Aug 11 01:03:30 vps691689 sshd[9650]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.45.147.17
Aug 11 01:03:33 vps691689 sshd[9650]: Failed password for invalid user ftpuser from 202.45.147.17 port 42989 ssh2
...

Aug 10 05:48:40 MK-Soft-Root1 sshd\[2040\]: Invalid user unicorn from 202.45.147.17 port 43683
Aug 10 05:48:40 MK-Soft-Root1 sshd\[2040\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.45.147.17
Aug 10 05:48:42 MK-Soft-Root1 sshd\[2040\]: Failed password for invalid user unicorn from 202.45.147.17 port 43683 ssh2
...

Aug  8 23:44:45 mail1 sshd\[20033\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.45.147.17  user=root
Aug  8 23:44:47 mail1 sshd\[20033\]: Failed password for root from 202.45.147.17 port 39786 ssh2
Aug  8 23:54:56 mail1 sshd\[24561\]: Invalid user Ionut from 202.45.147.17 port 40578
Aug  8 23:54:56 mail1 sshd\[24561\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.45.147.17
Aug  8 23:54:58 mail1 sshd\[24561\]: Failed password for invalid user Ionut from 202.45.147.17 port 40578 ssh2
...

Aug  6 03:32:18 legacy sshd[17415]: Failed password for root from 202.45.147.17 port 53046 ssh2
Aug  6 03:36:54 legacy sshd[17503]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.45.147.17
Aug  6 03:36:57 legacy sshd[17503]: Failed password for invalid user dev from 202.45.147.17 port 50168 ssh2
...

Aug  1 08:52:05 www4 sshd\[31730\]: Invalid user bluecore from 202.45.147.17
Aug  1 08:52:05 www4 sshd\[31730\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.45.147.17
Aug  1 08:52:07 www4 sshd\[31730\]: Failed password for invalid user bluecore from 202.45.147.17 port 39208 ssh2
Aug  1 08:56:52 www4 sshd\[32208\]: Invalid user him from 202.45.147.17
Aug  1 08:56:52 www4 sshd\[32208\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.45.147.17
...

Jul 31 20:39:50 vps691689 sshd[30777]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.45.147.17
Jul 31 20:39:53 vps691689 sshd[30777]: Failed password for invalid user lacey from 202.45.147.17 port 57205 ssh2
...

SSH invalid-user multiple login try

Jul 27 00:56:51 vps200512 sshd\[13947\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.45.147.17  user=mysql
Jul 27 00:56:53 vps200512 sshd\[13947\]: Failed password for mysql from 202.45.147.17 port 52429 ssh2
Jul 27 01:01:55 vps200512 sshd\[14032\]: Invalid user linas from 202.45.147.17
Jul 27 01:01:55 vps200512 sshd\[14032\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.45.147.17
Jul 27 01:01:57 vps200512 sshd\[14032\]: Failed password for invalid user linas from 202.45.147.17 port 50684 ssh2

Jul 27 00:17:00 vps200512 sshd\[13202\]: Invalid user bocloud from 202.45.147.17
Jul 27 00:17:00 vps200512 sshd\[13202\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.45.147.17
Jul 27 00:17:02 vps200512 sshd\[13202\]: Failed password for invalid user bocloud from 202.45.147.17 port 38165 ssh2
Jul 27 00:22:03 vps200512 sshd\[13275\]: Invalid user alex from 202.45.147.17
Jul 27 00:22:03 vps200512 sshd\[13275\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.45.147.17

Jul 26 11:51:42 vps200512 sshd\[31687\]: Invalid user support from 202.45.147.17
Jul 26 11:51:42 vps200512 sshd\[31687\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.45.147.17
Jul 26 11:51:44 vps200512 sshd\[31687\]: Failed password for invalid user support from 202.45.147.17 port 52690 ssh2
Jul 26 11:56:38 vps200512 sshd\[31821\]: Invalid user rama from 202.45.147.17
Jul 26 11:56:38 vps200512 sshd\[31821\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.45.147.17

Invalid user lx from 202.45.147.118 port 36702

SSH invalid-user multiple login attempts

2020-09-28T01:43:40.060550xentho-1 sshd[1051434]: Invalid user admin from 202.45.147.118 port 49480
2020-09-28T01:43:41.799340xentho-1 sshd[1051434]: Failed password for invalid user admin from 202.45.147.118 port 49480 ssh2
2020-09-28T01:46:02.205494xentho-1 sshd[1051458]: Invalid user myftp from 202.45.147.118 port 34074
2020-09-28T01:46:02.211890xentho-1 sshd[1051458]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.45.147.118
2020-09-28T01:46:02.205494xentho-1 sshd[1051458]: Invalid user myftp from 202.45.147.118 port 34074
2020-09-28T01:46:04.104614xentho-1 sshd[1051458]: Failed password for invalid user myftp from 202.45.147.118 port 34074 ssh2
2020-09-28T01:48:18.547620xentho-1 sshd[1051472]: Invalid user dcadmin from 202.45.147.118 port 46893
2020-09-28T01:48:18.555271xentho-1 sshd[1051472]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.45.147.118
2020-09-28T01:48:18.547620xentho-1 sshd[10
...

$f2bV_matches

frenzy

Nov 25 01:03:10 mout sshd[26749]: Invalid user briski from 202.45.147.125 port 55466

Invalid user bulgaria from 202.45.147.125 port 44874
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.45.147.125
Failed password for invalid user bulgaria from 202.45.147.125 port 44874 ssh2
Invalid user zatoichi from 202.45.147.125 port 34834
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.45.147.125

Nov  5 16:03:02 localhost sshd\[13165\]: Invalid user samuel1 from 202.45.147.125
Nov  5 16:03:02 localhost sshd\[13165\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.45.147.125
Nov  5 16:03:04 localhost sshd\[13165\]: Failed password for invalid user samuel1 from 202.45.147.125 port 40474 ssh2
Nov  5 16:06:26 localhost sshd\[13436\]: Invalid user 1003 from 202.45.147.125
Nov  5 16:06:26 localhost sshd\[13436\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.45.147.125
...

Automatic report - Banned IP Access

Oct 29 04:43:15 anodpoucpklekan sshd[64380]: Invalid user Juhana from 202.45.147.125 port 40030
...

$f2bV_matches

Oct 11 04:44:05 wbs sshd\[19067\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.45.147.125  user=root
Oct 11 04:44:07 wbs sshd\[19067\]: Failed password for root from 202.45.147.125 port 45838 ssh2
Oct 11 04:48:16 wbs sshd\[19412\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.45.147.125  user=root
Oct 11 04:48:17 wbs sshd\[19412\]: Failed password for root from 202.45.147.125 port 36290 ssh2
Oct 11 04:52:32 wbs sshd\[19797\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.45.147.125  user=root

F2B jail: sshd. Time: 2019-10-01 00:31:27, Reported by: VKReport

Sep 16 21:21:24 core sshd[27328]: Invalid user Administrator from 202.45.147.125 port 59673
Sep 16 21:21:26 core sshd[27328]: Failed password for invalid user Administrator from 202.45.147.125 port 59673 ssh2
...

Automated report - ssh fail2ban:
Sep 16 01:18:25 authentication failure 
Sep 16 01:18:27 wrong password, user=wesley, port=52274, ssh2
Sep 16 01:22:16 authentication failure

REQUESTED PAGE: /wp-admin/js/password-strength-meter.min.js?ver=5.3.2

$f2bV_matches

Dec 21 15:24:09 firewall sshd[25941]: Invalid user pcap from 200.195.171.74
Dec 21 15:24:11 firewall sshd[25941]: Failed password for invalid user pcap from 200.195.171.74 port 58128 ssh2
Dec 21 15:30:29 firewall sshd[26108]: Invalid user pass from 200.195.171.74
...

Unauthorised access (Dec 21) SRC=201.163.229.234 LEN=52 TTL=108 ID=14701 DF TCP DPT=445 WINDOW=8192 SYN

[21/Dec/2019:19:11:17 +0100] Web-Request: "GET /wp-login.php", User-Agent: "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"

Dec 21 16:53:41 dedicated sshd[7065]: Invalid user visage from 119.29.119.151 port 45344

SSH Login Bruteforce

Dec 21 19:52:08 mail sshd\[31539\]: Invalid user breadfruit from 106.13.34.212
Dec 21 19:52:08 mail sshd\[31539\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.34.212
Dec 21 19:52:09 mail sshd\[31539\]: Failed password for invalid user breadfruit from 106.13.34.212 port 52404 ssh2
...

MLV GET /server/wp-login.php

Dec 21 23:26:55 gw1 sshd[11688]: Failed password for backup from 118.70.113.1 port 48446 ssh2
...

Dec 21 16:32:57 meumeu sshd[17475]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.189.237.3 
Dec 21 16:32:59 meumeu sshd[17475]: Failed password for invalid user tonkovich from 220.189.237.3 port 34548 ssh2
Dec 21 16:41:13 meumeu sshd[18964]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.189.237.3 
...

DATE:2019-12-21 16:17:55, IP:14.141.196.251, PORT:1433 - MSSQL brute force auth on a honeypot server (epe-dc)

Dec 21 19:45:43 microserver sshd[16766]: Invalid user palmgren from 43.242.125.185 port 36860
Dec 21 19:45:43 microserver sshd[16766]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.242.125.185
Dec 21 19:45:44 microserver sshd[16766]: Failed password for invalid user palmgren from 43.242.125.185 port 36860 ssh2
Dec 21 19:52:22 microserver sshd[17663]: Invalid user jeanne from 43.242.125.185 port 40118
Dec 21 19:52:22 microserver sshd[17663]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.242.125.185
Dec 21 20:05:38 microserver sshd[19857]: Invalid user nurhan from 43.242.125.185 port 46644
Dec 21 20:05:38 microserver sshd[19857]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.242.125.185
Dec 21 20:05:41 microserver sshd[19857]: Failed password for invalid user nurhan from 43.242.125.185 port 46644 ssh2
Dec 21 20:12:20 microserver sshd[20769]: Invalid user **** from 43.242.125.185

Dec 21 08:05:20 eddieflores sshd\[25394\]: Invalid user brouthillier from 51.77.230.23
Dec 21 08:05:20 eddieflores sshd\[25394\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.ip-51-77-230.eu
Dec 21 08:05:22 eddieflores sshd\[25394\]: Failed password for invalid user brouthillier from 51.77.230.23 port 58290 ssh2
Dec 21 08:10:31 eddieflores sshd\[25933\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.ip-51-77-230.eu  user=root
Dec 21 08:10:33 eddieflores sshd\[25933\]: Failed password for root from 51.77.230.23 port 35326 ssh2

Dec 21 13:41:36 Tower sshd[5275]: Connection from 112.198.194.11 port 55872 on 192.168.10.220 port 22
Dec 21 13:41:37 Tower sshd[5275]: Invalid user dorrie from 112.198.194.11 port 55872
Dec 21 13:41:37 Tower sshd[5275]: error: Could not get shadow information for NOUSER
Dec 21 13:41:37 Tower sshd[5275]: Failed password for invalid user dorrie from 112.198.194.11 port 55872 ssh2
Dec 21 13:41:37 Tower sshd[5275]: Received disconnect from 112.198.194.11 port 55872:11: Bye Bye [preauth]
Dec 21 13:41:37 Tower sshd[5275]: Disconnected from invalid user dorrie 112.198.194.11 port 55872 [preauth]