Failed password for invalid user apple from 200.40.45.82 port 52356 ssh2

2020-08-10T05:53:33.660028centos sshd[19525]: Failed password for root from 200.40.45.82 port 42224 ssh2
2020-08-10T05:55:42.335989centos sshd[19828]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.40.45.82  user=root
2020-08-10T05:55:44.536029centos sshd[19828]: Failed password for root from 200.40.45.82 port 54562 ssh2
...

Unauthorised connection attempt detected at AUO MAIN. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)

Jul 21 00:34:50 melroy-server sshd[16175]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.40.45.82 
Jul 21 00:34:52 melroy-server sshd[16175]: Failed password for invalid user lij from 200.40.45.82 port 39790 ssh2
...

557. On Jul 13 2020 experienced a Brute Force SSH login attempt -> 1 unique times by 200.40.45.82.

Jul 13 07:11:16 buvik sshd[32362]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.40.45.82
Jul 13 07:11:18 buvik sshd[32362]: Failed password for invalid user postgres from 200.40.45.82 port 39998 ssh2
Jul 13 07:13:32 buvik sshd[32689]: Invalid user dts from 200.40.45.82
...

Jul 12 13:58:32 vps639187 sshd\[18040\]: Invalid user ts3 from 200.40.45.82 port 56820
Jul 12 13:58:32 vps639187 sshd\[18040\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.40.45.82
Jul 12 13:58:34 vps639187 sshd\[18040\]: Failed password for invalid user ts3 from 200.40.45.82 port 56820 ssh2
...

SSH brute force

Failed password for invalid user leila from 200.40.45.82 port 43822 ssh2

Jun 26 12:24:56 rocket sshd[7706]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.40.45.82
Jun 26 12:24:58 rocket sshd[7706]: Failed password for invalid user tobias from 200.40.45.82 port 50020 ssh2
Jun 26 12:28:44 rocket sshd[8088]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.40.45.82
...

2020-06-16T17:29:03.602005vps773228.ovh.net sshd[7239]: Failed password for root from 200.40.45.82 port 36950 ssh2
2020-06-16T17:34:39.196777vps773228.ovh.net sshd[7318]: Invalid user usuario from 200.40.45.82 port 49220
2020-06-16T17:34:39.212726vps773228.ovh.net sshd[7318]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=r200-40-45-82.ae-static.anteldata.net.uy
2020-06-16T17:34:39.196777vps773228.ovh.net sshd[7318]: Invalid user usuario from 200.40.45.82 port 49220
2020-06-16T17:34:41.474769vps773228.ovh.net sshd[7318]: Failed password for invalid user usuario from 200.40.45.82 port 49220 ssh2
...

Jun  7 01:15:46 ny01 sshd[10744]: Failed password for root from 200.40.45.82 port 53796 ssh2
Jun  7 01:19:58 ny01 sshd[11244]: Failed password for root from 200.40.45.82 port 57496 ssh2

Jun  2 19:14:08 MainVPS sshd[18498]: Invalid user \r from 200.40.45.82 port 36998
Jun  2 19:14:08 MainVPS sshd[18498]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.40.45.82
Jun  2 19:14:08 MainVPS sshd[18498]: Invalid user \r from 200.40.45.82 port 36998
Jun  2 19:14:10 MainVPS sshd[18498]: Failed password for invalid user \r from 200.40.45.82 port 36998 ssh2
Jun  2 19:15:10 MainVPS sshd[19429]: Invalid user 1qaz@!QAZ\r from 200.40.45.82 port 40600
...

Jun  1 14:21:35 ns382633 sshd\[5653\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.40.45.82  user=root
Jun  1 14:21:36 ns382633 sshd\[5653\]: Failed password for root from 200.40.45.82 port 47530 ssh2
Jun  1 14:34:26 ns382633 sshd\[9436\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.40.45.82  user=root
Jun  1 14:34:28 ns382633 sshd\[9436\]: Failed password for root from 200.40.45.82 port 51620 ssh2
Jun  1 14:37:51 ns382633 sshd\[10296\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.40.45.82  user=root

Invalid user nwr from 200.40.45.82 port 39764

May 14 06:06:07 OPSO sshd\[32340\]: Invalid user serverpilot from 200.40.45.82 port 54954
May 14 06:06:07 OPSO sshd\[32340\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.40.45.82
May 14 06:06:09 OPSO sshd\[32340\]: Failed password for invalid user serverpilot from 200.40.45.82 port 54954 ssh2
May 14 06:10:04 OPSO sshd\[529\]: Invalid user redis from 200.40.45.82 port 56498
May 14 06:10:04 OPSO sshd\[529\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.40.45.82

May  5 04:41:49 vps639187 sshd\[5245\]: Invalid user bernard from 200.40.45.82 port 52900
May  5 04:41:49 vps639187 sshd\[5245\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.40.45.82
May  5 04:41:52 vps639187 sshd\[5245\]: Failed password for invalid user bernard from 200.40.45.82 port 52900 ssh2
...

Apr 22 07:43:55 scw-6657dc sshd[31547]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.40.45.82
Apr 22 07:43:55 scw-6657dc sshd[31547]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.40.45.82
Apr 22 07:43:57 scw-6657dc sshd[31547]: Failed password for invalid user admin from 200.40.45.82 port 53222 ssh2
...

Too many connections or unauthorized access detected from Arctic banned ip

Mar 31 01:35:52 sso sshd[7570]: Failed password for root from 200.40.45.82 port 56390 ssh2
...

Invalid user dedicated from 200.40.45.82 port 58360

SSH Brute-Forcing (server2)

Mar 22 10:14:23 firewall sshd[29620]: Invalid user pumpkin from 200.40.45.82
Mar 22 10:14:25 firewall sshd[29620]: Failed password for invalid user pumpkin from 200.40.45.82 port 55940 ssh2
Mar 22 10:19:29 firewall sshd[29787]: Invalid user ircd from 200.40.45.82
...

Mar 16 16:14:41 jane sshd[7066]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.40.45.82 
Mar 16 16:14:42 jane sshd[7066]: Failed password for invalid user kouki from 200.40.45.82 port 44758 ssh2
...

detected by Fail2Ban

IP blocked

Invalid user 123 from 200.40.45.82 port 46672

SSH bruteforce (Triggered fail2ban)

Oct 10 03:51:02 localhost sshd\[112286\]: Invalid user Shadow@2017 from 200.40.45.82 port 59028
Oct 10 03:51:02 localhost sshd\[112286\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.40.45.82
Oct 10 03:51:04 localhost sshd\[112286\]: Failed password for invalid user Shadow@2017 from 200.40.45.82 port 59028 ssh2
Oct 10 03:55:39 localhost sshd\[112399\]: Invalid user 123Bingo from 200.40.45.82 port 42308
Oct 10 03:55:39 localhost sshd\[112399\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.40.45.82
...

2019-10-07T04:40:40.396879abusebot-4.cloudsearch.cf sshd\[15775\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=r200-40-45-82.ae-static.anteldata.net.uy  user=root

Port scan: Attack repeated for 24 hours

Jul 23 02:49:28 lumpi kernel: INPUT:DROP:SPAMHAUS_EDROP:IN=eth0 OUT= MAC=52:54:a2:01:a5:04:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.252 DST=172.31.1.100 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=27745 PROTO=TCP SPT=43974 DPT=12103 WINDOW=1024 RES=0x00 SYN URGP=0 
...

Jul 23 03:34:05 icinga sshd[6408]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.43.135
Jul 23 03:34:08 icinga sshd[6408]: Failed password for invalid user armando from 157.230.43.135 port 32836 ssh2
...

Jul 22 21:18:07 plusreed sshd[27198]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.32.5.101  user=nobody
Jul 22 21:18:09 plusreed sshd[27198]: Failed password for nobody from 45.32.5.101 port 42740 ssh2
...

Jul 23 03:36:52 microserver sshd[57491]: Invalid user qq from 115.29.11.146 port 40652
Jul 23 03:36:52 microserver sshd[57491]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.29.11.146
Jul 23 03:36:54 microserver sshd[57491]: Failed password for invalid user qq from 115.29.11.146 port 40652 ssh2
Jul 23 03:39:36 microserver sshd[57636]: Invalid user train from 115.29.11.146 port 54781
Jul 23 03:39:36 microserver sshd[57636]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.29.11.146
Jul 23 03:50:33 microserver sshd[59404]: Invalid user didi from 115.29.11.146 port 54719
Jul 23 03:50:33 microserver sshd[59404]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.29.11.146
Jul 23 03:50:35 microserver sshd[59404]: Failed password for invalid user didi from 115.29.11.146 port 54719 ssh2
Jul 23 03:53:22 microserver sshd[59551]: Invalid user te from 115.29.11.146 port 40632
Jul 23 03:53:22

C1,WP GET /wp-login.php
GET /wp-login.php

19/7/22@19:27:24: FAIL: Alarm-Intrusion address from=42.245.203.136
...

Jul 23 02:31:59 minden010 sshd[26669]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.202.59
Jul 23 02:32:01 minden010 sshd[26669]: Failed password for invalid user kevin from 106.52.202.59 port 55072 ssh2
Jul 23 02:37:04 minden010 sshd[29108]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.202.59
...

Jul 22 12:29:59 eola sshd[7346]: Invalid user prueba1 from 59.167.178.41 port 51622
Jul 22 12:29:59 eola sshd[7346]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.167.178.41 
Jul 22 12:30:00 eola sshd[7346]: Failed password for invalid user prueba1 from 59.167.178.41 port 51622 ssh2
Jul 22 12:30:00 eola sshd[7346]: Received disconnect from 59.167.178.41 port 51622:11: Bye Bye [preauth]
Jul 22 12:30:00 eola sshd[7346]: Disconnected from 59.167.178.41 port 51622 [preauth]
Jul 22 12:38:36 eola sshd[7533]: Invalid user audrey from 59.167.178.41 port 42804
Jul 22 12:38:36 eola sshd[7533]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.167.178.41 
Jul 22 12:38:39 eola sshd[7533]: Failed password for invalid user audrey from 59.167.178.41 port 42804 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=59.167.178.41

Automatic report - Banned IP Access

Jul 22 20:51:34 vps200512 sshd\[9290\]: Invalid user idc from 27.254.137.144
Jul 22 20:51:34 vps200512 sshd\[9290\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.137.144
Jul 22 20:51:36 vps200512 sshd\[9290\]: Failed password for invalid user idc from 27.254.137.144 port 57856 ssh2
Jul 22 20:57:07 vps200512 sshd\[9410\]: Invalid user rrrr from 27.254.137.144
Jul 22 20:57:07 vps200512 sshd\[9410\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.137.144

Jul 23 03:32:16 srv-4 sshd\[6076\]: Invalid user carl from 148.70.42.224
Jul 23 03:32:16 srv-4 sshd\[6076\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.42.224
Jul 23 03:32:18 srv-4 sshd\[6076\]: Failed password for invalid user carl from 148.70.42.224 port 46500 ssh2
...

Jul 23 01:13:09 localhost sshd\[113015\]: Invalid user clayton from 2.139.209.78 port 40505
Jul 23 01:13:09 localhost sshd\[113015\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.139.209.78
Jul 23 01:13:10 localhost sshd\[113015\]: Failed password for invalid user clayton from 2.139.209.78 port 40505 ssh2
Jul 23 01:21:25 localhost sshd\[113340\]: Invalid user shuang from 2.139.209.78 port 57724
Jul 23 01:21:25 localhost sshd\[113340\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.139.209.78
...

2019-07-22 18:22:13 H=(pechora2.icann.org) [190.216.179.155]:63757 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/query/ip/190.216.179.155)
2019-07-22 18:26:14 H=(pechora2.icann.org) [190.216.179.155]:47829 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/query/ip/190.216.179.155)
2019-07-22 18:27:35 H=(pechora1.icann.org) [190.216.179.155]:32997 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBLCSS)
...

Jul 23 03:29:00 icinga sshd[5916]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.211.122.197
Jul 23 03:29:03 icinga sshd[5916]: Failed password for invalid user admin from 198.211.122.197 port 50434 ssh2
...