Sep  1 04:24:33 vps-51d81928 sshd[143028]: Invalid user mirc from 88.152.231.197 port 45998
Sep  1 04:24:33 vps-51d81928 sshd[143028]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.152.231.197 
Sep  1 04:24:33 vps-51d81928 sshd[143028]: Invalid user mirc from 88.152.231.197 port 45998
Sep  1 04:24:35 vps-51d81928 sshd[143028]: Failed password for invalid user mirc from 88.152.231.197 port 45998 ssh2
Sep  1 04:27:15 vps-51d81928 sshd[143052]: Invalid user dimas from 88.152.231.197 port 58801
...

Invalid user monitor from 88.152.231.197 port 53364

2020-06-16T18:19:03.605692  sshd[1851]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.152.231.197  user=root
2020-06-16T18:19:05.243696  sshd[1851]: Failed password for root from 88.152.231.197 port 49252 ssh2
2020-06-16T18:24:11.851543  sshd[1998]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.152.231.197  user=root
2020-06-16T18:24:14.106754  sshd[1998]: Failed password for root from 88.152.231.197 port 42202 ssh2
...

Jun  4 09:19:39 legacy sshd[15498]: Failed password for root from 88.152.231.197 port 34769 ssh2
Jun  4 09:22:46 legacy sshd[15584]: Failed password for root from 88.152.231.197 port 50008 ssh2
...

Failed password for invalid user root from 88.152.231.197 port 57057 ssh2

May 24 10:55:08 webhost01 sshd[915]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.152.231.197
May 24 10:55:10 webhost01 sshd[915]: Failed password for invalid user xey from 88.152.231.197 port 38249 ssh2
...

(sshd) Failed SSH login from 88.152.231.197 (DE/Germany/ip-88-152-231-197.hsi03.unitymediagroup.de): 5 in the last 3600 secs

Apr 30 13:43:18 localhost sshd[59605]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip-88-152-231-197.hsi03.unitymediagroup.de  user=root
Apr 30 13:43:20 localhost sshd[59605]: Failed password for root from 88.152.231.197 port 33058 ssh2
Apr 30 13:48:27 localhost sshd[60144]: Invalid user newuser from 88.152.231.197 port 58139
Apr 30 13:48:27 localhost sshd[60144]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip-88-152-231-197.hsi03.unitymediagroup.de
Apr 30 13:48:27 localhost sshd[60144]: Invalid user newuser from 88.152.231.197 port 58139
Apr 30 13:48:29 localhost sshd[60144]: Failed password for invalid user newuser from 88.152.231.197 port 58139 ssh2
...

Apr 17 01:08:02 web9 sshd\[3103\]: Invalid user git from 88.152.231.197
Apr 17 01:08:02 web9 sshd\[3103\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.152.231.197
Apr 17 01:08:04 web9 sshd\[3103\]: Failed password for invalid user git from 88.152.231.197 port 58253 ssh2
Apr 17 01:11:14 web9 sshd\[3677\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.152.231.197  user=root
Apr 17 01:11:16 web9 sshd\[3677\]: Failed password for root from 88.152.231.197 port 46094 ssh2

Apr 13 23:14:16 [host] sshd[9743]: Invalid user od
Apr 13 23:14:16 [host] sshd[9743]: pam_unix(sshd:a
Apr 13 23:14:18 [host] sshd[9743]: Failed password

Mar 29 15:32:11 mail sshd[17424]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.152.231.197
Mar 29 15:32:13 mail sshd[17424]: Failed password for invalid user user from 88.152.231.197 port 55444 ssh2
...

Invalid user kelly from 88.152.231.197 port 40424

(sshd) Failed SSH login from 88.152.231.197 (DE/Germany/ip-88-152-231-197.hsi03.unitymediagroup.de): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Feb  5 06:06:55 elude sshd[27107]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.152.231.197  user=backup
Feb  5 06:06:56 elude sshd[27107]: Failed password for backup from 88.152.231.197 port 46371 ssh2
Feb  5 06:21:42 elude sshd[27952]: Invalid user activity from 88.152.231.197 port 47586
Feb  5 06:21:44 elude sshd[27952]: Failed password for invalid user activity from 88.152.231.197 port 47586 ssh2
Feb  5 06:24:42 elude sshd[28107]: Invalid user athos from 88.152.231.197 port 34164

Unauthorized connection attempt detected from IP address 88.152.231.197 to port 2220 [J]

Unauthorized connection attempt detected from IP address 88.152.231.197 to port 2220 [J]

Dec 31 22:48:05 zeus sshd[30215]: Failed password for root from 88.152.231.197 port 42810 ssh2
Dec 31 22:50:51 zeus sshd[30296]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.152.231.197 
Dec 31 22:50:52 zeus sshd[30296]: Failed password for invalid user borrows from 88.152.231.197 port 57104 ssh2

Dec 20 16:38:29 MK-Soft-VM4 sshd[11940]: Failed password for backup from 88.152.231.197 port 57455 ssh2
...

Dec 19 00:10:51 cp sshd[32037]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.152.231.197
Dec 19 00:10:52 cp sshd[32037]: Failed password for invalid user cecilia from 88.152.231.197 port 51103 ssh2
Dec 19 00:19:58 cp sshd[4624]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.152.231.197

SSH brute-force: detected 29 distinct usernames within a 24-hour window.

Dec  8 01:28:53 hpm sshd\[22260\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip-88-152-231-197.hsi03.unitymediagroup.de  user=root
Dec  8 01:28:55 hpm sshd\[22260\]: Failed password for root from 88.152.231.197 port 45177 ssh2
Dec  8 01:35:38 hpm sshd\[23016\]: Invalid user ssh from 88.152.231.197
Dec  8 01:35:38 hpm sshd\[23016\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip-88-152-231-197.hsi03.unitymediagroup.de
Dec  8 01:35:40 hpm sshd\[23016\]: Failed password for invalid user ssh from 88.152.231.197 port 50247 ssh2

Dec  5 08:35:25 ns381471 sshd[22416]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.152.231.197
Dec  5 08:35:28 ns381471 sshd[22416]: Failed password for invalid user compaq88 from 88.152.231.197 port 38055 ssh2

Nov 27 01:55:21 linuxvps sshd\[2745\]: Invalid user adidas from 88.152.231.197
Nov 27 01:55:21 linuxvps sshd\[2745\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.152.231.197
Nov 27 01:55:22 linuxvps sshd\[2745\]: Failed password for invalid user adidas from 88.152.231.197 port 42303 ssh2
Nov 27 01:58:58 linuxvps sshd\[4786\]: Invalid user yingsha from 88.152.231.197
Nov 27 01:58:58 linuxvps sshd\[4786\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.152.231.197

Nov 25 07:09:34 localhost sshd\[68447\]: Invalid user werkblatt from 88.152.231.197 port 35410
Nov 25 07:09:34 localhost sshd\[68447\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.152.231.197
Nov 25 07:09:36 localhost sshd\[68447\]: Failed password for invalid user werkblatt from 88.152.231.197 port 35410 ssh2
Nov 25 07:13:18 localhost sshd\[68526\]: Invalid user true from 88.152.231.197 port 54025
Nov 25 07:13:18 localhost sshd\[68526\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.152.231.197
...

Nov 24 12:52:47 web9 sshd\[29480\]: Invalid user guest from 88.152.231.197
Nov 24 12:52:47 web9 sshd\[29480\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.152.231.197
Nov 24 12:52:49 web9 sshd\[29480\]: Failed password for invalid user guest from 88.152.231.197 port 58073 ssh2
Nov 24 12:56:10 web9 sshd\[29974\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.152.231.197  user=root
Nov 24 12:56:12 web9 sshd\[29974\]: Failed password for root from 88.152.231.197 port 47269 ssh2

Nov 24 08:08:09 game-panel sshd[19838]: Failed password for root from 88.152.231.197 port 55758 ssh2
Nov 24 08:11:46 game-panel sshd[20033]: Failed password for root from 88.152.231.197 port 45480 ssh2

Nov 21 10:25:04 microserver sshd[4646]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.152.231.197  user=root
Nov 21 10:25:06 microserver sshd[4646]: Failed password for root from 88.152.231.197 port 56471 ssh2
Nov 21 10:28:45 microserver sshd[4996]: Invalid user hamelle from 88.152.231.197 port 46463
Nov 21 10:28:45 microserver sshd[4996]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.152.231.197
Nov 21 10:28:47 microserver sshd[4996]: Failed password for invalid user hamelle from 88.152.231.197 port 46463 ssh2
Nov 21 10:41:46 microserver sshd[6903]: Invalid user dills from 88.152.231.197 port 44674
Nov 21 10:41:46 microserver sshd[6903]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.152.231.197
Nov 21 10:41:48 microserver sshd[6903]: Failed password for invalid user dills from 88.152.231.197 port 44674 ssh2
Nov 21 10:45:30 microserver sshd[7477]: Invalid user mathlida from 88

SSH bruteforce (Triggered fail2ban)

2019-11-06T07:08:04.556417shield sshd\[14826\]: Invalid user realfriend from 88.152.231.197 port 44346
2019-11-06T07:08:04.560870shield sshd\[14826\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip-88-152-231-197.hsi03.unitymediagroup.de
2019-11-06T07:08:07.125665shield sshd\[14826\]: Failed password for invalid user realfriend from 88.152.231.197 port 44346 ssh2
2019-11-06T07:11:52.233954shield sshd\[15216\]: Invalid user Qaz!@\#123654 from 88.152.231.197 port 34756
2019-11-06T07:11:52.239141shield sshd\[15216\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip-88-152-231-197.hsi03.unitymediagroup.de

SSH Brute-Force attacks

Nov  1 03:56:09 web1 sshd\[32566\]: Invalid user Fujitsu from 88.152.231.197
Nov  1 03:56:09 web1 sshd\[32566\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.152.231.197
Nov  1 03:56:11 web1 sshd\[32566\]: Failed password for invalid user Fujitsu from 88.152.231.197 port 44736 ssh2
Nov  1 04:00:10 web1 sshd\[472\]: Invalid user yagya@123 from 88.152.231.197
Nov  1 04:00:10 web1 sshd\[472\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.152.231.197

2020-03-21T12:54:53.125181abusebot-2.cloudsearch.cf sshd[12412]: Invalid user user from 144.217.161.78 port 35760
2020-03-21T12:54:53.131048abusebot-2.cloudsearch.cf sshd[12412]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.ip-144-217-161.net
2020-03-21T12:54:53.125181abusebot-2.cloudsearch.cf sshd[12412]: Invalid user user from 144.217.161.78 port 35760
2020-03-21T12:54:54.670710abusebot-2.cloudsearch.cf sshd[12412]: Failed password for invalid user user from 144.217.161.78 port 35760 ssh2
2020-03-21T12:59:57.459181abusebot-2.cloudsearch.cf sshd[12715]: Invalid user daddy from 144.217.161.78 port 53974
2020-03-21T12:59:57.465040abusebot-2.cloudsearch.cf sshd[12715]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.ip-144-217-161.net
2020-03-21T12:59:57.459181abusebot-2.cloudsearch.cf sshd[12715]: Invalid user daddy from 144.217.161.78 port 53974
2020-03-21T13:00:00.072666abusebot-2.cloudsearch.cf s
...

Port scan

Mar 21 13:59:57 prox sshd[21244]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.161.73.159 
Mar 21 14:00:00 prox sshd[21244]: Failed password for invalid user kaiti from 51.161.73.159 port 54190 ssh2

Mar 21 14:17:33 ns381471 sshd[6460]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.92.40.151
Mar 21 14:17:35 ns381471 sshd[6460]: Failed password for invalid user rom from 34.92.40.151 port 49580 ssh2

Port 3751 scan denied

ET DROP Dshield Block Listed Source group 1 - port: 5493 proto: TCP cat: Misc Attack

Mar 21 12:39:49 XXX sshd[54231]: Invalid user niiv from 46.105.124.219 port 49686

Port 80 (HTTP) access denied

2020-03-21 07:56:35 H=([37.150.224.248]) [37.150.224.248]:6469 I=[192.147.25.65]:25 F= rejected RCPT : Sender verify failed
2020-03-21 07:58:58 H=([37.150.224.248]) [37.150.224.248]:57393 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.11, 127.0.0.4) (https://www.spamhaus.org/query/ip/37.150.224.248)
2020-03-21 07:59:53 H=([37.150.224.248]) [37.150.224.248]:57975 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.11, 127.0.0.4) (https://www.spamhaus.org/query/ip/37.150.224.248)
...

Mar 21 06:39:30 *** sshd[18141]: Did not receive identification string from 162.243.129.9

$f2bV_matches

MultiHost/MultiPort Probe, Scan, Hack -

Mar 21 18:21:03 gw1 sshd[9324]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.49.142.46
Mar 21 18:21:05 gw1 sshd[9324]: Failed password for invalid user pearline from 110.49.142.46 port 40676 ssh2
...

Mar 21 14:15:41 debian-2gb-nbg1-2 kernel: \[7055638.752730\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=92.118.37.53 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=62623 PROTO=TCP SPT=52444 DPT=56737 WINDOW=1024 RES=0x00 SYN URGP=0

Port 3756 scan denied