" "

Dec 12 03:41:25 ms-srv sshd[31654]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.99.166.243  user=www-data
Dec 12 03:41:27 ms-srv sshd[31654]: Failed password for invalid user www-data from 192.99.166.243 port 32874 ssh2

Dec  9 19:25:12 hanapaa sshd\[6211\]: Invalid user pcap from 192.99.166.243
Dec  9 19:25:12 hanapaa sshd\[6211\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=243.ip-192-99-166.net
Dec  9 19:25:14 hanapaa sshd\[6211\]: Failed password for invalid user pcap from 192.99.166.243 port 43172 ssh2
Dec  9 19:30:33 hanapaa sshd\[6730\]: Invalid user haklay from 192.99.166.243
Dec  9 19:30:33 hanapaa sshd\[6730\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=243.ip-192-99-166.net

Dec  6 23:33:19 pi sshd\[22505\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.99.166.243
Dec  6 23:33:21 pi sshd\[22505\]: Failed password for invalid user guest from 192.99.166.243 port 34622 ssh2
Dec  6 23:39:18 pi sshd\[22811\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.99.166.243  user=root
Dec  6 23:39:20 pi sshd\[22811\]: Failed password for root from 192.99.166.243 port 44764 ssh2
Dec  6 23:45:24 pi sshd\[23057\]: Invalid user ammelie from 192.99.166.243 port 54910
...

2019-12-06T18:25:41.042526centos sshd\[29700\]: Invalid user ching-me from 192.99.166.243 port 58652
2019-12-06T18:25:41.048032centos sshd\[29700\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=243.ip-192-99-166.net
2019-12-06T18:25:43.819450centos sshd\[29700\]: Failed password for invalid user ching-me from 192.99.166.243 port 58652 ssh2

Dec  2 19:09:49 *** sshd[28700]: Failed password for invalid user lisa from 192.99.166.243 port 38080 ssh2

Dec  2 02:00:36 cvbnet sshd[20982]: Failed password for root from 192.99.166.243 port 37092 ssh2
...

Nov 25 02:53:55 srv1 sshd[12801]: Failed password for r.r from 192.99.166.243 port 42710 ssh2
Nov 25 02:53:55 srv1 sshd[12802]: Received disconnect from 192.99.166.243: 11: Bye Bye
Nov 25 03:05:17 srv1 sshd[13135]: Failed password for r.r from 192.99.166.243 port 35712 ssh2
Nov 25 03:05:17 srv1 sshd[13136]: Received disconnect from 192.99.166.243: 11: Bye Bye


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=192.99.166.243

Nov 25 15:08:19 TORMINT sshd\[16762\]: Invalid user ftp from 192.99.166.243
Nov 25 15:08:19 TORMINT sshd\[16762\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.99.166.243
Nov 25 15:08:21 TORMINT sshd\[16762\]: Failed password for invalid user ftp from 192.99.166.243 port 58792 ssh2
...

Nov 18 15:20:07 rb06 sshd[29585]: Failed password for lp from 192.99.166.243 port 58630 ssh2
Nov 18 15:20:07 rb06 sshd[29585]: Received disconnect from 192.99.166.243: 11: Bye Bye [preauth]
Nov 18 15:44:05 rb06 sshd[11867]: Failed password for r.r from 192.99.166.243 port 57242 ssh2
Nov 18 15:44:05 rb06 sshd[11867]: Received disconnect from 192.99.166.243: 11: Bye Bye [preauth]
Nov 18 15:47:50 rb06 sshd[12652]: Failed password for r.r from 192.99.166.243 port 38496 ssh2
Nov 18 15:47:50 rb06 sshd[12652]: Received disconnect from 192.99.166.243: 11: Bye Bye [preauth]
Nov 18 15:51:23 rb06 sshd[13488]: Failed password for invalid user hkami from 192.99.166.243 port 47982 ssh2
Nov 18 15:51:23 rb06 sshd[13488]: Received disconnect from 192.99.166.243: 11: Bye Bye [preauth]
Nov 18 15:55:11 rb06 sshd[29206]: Failed password for invalid user appolhostnameo from 192.99.166.243 port 57434 ssh2
Nov 18 15:55:11 rb06 sshd[29206]: Received disconnect from 192.99.166.243: 11: Bye Bye [........
-------------------------------

Invalid user haoki from 192.99.166.243 port 33998

SSH login attempts with invalid user

Nov  9 21:30:20 rb06 sshd[25911]: Failed password for r.r from 192.99.166.243 port 56770 ssh2
Nov  9 21:30:20 rb06 sshd[25911]: Received disconnect from 192.99.166.243: 11: Bye Bye [preauth]
Nov  9 21:37:44 rb06 sshd[10986]: Failed password for invalid user unt from 192.99.166.243 port 33256 ssh2
Nov  9 21:37:44 rb06 sshd[10986]: Received disconnect from 192.99.166.243: 11: Bye Bye [preauth]
Nov  9 21:41:22 rb06 sshd[12369]: Failed password for r.r from 192.99.166.243 port 46338 ssh2
Nov  9 21:41:22 rb06 sshd[12369]: Received disconnect from 192.99.166.243: 11: Bye Bye [preauth]
Nov  9 21:44:51 rb06 sshd[21416]: Failed password for r.r from 192.99.166.243 port 59414 ssh2
Nov  9 21:44:51 rb06 sshd[21416]: Received disconnect from 192.99.166.243: 11: Bye Bye [preauth]
Nov  9 21:48:31 rb06 sshd[22106]: Failed password for invalid user sg from 192.99.166.243 port 44264 ssh2
Nov  9 21:48:31 rb06 sshd[22106]: Received disconnect from 192.99.166.243: 11: Bye Bye [preauth]
Nov ........
-------------------------------

Nov  9 21:30:20 rb06 sshd[25911]: Failed password for r.r from 192.99.166.243 port 56770 ssh2
Nov  9 21:30:20 rb06 sshd[25911]: Received disconnect from 192.99.166.243: 11: Bye Bye [preauth]
Nov  9 21:37:44 rb06 sshd[10986]: Failed password for invalid user unt from 192.99.166.243 port 33256 ssh2
Nov  9 21:37:44 rb06 sshd[10986]: Received disconnect from 192.99.166.243: 11: Bye Bye [preauth]
Nov  9 21:41:22 rb06 sshd[12369]: Failed password for r.r from 192.99.166.243 port 46338 ssh2
Nov  9 21:41:22 rb06 sshd[12369]: Received disconnect from 192.99.166.243: 11: Bye Bye [preauth]
Nov  9 21:44:51 rb06 sshd[21416]: Failed password for r.r from 192.99.166.243 port 59414 ssh2
Nov  9 21:44:51 rb06 sshd[21416]: Received disconnect from 192.99.166.243: 11: Bye Bye [preauth]
Nov  9 21:48:31 rb06 sshd[22106]: Failed password for invalid user sg from 192.99.166.243 port 44264 ssh2
Nov  9 21:48:31 rb06 sshd[22106]: Received disconnect from 192.99.166.243: 11: Bye Bye [preauth]
Nov ........
-------------------------------

Oct 22 15:40:34 cvbnet sshd[10696]: Failed password for nobody from 192.99.166.179 port 39124 ssh2
...

37215/tcp
[2019-07-03]1pkt

23/tcp
[2019-07-03]1pkt

Reported by AbuseIPDB proxy server.

Jul  3 11:50:04 dedicated sshd[27636]: Invalid user temp from 61.76.173.244 port 53685
Jul  3 11:50:06 dedicated sshd[27636]: Failed password for invalid user temp from 61.76.173.244 port 53685 ssh2
Jul  3 11:50:04 dedicated sshd[27636]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.76.173.244
Jul  3 11:50:04 dedicated sshd[27636]: Invalid user temp from 61.76.173.244 port 53685
Jul  3 11:50:06 dedicated sshd[27636]: Failed password for invalid user temp from 61.76.173.244 port 53685 ssh2

445/tcp
[2019-07-03]1pkt

\[2019-07-03 05:38:06\] SECURITY\[13451\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-07-03T05:38:06.743-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="9011441217900519",SessionID="0x7f02f8740ce8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.45/53924",ACLName="no_extension_match"
\[2019-07-03 05:40:30\] SECURITY\[13451\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-07-03T05:40:30.848-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011441217900519",SessionID="0x7f02f8352a28",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.45/63233",ACLName="no_extension_match"
\[2019-07-03 05:42:50\] SECURITY\[13451\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-07-03T05:42:50.759-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="9011441217900519",SessionID="0x7f02f81ae088",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.45/62325",ACLName="no_e

2019-07-03T05:47:12.2703031240 sshd\[23310\]: Invalid user nagios from 112.213.119.91 port 57236
2019-07-03T05:47:12.2759791240 sshd\[23310\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.213.119.91
2019-07-03T05:47:14.8537021240 sshd\[23310\]: Failed password for invalid user nagios from 112.213.119.91 port 57236 ssh2
...

Jul  3 00:26:58 plusreed sshd[8563]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.207  user=root
Jul  3 00:27:00 plusreed sshd[8563]: Failed password for root from 218.92.0.207 port 63402 ssh2
...

Jul  3 05:48:52 heicom postfix/smtpd\[761\]: warning: unknown\[13.73.149.71\]: SASL LOGIN authentication failed: authentication failure
Jul  3 05:48:55 heicom postfix/smtpd\[761\]: warning: unknown\[13.73.149.71\]: SASL LOGIN authentication failed: authentication failure
Jul  3 05:51:33 heicom postfix/smtpd\[761\]: warning: unknown\[13.73.149.71\]: SASL LOGIN authentication failed: authentication failure
Jul  3 05:51:35 heicom postfix/smtpd\[761\]: warning: unknown\[13.73.149.71\]: SASL LOGIN authentication failed: authentication failure
Jul  3 05:54:15 heicom postfix/smtpd\[761\]: warning: unknown\[13.73.149.71\]: SASL LOGIN authentication failed: authentication failure
...

03.07.2019 03:47:47 SSH access blocked by firewall

Jul  3 12:14:14 v22018076622670303 sshd\[29189\]: Invalid user tunnel from 202.137.10.186 port 60950
Jul  3 12:14:14 v22018076622670303 sshd\[29189\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.137.10.186
Jul  3 12:14:16 v22018076622670303 sshd\[29189\]: Failed password for invalid user tunnel from 202.137.10.186 port 60950 ssh2
...

Unauthorized SMTP/IMAP/POP3 connection attempt

23/tcp
[2019-07-03]1pkt

Jul  2 22:46:11 borg sshd[7398]: Failed unknown for root from 87.198.55.12 port 32796 ssh2
Jul  2 22:46:11 borg sshd[7398]: Failed unknown for root from 87.198.55.12 port 32796 ssh2
Jul  2 22:46:11 borg sshd[7398]: Failed unknown for root from 87.198.55.12 port 32796 ssh2
...

\[2019-07-03 05:08:52\] NOTICE\[13443\] chan_sip.c: Registration from '\' failed for '212.83.153.170:61629' - Wrong password
\[2019-07-03 05:08:52\] SECURITY\[13451\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-03T05:08:52.775-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="168",SessionID="0x7f02f81ae088",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.83.153.170/61629",Challenge="6ca1b49d",ReceivedChallenge="6ca1b49d",ReceivedHash="f98faa62b05a28222cfe135dac47da4d"
\[2019-07-03 05:09:04\] NOTICE\[13443\] chan_sip.c: Registration from '\' failed for '212.83.153.170:63827' - Wrong password
\[2019-07-03 05:09:04\] SECURITY\[13451\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-03T05:09:04.866-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="168",SessionID="0x7f02f80dcfe8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.83