Dec 18 13:45:15 ns381471 sshd[31414]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.36.183.242
Dec 18 13:45:17 ns381471 sshd[31414]: Failed password for invalid user test from 54.36.183.242 port 50690 ssh2

Dec 16 22:50:02 hcbbdb sshd\[11076\]: Invalid user lunny from 54.36.183.242
Dec 16 22:50:02 hcbbdb sshd\[11076\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=242.ip-54-36-183.eu
Dec 16 22:50:03 hcbbdb sshd\[11076\]: Failed password for invalid user lunny from 54.36.183.242 port 39922 ssh2
Dec 16 22:55:17 hcbbdb sshd\[11799\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=242.ip-54-36-183.eu  user=root
Dec 16 22:55:19 hcbbdb sshd\[11799\]: Failed password for root from 54.36.183.242 port 53256 ssh2

Dec 16 17:10:08 rotator sshd\[20507\]: Invalid user password123 from 54.36.183.242Dec 16 17:10:10 rotator sshd\[20507\]: Failed password for invalid user password123 from 54.36.183.242 port 41766 ssh2Dec 16 17:14:56 rotator sshd\[21177\]: Invalid user burste from 54.36.183.242Dec 16 17:14:58 rotator sshd\[21177\]: Failed password for invalid user burste from 54.36.183.242 port 51688 ssh2Dec 16 17:19:58 rotator sshd\[21997\]: Invalid user eliska from 54.36.183.242Dec 16 17:20:00 rotator sshd\[21997\]: Failed password for invalid user eliska from 54.36.183.242 port 38084 ssh2
...

Dec 10 20:56:53 124388 sshd[546]: Invalid user rmiller from 54.36.183.242 port 38880
Dec 10 20:56:53 124388 sshd[546]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.36.183.242
Dec 10 20:56:53 124388 sshd[546]: Invalid user rmiller from 54.36.183.242 port 38880
Dec 10 20:56:55 124388 sshd[546]: Failed password for invalid user rmiller from 54.36.183.242 port 38880 ssh2
Dec 10 21:01:45 124388 sshd[646]: Invalid user webadmin from 54.36.183.242 port 57274

Invalid user navigon from 54.36.183.242 port 45568
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.36.183.242
Failed password for invalid user navigon from 54.36.183.242 port 45568 ssh2
Invalid user takeda from 54.36.183.242 port 38156
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.36.183.242

"GET /test/license.txt HTTP/1.1" 404 3439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"

Unauthorized connection attempt detected from IP address 54.36.183.33 to port 22

Feb 12 23:23:26 web1 sshd\[16855\]: Invalid user 12345 from 54.36.183.33
Feb 12 23:23:26 web1 sshd\[16855\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.36.183.33
Feb 12 23:23:29 web1 sshd\[16855\]: Failed password for invalid user 12345 from 54.36.183.33 port 40436 ssh2
Feb 12 23:25:59 web1 sshd\[17092\]: Invalid user cdcrawford from 54.36.183.33
Feb 12 23:25:59 web1 sshd\[17092\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.36.183.33

Feb  9 01:48:10 firewall sshd[28679]: Invalid user uqf from 54.36.183.33
Feb  9 01:48:12 firewall sshd[28679]: Failed password for invalid user uqf from 54.36.183.33 port 36782 ssh2
Feb  9 01:50:55 firewall sshd[28796]: Invalid user mtk from 54.36.183.33
...

3x Failed Password

SSH login attempts with user root at 2020-01-02.

2020-01-02T06:58:52.119082shield sshd\[30839\]: Invalid user maffiaw from 54.36.183.33 port 55486
2020-01-02T06:58:52.124288shield sshd\[30839\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=33.ip-54-36-183.eu
2020-01-02T06:58:54.175592shield sshd\[30839\]: Failed password for invalid user maffiaw from 54.36.183.33 port 55486 ssh2
2020-01-02T07:01:40.578927shield sshd\[31803\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=33.ip-54-36-183.eu  user=root
2020-01-02T07:01:42.027944shield sshd\[31803\]: Failed password for root from 54.36.183.33 port 55640 ssh2

2020-01-02T05:10:34.806924shield sshd\[7146\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=33.ip-54-36-183.eu  user=root
2020-01-02T05:10:37.462128shield sshd\[7146\]: Failed password for root from 54.36.183.33 port 56052 ssh2
2020-01-02T05:13:22.214764shield sshd\[7535\]: Invalid user rootme from 54.36.183.33 port 56110
2020-01-02T05:13:22.219345shield sshd\[7535\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=33.ip-54-36-183.eu
2020-01-02T05:13:25.028424shield sshd\[7535\]: Failed password for invalid user rootme from 54.36.183.33 port 56110 ssh2

Unauthorized connection attempt detected from IP address 54.36.183.33 to port 22

Automatic report - Banned IP Access

SSH Brute-Forcing (server2)

Dec 16 08:36:23 hcbbdb sshd\[3715\]: Invalid user rpc from 54.36.183.33
Dec 16 08:36:23 hcbbdb sshd\[3715\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=33.ip-54-36-183.eu
Dec 16 08:36:25 hcbbdb sshd\[3715\]: Failed password for invalid user rpc from 54.36.183.33 port 50650 ssh2
Dec 16 08:41:19 hcbbdb sshd\[4287\]: Invalid user system from 54.36.183.33
Dec 16 08:41:19 hcbbdb sshd\[4287\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=33.ip-54-36-183.eu

Dec 13 19:31:32 ns3042688 sshd\[4435\]: Invalid user mihm from 54.36.183.33
Dec 13 19:31:34 ns3042688 sshd\[4435\]: Failed password for invalid user mihm from 54.36.183.33 port 50244 ssh2
Dec 13 19:36:28 ns3042688 sshd\[5611\]: Invalid user moltu from 54.36.183.33
Dec 13 19:36:30 ns3042688 sshd\[5611\]: Failed password for invalid user moltu from 54.36.183.33 port 59034 ssh2
Dec 13 19:41:23 ns3042688 sshd\[6812\]: Invalid user suleiman from 54.36.183.33
...

Dec  9 01:59:56 loxhost sshd\[19944\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.36.183.33  user=root
Dec  9 01:59:59 loxhost sshd\[19944\]: Failed password for root from 54.36.183.33 port 56978 ssh2
Dec  9 02:05:08 loxhost sshd\[20190\]: Invalid user lisa from 54.36.183.33 port 38060
Dec  9 02:05:08 loxhost sshd\[20190\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.36.183.33
Dec  9 02:05:10 loxhost sshd\[20190\]: Failed password for invalid user lisa from 54.36.183.33 port 38060 ssh2
...

Dec  4 11:09:37 wbs sshd\[17113\]: Invalid user canary from 54.36.183.33
Dec  4 11:09:37 wbs sshd\[17113\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=33.ip-54-36-183.eu
Dec  4 11:09:39 wbs sshd\[17113\]: Failed password for invalid user canary from 54.36.183.33 port 47928 ssh2
Dec  4 11:15:53 wbs sshd\[17678\]: Invalid user guest from 54.36.183.33
Dec  4 11:15:53 wbs sshd\[17678\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=33.ip-54-36-183.eu

Fail2Ban Ban Triggered

2019-12-18T05:11:35.238546abusebot-6.cloudsearch.cf sshd\[13273\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.157  user=root
2019-12-18T05:11:36.700130abusebot-6.cloudsearch.cf sshd\[13273\]: Failed password for root from 218.92.0.157 port 27586 ssh2
2019-12-18T05:11:40.338324abusebot-6.cloudsearch.cf sshd\[13273\]: Failed password for root from 218.92.0.157 port 27586 ssh2
2019-12-18T05:11:43.189239abusebot-6.cloudsearch.cf sshd\[13273\]: Failed password for root from 218.92.0.157 port 27586 ssh2

Dec 18 07:58:36 hosting sshd[10393]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.231.0.89  user=dovecot
Dec 18 07:58:39 hosting sshd[10393]: Failed password for dovecot from 195.231.0.89 port 52600 ssh2
...

Invalid user asudy from 61.218.32.119 port 60702

Dec 17 23:11:22 ws12vmsma01 sshd[40424]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.112.93 
Dec 17 23:11:22 ws12vmsma01 sshd[40424]: Invalid user ferrieux from 159.65.112.93
Dec 17 23:11:25 ws12vmsma01 sshd[40424]: Failed password for invalid user ferrieux from 159.65.112.93 port 39144 ssh2
...

Dec 18 07:14:22 sauna sshd[15222]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.188.20
Dec 18 07:14:25 sauna sshd[15222]: Failed password for invalid user nobuharu from 122.51.188.20 port 33742 ssh2
...

Dec 17 23:24:26 serwer sshd\[5169\]: Invalid user info from 60.221.255.176 port 2544
Dec 17 23:24:26 serwer sshd\[5169\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.221.255.176
Dec 17 23:24:29 serwer sshd\[5169\]: Failed password for invalid user info from 60.221.255.176 port 2544 ssh2
...

MLV GET /wp-login.php

Dec 18 05:48:57 MainVPS sshd[22313]: Invalid user linoel from 103.253.107.43 port 52462
Dec 18 05:48:57 MainVPS sshd[22313]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.253.107.43
Dec 18 05:48:57 MainVPS sshd[22313]: Invalid user linoel from 103.253.107.43 port 52462
Dec 18 05:48:59 MainVPS sshd[22313]: Failed password for invalid user linoel from 103.253.107.43 port 52462 ssh2
Dec 18 05:58:33 MainVPS sshd[7508]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.253.107.43  user=mysql
Dec 18 05:58:36 MainVPS sshd[7508]: Failed password for mysql from 103.253.107.43 port 59220 ssh2
...

Dec 17 19:09:06 php1 sshd\[1594\]: Invalid user repich from 212.47.238.207
Dec 17 19:09:06 php1 sshd\[1594\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=207-238-47-212.rev.cloud.scaleway.com
Dec 17 19:09:08 php1 sshd\[1594\]: Failed password for invalid user repich from 212.47.238.207 port 42484 ssh2
Dec 17 19:14:27 php1 sshd\[2347\]: Invalid user valentia from 212.47.238.207
Dec 17 19:14:27 php1 sshd\[2347\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=207-238-47-212.rev.cloud.scaleway.com

Automatic report - XMLRPC Attack

Dec 18 04:52:07 hcbbdb sshd\[30538\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.90.198.213  user=root
Dec 18 04:52:09 hcbbdb sshd\[30538\]: Failed password for root from 202.90.198.213 port 42104 ssh2
Dec 18 04:58:46 hcbbdb sshd\[31346\]: Invalid user bookmarks from 202.90.198.213
Dec 18 04:58:46 hcbbdb sshd\[31346\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.90.198.213
Dec 18 04:58:49 hcbbdb sshd\[31346\]: Failed password for invalid user bookmarks from 202.90.198.213 port 49294 ssh2

Automatic report - XMLRPC Attack

firewall-block, port(s): 1433/tcp

1576645136 - 12/18/2019 05:58:56 Host: 101.109.195.31/101.109.195.31 Port: 445 TCP Blocked