964
Aug  4 02:20:09 localhost sshd\[29115\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.75.15.198
...

Aug  4 10:41:41 srv03 sshd\[1221\]: Invalid user administrator from 18.85.192.253 port 41702
Aug  4 10:41:41 srv03 sshd\[1221\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=18.85.192.253
Aug  4 10:41:42 srv03 sshd\[1221\]: Failed password for invalid user administrator from 18.85.192.253 port 41702 ssh2

Aug  4 09:08:31 mail sshd\[26522\]: Failed password for invalid user deluge from 209.141.44.238 port 44936 ssh2
Aug  4 09:27:51 mail sshd\[26776\]: Invalid user pi from 209.141.44.238 port 54506
...

WordPress login Brute force / Web App Attack on client site.

2019-08-02T18:43:50.977180WS-Zach sshd[32597]: Invalid user doreen from 5.249.149.174 port 41350
2019-08-02T18:43:50.981477WS-Zach sshd[32597]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.249.149.174
2019-08-02T18:43:50.977180WS-Zach sshd[32597]: Invalid user doreen from 5.249.149.174 port 41350
2019-08-02T18:43:52.079844WS-Zach sshd[32597]: Failed password for invalid user doreen from 5.249.149.174 port 41350 ssh2
2019-08-04T03:48:58.898387WS-Zach sshd[25311]: Invalid user pi from 5.249.149.174 port 48290
...

Jan 25 09:10:57 motanud sshd\[16660\]: Invalid user samba from 128.199.61.227 port 35262
Jan 25 09:10:57 motanud sshd\[16660\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.61.227
Jan 25 09:10:58 motanud sshd\[16660\]: Failed password for invalid user samba from 128.199.61.227 port 35262 ssh2

20 attempts against mh-misbehave-ban on ice.magehost.pro

Aug  4 04:48:05 [host] sshd[25312]: Invalid user mariah from 188.12.187.231
Aug  4 04:48:05 [host] sshd[25312]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.12.187.231
Aug  4 04:48:07 [host] sshd[25312]: Failed password for invalid user mariah from 188.12.187.231 port 34671 ssh2

Aug  4 06:58:02 server sshd\[9495\]: User root from 123.206.174.21 not allowed because listed in DenyUsers
Aug  4 06:58:02 server sshd\[9495\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.174.21  user=root
Aug  4 06:58:04 server sshd\[9495\]: Failed password for invalid user root from 123.206.174.21 port 15366 ssh2
Aug  4 07:05:14 server sshd\[17713\]: Invalid user fax from 123.206.174.21 port 12939
Aug  4 07:05:14 server sshd\[17713\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.174.21

$f2bV_matches

Aug  4 06:58:00 minden010 sshd[32093]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=50.236.62.30
Aug  4 06:58:02 minden010 sshd[32093]: Failed password for invalid user a1 from 50.236.62.30 port 47571 ssh2
Aug  4 07:02:30 minden010 sshd[1222]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=50.236.62.30
...

Aug  4 11:45:44 pkdns2 sshd\[53920\]: Invalid user otis from 54.37.120.112Aug  4 11:45:46 pkdns2 sshd\[53920\]: Failed password for invalid user otis from 54.37.120.112 port 46946 ssh2Aug  4 11:49:44 pkdns2 sshd\[54054\]: Invalid user ventas from 54.37.120.112Aug  4 11:49:47 pkdns2 sshd\[54054\]: Failed password for invalid user ventas from 54.37.120.112 port 42188 ssh2Aug  4 11:53:52 pkdns2 sshd\[54237\]: Invalid user helpdesk from 54.37.120.112Aug  4 11:53:53 pkdns2 sshd\[54237\]: Failed password for invalid user helpdesk from 54.37.120.112 port 37398 ssh2
...

Aug  3 17:41:45 cac1d2 sshd\[19160\]: Invalid user info from 35.242.159.232 port 35236
Aug  3 17:41:45 cac1d2 sshd\[19160\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.242.159.232
Aug  3 17:41:47 cac1d2 sshd\[19160\]: Failed password for invalid user info from 35.242.159.232 port 35236 ssh2
...

Aug  4 09:15:12 localhost sshd\[43043\]: Invalid user beavis from 14.102.17.34 port 53707
Aug  4 09:15:12 localhost sshd\[43043\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.102.17.34
Aug  4 09:15:13 localhost sshd\[43043\]: Failed password for invalid user beavis from 14.102.17.34 port 53707 ssh2
Aug  4 09:20:50 localhost sshd\[43211\]: Invalid user mcserver from 14.102.17.34 port 48800
Aug  4 09:20:50 localhost sshd\[43211\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.102.17.34
...