Dec 23 07:39:00 marvibiene sshd[5060]: Invalid user schlagenhof from 62.218.84.53 port 48718
Dec 23 07:39:00 marvibiene sshd[5060]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.218.84.53
Dec 23 07:39:00 marvibiene sshd[5060]: Invalid user schlagenhof from 62.218.84.53 port 48718
Dec 23 07:39:02 marvibiene sshd[5060]: Failed password for invalid user schlagenhof from 62.218.84.53 port 48718 ssh2
...

Dec 21 12:16:44 TORMINT sshd\[1573\]: Invalid user brook from 62.218.84.53
Dec 21 12:16:44 TORMINT sshd\[1573\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.218.84.53
Dec 21 12:16:46 TORMINT sshd\[1573\]: Failed password for invalid user brook from 62.218.84.53 port 33674 ssh2
...

Dec 20 18:38:20 hcbbdb sshd\[4670\]: Invalid user home from 62.218.84.53
Dec 20 18:38:20 hcbbdb sshd\[4670\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=simmu4-84-53.utaonline.at
Dec 20 18:38:22 hcbbdb sshd\[4670\]: Failed password for invalid user home from 62.218.84.53 port 46405 ssh2
Dec 20 18:44:18 hcbbdb sshd\[5314\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=simmu4-84-53.utaonline.at  user=root
Dec 20 18:44:19 hcbbdb sshd\[5314\]: Failed password for root from 62.218.84.53 port 22138 ssh2

Dec 14 14:37:55 localhost sshd\[68109\]: Invalid user scudiero from 62.218.84.53 port 31992
Dec 14 14:37:55 localhost sshd\[68109\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.218.84.53
Dec 14 14:37:57 localhost sshd\[68109\]: Failed password for invalid user scudiero from 62.218.84.53 port 31992 ssh2
Dec 14 14:44:03 localhost sshd\[68349\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.218.84.53  user=root
Dec 14 14:44:05 localhost sshd\[68349\]: Failed password for root from 62.218.84.53 port 13443 ssh2
...

Dec 14 08:00:36 zeus sshd[17900]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.218.84.53 
Dec 14 08:00:38 zeus sshd[17900]: Failed password for invalid user mgmt from 62.218.84.53 port 52645 ssh2
Dec 14 08:06:23 zeus sshd[18102]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.218.84.53 
Dec 14 08:06:24 zeus sshd[18102]: Failed password for invalid user paulette from 62.218.84.53 port 33348 ssh2

Nov  8 20:37:33 woltan sshd[6470]: Failed password for root from 62.218.84.53 port 37749 ssh2

Oct 30 13:38:12 vserver sshd\[18493\]: Failed password for root from 62.218.84.53 port 44183 ssh2Oct 30 13:43:43 vserver sshd\[18550\]: Invalid user earthdrilling from 62.218.84.53Oct 30 13:43:45 vserver sshd\[18550\]: Failed password for invalid user earthdrilling from 62.218.84.53 port 14360 ssh2Oct 30 13:47:24 vserver sshd\[18569\]: Failed password for root from 62.218.84.53 port 34033 ssh2
...

2019-10-17T04:05:23.164108ns525875 sshd\[5883\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=simmu4-84-53.utaonline.at  user=root
2019-10-17T04:05:25.200965ns525875 sshd\[5883\]: Failed password for root from 62.218.84.53 port 46626 ssh2
2019-10-17T04:09:02.217954ns525875 sshd\[10340\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=simmu4-84-53.utaonline.at  user=root
2019-10-17T04:09:04.320515ns525875 sshd\[10340\]: Failed password for root from 62.218.84.53 port 10192 ssh2
2019-10-17T04:12:40.546336ns525875 sshd\[14824\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=simmu4-84-53.utaonline.at  user=root
2019-10-17T04:12:42.571350ns525875 sshd\[14824\]: Failed password for root from 62.218.84.53 port 30264 ssh2
2019-10-17T04:16:12.653140ns525875 sshd\[19148\]: Invalid user appuser from 62.218.84.53 port 50324
2019-10-17T04:16:12.659721ns525875 sshd\[
...

2019-09-23T14:38:13.728085suse-nuc sshd[9092]: Invalid user julia from 62.218.84.53 port 41971
...

2019-10-17T04:05:23.164108ns525875 sshd\[5883\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=simmu4-84-53.utaonline.at  user=root
2019-10-17T04:05:25.200965ns525875 sshd\[5883\]: Failed password for root from 62.218.84.53 port 46626 ssh2
2019-10-17T04:09:02.217954ns525875 sshd\[10340\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=simmu4-84-53.utaonline.at  user=root
2019-10-17T04:09:04.320515ns525875 sshd\[10340\]: Failed password for root from 62.218.84.53 port 10192 ssh2
...

2019-10-08T12:09:42.1258531495-001 sshd\[21105\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=simmu4-84-53.utaonline.at  user=root
2019-10-08T12:09:43.9763391495-001 sshd\[21105\]: Failed password for root from 62.218.84.53 port 25791 ssh2
2019-10-08T12:13:23.4336251495-001 sshd\[21356\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=simmu4-84-53.utaonline.at  user=root
2019-10-08T12:13:25.8333551495-001 sshd\[21356\]: Failed password for root from 62.218.84.53 port 45756 ssh2
2019-10-08T12:17:09.0694141495-001 sshd\[21628\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=simmu4-84-53.utaonline.at  user=root
2019-10-08T12:17:11.1627791495-001 sshd\[21628\]: Failed password for root from 62.218.84.53 port 9229 ssh2
...

Sep 22 15:39:44 pkdns2 sshd\[52811\]: Invalid user p@$$w0rd from 62.218.84.53Sep 22 15:39:46 pkdns2 sshd\[52811\]: Failed password for invalid user p@$$w0rd from 62.218.84.53 port 34404 ssh2Sep 22 15:43:37 pkdns2 sshd\[53037\]: Invalid user csgo123456 from 62.218.84.53Sep 22 15:43:39 pkdns2 sshd\[53037\]: Failed password for invalid user csgo123456 from 62.218.84.53 port 55422 ssh2Sep 22 15:47:41 pkdns2 sshd\[53266\]: Invalid user aa123456 from 62.218.84.53Sep 22 15:47:43 pkdns2 sshd\[53266\]: Failed password for invalid user aa123456 from 62.218.84.53 port 19963 ssh2
...

ssh intrusion attempt

Sep 10 08:56:59 php1 sshd\[29116\]: Invalid user minecraft from 62.218.84.53
Sep 10 08:56:59 php1 sshd\[29116\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.218.84.53
Sep 10 08:57:02 php1 sshd\[29116\]: Failed password for invalid user minecraft from 62.218.84.53 port 55926 ssh2
Sep 10 09:02:10 php1 sshd\[29609\]: Invalid user admin from 62.218.84.53
Sep 10 09:02:10 php1 sshd\[29609\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.218.84.53

Sep  8 09:32:58 aat-srv002 sshd[15976]: Failed password for invalid user mc from 62.218.84.53 port 9941 ssh2
Sep  8 09:48:40 aat-srv002 sshd[16577]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.218.84.53
Sep  8 09:48:43 aat-srv002 sshd[16577]: Failed password for invalid user student from 62.218.84.53 port 42082 ssh2
Sep  8 09:52:28 aat-srv002 sshd[16645]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.218.84.53
...

Sep  3 11:08:47 saschabauer sshd[15012]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.218.84.53
Sep  3 11:08:49 saschabauer sshd[15012]: Failed password for invalid user paulo from 62.218.84.53 port 38667 ssh2

Aug 31 08:26:14 plusreed sshd[19732]: Invalid user 1qaz2wsx from 62.218.84.53
...

Aug 26 19:39:10 xtremcommunity sshd\[3718\]: Invalid user transport from 62.218.84.53 port 35023
Aug 26 19:39:10 xtremcommunity sshd\[3718\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.218.84.53
Aug 26 19:39:12 xtremcommunity sshd\[3718\]: Failed password for invalid user transport from 62.218.84.53 port 35023 ssh2
Aug 26 19:43:10 xtremcommunity sshd\[3970\]: Invalid user usuario from 62.218.84.53 port 58043
Aug 26 19:43:10 xtremcommunity sshd\[3970\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.218.84.53
...

Auto Detect Rule!
proto TCP (SYN), 91.229.112.12:52222->gjan.info:21, len 40

Sep  5 01:57:21 srv-ubuntu-dev3 sshd[124961]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.212  user=root
Sep  5 01:57:23 srv-ubuntu-dev3 sshd[124961]: Failed password for root from 218.92.0.212 port 2986 ssh2
Sep  5 01:57:27 srv-ubuntu-dev3 sshd[124961]: Failed password for root from 218.92.0.212 port 2986 ssh2
Sep  5 01:57:21 srv-ubuntu-dev3 sshd[124961]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.212  user=root
Sep  5 01:57:23 srv-ubuntu-dev3 sshd[124961]: Failed password for root from 218.92.0.212 port 2986 ssh2
Sep  5 01:57:27 srv-ubuntu-dev3 sshd[124961]: Failed password for root from 218.92.0.212 port 2986 ssh2
Sep  5 01:57:21 srv-ubuntu-dev3 sshd[124961]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.212  user=root
Sep  5 01:57:23 srv-ubuntu-dev3 sshd[124961]: Failed password for root from 218.92.0.212 port 2986 ssh2
Sep  5
...

ET DROP Dshield Block Listed Source group 1 - port: 56913 proto: tcp cat: Misc Attackbytes: 60

 TCP (SYN) 88.218.17.103:54437 -> port 3396, len 44

Sep  4 22:47:58 buvik sshd[32496]: Invalid user tuxedo from 218.75.110.51
Sep  4 22:47:58 buvik sshd[32496]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.75.110.51
Sep  4 22:48:00 buvik sshd[32496]: Failed password for invalid user tuxedo from 218.75.110.51 port 37476 ssh2
...

SSH Invalid Login

Honeypot attack, port: 445, PTR: PTR record not found

Sep  4 18:49:27 mellenthin postfix/smtpd[32584]: NOQUEUE: reject: RCPT from unknown[41.141.11.236]: 554 5.7.1 Service unavailable; Client host [41.141.11.236] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/41.141.11.236; from= to= proto=ESMTP helo=<[41.141.11.236]>

Automatic report - Port Scan Attack

Scanned 32 times in the last 24 hours on port 22

2020-09-05T01:17[Censored Hostname] sshd[31008]: Failed password for root from 185.220.103.8 port 47658 ssh2
2020-09-05T01:17[Censored Hostname] sshd[31008]: Failed password for root from 185.220.103.8 port 47658 ssh2
2020-09-05T01:17[Censored Hostname] sshd[31008]: Failed password for root from 185.220.103.8 port 47658 ssh2[...]

Fail2Ban Ban Triggered (2)

Brute force attack stopped by firewall

Sep  4 16:49:31 ws26vmsma01 sshd[143453]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.15.3.197
Sep  4 16:49:33 ws26vmsma01 sshd[143453]: Failed password for invalid user spam from 59.15.3.197 port 57770 ssh2
...

Banned for a week because repeated abuses, for example SSH, but not only