Oct 30 10:59:22 ms-srv sshd[41150]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.159.153.82  user=root
Oct 30 10:59:25 ms-srv sshd[41150]: Failed password for invalid user root from 211.159.153.82 port 45304 ssh2

Jan  4 01:56:37 ws22vmsma01 sshd[121638]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.159.153.82
Jan  4 01:56:39 ws22vmsma01 sshd[121638]: Failed password for invalid user admin from 211.159.153.82 port 60242 ssh2
...

Lines containing failures of 211.159.153.82
Dec 30 14:40:23 MAKserver06 sshd[32411]: Invalid user squid from 211.159.153.82 port 58724
Dec 30 14:40:23 MAKserver06 sshd[32411]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.159.153.82 
Dec 30 14:40:24 MAKserver06 sshd[32411]: Failed password for invalid user squid from 211.159.153.82 port 58724 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=211.159.153.82

Dec 20 06:11:59 legacy sshd[21319]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.159.153.82
Dec 20 06:12:02 legacy sshd[21319]: Failed password for invalid user clan from 211.159.153.82 port 49712 ssh2
Dec 20 06:20:07 legacy sshd[21653]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.159.153.82
...

Dec 13 07:36:47 localhost sshd\[6582\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.159.153.82  user=backup
Dec 13 07:36:49 localhost sshd\[6582\]: Failed password for backup from 211.159.153.82 port 39412 ssh2
Dec 13 07:43:58 localhost sshd\[6873\]: Invalid user canary from 211.159.153.82 port 37642
Dec 13 07:43:58 localhost sshd\[6873\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.159.153.82
Dec 13 07:44:00 localhost sshd\[6873\]: Failed password for invalid user canary from 211.159.153.82 port 37642 ssh2
...

Dec  2 03:28:10 tdfoods sshd\[30086\]: Invalid user q1w2e3 from 211.159.153.82
Dec  2 03:28:10 tdfoods sshd\[30086\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.159.153.82
Dec  2 03:28:12 tdfoods sshd\[30086\]: Failed password for invalid user q1w2e3 from 211.159.153.82 port 37428 ssh2
Dec  2 03:36:54 tdfoods sshd\[30863\]: Invalid user \&\&\&\&\&\& from 211.159.153.82
Dec  2 03:36:54 tdfoods sshd\[30863\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.159.153.82

1574859351 - 11/27/2019 13:55:51 Host: 211.159.153.82/211.159.153.82 Port: 22 TCP Blocked

Nov  7 00:44:10 meumeu sshd[15394]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.159.153.82 
Nov  7 00:44:12 meumeu sshd[15394]: Failed password for invalid user BOT from 211.159.153.82 port 44922 ssh2
Nov  7 00:48:15 meumeu sshd[16041]: Failed password for root from 211.159.153.82 port 53460 ssh2
...

Lines containing failures of 211.159.153.82 (max 1000)
Nov  4 06:29:34 mm sshd[30859]: pam_unix(sshd:auth): authentication fai=
lure; logname=3D uid=3D0 euid=3D0 tty=3Dssh ruser=3D rhost=3D211.159.15=
3.82  user=3Dr.r
Nov  4 06:29:36 mm sshd[30859]: Failed password for r.r from 211.159.1=
53.82 port 47806 ssh2
Nov  4 06:29:37 mm sshd[30859]: Received disconnect from 211.159.153.82=
 port 47806:11: Bye Bye [preauth]
Nov  4 06:29:37 mm sshd[30859]: Disconnected from authenticating user r=
oot 211.159.153.82 port 47806 [preauth]
Nov  4 06:40:43 mm sshd[30968]: Invalid user jason3 from 211.159.153.82=
 port 56754
Nov  4 06:40:43 mm sshd[30968]: pam_unix(sshd:auth): authentication fai=
lure; logname=3D uid=3D0 euid=3D0 tty=3Dssh ruser=3D rhost=3D211.159.15=
3.82
Nov  4 06:40:45 mm sshd[30968]: Failed password for invalid user jason3=
 from 211.159.153.82 port 56754 ssh2
Nov  4 06:40:46 mm sshd[30968]: Received disconnect from 211.159.153.82=
 port 56754:11: Bye Bye [preauth]
........
------------------------------

Oct 27 18:32:06 firewall sshd[489]: Invalid user test from 211.159.153.82
Oct 27 18:32:08 firewall sshd[489]: Failed password for invalid user test from 211.159.153.82 port 53038 ssh2
Oct 27 18:36:24 firewall sshd[608]: Invalid user goodtime from 211.159.153.82
...

2019-10-25T12:06:30.056235shield sshd\[25065\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.159.153.82  user=root
2019-10-25T12:06:32.212401shield sshd\[25065\]: Failed password for root from 211.159.153.82 port 58718 ssh2
2019-10-25T12:11:46.630705shield sshd\[26076\]: Invalid user marcilia from 211.159.153.82 port 36202
2019-10-25T12:11:46.641363shield sshd\[26076\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.159.153.82
2019-10-25T12:11:48.511468shield sshd\[26076\]: Failed password for invalid user marcilia from 211.159.153.82 port 36202 ssh2

SSH/22 MH Probe, BF, Hack -

Oct 14 01:49:44 Ubuntu-1404-trusty-64-minimal sshd\[23398\]: Invalid user webadmin from 211.159.153.62
Oct 14 01:49:44 Ubuntu-1404-trusty-64-minimal sshd\[23398\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.159.153.62
Oct 14 01:49:46 Ubuntu-1404-trusty-64-minimal sshd\[23398\]: Failed password for invalid user webadmin from 211.159.153.62 port 33636 ssh2
Oct 14 01:55:18 Ubuntu-1404-trusty-64-minimal sshd\[26387\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.159.153.62  user=root
Oct 14 01:55:20 Ubuntu-1404-trusty-64-minimal sshd\[26387\]: Failed password for root from 211.159.153.62 port 35662 ssh2

2020-09-30T14:50:47.3623531495-001 sshd[12423]: Invalid user beatriz from 211.159.153.62 port 54986
2020-09-30T14:50:49.6358501495-001 sshd[12423]: Failed password for invalid user beatriz from 211.159.153.62 port 54986 ssh2
2020-09-30T14:51:40.7750691495-001 sshd[12495]: Invalid user admin from 211.159.153.62 port 34388
2020-09-30T14:51:40.7782651495-001 sshd[12495]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.159.153.62
2020-09-30T14:51:40.7750691495-001 sshd[12495]: Invalid user admin from 211.159.153.62 port 34388
2020-09-30T14:51:42.6573801495-001 sshd[12495]: Failed password for invalid user admin from 211.159.153.62 port 34388 ssh2
...

Sep 30 14:40:52 lnxded64 sshd[12462]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.159.153.62
Sep 30 14:40:52 lnxded64 sshd[12462]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.159.153.62

Invalid user test1 from 211.159.153.62 port 42980

Sep 14 18:55:10  sshd\[23888\]: User root from 211.159.153.62 not allowed because not listed in AllowUsersSep 14 18:55:12  sshd\[23888\]: Failed password for invalid user root from 211.159.153.62 port 35218 ssh2
...

Sep 14 10:10:56 sip sshd[27308]: Failed password for root from 211.159.153.62 port 56374 ssh2
Sep 14 10:23:01 sip sshd[30602]: Failed password for root from 211.159.153.62 port 54698 ssh2

2020-08-23T21:02:56.759883shield sshd\[22503\]: Invalid user ubuntu from 211.159.153.62 port 54288
2020-08-23T21:02:56.874958shield sshd\[22503\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.159.153.62
2020-08-23T21:02:58.819889shield sshd\[22503\]: Failed password for invalid user ubuntu from 211.159.153.62 port 54288 ssh2
2020-08-23T21:07:30.907366shield sshd\[24148\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.159.153.62  user=root
2020-08-23T21:07:33.135641shield sshd\[24148\]: Failed password for root from 211.159.153.62 port 50932 ssh2

Aug 11 08:09:01 lanister sshd[25887]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.159.153.62  user=root
Aug 11 08:09:03 lanister sshd[25887]: Failed password for root from 211.159.153.62 port 56592 ssh2
Aug 11 08:10:14 lanister sshd[25949]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.159.153.62  user=root
Aug 11 08:10:16 lanister sshd[25949]: Failed password for root from 211.159.153.62 port 39462 ssh2

Bruteforce detected by fail2ban

<6 unauthorized SSH connections

$f2bV_matches

May 23 22:10:58 minden010 sshd[1642]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.159.153.62
May 23 22:11:00 minden010 sshd[1642]: Failed password for invalid user liuzunpeng from 211.159.153.62 port 54304 ssh2
May 23 22:15:18 minden010 sshd[3217]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.159.153.62
...

2020-05-22 UTC: (12x) - cwe,hwu,jrx,jwi,jyzhu,qnc,tja,wtj,xnh,ydj,yongren,zhd

(sshd) Failed SSH login from 211.159.153.62 (CN/China/-): 5 in the last 3600 secs

May  6 07:00:12 inter-technics sshd[25600]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.159.153.62  user=root
May  6 07:00:14 inter-technics sshd[25600]: Failed password for root from 211.159.153.62 port 59180 ssh2
May  6 07:05:55 inter-technics sshd[28237]: Invalid user rcp from 211.159.153.62 port 33414
May  6 07:05:55 inter-technics sshd[28237]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.159.153.62
May  6 07:05:55 inter-technics sshd[28237]: Invalid user rcp from 211.159.153.62 port 33414
May  6 07:05:58 inter-technics sshd[28237]: Failed password for invalid user rcp from 211.159.153.62 port 33414 ssh2
...

Jun 14 19:31:00 minden010 sshd[8694]: Failed password for root from 85.233.150.13 port 37394 ssh2
Jun 14 19:31:53 minden010 sshd[8999]: Failed password for root from 85.233.150.13 port 48102 ssh2
Jun 14 19:32:42 minden010 sshd[9310]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.233.150.13
...

Attempted connection to port 445.

TCP scanned

Attempted connection to port 445.

Unauthorized connection attempt from IP address 180.168.140.162 on Port 445(SMB)

Unauthorized connection attempt detected from IP address 177.84.143.208 to port 445

Jun 14 15:36:35 buvik sshd[17857]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.144.199.158
Jun 14 15:36:37 buvik sshd[17857]: Failed password for invalid user few from 192.144.199.158 port 47720 ssh2
Jun 14 15:41:37 buvik sshd[18679]: Invalid user rechell123 from 192.144.199.158
...

Unauthorized connection attempt from IP address 190.221.151.226 on Port 445(SMB)

Attempted connection to port 8000.

Attempted connection to port 8000.

"fail2ban match"

Unauthorized connection attempt from IP address 41.228.170.21 on Port 445(SMB)

Jun 14 20:37:23 eventyay sshd[24447]: Failed password for root from 112.85.42.178 port 11632 ssh2
Jun 14 20:37:35 eventyay sshd[24447]: error: maximum authentication attempts exceeded for root from 112.85.42.178 port 11632 ssh2 [preauth]
Jun 14 20:37:41 eventyay sshd[24450]: Failed password for root from 112.85.42.178 port 36846 ssh2
...

Unauthorized connection attempt from IP address 156.194.160.145 on Port 445(SMB)

Jun 14 16:28:49 server sshd[21601]: Failed password for root from 124.156.199.234 port 60302 ssh2
Jun 14 16:33:00 server sshd[24836]: Failed password for invalid user nty from 124.156.199.234 port 52788 ssh2
Jun 14 16:37:05 server sshd[27842]: Failed password for root from 124.156.199.234 port 45272 ssh2