Jul 29 06:54:31 TORMINT sshd\[30594\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.136.60  user=root
Jul 29 06:54:33 TORMINT sshd\[30594\]: Failed password for root from 54.37.136.60 port 56628 ssh2
Jul 29 06:58:48 TORMINT sshd\[30829\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.136.60  user=root
...

Jul 28 01:07:51 shared06 sshd[25137]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.136.60  user=r.r
Jul 28 01:07:53 shared06 sshd[25137]: Failed password for r.r from 54.37.136.60 port 56498 ssh2
Jul 28 01:07:53 shared06 sshd[25137]: Received disconnect from 54.37.136.60 port 56498:11: Bye Bye [preauth]
Jul 28 01:07:53 shared06 sshd[25137]: Disconnected from 54.37.136.60 port 56498 [preauth]
Jul 28 01:22:53 shared06 sshd[28332]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.136.60  user=r.r
Jul 28 01:22:55 shared06 sshd[28332]: Failed password for r.r from 54.37.136.60 port 38726 ssh2
Jul 28 01:22:55 shared06 sshd[28332]: Received disconnect from 54.37.136.60 port 38726:11: Bye Bye [preauth]
Jul 28 01:22:55 shared06 sshd[28332]: Disconnected from 54.37.136.60 port 38726 [preauth]
Jul 28 01:27:20 shared06 sshd[29084]: pam_unix(sshd:auth): authentication failure; logname= uid=........
-------------------------------

<6 unauthorized SSH connections

Sep  9 07:42:50 hosting sshd[30458]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=87.ip-54-37-136.eu  user=root
Sep  9 07:42:52 hosting sshd[30458]: Failed password for root from 54.37.136.87 port 42562 ssh2
...

54.37.136.87 (PL/Poland/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep  8 15:39:00 idl1-dfw sshd[2265938]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.136.87  user=root
Sep  8 15:39:01 idl1-dfw sshd[2265938]: Failed password for root from 54.37.136.87 port 34580 ssh2
Sep  8 15:37:59 idl1-dfw sshd[2263724]: Failed password for root from 49.235.231.54 port 32836 ssh2
Sep  8 15:38:39 idl1-dfw sshd[2264361]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.163.6  user=root
Sep  8 15:39:13 idl1-dfw sshd[2266037]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.101.202  user=root
Sep  8 15:38:41 idl1-dfw sshd[2264361]: Failed password for root from 157.230.163.6 port 41190 ssh2

IP Addresses Blocked:

Invalid user vanessa from 54.37.136.87 port 48274

Sep  2 22:04:36 php1 sshd\[3426\]: Invalid user melissa from 54.37.136.87
Sep  2 22:04:36 php1 sshd\[3426\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.136.87
Sep  2 22:04:38 php1 sshd\[3426\]: Failed password for invalid user melissa from 54.37.136.87 port 43340 ssh2
Sep  2 22:04:49 php1 sshd\[3446\]: Invalid user test from 54.37.136.87
Sep  2 22:04:49 php1 sshd\[3446\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.136.87

Banned for a week because repeated abuses, for example SSH, but not only

2020-08-08T11:48:43.392263vps773228.ovh.net sshd[32114]: Failed password for root from 54.37.136.87 port 43860 ssh2
2020-08-08T11:52:36.576328vps773228.ovh.net sshd[32158]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=87.ip-54-37-136.eu  user=root
2020-08-08T11:52:38.794505vps773228.ovh.net sshd[32158]: Failed password for root from 54.37.136.87 port 54230 ssh2
2020-08-08T11:56:38.816917vps773228.ovh.net sshd[32210]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=87.ip-54-37-136.eu  user=root
2020-08-08T11:56:40.923943vps773228.ovh.net sshd[32210]: Failed password for root from 54.37.136.87 port 36386 ssh2
...

(sshd) Failed SSH login from 54.37.136.87 (FR/France/87.ip-54-37-136.eu): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jul 30 10:36:08 amsweb01 sshd[10790]: Invalid user logstash from 54.37.136.87 port 42646
Jul 30 10:36:10 amsweb01 sshd[10790]: Failed password for invalid user logstash from 54.37.136.87 port 42646 ssh2
Jul 30 10:43:26 amsweb01 sshd[11916]: Invalid user guozhourui from 54.37.136.87 port 33170
Jul 30 10:43:28 amsweb01 sshd[11916]: Failed password for invalid user guozhourui from 54.37.136.87 port 33170 ssh2
Jul 30 10:47:15 amsweb01 sshd[12471]: Invalid user mikami from 54.37.136.87 port 42936

Jul 20 23:34:38 meumeu sshd[1146669]: Invalid user test from 54.37.136.87 port 58406
Jul 20 23:34:38 meumeu sshd[1146669]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.136.87 
Jul 20 23:34:38 meumeu sshd[1146669]: Invalid user test from 54.37.136.87 port 58406
Jul 20 23:34:40 meumeu sshd[1146669]: Failed password for invalid user test from 54.37.136.87 port 58406 ssh2
Jul 20 23:38:45 meumeu sshd[1146837]: Invalid user harold from 54.37.136.87 port 43128
Jul 20 23:38:45 meumeu sshd[1146837]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.136.87 
Jul 20 23:38:45 meumeu sshd[1146837]: Invalid user harold from 54.37.136.87 port 43128
Jul 20 23:38:47 meumeu sshd[1146837]: Failed password for invalid user harold from 54.37.136.87 port 43128 ssh2
Jul 20 23:42:35 meumeu sshd[1147056]: Invalid user barbary from 54.37.136.87 port 56082
...

Jul 13 04:14:13 XXX sshd[1523]: Invalid user sftpuser from 54.37.136.87 port 53136

Cluster member 67.227.229.95 (US/United States/host.cjthedj97.me) said, DENY 54.37.136.213, Reason:[(sshd) Failed SSH login from 54.37.136.213 (FR/France/mail.devrows.com): 1 in the last 3600 secs]; Ports: *; Direction: inout; Trigger: LF_CLUSTER

2020-07-11T05:12:00.010383shield sshd\[16443\]: Invalid user monitoring from 54.37.136.213 port 39412
2020-07-11T05:12:00.022715shield sshd\[16443\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.136.213
2020-07-11T05:12:02.248651shield sshd\[16443\]: Failed password for invalid user monitoring from 54.37.136.213 port 39412 ssh2
2020-07-11T05:15:01.345330shield sshd\[17338\]: Invalid user trips from 54.37.136.213 port 35062
2020-07-11T05:15:01.356913shield sshd\[17338\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.136.213

2020-07-11T00:53:48.8459291240 sshd\[29271\]: Invalid user noel from 54.37.136.87 port 41106
2020-07-11T00:53:48.8502771240 sshd\[29271\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.136.87
2020-07-11T00:53:50.5268491240 sshd\[29271\]: Failed password for invalid user noel from 54.37.136.87 port 41106 ssh2
...

frenzy

Jul  8 05:28:42 onepixel sshd[250647]: Invalid user sloane from 54.37.136.87 port 48120
Jul  8 05:28:42 onepixel sshd[250647]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.136.87 
Jul  8 05:28:42 onepixel sshd[250647]: Invalid user sloane from 54.37.136.87 port 48120
Jul  8 05:28:45 onepixel sshd[250647]: Failed password for invalid user sloane from 54.37.136.87 port 48120 ssh2
Jul  8 05:32:11 onepixel sshd[252306]: Invalid user aris from 54.37.136.87 port 45868

Jul 20 00:58:48 mail sshd\[26511\]: Invalid user administrator from 36.91.55.58 port 38110
Jul 20 00:58:48 mail sshd\[26511\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.91.55.58
Jul 20 00:58:50 mail sshd\[26511\]: Failed password for invalid user administrator from 36.91.55.58 port 38110 ssh2
Jul 20 01:04:27 mail sshd\[27792\]: Invalid user ti from 36.91.55.58 port 57690
Jul 20 01:04:27 mail sshd\[27792\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.91.55.58

ZTE Router Exploit Scanner

TCP port 445 (SMB) attempt blocked by firewall. [2019-07-19 18:35:51]

DATE:2019-07-19 18:36:53, IP:121.121.78.67, PORT:telnet - Telnet brute force auth on a honeypot server (epe-dc)

Jul 19 18:45:25 vps200512 sshd\[10018\]: Invalid user amministratore from 210.245.2.226
Jul 19 18:45:25 vps200512 sshd\[10018\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.245.2.226
Jul 19 18:45:28 vps200512 sshd\[10018\]: Failed password for invalid user amministratore from 210.245.2.226 port 47290 ssh2
Jul 19 18:50:28 vps200512 sshd\[10127\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.245.2.226  user=root
Jul 19 18:50:30 vps200512 sshd\[10127\]: Failed password for root from 210.245.2.226 port 40336 ssh2

(From edingram151@gmail.com) Hello!

I'm freelance search engine optimization specialist currently looking for new clients who need SEO services but are on a budget. I was just looking at your site and wanted to let you know that I can get you more site visits, which eventually leads to getting more profit. I've helped dozens of other websites owned by small businesses and I can show you case studies for what it's done for their business. You'll be surprised of how much it boosted their profits.

Please reply to let me know if you're interested in my services so we can schedule a free consultation. All of the info I'll hand over can be useful whether or not you choose to avail of my services. I hope to speak with you soon.

Best regards,
Ed Ingram

Automatic report - Banned IP Access

Jul 20 01:03:59 v22018076622670303 sshd\[4849\]: Invalid user www from 59.3.71.222 port 47354
Jul 20 01:03:59 v22018076622670303 sshd\[4849\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.3.71.222
Jul 20 01:04:02 v22018076622670303 sshd\[4849\]: Failed password for invalid user www from 59.3.71.222 port 47354 ssh2
...

19.07.2019 19:04:39 SSH access blocked by firewall

Jul 20 01:25:26 SilenceServices sshd[10696]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.51.113
Jul 20 01:25:28 SilenceServices sshd[10696]: Failed password for invalid user benutzer from 51.38.51.113 port 55914 ssh2
Jul 20 01:29:40 SilenceServices sshd[13611]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.51.113

pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.10.115  user=root
Failed password for root from 139.59.10.115 port 50594 ssh2
Invalid user mick from 139.59.10.115 port 49761
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.10.115
Failed password for invalid user mick from 139.59.10.115 port 49761 ssh2

3 failed attempts at connecting to SSH.

C1,WP GET /manga/wp-login.php

Invalid user cecile from 218.25.89.90 port 44692

Jul 19 21:24:15 hermescis postfix/smtpd\[2374\]: NOQUEUE: reject: RCPT from ip63.ip-144-217-130.net\[144.217.130.63\]: 550 5.1.1 \: Recipient address rejected: lewforsheriff.com\; from=\ to=\ proto=ESMTP helo=\