Nov 22 07:56:33 hosting sshd[16798]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.red-2-139-176.staticip.rima-tde.net  user=mysql
Nov 22 07:56:35 hosting sshd[16798]: Failed password for mysql from 2.139.176.35 port 36970 ssh2
...

Invalid user guest from 2.139.176.35 port 8324

SSH Brute Force, server-1 sshd[12325]: Failed password for invalid user P@$$w0rd2018 from 2.139.176.35 port 58745 ssh2

Nov 13 21:11:17 ldap01vmsma01 sshd[43246]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.139.176.35
Nov 13 21:11:19 ldap01vmsma01 sshd[43246]: Failed password for invalid user zorellana from 2.139.176.35 port 10103 ssh2
...

pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.139.176.35  user=root
Failed password for root from 2.139.176.35 port 48441 ssh2
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.139.176.35  user=root
Failed password for root from 2.139.176.35 port 58326 ssh2
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.139.176.35  user=root

$f2bV_matches

2019-11-04T16:38:24.029664abusebot-5.cloudsearch.cf sshd\[16688\]: Invalid user spik from 2.139.176.35 port 52702

Sep  9 22:29:41 tdfoods sshd\[1602\]: Invalid user 201 from 2.139.176.35
Sep  9 22:29:41 tdfoods sshd\[1602\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.red-2-139-176.staticip.rima-tde.net
Sep  9 22:29:43 tdfoods sshd\[1602\]: Failed password for invalid user 201 from 2.139.176.35 port 57187 ssh2
Sep  9 22:35:27 tdfoods sshd\[2159\]: Invalid user 153 from 2.139.176.35
Sep  9 22:35:27 tdfoods sshd\[2159\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.red-2-139-176.staticip.rima-tde.net

Sep  7 16:26:11 home sshd[21722]: Invalid user ftpuser from 2.139.176.35 port 13304
Sep  7 16:26:11 home sshd[21722]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.139.176.35
Sep  7 16:26:11 home sshd[21722]: Invalid user ftpuser from 2.139.176.35 port 13304
Sep  7 16:26:13 home sshd[21722]: Failed password for invalid user ftpuser from 2.139.176.35 port 13304 ssh2
Sep  7 16:31:32 home sshd[21778]: Invalid user test from 2.139.176.35 port 58352
Sep  7 16:31:32 home sshd[21778]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.139.176.35
Sep  7 16:31:32 home sshd[21778]: Invalid user test from 2.139.176.35 port 58352
Sep  7 16:31:34 home sshd[21778]: Failed password for invalid user test from 2.139.176.35 port 58352 ssh2
Sep  7 16:35:26 home sshd[21788]: Invalid user admin from 2.139.176.35 port 58435
Sep  7 16:35:26 home sshd[21788]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.139

2019-08-31T21:30:31.702018abusebot-6.cloudsearch.cf sshd\[22145\]: Invalid user postgres from 2.139.176.35 port 54328

Aug 31 09:50:07 plex sshd[7088]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.139.176.35  user=root
Aug 31 09:50:09 plex sshd[7088]: Failed password for root from 2.139.176.35 port 52805 ssh2

Aug 29 11:29:39 * sshd[23046]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.139.176.35
Aug 29 11:29:41 * sshd[23046]: Failed password for invalid user common from 2.139.176.35 port 51810 ssh2

$f2bV_matches_ltvn

Aug 27 15:33:15 mail sshd\[15213\]: Failed password for invalid user nagios from 2.139.176.35 port 53101 ssh2
Aug 27 15:49:32 mail sshd\[15461\]: Invalid user msmith from 2.139.176.35 port 32265
...

2019-08-25T17:27:16.117897mizuno.rwx.ovh sshd[783]: Connection from 2.139.176.35 port 22145 on 78.46.61.178 port 22
2019-08-25T17:27:16.523933mizuno.rwx.ovh sshd[783]: Invalid user seb from 2.139.176.35 port 22145
2019-08-25T17:27:16.535251mizuno.rwx.ovh sshd[783]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.139.176.35
2019-08-25T17:27:16.117897mizuno.rwx.ovh sshd[783]: Connection from 2.139.176.35 port 22145 on 78.46.61.178 port 22
2019-08-25T17:27:16.523933mizuno.rwx.ovh sshd[783]: Invalid user seb from 2.139.176.35 port 22145
2019-08-25T17:27:18.690574mizuno.rwx.ovh sshd[783]: Failed password for invalid user seb from 2.139.176.35 port 22145 ssh2
...

Aug 23 20:26:56 MK-Soft-VM6 sshd\[28135\]: Invalid user login from 2.139.176.35 port 1580
Aug 23 20:26:56 MK-Soft-VM6 sshd\[28135\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.139.176.35
Aug 23 20:26:58 MK-Soft-VM6 sshd\[28135\]: Failed password for invalid user login from 2.139.176.35 port 1580 ssh2
...

Aug 20 05:10:41 ns315508 sshd[25878]: Invalid user chaz from 2.139.176.35 port 42818
Aug 20 05:10:41 ns315508 sshd[25878]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.139.176.35
Aug 20 05:10:41 ns315508 sshd[25878]: Invalid user chaz from 2.139.176.35 port 42818
Aug 20 05:10:44 ns315508 sshd[25878]: Failed password for invalid user chaz from 2.139.176.35 port 42818 ssh2
Aug 20 05:14:41 ns315508 sshd[25926]: Invalid user teamspeak4 from 2.139.176.35 port 51578
...

Aug 17 11:34:18 legacy sshd[16304]: Failed password for root from 2.139.176.35 port 17468 ssh2
Aug 17 11:38:40 legacy sshd[16466]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.139.176.35
Aug 17 11:38:43 legacy sshd[16466]: Failed password for invalid user tomcat2 from 2.139.176.35 port 62380 ssh2
...

Aug 12 04:36:38 rpi sshd[7027]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.139.176.35 
Aug 12 04:36:39 rpi sshd[7027]: Failed password for invalid user walker from 2.139.176.35 port 45909 ssh2

Aug  9 09:28:20 plex sshd[5828]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.139.176.35  user=root
Aug  9 09:28:23 plex sshd[5828]: Failed password for root from 2.139.176.35 port 30446 ssh2

Aug  8 09:15:34 ny01 sshd[22245]: Failed password for syslog from 2.139.176.35 port 61148 ssh2
Aug  8 09:19:47 ny01 sshd[22596]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.139.176.35
Aug  8 09:19:49 ny01 sshd[22596]: Failed password for invalid user calvin from 2.139.176.35 port 7222 ssh2

Aug  7 21:19:45 localhost sshd\[4176\]: Invalid user nvidia from 2.139.176.35 port 47219
Aug  7 21:19:45 localhost sshd\[4176\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.139.176.35
Aug  7 21:19:47 localhost sshd\[4176\]: Failed password for invalid user nvidia from 2.139.176.35 port 47219 ssh2

(sshd) Failed SSH login from 2.139.176.35 (35.red-2-139-176.staticip.rima-tde.net): 5 in the last 3600 secs

2019-07-30T05:33:05.720613abusebot-3.cloudsearch.cf sshd\[21962\]: Invalid user rita from 2.139.176.35 port 8910

Jul 24 00:03:07 s64-1 sshd[7909]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.139.176.35
Jul 24 00:03:08 s64-1 sshd[7909]: Failed password for invalid user vladimir from 2.139.176.35 port 21945 ssh2
Jul 24 00:07:39 s64-1 sshd[7965]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.139.176.35
...

Jul 17 03:56:35 rpi sshd[8800]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.139.176.35 
Jul 17 03:56:37 rpi sshd[8800]: Failed password for invalid user scott from 2.139.176.35 port 3508 ssh2

Jul 16 19:50:45 rpi sshd[1841]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.139.176.35 
Jul 16 19:50:47 rpi sshd[1841]: Failed password for invalid user teamspeak from 2.139.176.35 port 32162 ssh2

Jul 14 04:38:54 MainVPS sshd[21927]: Invalid user frank from 2.139.176.35 port 57369
Jul 14 04:38:54 MainVPS sshd[21927]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.139.176.35
Jul 14 04:38:54 MainVPS sshd[21927]: Invalid user frank from 2.139.176.35 port 57369
Jul 14 04:38:56 MainVPS sshd[21927]: Failed password for invalid user frank from 2.139.176.35 port 57369 ssh2
Jul 14 04:43:52 MainVPS sshd[22377]: Invalid user administrator from 2.139.176.35 port 52467
...

2019-07-12T22:21:00.763664ssh sshd[25016]: Invalid user sysadm from 2.139.176.35 port 5545
2019-07-12T22:21:00.769062ssh sshd[25016]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.139.176.35
2019-07-12T22:21:00.763664ssh sshd[25016]: Invalid user sysadm from 2.139.176.35 port 5545
2019-07-12T22:21:03.506677ssh sshd[25016]: Failed password for invalid user sysadm from 2.139.176.35 port 5545 ssh2
...

$f2bV_matches

$f2bV_matches

Jan 11 01:57:30 vps46666688 sshd[32686]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.87.93.20
Jan 11 01:57:32 vps46666688 sshd[32686]: Failed password for invalid user mqp from 103.87.93.20 port 40226 ssh2
...

Jan 11 07:45:14 meumeu sshd[22649]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.47.218.84 
Jan 11 07:45:16 meumeu sshd[22649]: Failed password for invalid user vagrant from 110.47.218.84 port 41338 ssh2
Jan 11 07:48:23 meumeu sshd[23031]: Failed password for root from 110.47.218.84 port 42542 ssh2
...

2020-01-11T06:16:06.843610shield sshd\[23191\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.7.17.61  user=root
2020-01-11T06:16:09.224564shield sshd\[23191\]: Failed password for root from 189.7.17.61 port 47254 ssh2
2020-01-11T06:21:44.350133shield sshd\[24901\]: Invalid user alagamm from 189.7.17.61 port 43599
2020-01-11T06:21:44.352904shield sshd\[24901\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.7.17.61
2020-01-11T06:21:46.467555shield sshd\[24901\]: Failed password for invalid user alagamm from 189.7.17.61 port 43599 ssh2

$f2bV_matches

Jan 11 07:53:51 v22018076622670303 sshd\[6794\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.154  user=root
Jan 11 07:53:54 v22018076622670303 sshd\[6794\]: Failed password for root from 222.186.173.154 port 42662 ssh2
Jan 11 07:53:58 v22018076622670303 sshd\[6794\]: Failed password for root from 222.186.173.154 port 42662 ssh2
...

Jan 11 07:45:45 meumeu sshd[22711]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.114.135 
Jan 11 07:45:47 meumeu sshd[22711]: Failed password for invalid user stat from 37.187.114.135 port 52698 ssh2
Jan 11 07:48:42 meumeu sshd[23080]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.114.135 
...

Jan 11 05:38:22 ovpn sshd\[16814\]: Invalid user guest from 14.29.244.64
Jan 11 05:38:22 ovpn sshd\[16814\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.244.64
Jan 11 05:38:24 ovpn sshd\[16814\]: Failed password for invalid user guest from 14.29.244.64 port 34720 ssh2
Jan 11 05:56:22 ovpn sshd\[21456\]: Invalid user srq from 14.29.244.64
Jan 11 05:56:22 ovpn sshd\[21456\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.244.64

01/11/2020-05:56:38.191830 185.220.101.33 Protocol: 6 ET TOR Known Tor Exit Node Traffic group 32

Jan 11 05:56:50 grey postfix/smtpd\[10125\]: NOQUEUE: reject: RCPT from unknown\[191.5.146.41\]: 554 5.7.1 Service unavailable\; Client host \[191.5.146.41\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[191.5.146.41\]\; from=\ to=\ proto=ESMTP helo=\<41.146.5.191.in-addr.arpa.mkanet.com.br\>
...

01/11/2020-07:14:32.244951 193.31.24.113 Protocol: 6 SURICATA TLS invalid record/traffic

Unauthorised access (Jan 11) SRC=49.149.97.8 LEN=52 TTL=117 ID=11478 DF TCP DPT=445 WINDOW=8192 SYN

Jan 11 07:12:18 lnxded63 sshd[14056]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.94.202

01/11/2020-05:57:18.307177 185.220.101.65 Protocol: 6 ET TOR Known Tor Exit Node Traffic group 33

Jan 11 05:57:32 MK-Soft-VM5 sshd[9712]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.65.92 
Jan 11 05:57:35 MK-Soft-VM5 sshd[9712]: Failed password for invalid user web from 62.234.65.92 port 36556 ssh2
...