Sep 14 02:00:54 hcbb sshd\[8654\]: Invalid user webadmin from 45.55.80.186
Sep 14 02:00:54 hcbb sshd\[8654\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=vm1.confme.xyz
Sep 14 02:00:56 hcbb sshd\[8654\]: Failed password for invalid user webadmin from 45.55.80.186 port 41405 ssh2
Sep 14 02:04:53 hcbb sshd\[9002\]: Invalid user test from 45.55.80.186
Sep 14 02:04:53 hcbb sshd\[9002\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=vm1.confme.xyz

14.09.2019 12:24:08 SSH access blocked by firewall

Sep 14 14:05:27 core sshd[31103]: Invalid user jira from 218.207.195.169 port 14454
Sep 14 14:05:29 core sshd[31103]: Failed password for invalid user jira from 218.207.195.169 port 14454 ssh2
...

Sep 14 15:40:05 our-server-hostname postfix/smtpd[13277]: connect from unknown[89.252.152.22]
Sep 14 15:40:08 our-server-hostname postfix/smtpd[9001]: connect from unknown[89.252.152.22]
Sep x@x
Sep x@x
Sep 14 15:40:15 our-server-hostname postfix/smtpd[13277]: 58DCEA4001C: client=unknown[89.252.152.22]
Sep 14 15:40:16 our-server-hostname postfix/smtpd[17606]: 9E1BEA40004: client=unknown[127.0.0.1], orig_client=unknown[89.252.152.22]
Sep 14 15:40:16 our-server-hostname amavis[19340]: (19340-08) Passed CLEAN, [89.252.152.22] [89.252.152.22] , mail_id: Cjo+tgNcGq2e, Hhostnames: -, size: 32414, queued_as: 9E1BEA40004, 167 ms
Sep x@x
Sep x@x
Sep 14 15:40:17 our-server-hostname postfix/smtpd[13277]: 4A5DCA40009: client=unknown[89.252.152.22]
Sep x@x
Sep x@x
Sep 14 15:40:17 our-server-hostname postfix/smtpd[9001]: C60D4A40010: client=unknown[89.252.152.22]
Sep 14 15:40:18 our-server-hostname postfix/smtpd[17606]: 3D908A40004: client=unknown[127.0.0.1], orig_client=unknown........
-------------------------------

19/9/14@05:13:11: FAIL: Alarm-SSH address from=124.115.112.182
...

Sep 14 13:42:54 SilenceServices sshd[5263]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.180.239.104
Sep 14 13:42:56 SilenceServices sshd[5263]: Failed password for invalid user aono from 220.180.239.104 port 9347 ssh2
Sep 14 13:46:35 SilenceServices sshd[6810]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.180.239.104

Sep 14 05:49:52 xtremcommunity sshd\[70890\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.29.32.143  user=mysql
Sep 14 05:49:54 xtremcommunity sshd\[70890\]: Failed password for mysql from 200.29.32.143 port 39690 ssh2
Sep 14 05:54:36 xtremcommunity sshd\[71063\]: Invalid user user from 200.29.32.143 port 52706
Sep 14 05:54:36 xtremcommunity sshd\[71063\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.29.32.143
Sep 14 05:54:38 xtremcommunity sshd\[71063\]: Failed password for invalid user user from 200.29.32.143 port 52706 ssh2
...

Brute force attempt

2019-09-14T10:29:57.863381abusebot-5.cloudsearch.cf sshd\[16994\]: Invalid user liza from 167.114.153.77 port 47080

Sep 14 01:23:50 lcprod sshd\[9063\]: Invalid user user from 167.71.158.65
Sep 14 01:23:50 lcprod sshd\[9063\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=facturamos.mx
Sep 14 01:23:52 lcprod sshd\[9063\]: Failed password for invalid user user from 167.71.158.65 port 39854 ssh2
Sep 14 01:27:39 lcprod sshd\[9427\]: Invalid user admin from 167.71.158.65
Sep 14 01:27:39 lcprod sshd\[9427\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=facturamos.mx

Sep 14 07:22:15 xtremcommunity sshd\[74407\]: Invalid user 123 from 51.79.129.235 port 33726
Sep 14 07:22:15 xtremcommunity sshd\[74407\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.79.129.235
Sep 14 07:22:17 xtremcommunity sshd\[74407\]: Failed password for invalid user 123 from 51.79.129.235 port 33726 ssh2
Sep 14 07:28:42 xtremcommunity sshd\[74601\]: Invalid user 123456 from 51.79.129.235 port 50538
Sep 14 07:28:42 xtremcommunity sshd\[74601\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.79.129.235
...

Sep 14 07:28:27 vtv3 sshd\[7088\]: Invalid user dougg from 103.53.172.106 port 56775
Sep 14 07:28:27 vtv3 sshd\[7088\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.53.172.106
Sep 14 07:28:29 vtv3 sshd\[7088\]: Failed password for invalid user dougg from 103.53.172.106 port 56775 ssh2
Sep 14 07:33:08 vtv3 sshd\[9391\]: Invalid user sha from 103.53.172.106 port 50058
Sep 14 07:33:08 vtv3 sshd\[9391\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.53.172.106
Sep 14 07:47:07 vtv3 sshd\[16248\]: Invalid user br from 103.53.172.106 port 58160
Sep 14 07:47:07 vtv3 sshd\[16248\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.53.172.106
Sep 14 07:47:09 vtv3 sshd\[16248\]: Failed password for invalid user br from 103.53.172.106 port 58160 ssh2
Sep 14 07:51:56 vtv3 sshd\[18526\]: Invalid user cs from 103.53.172.106 port 51453
Sep 14 07:51:56 vtv3 sshd\[18526\]: pam_unix\(ss

Automatic report - Port Scan Attack

Sep 13 21:21:29 php1 sshd\[9119\]: Invalid user patrick from 178.62.108.111
Sep 13 21:21:29 php1 sshd\[9119\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.108.111
Sep 13 21:21:32 php1 sshd\[9119\]: Failed password for invalid user patrick from 178.62.108.111 port 56320 ssh2
Sep 13 21:25:46 php1 sshd\[9511\]: Invalid user user from 178.62.108.111
Sep 13 21:25:46 php1 sshd\[9511\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.108.111

F2B jail: sshd. Time: 2019-09-14 14:00:35, Reported by: VKReport