$f2bV_matches

Feb  2 16:22:44 legacy sshd[24248]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.120.96
Feb  2 16:22:46 legacy sshd[24248]: Failed password for invalid user test from 37.187.120.96 port 49584 ssh2
Feb  2 16:26:09 legacy sshd[24458]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.120.96
...

Jan 30 15:39:10 OPSO sshd\[17196\]: Invalid user kulaj from 37.187.120.96 port 58904
Jan 30 15:39:10 OPSO sshd\[17196\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.120.96
Jan 30 15:39:12 OPSO sshd\[17196\]: Failed password for invalid user kulaj from 37.187.120.96 port 58904 ssh2
Jan 30 15:43:10 OPSO sshd\[18271\]: Invalid user shrikumar from 37.187.120.96 port 47514
Jan 30 15:43:10 OPSO sshd\[18271\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.120.96

Unauthorized connection attempt detected from IP address 37.187.120.96 to port 2220 [J]

Jan 21 20:32:18 hosting sshd[25094]: Invalid user build from 37.187.120.96 port 35418
...

Unauthorized connection attempt detected from IP address 37.187.120.96 to port 2220 [J]

Dec 31 07:24:07 silence02 sshd[12768]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.120.96
Dec 31 07:24:09 silence02 sshd[12768]: Failed password for invalid user keinosuke from 37.187.120.96 port 39384 ssh2
Dec 31 07:27:40 silence02 sshd[12875]: Failed password for root from 37.187.120.96 port 43516 ssh2

SSH Brute-Force reported by Fail2Ban

Dec 24 01:22:12 mailrelay sshd[13270]: Invalid user guest from 37.187.120.96 port 57230
Dec 24 01:22:12 mailrelay sshd[13270]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.120.96
Dec 24 01:22:14 mailrelay sshd[13270]: Failed password for invalid user guest from 37.187.120.96 port 57230 ssh2
Dec 24 01:22:14 mailrelay sshd[13270]: Received disconnect from 37.187.120.96 port 57230:11: Bye Bye [preauth]
Dec 24 01:22:14 mailrelay sshd[13270]: Disconnected from 37.187.120.96 port 57230 [preauth]
Dec 24 01:25:39 mailrelay sshd[13346]: Invalid user esry from 37.187.120.96 port 50330
Dec 24 01:25:39 mailrelay sshd[13346]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.120.96


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=37.187.120.96

Dec 24 22:38:12 vibhu-HP-Z238-Microtower-Workstation sshd\[8245\]: Invalid user terry123 from 37.187.120.96
Dec 24 22:38:12 vibhu-HP-Z238-Microtower-Workstation sshd\[8245\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.120.96
Dec 24 22:38:14 vibhu-HP-Z238-Microtower-Workstation sshd\[8245\]: Failed password for invalid user terry123 from 37.187.120.96 port 57074 ssh2
Dec 24 22:41:02 vibhu-HP-Z238-Microtower-Workstation sshd\[8446\]: Invalid user decher from 37.187.120.96
Dec 24 22:41:02 vibhu-HP-Z238-Microtower-Workstation sshd\[8446\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.120.96
...

Dec 22 07:18:29 sachi sshd\[13456\]: Invalid user ftp7777 from 37.187.120.96
Dec 22 07:18:29 sachi sshd\[13456\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns330887.ip-37-187-120.eu
Dec 22 07:18:31 sachi sshd\[13456\]: Failed password for invalid user ftp7777 from 37.187.120.96 port 42120 ssh2
Dec 22 07:24:55 sachi sshd\[14112\]: Invalid user ernst123 from 37.187.120.96
Dec 22 07:24:55 sachi sshd\[14112\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns330887.ip-37-187-120.eu

...

$f2bV_matches

Dec 21 04:40:43 php1 sshd\[8080\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.120.96  user=root
Dec 21 04:40:45 php1 sshd\[8080\]: Failed password for root from 37.187.120.96 port 34826 ssh2
Dec 21 04:47:03 php1 sshd\[8671\]: Invalid user cokol from 37.187.120.96
Dec 21 04:47:03 php1 sshd\[8671\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.120.96
Dec 21 04:47:05 php1 sshd\[8671\]: Failed password for invalid user cokol from 37.187.120.96 port 41372 ssh2

Dec 18 17:20:42 mail sshd[27254]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.120.96 
Dec 18 17:20:44 mail sshd[27254]: Failed password for invalid user raymundo from 37.187.120.96 port 48162 ssh2
Dec 18 17:27:12 mail sshd[28216]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.120.96

Dec 15 06:36:35 sachi sshd\[17190\]: Invalid user tonjemonica from 37.187.120.96
Dec 15 06:36:35 sachi sshd\[17190\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns330887.ip-37-187-120.eu
Dec 15 06:36:38 sachi sshd\[17190\]: Failed password for invalid user tonjemonica from 37.187.120.96 port 52620 ssh2
Dec 15 06:43:19 sachi sshd\[17839\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns330887.ip-37-187-120.eu  user=sshd
Dec 15 06:43:21 sachi sshd\[17839\]: Failed password for sshd from 37.187.120.96 port 60802 ssh2

ssh failed login

Dec 10 21:14:07 vpn01 sshd[24757]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.120.96
Dec 10 21:14:09 vpn01 sshd[24757]: Failed password for invalid user nelon from 37.187.120.96 port 34272 ssh2
...

2019-10-23T22:46:39.206696abusebot-5.cloudsearch.cf sshd\[10925\]: Invalid user cjohnson from 37.187.120.121 port 45846

Invalid user minecraft from 37.187.120.121 port 48226

Aug 19 08:31:53 hcbbdb sshd\[31736\]: Invalid user pollie from 37.187.120.121
Aug 19 08:31:53 hcbbdb sshd\[31736\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns330932.ip-37-187-120.eu
Aug 19 08:31:55 hcbbdb sshd\[31736\]: Failed password for invalid user pollie from 37.187.120.121 port 60566 ssh2
Aug 19 08:36:34 hcbbdb sshd\[32200\]: Invalid user kyle123 from 37.187.120.121
Aug 19 08:36:34 hcbbdb sshd\[32200\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns330932.ip-37-187-120.eu

Aug 17 21:46:25 hb sshd\[10874\]: Invalid user password from 37.187.120.121
Aug 17 21:46:25 hb sshd\[10874\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns330932.ip-37-187-120.eu
Aug 17 21:46:27 hb sshd\[10874\]: Failed password for invalid user password from 37.187.120.121 port 56258 ssh2
Aug 17 21:51:11 hb sshd\[11277\]: Invalid user caltech from 37.187.120.121
Aug 17 21:51:11 hb sshd\[11277\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns330932.ip-37-187-120.eu

Aug  9 09:07:34 itv-usvr-02 sshd[7261]: Invalid user minecraft from 37.187.120.121 port 56604
Aug  9 09:07:34 itv-usvr-02 sshd[7261]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.120.121
Aug  9 09:07:34 itv-usvr-02 sshd[7261]: Invalid user minecraft from 37.187.120.121 port 56604
Aug  9 09:07:37 itv-usvr-02 sshd[7261]: Failed password for invalid user minecraft from 37.187.120.121 port 56604 ssh2
Aug  9 09:13:23 itv-usvr-02 sshd[7354]: Invalid user helena from 37.187.120.121 port 53828

Jul 25 21:49:19 srv-4 sshd\[19632\]: Invalid user adriana from 37.187.120.121
Jul 25 21:49:19 srv-4 sshd\[19632\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.120.121
Jul 25 21:49:21 srv-4 sshd\[19632\]: Failed password for invalid user adriana from 37.187.120.121 port 45386 ssh2
...

Jul 23 21:55:01 mail sshd[19126]: Invalid user ansible from 37.187.120.121
Jul 23 21:55:01 mail sshd[19126]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.120.121
Jul 23 21:55:01 mail sshd[19126]: Invalid user ansible from 37.187.120.121
Jul 23 21:55:03 mail sshd[19126]: Failed password for invalid user ansible from 37.187.120.121 port 53270 ssh2
Jul 23 22:11:41 mail sshd[21334]: Invalid user ts3srv from 37.187.120.121
...

Jul 17 10:28:52 MK-Soft-VM3 sshd\[2048\]: Invalid user multi3 from 37.187.120.121 port 36280
Jul 17 10:28:52 MK-Soft-VM3 sshd\[2048\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.120.121
Jul 17 10:28:54 MK-Soft-VM3 sshd\[2048\]: Failed password for invalid user multi3 from 37.187.120.121 port 36280 ssh2
...

Jul 15 11:02:33 SilenceServices sshd[2576]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.120.121
Jul 15 11:02:36 SilenceServices sshd[2576]: Failed password for invalid user matt from 37.187.120.121 port 40774 ssh2
Jul 15 11:08:24 SilenceServices sshd[6410]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.120.121

Jul  3 15:27:43 cp sshd[13030]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.120.121

Jun 30 03:29:44 dedicated sshd[16011]: Invalid user backups from 37.187.120.121 port 47330

SSH invalid-user multiple login try

$f2bV_matches

Jun 21 05:43:39 onepixel sshd[3970798]: Failed password for invalid user crh from 91.134.240.130 port 38521 ssh2
Jun 21 05:48:24 onepixel sshd[3972839]: Invalid user root2 from 91.134.240.130 port 38277
Jun 21 05:48:24 onepixel sshd[3972839]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.134.240.130 
Jun 21 05:48:24 onepixel sshd[3972839]: Invalid user root2 from 91.134.240.130 port 38277
Jun 21 05:48:26 onepixel sshd[3972839]: Failed password for invalid user root2 from 91.134.240.130 port 38277 ssh2

Hit honeypot r.

Jun 21 03:12:42 firewall sshd[17852]: Failed password for invalid user testaccount from 187.188.83.115 port 10531 ssh2
Jun 21 03:15:07 firewall sshd[17923]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.188.83.115  user=root
Jun 21 03:15:10 firewall sshd[17923]: Failed password for root from 187.188.83.115 port 9090 ssh2
...

Jun 21 08:05:08 sso sshd[21208]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.112.128.8
Jun 21 08:05:10 sso sshd[21208]: Failed password for invalid user ubuntu from 68.112.128.8 port 45388 ssh2
...

Jun 16 12:41:24 WHD8 dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 7 secs\): user=\, method=PLAIN, rip=155.0.235.12, lip=10.64.89.208, TLS: Disconnected, session=\<8TLtLjGoDrmbAOsM\>
Jun 16 20:14:11 WHD8 dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 6 secs\): user=\, method=PLAIN, rip=155.0.235.12, lip=10.64.89.208, TLS, session=\
Jun 17 00:01:26 WHD8 dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 5 secs\): user=\, method=PLAIN, rip=155.0.235.12, lip=10.64.89.208, TLS: Disconnected, session=\
Jun 19 06:47:05 WHD8 dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 4 secs\): user=\, method=PLAIN, rip=155.0.235.12, lip=10.64.89.208, TLS, session=\
Jun 19 12:32:27 WHD8 dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 6 secs\): use
...

2020-06-21T01:16:33.426821linuxbox-skyline auth[52302]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=delfile rhost=46.38.145.251
...

DE bad_bot

(sshd) Failed SSH login from 112.85.42.173 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun 21 08:56:39 amsweb01 sshd[9807]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.173  user=root
Jun 21 08:56:39 amsweb01 sshd[9805]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.173  user=root
Jun 21 08:56:42 amsweb01 sshd[9807]: Failed password for root from 112.85.42.173 port 29457 ssh2
Jun 21 08:56:42 amsweb01 sshd[9805]: Failed password for root from 112.85.42.173 port 11166 ssh2
Jun 21 08:56:45 amsweb01 sshd[9807]: Failed password for root from 112.85.42.173 port 29457 ssh2

Invalid user kumar from 106.13.191.132 port 53540

Jun 21 09:24:12 vps647732 sshd[17359]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.157.120.16
Jun 21 09:24:14 vps647732 sshd[17359]: Failed password for invalid user test1 from 45.157.120.16 port 43098 ssh2
...

Unauthorized SSH login attempts

1592711711 - 06/21/2020 05:55:11 Host: 113.20.99.185/113.20.99.185 Port: 445 TCP Blocked

Invalid user teste from 139.59.59.102 port 42368

2020-06-21T09:07:39+0200 Failed SSH Authentication/Brute Force Attack. (Server 9)