Connection to SSH Honeypot - Detected by HoneypotDB

Aug  6 01:11:44 cumulus sshd[29762]: Bad protocol version identification '' from 180.126.185.211 port 46386
Aug  6 01:11:49 cumulus sshd[29773]: Invalid user misp from 180.126.185.211 port 47113
Aug  6 01:11:50 cumulus sshd[29773]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.126.185.211
Aug  6 01:11:51 cumulus sshd[29773]: Failed password for invalid user misp from 180.126.185.211 port 47113 ssh2
Aug  6 01:11:54 cumulus sshd[29773]: Connection closed by 180.126.185.211 port 47113 [preauth]
Aug  6 01:12:01 cumulus sshd[29786]: Invalid user osbash from 180.126.185.211 port 51864
Aug  6 01:12:02 cumulus sshd[29786]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.126.185.211
Aug  6 01:12:03 cumulus sshd[29786]: Failed password for invalid user osbash from 180.126.185.211 port 51864 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=180.126.185.211

Aug  6 14:11:48 our-server-hostname sshd[7279]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.228.144.163  user=r.r
Aug  6 14:11:50 our-server-hostname sshd[7279]: Failed password for r.r from 103.228.144.163 port 60398 ssh2
Aug  6 14:20:41 our-server-hostname sshd[9484]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.228.144.163  user=r.r
Aug  6 14:20:43 our-server-hostname sshd[9484]: Failed password for r.r from 103.228.144.163 port 44092 ssh2
Aug  6 14:26:42 our-server-hostname sshd[10951]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.228.144.163  user=r.r
Aug  6 14:26:44 our-server-hostname sshd[10951]: Failed password for r.r from 103.228.144.163 port 37332 ssh2
Aug  6 14:32:51 our-server-hostname sshd[12711]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.228.144.163  user=r.r
Aug  6........
-------------------------------

Aug  6 09:25:17 nextcloud sshd\[6367\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.193.157  user=root
Aug  6 09:25:19 nextcloud sshd\[6367\]: Failed password for root from 165.227.193.157 port 35842 ssh2
Aug  6 09:27:08 nextcloud sshd\[8443\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.193.157  user=root

SSH Brute Force

1596691336 - 08/06/2020 07:22:16 Host: 182.253.233.182/182.253.233.182 Port: 445 TCP Blocked

Aug  6 10:14:23 debian-2gb-nbg1-2 kernel: \[18960120.866451\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.129.33.5 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=43244 PROTO=TCP SPT=45481 DPT=4933 WINDOW=1024 RES=0x00 SYN URGP=0

Aug  6 06:40:55 vh1 sshd[1890]: Did not receive identification string from 103.192.253.218
Aug  6 06:42:19 vh1 sshd[1935]: Connection closed by 103.192.253.218
Aug  6 06:48:15 vh1 sshd[2121]: Invalid user butter from 103.192.253.218
Aug  6 06:48:15 vh1 sshd[2121]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.192.253.218 
Aug  6 06:48:17 vh1 sshd[2121]: Failed password for invalid user butter from 103.192.253.218 port 17396 ssh2
Aug  6 06:48:17 vh1 sshd[2126]: Received disconnect from 103.192.253.218: 11: Bye Bye
Aug  6 06:54:14 vh1 sshd[2334]: Did not receive identification string from 103.192.253.218
Aug  6 07:00:06 vh1 sshd[2574]: Invalid user ntpo from 103.192.253.218
Aug  6 07:00:06 vh1 sshd[2574]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.192.253.218 
Aug  6 07:00:08 vh1 sshd[2574]: Failed password for invalid user ntpo from 103.192.253.218 port 14703 ssh2
Aug  6 07:00:........
-------------------------------

 TCP (SYN) 176.207.1.49:26739 -> port 23, len 44

Aug  6 06:21:53 ms-srv sshd[38892]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.165.23.53  user=root
Aug  6 06:21:55 ms-srv sshd[38892]: Failed password for invalid user root from 217.165.23.53 port 33664 ssh2

Aug  6 07:04:57 h2646465 sshd[31415]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.16.161.112  user=root
Aug  6 07:04:59 h2646465 sshd[31415]: Failed password for root from 186.16.161.112 port 41796 ssh2
Aug  6 07:16:41 h2646465 sshd[854]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.16.161.112  user=root
Aug  6 07:16:43 h2646465 sshd[854]: Failed password for root from 186.16.161.112 port 35220 ssh2
Aug  6 07:21:37 h2646465 sshd[1635]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.16.161.112  user=root
Aug  6 07:21:39 h2646465 sshd[1635]: Failed password for root from 186.16.161.112 port 39566 ssh2
Aug  6 07:26:33 h2646465 sshd[2271]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.16.161.112  user=root
Aug  6 07:26:35 h2646465 sshd[2271]: Failed password for root from 186.16.161.112 port 43920 ssh2
Aug  6 07:31:24 h2646465 ssh

Automatic report - Port Scan Attack

Aug  6 08:06:58 localhost sshd\[10412\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.97.119.150  user=root
Aug  6 08:06:59 localhost sshd\[10412\]: Failed password for root from 185.97.119.150 port 40312 ssh2
Aug  6 08:13:06 localhost sshd\[10506\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.97.119.150  user=root
...

Unauthorized connection attempt detected from IP address 195.224.82.202 to port 23

Aug  6 10:39:10 lnxded64 sshd[8402]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.244.51.114