Invalid user openerp from 212.237.55.37 port 53680

(sshd) Failed SSH login from 212.237.55.37 (IT/Italy/host37-55-237-212.serverdedicati.aruba.it): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Mar 19 14:13:51 ubnt-55d23 sshd[12720]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.237.55.37  user=root
Mar 19 14:13:53 ubnt-55d23 sshd[12720]: Failed password for root from 212.237.55.37 port 43922 ssh2

Mar  6 01:30:38 vmd17057 sshd[31157]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.237.55.37 
Mar  6 01:30:41 vmd17057 sshd[31157]: Failed password for invalid user neutron from 212.237.55.37 port 52468 ssh2
...

$f2bV_matches

Nov 20 12:22:54 ms-srv sshd[637]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.237.55.37
Nov 20 12:22:56 ms-srv sshd[637]: Failed password for invalid user volt from 212.237.55.37 port 58226 ssh2

Feb 15 06:42:29 legacy sshd[316]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.237.55.37
Feb 15 06:42:30 legacy sshd[316]: Failed password for invalid user teamspeak from 212.237.55.37 port 56334 ssh2
Feb 15 06:45:55 legacy sshd[479]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.237.55.37
...

Feb 14 14:52:10 mout sshd[20356]: Invalid user ts3 from 212.237.55.37 port 43140

2020-02-07T17:21:19.0208411495-001 sshd[19474]: Invalid user spf from 212.237.55.37 port 35196
2020-02-07T17:21:19.0306781495-001 sshd[19474]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.237.55.37
2020-02-07T17:21:19.0208411495-001 sshd[19474]: Invalid user spf from 212.237.55.37 port 35196
2020-02-07T17:21:20.6677251495-001 sshd[19474]: Failed password for invalid user spf from 212.237.55.37 port 35196 ssh2
2020-02-07T17:23:34.9300171495-001 sshd[19597]: Invalid user fve from 212.237.55.37 port 57624
2020-02-07T17:23:34.9371361495-001 sshd[19597]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.237.55.37
2020-02-07T17:23:34.9300171495-001 sshd[19597]: Invalid user fve from 212.237.55.37 port 57624
2020-02-07T17:23:36.4388131495-001 sshd[19597]: Failed password for invalid user fve from 212.237.55.37 port 57624 ssh2
2020-02-07T17:25:55.2268601495-001 sshd[19748]: Invalid user srr from 212.237.55
...

Unauthorized connection attempt detected from IP address 212.237.55.37 to port 2220 [J]

$f2bV_matches

Unauthorized connection attempt detected from IP address 212.237.55.37 to port 2220 [J]

Unauthorized connection attempt detected from IP address 212.237.55.37 to port 2220 [J]

Jan 10 17:42:34 meumeu sshd[11552]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.237.55.37 
Jan 10 17:42:36 meumeu sshd[11552]: Failed password for invalid user yuanwd from 212.237.55.37 port 34436 ssh2
Jan 10 17:46:10 meumeu sshd[11992]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.237.55.37 
...

Too many connections or unauthorized access detected from Arctic banned ip

Jan  1 15:52:07 ns381471 sshd[19626]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.237.55.37
Jan  1 15:52:09 ns381471 sshd[19626]: Failed password for invalid user ikey from 212.237.55.37 port 50996 ssh2

Dec 19 02:35:52 vtv3 sshd[2413]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.237.55.37 
Dec 19 02:35:54 vtv3 sshd[2413]: Failed password for invalid user dacia from 212.237.55.37 port 40652 ssh2
Dec 19 02:41:50 vtv3 sshd[4944]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.237.55.37 
Dec 19 03:05:20 vtv3 sshd[15982]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.237.55.37 
Dec 19 03:05:22 vtv3 sshd[15982]: Failed password for invalid user cbrunet from 212.237.55.37 port 50868 ssh2
Dec 19 03:11:46 vtv3 sshd[18758]: Failed password for backup from 212.237.55.37 port 57896 ssh2
Dec 19 03:24:18 vtv3 sshd[24256]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.237.55.37 
Dec 19 03:24:20 vtv3 sshd[24256]: Failed password for invalid user admin from 212.237.55.37 port 43720 ssh2
Dec 19 03:30:34 vtv3 sshd[27983]: pam_unix(sshd:auth): au

Dec 18 17:52:00 localhost sshd\[126914\]: Invalid user busatta from 212.237.55.37 port 48988
Dec 18 17:52:00 localhost sshd\[126914\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.237.55.37
Dec 18 17:52:02 localhost sshd\[126914\]: Failed password for invalid user busatta from 212.237.55.37 port 48988 ssh2
Dec 18 17:58:12 localhost sshd\[127193\]: Invalid user pcap from 212.237.55.37 port 53650
Dec 18 17:58:12 localhost sshd\[127193\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.237.55.37
...

Dec 18 07:42:57 sso sshd[32286]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.237.55.37
Dec 18 07:42:59 sso sshd[32286]: Failed password for invalid user abcdefghijklmnopq from 212.237.55.37 port 49698 ssh2
...

$f2bV_matches

Dec 13 20:49:24 firewall sshd[4297]: Invalid user audit from 212.237.55.37
Dec 13 20:49:26 firewall sshd[4297]: Failed password for invalid user audit from 212.237.55.37 port 34416 ssh2
Dec 13 20:55:58 firewall sshd[4366]: Invalid user mysql from 212.237.55.37
...

2019-12-08T05:29:50.920850shield sshd\[32143\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.237.55.37  user=sshd
2019-12-08T05:29:53.220926shield sshd\[32143\]: Failed password for sshd from 212.237.55.37 port 54204 ssh2
2019-12-08T05:36:33.204342shield sshd\[1166\]: Invalid user proteomics from 212.237.55.37 port 35466
2019-12-08T05:36:33.210055shield sshd\[1166\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.237.55.37
2019-12-08T05:36:35.168730shield sshd\[1166\]: Failed password for invalid user proteomics from 212.237.55.37 port 35466 ssh2

Dec  5 14:20:50 sshd: Connection from 212.237.55.37 port 36784
Dec  5 14:20:55 sshd: reverse mapping checking getaddrinfo for host37-55-237-212.serverdedicati.aruba.it [212.237.55.37] failed - POSSIBLE BREAK-IN ATTEMPT!
Dec  5 14:21:13 sshd: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.237.55.37  user=nobody
Dec  5 14:21:15 sshd: Failed password for nobody from 212.237.55.37 port 36784 ssh2
Dec  5 14:21:15 sshd: Received disconnect from 212.237.55.37: 11: Bye Bye [preauth]

F2B jail: sshd. Time: 2019-11-16 07:28:47, Reported by: VKReport

Nov  2 03:06:30 sachi sshd\[16971\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.237.55.37  user=root
Nov  2 03:06:32 sachi sshd\[16971\]: Failed password for root from 212.237.55.37 port 47458 ssh2
Nov  2 03:10:25 sachi sshd\[17370\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.237.55.37  user=root
Nov  2 03:10:27 sachi sshd\[17370\]: Failed password for root from 212.237.55.37 port 57728 ssh2
Nov  2 03:14:30 sachi sshd\[17686\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.237.55.37  user=root

2019-10-30T10:19:54.231679tmaserv sshd\[27380\]: Invalid user locate from 212.237.55.37 port 46278
2019-10-30T10:19:54.235333tmaserv sshd\[27380\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.237.55.37
2019-10-30T10:19:56.639634tmaserv sshd\[27380\]: Failed password for invalid user locate from 212.237.55.37 port 46278 ssh2
2019-10-30T10:23:35.077526tmaserv sshd\[27592\]: Invalid user yf from 212.237.55.37 port 56038
2019-10-30T10:23:35.081395tmaserv sshd\[27592\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.237.55.37
2019-10-30T10:23:36.824629tmaserv sshd\[27592\]: Failed password for invalid user yf from 212.237.55.37 port 56038 ssh2
...

Oct 28 03:10:13 hpm sshd\[7166\]: Invalid user zz from 212.237.55.37
Oct 28 03:10:13 hpm sshd\[7166\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.237.55.37
Oct 28 03:10:16 hpm sshd\[7166\]: Failed password for invalid user zz from 212.237.55.37 port 52144 ssh2
Oct 28 03:14:32 hpm sshd\[7527\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.237.55.37  user=mysql
Oct 28 03:14:34 hpm sshd\[7527\]: Failed password for mysql from 212.237.55.37 port 34246 ssh2

Aug  1 03:02:42 mercury smtpd[1187]: 17a8bc5b53792f89 smtp event=failed-command address=212.237.55.144 host=host144-55-237-212.serverdedicati.aruba.it command="RCPT to:" result="550 Invalid recipient"
...

Fail2Ban Ban Triggered

2020-04-16T08:38:32.062862  sshd[11957]: Invalid user dev from 114.67.95.188 port 38725
2020-04-16T08:38:32.076271  sshd[11957]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.95.188
2020-04-16T08:38:32.062862  sshd[11957]: Invalid user dev from 114.67.95.188 port 38725
2020-04-16T08:38:34.233729  sshd[11957]: Failed password for invalid user dev from 114.67.95.188 port 38725 ssh2
...

Apr 16 04:26:27 NPSTNNYC01T sshd[13490]: Failed password for root from 222.186.173.238 port 32066 ssh2
Apr 16 04:26:30 NPSTNNYC01T sshd[13490]: Failed password for root from 222.186.173.238 port 32066 ssh2
Apr 16 04:26:33 NPSTNNYC01T sshd[13490]: Failed password for root from 222.186.173.238 port 32066 ssh2
Apr 16 04:26:40 NPSTNNYC01T sshd[13490]: error: maximum authentication attempts exceeded for root from 222.186.173.238 port 32066 ssh2 [preauth]
...

firewall-block, port(s): 177/udp

Unauthorized connection attempt detected from IP address 192.241.239.112 to port 115

[MK-Root1] Blocked by UFW

(sshd) Failed SSH login from 51.68.84.36 (FR/France/ip-51-68-84.eu): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Apr 16 02:54:34 host sshd[38483]: Invalid user postgres from 51.68.84.36 port 42572

bruteforce detected

Dovecot Invalid User Login Attempt.

Port probing on unauthorized port 23

Telnet/23 MH Probe, Scan, BF, Hack -

Apr 16 06:13:13 ncomp sshd[14551]: Invalid user wtf from 145.239.91.88
Apr 16 06:13:13 ncomp sshd[14551]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.239.91.88
Apr 16 06:13:13 ncomp sshd[14551]: Invalid user wtf from 145.239.91.88
Apr 16 06:13:16 ncomp sshd[14551]: Failed password for invalid user wtf from 145.239.91.88 port 53714 ssh2

Apr 16 06:33:34 sxvn sshd[234454]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.190.82

Email rejected due to spam filtering

Apr 16 02:24:27 debian sshd[2693]: Unable to negotiate with 212.54.134.64 port 37128: no matching key exchange method found. Their offer: diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth]
Apr 16 03:21:08 debian sshd[5297]: Unable to negotiate with 212.54.134.64 port 37128: no matching key exchange method found. Their offer: diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth]
...