2020-10-13T17:26:51.147589abusebot-7.cloudsearch.cf sshd[11969]: Invalid user matthew from 83.110.214.2 port 3718
2020-10-13T17:26:51.153766abusebot-7.cloudsearch.cf sshd[11969]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=bba422150.alshamil.net.ae
2020-10-13T17:26:51.147589abusebot-7.cloudsearch.cf sshd[11969]: Invalid user matthew from 83.110.214.2 port 3718
2020-10-13T17:26:53.535129abusebot-7.cloudsearch.cf sshd[11969]: Failed password for invalid user matthew from 83.110.214.2 port 3718 ssh2
2020-10-13T17:30:57.553155abusebot-7.cloudsearch.cf sshd[11974]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=bba422150.alshamil.net.ae  user=root
2020-10-13T17:30:59.374330abusebot-7.cloudsearch.cf sshd[11974]: Failed password for root from 83.110.214.2 port 28450 ssh2
2020-10-13T17:35:14.688183abusebot-7.cloudsearch.cf sshd[11977]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh 
...

Oct 13 12:34:01 dev0-dcde-rnet sshd[5887]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.110.214.2
Oct 13 12:34:03 dev0-dcde-rnet sshd[5887]: Failed password for invalid user admin from 83.110.214.2 port 52058 ssh2
Oct 13 12:39:03 dev0-dcde-rnet sshd[5982]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.110.214.2

Oct 8 07:55:46 *hidden* sshd[63376]: Failed password for *hidden* from 83.110.214.178 port 12299 ssh2 Oct 8 08:00:00 *hidden* sshd[64912]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.110.214.178 user=root Oct 8 08:00:02 *hidden* sshd[64912]: Failed password for *hidden* from 83.110.214.178 port 15517 ssh2 Oct 8 08:04:15 *hidden* sshd[1123]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.110.214.178 user=root Oct 8 08:04:17 *hidden* sshd[1123]: Failed password for *hidden* from 83.110.214.178 port 13389 ssh2

Oct 8 07:55:46 *hidden* sshd[63376]: Failed password for *hidden* from 83.110.214.178 port 12299 ssh2 Oct 8 08:00:00 *hidden* sshd[64912]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.110.214.178 user=root Oct 8 08:00:02 *hidden* sshd[64912]: Failed password for *hidden* from 83.110.214.178 port 15517 ssh2 Oct 8 08:04:15 *hidden* sshd[1123]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.110.214.178 user=root Oct 8 08:04:17 *hidden* sshd[1123]: Failed password for *hidden* from 83.110.214.178 port 13389 ssh2

Oct 8 07:55:46 *hidden* sshd[63376]: Failed password for *hidden* from 83.110.214.178 port 12299 ssh2 Oct 8 08:00:00 *hidden* sshd[64912]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.110.214.178 user=root Oct 8 08:00:02 *hidden* sshd[64912]: Failed password for *hidden* from 83.110.214.178 port 15517 ssh2 Oct 8 08:04:15 *hidden* sshd[1123]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.110.214.178 user=root Oct 8 08:04:17 *hidden* sshd[1123]: Failed password for *hidden* from 83.110.214.178 port 13389 ssh2

leo_www

2020-09-30 21:16:40 server sshd[64866]: Failed password for invalid user root from 83.110.214.178 port 13620 ssh2

Oct  1 08:53:56 raspberrypi sshd[15323]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.110.214.178 
Oct  1 08:53:58 raspberrypi sshd[15323]: Failed password for invalid user frank from 83.110.214.178 port 61257 ssh2
...

2020-09-30T20:28:39.955016abusebot-6.cloudsearch.cf sshd[32219]: Invalid user quagga from 83.110.214.178 port 7991
2020-09-30T20:28:39.960622abusebot-6.cloudsearch.cf sshd[32219]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=bba422326.alshamil.net.ae
2020-09-30T20:28:39.955016abusebot-6.cloudsearch.cf sshd[32219]: Invalid user quagga from 83.110.214.178 port 7991
2020-09-30T20:28:41.690836abusebot-6.cloudsearch.cf sshd[32219]: Failed password for invalid user quagga from 83.110.214.178 port 7991 ssh2
2020-09-30T20:33:17.799425abusebot-6.cloudsearch.cf sshd[32378]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=bba422326.alshamil.net.ae  user=root
2020-09-30T20:33:19.360342abusebot-6.cloudsearch.cf sshd[32378]: Failed password for root from 83.110.214.178 port 22211 ssh2
2020-09-30T20:37:53.554953abusebot-6.cloudsearch.cf sshd[32440]: Invalid user admin from 83.110.214.178 port 65295
...

(sshd) Failed SSH login from 83.110.214.178 (AE/United Arab Emirates/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 30 08:59:47 server2 sshd[31759]: Invalid user carlos from 83.110.214.178
Sep 30 08:59:49 server2 sshd[31759]: Failed password for invalid user carlos from 83.110.214.178 port 8549 ssh2
Sep 30 09:04:59 server2 sshd[3471]: Invalid user clouduser from 83.110.214.178
Sep 30 09:05:01 server2 sshd[3471]: Failed password for invalid user clouduser from 83.110.214.178 port 34576 ssh2
Sep 30 09:09:25 server2 sshd[8870]: Invalid user mzd from 83.110.214.178

Sep 30 06:29:14 marvibiene sshd[9928]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.110.214.178 
Sep 30 06:29:16 marvibiene sshd[9928]: Failed password for invalid user system from 83.110.214.178 port 17391 ssh2

$f2bV_matches

2020-08-03T03:48:44.917760shield sshd\[26872\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=bba422365.alshamil.net.ae  user=root
2020-08-03T03:48:46.563135shield sshd\[26872\]: Failed password for root from 83.110.214.217 port 52174 ssh2
2020-08-03T03:53:09.430703shield sshd\[27496\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=bba422365.alshamil.net.ae  user=root
2020-08-03T03:53:11.458500shield sshd\[27496\]: Failed password for root from 83.110.214.217 port 37140 ssh2
2020-08-03T03:57:38.279359shield sshd\[28133\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=bba422365.alshamil.net.ae  user=root

Invalid user ftp from 83.110.214.217 port 58006

$f2bV_matches

Jul 27 17:13:48 ws24vmsma01 sshd[147763]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.110.214.217
Jul 27 17:13:50 ws24vmsma01 sshd[147763]: Failed password for invalid user zhusengbin from 83.110.214.217 port 42780 ssh2
...

Invalid user work from 83.110.214.217 port 40776

TCP Port Scanning

Invalid user germany from 1.203.115.141 port 50341
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.203.115.141
Failed password for invalid user germany from 1.203.115.141 port 50341 ssh2
Invalid user hxc from 1.203.115.141 port 50455
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.203.115.141

2019-12-02T01:52:10.845942-07:00 suse-nuc sshd[7075]: Invalid user alfresco from 106.75.72.100 port 47210
...

Dec  2 02:28:25 eddieflores sshd\[24036\]: Invalid user tennstrand from 212.47.238.207
Dec  2 02:28:25 eddieflores sshd\[24036\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=207-238-47-212.rev.cloud.scaleway.com
Dec  2 02:28:27 eddieflores sshd\[24036\]: Failed password for invalid user tennstrand from 212.47.238.207 port 37620 ssh2
Dec  2 02:33:58 eddieflores sshd\[24510\]: Invalid user oskarsen from 212.47.238.207
Dec  2 02:33:58 eddieflores sshd\[24510\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=207-238-47-212.rev.cloud.scaleway.com

Automatic report - XMLRPC Attack

Dec  2 12:57:44 game-panel sshd[6289]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.86.34.52
Dec  2 12:57:46 game-panel sshd[6289]: Failed password for invalid user operator from 41.86.34.52 port 49536 ssh2
Dec  2 13:06:43 game-panel sshd[6702]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.86.34.52

Dec  2 12:01:09 fr01 sshd[12994]: Invalid user teamspeak from 103.233.153.146
Dec  2 12:01:09 fr01 sshd[12994]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.233.153.146
Dec  2 12:01:09 fr01 sshd[12994]: Invalid user teamspeak from 103.233.153.146
Dec  2 12:01:11 fr01 sshd[12994]: Failed password for invalid user teamspeak from 103.233.153.146 port 39346 ssh2
...

Lines containing failures of 103.243.110.230
Dec  2 04:18:58 jarvis sshd[16315]: Invalid user hemstad from 103.243.110.230 port 34284
Dec  2 04:18:58 jarvis sshd[16315]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.243.110.230 
Dec  2 04:19:00 jarvis sshd[16315]: Failed password for invalid user hemstad from 103.243.110.230 port 34284 ssh2
Dec  2 04:19:01 jarvis sshd[16315]: Received disconnect from 103.243.110.230 port 34284:11: Bye Bye [preauth]
Dec  2 04:19:01 jarvis sshd[16315]: Disconnected from invalid user hemstad 103.243.110.230 port 34284 [preauth]
Dec  2 04:26:55 jarvis sshd[17905]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.243.110.230  user=news
Dec  2 04:26:57 jarvis sshd[17905]: Failed password for news from 103.243.110.230 port 56962 ssh2
Dec  2 04:26:58 jarvis sshd[17905]: Received disconnect from 103.243.110.230 port 56962:11: Bye Bye [preauth]
Dec  2 04:26:58........
------------------------------

Dec  2 13:27:11 meumeu sshd[24035]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.62.153.15 
Dec  2 13:27:13 meumeu sshd[24035]: Failed password for invalid user kl from 82.62.153.15 port 60056 ssh2
Dec  2 13:33:01 meumeu sshd[24949]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.62.153.15 
...

IP attempted unauthorised action

Dec  2 12:29:54 markkoudstaal sshd[27890]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.3.174
Dec  2 12:29:56 markkoudstaal sshd[27890]: Failed password for invalid user admin from 106.13.3.174 port 35052 ssh2
Dec  2 12:36:23 markkoudstaal sshd[28517]: Failed password for uucp from 106.13.3.174 port 33425 ssh2

23/tcp
[2019-12-02]1pkt

Dec  2 13:14:26 vps647732 sshd[24045]: Failed password for root from 152.136.101.65 port 54466 ssh2
...

Dec  2 02:14:37 web9 sshd\[7361\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.6.116  user=www-data
Dec  2 02:14:39 web9 sshd\[7361\]: Failed password for www-data from 106.13.6.116 port 37536 ssh2
Dec  2 02:21:16 web9 sshd\[8440\]: Invalid user stigum from 106.13.6.116
Dec  2 02:21:16 web9 sshd\[8440\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.6.116
Dec  2 02:21:18 web9 sshd\[8440\]: Failed password for invalid user stigum from 106.13.6.116 port 58564 ssh2

Dec  2 11:17:39 XXX sshd[59619]: Invalid user poster from 50.193.109.165 port 49480