Jun 18 14:04:24 vmi345603 sshd[19085]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.70.13.31
Jun 18 14:04:26 vmi345603 sshd[19085]: Failed password for invalid user contaboserver from 193.70.13.31 port 51504 ssh2
...

2020-06-14T23:35:56.124873homeassistant sshd[18756]: Invalid user popov from 193.70.13.31 port 50620
2020-06-14T23:35:56.139790homeassistant sshd[18756]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.70.13.31
...

2020-06-05T06:31:34.160498abusebot-8.cloudsearch.cf sshd[30973]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns3061803.ip-193-70-13.eu  user=sshd
2020-06-05T06:31:36.696019abusebot-8.cloudsearch.cf sshd[30973]: Failed password for sshd from 193.70.13.31 port 59360 ssh2
2020-06-05T06:31:39.015694abusebot-8.cloudsearch.cf sshd[30973]: Failed password for sshd from 193.70.13.31 port 59360 ssh2
2020-06-05T06:31:34.160498abusebot-8.cloudsearch.cf sshd[30973]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns3061803.ip-193-70-13.eu  user=sshd
2020-06-05T06:31:36.696019abusebot-8.cloudsearch.cf sshd[30973]: Failed password for sshd from 193.70.13.31 port 59360 ssh2
2020-06-05T06:31:39.015694abusebot-8.cloudsearch.cf sshd[30973]: Failed password for sshd from 193.70.13.31 port 59360 ssh2
2020-06-05T06:31:34.160498abusebot-8.cloudsearch.cf sshd[30973]: pam_unix(sshd:auth): authentication failure; logname= uid=0
...

2020-06-03T13:54:48.681565vps773228.ovh.net sshd[1459]: Failed password for root from 193.70.13.31 port 59814 ssh2
2020-06-03T13:54:51.009363vps773228.ovh.net sshd[1459]: Failed password for root from 193.70.13.31 port 59814 ssh2
2020-06-03T13:54:52.782814vps773228.ovh.net sshd[1459]: Failed password for root from 193.70.13.31 port 59814 ssh2
2020-06-03T13:54:55.007363vps773228.ovh.net sshd[1459]: Failed password for root from 193.70.13.31 port 59814 ssh2
2020-06-03T13:54:57.665916vps773228.ovh.net sshd[1459]: Failed password for root from 193.70.13.31 port 59814 ssh2
...

Jun  2 05:53:22 nextcloud sshd\[7812\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.70.13.31  user=sshd
Jun  2 05:53:24 nextcloud sshd\[7812\]: Failed password for sshd from 193.70.13.31 port 38644 ssh2
Jun  2 05:53:26 nextcloud sshd\[7812\]: Failed password for sshd from 193.70.13.31 port 38644 ssh2

CMS (WordPress or Joomla) login attempt.

WordPress login Brute force / Web App Attack on client site.

Jun 24 06:43:35 dcd-gentoo sshd[13998]: Invalid user hackfeed from 193.70.13.110 port 60996
Jun 24 06:45:02 dcd-gentoo sshd[14063]: Invalid user pufferd from 193.70.13.110 port 49574
Jun 24 06:46:32 dcd-gentoo sshd[14209]: Invalid user mrrvz from 193.70.13.110 port 38378
...

contact form SPAM BOT with rotating IP (403)

2020-06-06T00:19:55.750883sorsha.thespaminator.com sshd[9683]: Invalid user www from 193.70.13.11 port 52008
2020-06-06T00:19:57.962892sorsha.thespaminator.com sshd[9683]: Failed password for invalid user www from 193.70.13.11 port 52008 ssh2
...

Jun  2 14:18:14 online-web-vs-1 sshd[446749]: Did not receive identification string from 193.70.13.110 port 40644
Jun  2 14:19:08 online-web-vs-1 sshd[446867]: Invalid user butter from 193.70.13.110 port 47550
Jun  2 14:19:08 online-web-vs-1 sshd[446867]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.70.13.110
Jun  2 14:19:10 online-web-vs-1 sshd[446867]: Failed password for invalid user butter from 193.70.13.110 port 47550 ssh2
Jun  2 14:19:10 online-web-vs-1 sshd[446867]: Received disconnect from 193.70.13.110 port 47550:11: Normal Shutdown, Thank you for playing [preauth]
Jun  2 14:19:10 online-web-vs-1 sshd[446867]: Disconnected from 193.70.13.110 port 47550 [preauth]
Jun  2 14:20:00 online-web-vs-1 sshd[446980]: Invalid user ansible from 193.70.13.110 port 42692
Jun  2 14:20:00 online-web-vs-1 sshd[446980]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.70.13.110
Jun  2 14:20........
-------------------------------

June 04 2020, 23:58:30 [sshd] - Banned from the Mad Pony WordPress hosting platform by Fail2ban.

Jun  3 14:04:02 fhem-rasp sshd[30774]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.70.13.11  user=sshd
Jun  3 14:04:04 fhem-rasp sshd[30774]: Failed password for invalid user sshd from 193.70.13.11 port 44446 ssh2
...

May 30 16:42:51 ncomp sshd[29957]: User sshd from 193.70.13.11 not allowed because none of user's groups are listed in AllowGroups
May 30 16:42:51 ncomp sshd[29957]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.70.13.11  user=sshd
May 30 16:42:51 ncomp sshd[29957]: User sshd from 193.70.13.11 not allowed because none of user's groups are listed in AllowGroups
May 30 16:42:53 ncomp sshd[29957]: Failed password for invalid user sshd from 193.70.13.11 port 51792 ssh2

2020-05-21T13:50:56.075838wiz-ks3 sshd[20792]: Invalid user default from 193.70.13.11 port 37768
2020-05-21T13:50:56.197012wiz-ks3 sshd[20792]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.70.13.11
2020-05-21T13:50:56.075838wiz-ks3 sshd[20792]: Invalid user default from 193.70.13.11 port 37768
2020-05-21T13:50:58.442995wiz-ks3 sshd[20792]: Failed password for invalid user default from 193.70.13.11 port 37768 ssh2
2020-05-21T14:00:26.027417wiz-ks3 sshd[21155]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.70.13.11  user=root
2020-05-21T14:00:27.857002wiz-ks3 sshd[21155]: Failed password for root from 193.70.13.11 port 42878 ssh2
2020-05-21T14:03:43.163859wiz-ks3 sshd[21306]: Invalid user support from 193.70.13.11 port 33398
2020-05-21T14:03:43.358653wiz-ks3 sshd[21306]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.70.13.11
2020-05-21T14:03:43.163859wiz-ks3 sshd[21306]: Inv

WordPress user registration, really-simple-captcha js check bypass

193.70.13.15 - - \[19/May/2020:11:39:57 +0200\] "GET /index.php\?id=ausland%27%29%2F%2A\&id=%2A%2FAND%2F%2A\&id=%2A%2F%28SELECT%2F%2A\&id=%2A%2FMD5%28NULL\~NULL%29%29%2F%2A\&id=%2A%2FIS%2F%2A\&id=%2A%2FNULL--%2F%2A\&id=%2A%2FOviF HTTP/1.1" 200 12302 "http://www.firma-lsf.eu:80/index.php" "Googlebot \(compatible  Googlebot/2.1   http://www.google.com/bot.html\)"
...

Automatic report - XMLRPC Attack

WEB_SERVER 403 Forbidden

WordPress user registration, really-simple-captcha js check bypass

spams web forms

CMS (WordPress or Joomla) login attempt.

Jun 23 14:23:04 *** sshd[22161]: Failed password for invalid user source from 51.75.142.41 port 56247 ssh2
Jun 23 14:26:12 *** sshd[22187]: Failed password for invalid user eddie from 51.75.142.41 port 45217 ssh2
Jun 23 14:27:24 *** sshd[22191]: Failed password for invalid user test from 51.75.142.41 port 52099 ssh2
Jun 23 14:28:34 *** sshd[22194]: Failed password for invalid user testuser from 51.75.142.41 port 58981 ssh2
Jun 23 14:29:47 *** sshd[22197]: Failed password for invalid user nang from 51.75.142.41 port 37629 ssh2
Jun 23 14:30:53 *** sshd[22200]: Failed password for invalid user nen from 51.75.142.41 port 44511 ssh2
Jun 23 14:32:02 *** sshd[22203]: Failed password for invalid user tun from 51.75.142.41 port 51392 ssh2
Jun 23 14:33:14 *** sshd[22206]: Failed password for invalid user krishna from 51.75.142.41 port 58276 ssh2
Jun 23 14:34:25 *** sshd[22210]: Failed password for invalid user dropbox from 51.75.142.41 port 36925 ssh2
Jun 23 14:36:49 *** sshd[22219]: Failed password for invalid user mi

\[2019-06-23 17:14:19\] NOTICE\[1849\] chan_sip.c: Registration from '\' failed for '185.40.4.67:55842' - Wrong password
\[2019-06-23 17:14:19\] SECURITY\[1857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-06-23T17:14:19.062-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="555555",SessionID="0x7fc42417ead8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.40.4.67/55842",Challenge="525b99b7",ReceivedChallenge="525b99b7",ReceivedHash="fc654993269211688535cacd6d3e4fe4"
\[2019-06-23 17:15:43\] NOTICE\[1849\] chan_sip.c: Registration from '\' failed for '185.40.4.67:54142' - Wrong password
...

Jun 23 20:03:52 marvibiene sshd[32628]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.242.83.28  user=root
Jun 23 20:03:54 marvibiene sshd[32628]: Failed password for root from 58.242.83.28 port 38378 ssh2
Jun 23 20:03:56 marvibiene sshd[32628]: Failed password for root from 58.242.83.28 port 38378 ssh2
Jun 23 20:03:52 marvibiene sshd[32628]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.242.83.28  user=root
Jun 23 20:03:54 marvibiene sshd[32628]: Failed password for root from 58.242.83.28 port 38378 ssh2
Jun 23 20:03:56 marvibiene sshd[32628]: Failed password for root from 58.242.83.28 port 38378 ssh2
...

NAME : NET-106A CIDR : 66.94.69.0/25 SYN Flood DDoS Attack USA - Ohio - block certain countries :) IP: 66.94.85.26  Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN  - data recovery https://help-dysk.pl

Jun 23 21:16:49 sshgateway sshd\[10190\]: Invalid user braxton from 173.23.225.40
Jun 23 21:16:49 sshgateway sshd\[10190\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.23.225.40
Jun 23 21:16:51 sshgateway sshd\[10190\]: Failed password for invalid user braxton from 173.23.225.40 port 52420 ssh2

pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.42.116.16  user=root
Failed password for root from 192.42.116.16 port 42876 ssh2
Failed password for root from 192.42.116.16 port 42876 ssh2
Failed password for root from 192.42.116.16 port 42876 ssh2
Failed password for root from 192.42.116.16 port 42876 ssh2

Jun 23 21:05:42 debian sshd\[31405\]: Invalid user vboxuser from 188.80.254.163 port 41989
Jun 23 21:05:42 debian sshd\[31405\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.80.254.163
...

Jun 23 21:43:20 cvbmail sshd\[18301\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=199.249.230.121  user=root
Jun 23 21:43:22 cvbmail sshd\[18301\]: Failed password for root from 199.249.230.121 port 3337 ssh2
Jun 23 22:06:02 cvbmail sshd\[18799\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=199.249.230.121  user=root

2019-06-23T21:32:37.391595 X postfix/smtpd[39204]: warning: unknown[121.226.60.243]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2019-06-23T21:34:59.309239 X postfix/smtpd[39209]: warning: unknown[121.226.60.243]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2019-06-23T22:04:06.204268 X postfix/smtpd[43529]: warning: unknown[121.226.60.243]: SASL LOGIN authentication failed: UGFzc3dvcmQ6

Jun 23 07:00:14 *** sshd[17831]: Failed password for invalid user admin from 185.232.67.53 port 40503 ssh2
Jun 23 07:18:15 *** sshd[18010]: Failed password for invalid user admin from 185.232.67.53 port 43738 ssh2
Jun 23 07:54:44 *** sshd[18326]: Failed password for invalid user admin from 185.232.67.53 port 56023 ssh2
Jun 23 08:55:47 *** sshd[18935]: Failed password for invalid user admin from 185.232.67.53 port 44828 ssh2
Jun 23 09:23:41 *** sshd[19262]: Failed password for invalid user admin from 185.232.67.53 port 57639 ssh2
Jun 23 10:30:03 *** sshd[19809]: Failed password for invalid user admin from 185.232.67.53 port 59227 ssh2
Jun 23 11:48:08 *** sshd[20695]: Failed password for invalid user admin from 185.232.67.53 port 42887 ssh2
Jun 23 12:00:05 *** sshd[20717]: Failed password for invalid user admin from 185.232.67.53 port 49172 ssh2
Jun 23 13:00:21 *** sshd[21276]: Failed password for invalid user admin from 185.232.67.53 port 37460 ssh2
Jun 23 13:29:15 *** sshd[21587]: Failed password for invalid

Unauthorized connection attempt from IP address 116.226.30.84 on Port 445(SMB)

Jun 23 06:26:40 *** sshd[17555]: Failed password for invalid user admin from 88.214.26.10 port 46412 ssh2
Jun 23 07:09:35 *** sshd[17987]: Failed password for invalid user admin from 88.214.26.10 port 36638 ssh2
Jun 23 07:31:36 *** sshd[18113]: Failed password for invalid user admin from 88.214.26.10 port 49432 ssh2
Jun 23 07:58:30 *** sshd[18354]: Failed password for invalid user admin from 88.214.26.10 port 34476 ssh2
Jun 23 08:47:15 *** sshd[18922]: Failed password for invalid user admin from 88.214.26.10 port 36940 ssh2
Jun 23 09:08:45 *** sshd[19039]: Failed password for invalid user admin from 88.214.26.10 port 57194 ssh2
Jun 23 09:48:49 *** sshd[19450]: Failed password for invalid user admin from 88.214.26.10 port 57822 ssh2
Jun 23 10:14:28 *** sshd[19626]: Failed password for invalid user admin from 88.214.26.10 port 43178 ssh2
Jun 23 10:36:20 *** sshd[19858]: Failed password for invalid user admin from 88.214.26.10 port 49134 ssh2
Jun 23 11:08:38 *** sshd[20225]: Failed password for invalid user admi

failed_logins

Jun 23 17:47:31 *** sshd[24141]: Failed password for invalid user sf from 5.152.159.31 port 45992 ssh2
Jun 23 17:49:31 *** sshd[24149]: Failed password for invalid user kslewin from 5.152.159.31 port 57249 ssh2
Jun 23 17:50:47 *** sshd[24152]: Failed password for invalid user juan from 5.152.159.31 port 36108 ssh2
Jun 23 17:52:05 *** sshd[24155]: Failed password for invalid user ay from 5.152.159.31 port 43201 ssh2
Jun 23 17:53:18 *** sshd[24159]: Failed password for invalid user ftptest from 5.152.159.31 port 50293 ssh2
Jun 23 17:54:29 *** sshd[24162]: Failed password for invalid user yulia from 5.152.159.31 port 57385 ssh2
Jun 23 17:55:43 *** sshd[24168]: Failed password for invalid user nardin from 5.152.159.31 port 36245 ssh2
Jun 23 17:56:58 *** sshd[24171]: Failed password for invalid user aiswaria from 5.152.159.31 port 43339 ssh2
Jun 23 17:58:16 *** sshd[24174]: Failed password for invalid user gpadmin from 5.152.159.31 port 50431 ssh2
Jun 23 17:59:37 *** sshd[24178]: Failed password for invalid user r

Unauthorised access (Jun 23) SRC=118.163.76.3 LEN=40 PREC=0x20 TTL=243 ID=45213 TCP DPT=445 WINDOW=1024 SYN