Sep 28 20:22:59 sshgateway sshd\[26765\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.148  user=root
Sep 28 20:23:01 sshgateway sshd\[26765\]: Failed password for root from 222.186.175.148 port 30734 ssh2
Sep 28 20:23:16 sshgateway sshd\[26765\]: error: maximum authentication attempts exceeded for root from 222.186.175.148 port 30734 ssh2 \[preauth\]

2019-09-28T12:25:55.711072abusebot-7.cloudsearch.cf sshd\[3517\]: Invalid user cliente1 from 198.199.117.143 port 37996

Sep 16 11:34:49 microserver sshd[34447]: Invalid user zem from 152.136.76.134 port 47109
Sep 16 11:34:49 microserver sshd[34447]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.76.134
Sep 16 11:34:51 microserver sshd[34447]: Failed password for invalid user zem from 152.136.76.134 port 47109 ssh2
Sep 16 11:40:57 microserver sshd[35618]: Invalid user postmaster from 152.136.76.134 port 39717
Sep 16 11:40:57 microserver sshd[35618]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.76.134
Sep 28 22:01:13 microserver sshd[8917]: Invalid user wordpress from 152.136.76.134 port 60797
Sep 28 22:01:13 microserver sshd[8917]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.76.134
Sep 28 22:01:15 microserver sshd[8917]: Failed password for invalid user wordpress from 152.136.76.134 port 60797 ssh2
Sep 28 22:07:51 microserver sshd[9731]: Invalid user windowserver from 152.136.76

2019-09-29T03:19:20.904609enmeeting.mahidol.ac.th sshd\[30101\]: Invalid user oy from 106.12.74.222 port 58084
2019-09-29T03:19:20.923388enmeeting.mahidol.ac.th sshd\[30101\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.74.222
2019-09-29T03:19:23.050681enmeeting.mahidol.ac.th sshd\[30101\]: Failed password for invalid user oy from 106.12.74.222 port 58084 ssh2
...

Sep 28 07:54:55 rb06 sshd[21825]: Failed password for invalid user zf from 162.216.16.197 port 41836 ssh2
Sep 28 07:54:55 rb06 sshd[21825]: Received disconnect from 162.216.16.197: 11: Bye Bye [preauth]
Sep 28 08:04:05 rb06 sshd[23600]: Failed password for invalid user juju from 162.216.16.197 port 43258 ssh2
Sep 28 08:04:05 rb06 sshd[23600]: Received disconnect from 162.216.16.197: 11: Bye Bye [preauth]
Sep 28 08:11:01 rb06 sshd[22281]: Failed password for invalid user testuser1 from 162.216.16.197 port 41908 ssh2
Sep 28 08:11:01 rb06 sshd[22281]: Received disconnect from 162.216.16.197: 11: Bye Bye [preauth]
Sep 28 08:14:31 rb06 sshd[31846]: Failed password for invalid user shane from 162.216.16.197 port 55308 ssh2
Sep 28 08:14:31 rb06 sshd[31846]: Received disconnect from 162.216.16.197: 11: Bye Bye [preauth]
Sep 28 08:18:01 rb06 sshd[28667]: Failed password for invalid user casper from 162.216.16.197 port 40470 ssh2
Sep 28 08:18:01 rb06 sshd[28667]: Received disconn........
-------------------------------

\[2019-09-28 16:19:21\] NOTICE\[1948\] chan_sip.c: Registration from '"900" \' failed for '77.247.108.220:6141' - Wrong password
\[2019-09-28 16:19:21\] SECURITY\[2006\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-28T16:19:21.262-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="900",SessionID="0x7f1e1c30b9b8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.108.220/6141",Challenge="31d138dd",ReceivedChallenge="31d138dd",ReceivedHash="4576c10a0c299ec790e62f6b3c41aea8"
\[2019-09-28 16:19:21\] NOTICE\[1948\] chan_sip.c: Registration from '"900" \' failed for '77.247.108.220:6141' - Wrong password
\[2019-09-28 16:19:21\] SECURITY\[2006\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-28T16:19:21.428-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="900",SessionID="0x7f1e1c6a5718",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/7

Unauthorized access detected from banned ip

Sep 28 14:25:38 dev sshd\[17966\]: Invalid user admin from 59.96.88.57 port 55396
Sep 28 14:25:38 dev sshd\[17966\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.96.88.57
Sep 28 14:25:40 dev sshd\[17966\]: Failed password for invalid user admin from 59.96.88.57 port 55396 ssh2

Port Scan: TCP/5984

2019-09-28T18:56:27.971417hub.schaetter.us sshd\[16447\]: Invalid user 12345 from 178.49.9.210 port 36502
2019-09-28T18:56:27.984004hub.schaetter.us sshd\[16447\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.49.9.210
2019-09-28T18:56:30.071591hub.schaetter.us sshd\[16447\]: Failed password for invalid user 12345 from 178.49.9.210 port 36502 ssh2
2019-09-28T19:00:45.168449hub.schaetter.us sshd\[16486\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.49.9.210  user=root
2019-09-28T19:00:47.341224hub.schaetter.us sshd\[16486\]: Failed password for root from 178.49.9.210 port 47222 ssh2
...

Automated reporting of SSH Vulnerability scanning

2019-09-24T16:35:42.567196-07:00 suse-nuc sshd[8690]: Invalid user prueba from 81.130.138.156 port 41436
...

2019-09-28T20:12:50.619748abusebot-3.cloudsearch.cf sshd\[13986\]: Invalid user backup from 223.25.97.250 port 49024

2019-09-17T16:52:40.840187suse-nuc sshd[12028]: Invalid user segreteria from 49.234.48.171 port 56226
...

Sep 28 22:27:12 vps691689 sshd[25490]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.18.180
Sep 28 22:27:14 vps691689 sshd[25490]: Failed password for invalid user disk from 106.52.18.180 port 57754 ssh2
...