Mar 31 06:55:30 server2 sshd\[3338\]: User root from 41.234.66.22 not allowed because not listed in AllowUsers
Mar 31 06:55:43 server2 sshd\[3342\]: User root from 41.234.66.22 not allowed because not listed in AllowUsers
Mar 31 06:55:56 server2 sshd\[3345\]: Invalid user user from 41.234.66.22
Mar 31 06:56:10 server2 sshd\[3373\]: Invalid user testuser from 41.234.66.22
Mar 31 06:56:24 server2 sshd\[3380\]: Invalid user ftpadmin from 41.234.66.22
Mar 31 06:56:40 server2 sshd\[3385\]: Invalid user jira from 41.234.66.22

Invalid user user from 41.234.66.22 port 54050

Invalid user user from 41.234.66.22 port 49352

Unauthorized connection attempt detected from IP address 41.234.66.22 to port 22

2020-03-28T18:42:47.138483sorsha.thespaminator.com sshd[12601]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.234.66.22  user=root
2020-03-28T18:42:49.353670sorsha.thespaminator.com sshd[12601]: Failed password for root from 41.234.66.22 port 54829 ssh2
...

Unauthorized connection attempt detected from IP address 41.234.66.22 to port 22

Mar 26 22:30:57 mail sshd\[29314\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.234.66.22  user=root
Mar 26 22:30:59 mail sshd\[29314\]: Failed password for root from 41.234.66.22 port 38110 ssh2
Mar 26 22:31:27 mail sshd\[29443\]: Invalid user user from 41.234.66.22
Mar 26 22:31:27 mail sshd\[29443\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.234.66.22
...

Mar 24 09:37:37 XXX sshd[45532]: Invalid user user from 41.234.66.22 port 34821

Mar 22 23:39:11 XXX sshd[59022]: Invalid user user from 41.234.66.22 port 60498

Mar 22 14:41:46 host01 sshd[8992]: Failed password for root from 41.234.66.22 port 42603 ssh2
Mar 22 14:42:04 host01 sshd[9029]: Failed password for root from 41.234.66.22 port 33542 ssh2
...

Unauthorized connection attempt detected from IP address 41.234.66.22 to port 22

Mar 21 13:00:03 XXX sshd[30111]: Invalid user user from 41.234.66.22 port 33828

Mar 21 05:07:11 localhost sshd\[13404\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.234.66.22  user=root
Mar 21 05:07:13 localhost sshd\[13404\]: Failed password for root from 41.234.66.22 port 52004 ssh2
Mar 21 05:07:33 localhost sshd\[13406\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.234.66.22  user=root
Mar 21 05:07:35 localhost sshd\[13406\]: Failed password for root from 41.234.66.22 port 43299 ssh2
Mar 21 05:08:01 localhost sshd\[13408\]: Invalid user user from 41.234.66.22
...

Invalid user test from 41.234.66.22 port 35552

Unauthorized connection attempt detected from IP address 41.234.66.22 to port 22

Mar 17 19:47:47 debian-2gb-nbg1-2 kernel: \[6729981.656447\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=41.234.66.22 DST=195.201.40.59 LEN=48 TOS=0x00 PREC=0x00 TTL=114 ID=19908 PROTO=TCP SPT=54331 DPT=22 WINDOW=65535 RES=0x00 SYN URGP=0

Mar 17 13:39:49 h1745522 sshd[13571]: Invalid user test from 41.234.66.22 port 54197
Mar 17 13:39:49 h1745522 sshd[13571]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.234.66.22
Mar 17 13:39:49 h1745522 sshd[13571]: Invalid user test from 41.234.66.22 port 54197
Mar 17 13:39:50 h1745522 sshd[13571]: Failed password for invalid user test from 41.234.66.22 port 54197 ssh2
Mar 17 13:40:15 h1745522 sshd[13591]: Invalid user user from 41.234.66.22 port 53367
Mar 17 13:40:15 h1745522 sshd[13591]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.234.66.22
Mar 17 13:40:15 h1745522 sshd[13591]: Invalid user user from 41.234.66.22 port 53367
Mar 17 13:40:18 h1745522 sshd[13591]: Failed password for invalid user user from 41.234.66.22 port 53367 ssh2
Mar 17 13:41:42 h1745522 sshd[13649]: Invalid user guest from 41.234.66.22 port 51713
...

Unauthorized connection attempt detected from IP address 41.234.66.22 to port 22

Mar 11 06:51:15 server sshd\[7317\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.234.66.22  user=root
Mar 11 06:51:17 server sshd\[7317\]: Failed password for root from 41.234.66.22 port 54342 ssh2
Mar 11 06:51:22 server sshd\[7337\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.234.66.22  user=root
Mar 11 06:51:24 server sshd\[7337\]: Failed password for root from 41.234.66.22 port 49004 ssh2
Mar 11 06:51:32 server sshd\[7357\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.234.66.22  user=root
...

Mar  9 17:58:01 ks10 sshd[1289213]: Failed password for root from 41.234.66.22 port 33351 ssh2
...

Mar  8 20:43:51 MK-Soft-Root2 sshd[22469]: Failed password for root from 41.234.66.22 port 47806 ssh2
...

2020-03-07T16:24:01.278569hessvillage.com sshd\[2202\]: Invalid user elastic from 41.234.66.22
2020-03-07T16:24:24.342027hessvillage.com sshd\[2210\]: Invalid user ansible from 41.234.66.22
2020-03-07T16:24:42.880397hessvillage.com sshd\[2214\]: Invalid user odoo from 41.234.66.22
2020-03-07T16:24:54.124511hessvillage.com sshd\[2216\]: Invalid user test from 41.234.66.22
2020-03-07T16:25:06.845532hessvillage.com sshd\[2220\]: Invalid user ubuntu from 41.234.66.22
...

$f2bV_matches

Mar  5 13:15:00 XXX sshd[56986]: Invalid user test from 41.234.66.22 port 55847

Mar  4 16:20:53 server2 sshd\[15953\]: User root from 41.234.66.22 not allowed because not listed in AllowUsers
Mar  4 16:20:59 server2 sshd\[15957\]: User root from 41.234.66.22 not allowed because not listed in AllowUsers
Mar  4 16:21:05 server2 sshd\[15981\]: Invalid user ubuntu from 41.234.66.22
Mar  4 16:21:13 server2 sshd\[15984\]: Invalid user git from 41.234.66.22
Mar  4 16:21:21 server2 sshd\[15987\]: Invalid user odoo from 41.234.66.22
Mar  4 16:21:28 server2 sshd\[15991\]: User root from 41.234.66.22 not allowed because not listed in AllowUsers

Mar  3 23:19:19 XXX sshd[31084]: Invalid user ubuntu from 41.234.66.22 port 34369

Mar  3 18:57:03 localhost sshd\[27787\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.234.66.22  user=root
Mar  3 18:57:05 localhost sshd\[27791\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.234.66.22  user=root
Mar  3 18:57:06 localhost sshd\[27787\]: Failed password for root from 41.234.66.22 port 49685 ssh2
Mar  3 18:57:07 localhost sshd\[27791\]: Failed password for root from 41.234.66.22 port 33250 ssh2
Mar  3 18:57:08 localhost sshd\[27793\]: Invalid user ubuntu from 41.234.66.22
...

Mar  2 23:07:09 deb10 sshd[29910]: User root from 41.234.66.22 not allowed because not listed in AllowUsers
Mar  2 23:07:13 deb10 sshd[29925]: User root from 41.234.66.22 not allowed because not listed in AllowUsers

Jul 17 06:09:08 Host-KLAX-C dovecot: imap-login: Disconnected (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=61.157.198.170, lip=185.198.26.142, TLS, session=
...

Jul 17 19:56:34 vps333114 sshd[30154]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.93.160.82
Jul 17 19:56:36 vps333114 sshd[30154]: Failed password for invalid user fangce from 124.93.160.82 port 59329 ssh2
...

07/17/2020-15:24:41.117334 106.13.215.207 Protocol: 6 ET SCAN Potential SSH Scan

Automatic report - Port Scan Attack

Jul 17 20:06:10 vmd17057 sshd[6780]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.220.103.6 
Jul 17 20:06:12 vmd17057 sshd[6780]: Failed password for invalid user admin from 185.220.103.6 port 49044 ssh2
...

This client attempted to login to an administrator account on a Website, or abused from another resource.

Jul 17 06:29:19 pixelmemory sshd[2410547]: Invalid user bi from 54.37.153.80 port 56160
Jul 17 06:29:19 pixelmemory sshd[2410547]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.153.80 
Jul 17 06:29:19 pixelmemory sshd[2410547]: Invalid user bi from 54.37.153.80 port 56160
Jul 17 06:29:20 pixelmemory sshd[2410547]: Failed password for invalid user bi from 54.37.153.80 port 56160 ssh2
Jul 17 06:30:42 pixelmemory sshd[2412136]: Invalid user kristofer from 54.37.153.80 port 48620
...

Unauthorized connection attempt from IP address 216.218.206.111 on Port 445(SMB)

1594987729 - 07/17/2020 14:08:49 Host: 109.184.93.23/109.184.93.23 Port: 445 TCP Blocked

Jul 17 21:07:53 Ubuntu-1404-trusty-64-minimal sshd\[23609\]: Invalid user zz from 150.136.220.58
Jul 17 21:07:53 Ubuntu-1404-trusty-64-minimal sshd\[23609\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.136.220.58
Jul 17 21:07:55 Ubuntu-1404-trusty-64-minimal sshd\[23609\]: Failed password for invalid user zz from 150.136.220.58 port 50308 ssh2
Jul 17 21:19:18 Ubuntu-1404-trusty-64-minimal sshd\[30623\]: Invalid user wowza from 150.136.220.58
Jul 17 21:19:18 Ubuntu-1404-trusty-64-minimal sshd\[30623\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.136.220.58

SMB Server BruteForce Attack

2020-07-17T20:07:59.307154vps773228.ovh.net sshd[28121]: Invalid user ogpbot from 37.200.70.25 port 47656
2020-07-17T20:07:59.329115vps773228.ovh.net sshd[28121]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.200.70.25
2020-07-17T20:07:59.307154vps773228.ovh.net sshd[28121]: Invalid user ogpbot from 37.200.70.25 port 47656
2020-07-17T20:08:01.250247vps773228.ovh.net sshd[28121]: Failed password for invalid user ogpbot from 37.200.70.25 port 47656 ssh2
2020-07-17T20:12:03.023213vps773228.ovh.net sshd[28130]: Invalid user xuyz from 37.200.70.25 port 61849
...

Jul 17 14:17:19 *hidden* sshd[64940]: Invalid user admin from 188.226.192.115 port 36666 Jul 17 14:17:19 *hidden* sshd[64940]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.226.192.115 Jul 17 14:17:19 *hidden* sshd[64940]: Invalid user admin from 188.226.192.115 port 36666 Jul 17 14:17:19 *hidden* sshd[64940]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.226.192.115 Jul 17 14:17:19 *hidden* sshd[64940]: Invalid user admin from 188.226.192.115 port 36666 Jul 17 14:17:19 *hidden* sshd[64940]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.226.192.115 Jul 17 14:17:21 *hidden* sshd[64940]: Failed password for invalid user admin from 188.226.192.115 port 36666 ssh2

Jul 17 12:32:05 server1 sshd\[24331\]: Invalid user dt from 139.186.8.212
Jul 17 12:32:05 server1 sshd\[24331\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.186.8.212 
Jul 17 12:32:07 server1 sshd\[24331\]: Failed password for invalid user dt from 139.186.8.212 port 51012 ssh2
Jul 17 12:35:33 server1 sshd\[25289\]: Invalid user tnc from 139.186.8.212
Jul 17 12:35:33 server1 sshd\[25289\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.186.8.212 
...

2020-07-17T17:58:14.637643abusebot-8.cloudsearch.cf sshd[1353]: Invalid user ftpadmin from 159.65.158.30 port 33684
2020-07-17T17:58:14.643839abusebot-8.cloudsearch.cf sshd[1353]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.158.30
2020-07-17T17:58:14.637643abusebot-8.cloudsearch.cf sshd[1353]: Invalid user ftpadmin from 159.65.158.30 port 33684
2020-07-17T17:58:16.589744abusebot-8.cloudsearch.cf sshd[1353]: Failed password for invalid user ftpadmin from 159.65.158.30 port 33684 ssh2
2020-07-17T18:06:21.946132abusebot-8.cloudsearch.cf sshd[1378]: Invalid user baba from 159.65.158.30 port 58668
2020-07-17T18:06:21.951799abusebot-8.cloudsearch.cf sshd[1378]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.158.30
2020-07-17T18:06:21.946132abusebot-8.cloudsearch.cf sshd[1378]: Invalid user baba from 159.65.158.30 port 58668
2020-07-17T18:06:23.752382abusebot-8.cloudsearch.cf sshd[1378]: Failed 
...