Nov 30 16:56:02 odroid64 sshd\[6390\]: Invalid user neil from 98.156.148.239
Nov 30 16:56:02 odroid64 sshd\[6390\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.156.148.239
...

SSH Brute-Force reported by Fail2Ban

Dec 14 01:01:51 zeus sshd[2481]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.156.148.239 
Dec 14 01:01:53 zeus sshd[2481]: Failed password for invalid user aloysius from 98.156.148.239 port 50398 ssh2
Dec 14 01:07:50 zeus sshd[2702]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.156.148.239 
Dec 14 01:07:52 zeus sshd[2702]: Failed password for invalid user raspberry123 from 98.156.148.239 port 58014 ssh2

Dec  3 01:21:22 itv-usvr-01 sshd[11080]: Invalid user com from 98.156.148.239
Dec  3 01:21:22 itv-usvr-01 sshd[11080]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.156.148.239
Dec  3 01:21:22 itv-usvr-01 sshd[11080]: Invalid user com from 98.156.148.239
Dec  3 01:21:24 itv-usvr-01 sshd[11080]: Failed password for invalid user com from 98.156.148.239 port 55394 ssh2
Dec  3 01:27:55 itv-usvr-01 sshd[11333]: Invalid user randy from 98.156.148.239

Dec  2 13:02:02 OPSO sshd\[6781\]: Invalid user bindi from 98.156.148.239 port 35648
Dec  2 13:02:02 OPSO sshd\[6781\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.156.148.239
Dec  2 13:02:04 OPSO sshd\[6781\]: Failed password for invalid user bindi from 98.156.148.239 port 35648 ssh2
Dec  2 13:08:37 OPSO sshd\[8308\]: Invalid user rosminah from 98.156.148.239 port 47442
Dec  2 13:08:37 OPSO sshd\[8308\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.156.148.239

2019-12-01T05:16:34.6897691495-001 sshd\[56034\]: Invalid user azara from 98.156.148.239 port 47926
2019-12-01T05:16:34.6930391495-001 sshd\[56034\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.156.148.239
2019-12-01T05:16:36.2972661495-001 sshd\[56034\]: Failed password for invalid user azara from 98.156.148.239 port 47926 ssh2
2019-12-01T05:19:51.6115821495-001 sshd\[56217\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.156.148.239  user=root
2019-12-01T05:19:53.9275051495-001 sshd\[56217\]: Failed password for root from 98.156.148.239 port 55102 ssh2
2019-12-01T05:23:06.0170571495-001 sshd\[56310\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.156.148.239  user=root
...

Nov 30 12:53:13 MK-Soft-VM4 sshd[22252]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.156.148.239 
Nov 30 12:53:15 MK-Soft-VM4 sshd[22252]: Failed password for invalid user linda123 from 98.156.148.239 port 33034 ssh2
...

Nov 24 20:34:43 wbs sshd\[25559\]: Invalid user vcsa from 98.156.148.239
Nov 24 20:34:43 wbs sshd\[25559\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.156.148.239
Nov 24 20:34:45 wbs sshd\[25559\]: Failed password for invalid user vcsa from 98.156.148.239 port 60392 ssh2
Nov 24 20:38:58 wbs sshd\[25891\]: Invalid user ssh from 98.156.148.239
Nov 24 20:38:58 wbs sshd\[25891\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.156.148.239

$f2bV_matches

Nov 14 08:25:24 game-panel sshd[8909]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.156.148.239
Nov 14 08:25:26 game-panel sshd[8909]: Failed password for invalid user ching from 98.156.148.239 port 51452 ssh2
Nov 14 08:29:32 game-panel sshd[9050]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.156.148.239

Oct 30 05:44:21 dedicated sshd[24445]: Invalid user parc from 98.156.148.239 port 45858

Oct 29 13:29:21 ws19vmsma01 sshd[235837]: Failed password for root from 98.156.148.239 port 49856 ssh2
Oct 29 13:40:59 ws19vmsma01 sshd[13839]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.156.148.239
...

Invalid user bot2 from 98.156.148.239 port 32770

2019-10-15T20:59:47.902866abusebot-7.cloudsearch.cf sshd\[32242\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.156.148.239  user=root

Oct 14 13:52:20 host sshd\[33897\]: Invalid user Santos_123 from 98.156.148.239 port 33122
Oct 14 13:52:20 host sshd\[33897\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.156.148.239
...

Sep 23 16:54:10 server sshd\[14405\]: Invalid user atul from 98.156.148.239 port 52156
Sep 23 16:54:10 server sshd\[14405\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.156.148.239
Sep 23 16:54:12 server sshd\[14405\]: Failed password for invalid user atul from 98.156.148.239 port 52156 ssh2
Sep 23 16:58:21 server sshd\[28782\]: Invalid user nagesh from 98.156.148.239 port 37534
Sep 23 16:58:21 server sshd\[28782\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.156.148.239

ssh failed login

2019-09-07 10:04:02 server sshd[52695]: Failed password for invalid user ftpuser from 98.156.148.239 port 35238 ssh2

Sep  6 08:41:59 vps647732 sshd[6473]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.156.148.239
Sep  6 08:42:01 vps647732 sshd[6473]: Failed password for invalid user sinusbot from 98.156.148.239 port 57696 ssh2
...

Aug 30 20:40:34 localhost sshd\[48834\]: Invalid user adonix from 98.156.148.239 port 45178
Aug 30 20:40:34 localhost sshd\[48834\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.156.148.239
Aug 30 20:40:36 localhost sshd\[48834\]: Failed password for invalid user adonix from 98.156.148.239 port 45178 ssh2
Aug 30 20:45:04 localhost sshd\[48948\]: Invalid user adolf from 98.156.148.239 port 33654
Aug 30 20:45:04 localhost sshd\[48948\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.156.148.239
...

Aug 25 06:10:43 MK-Soft-VM5 sshd\[11123\]: Invalid user deploy from 98.156.148.239 port 46836
Aug 25 06:10:43 MK-Soft-VM5 sshd\[11123\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.156.148.239
Aug 25 06:10:45 MK-Soft-VM5 sshd\[11123\]: Failed password for invalid user deploy from 98.156.148.239 port 46836 ssh2
...

Aug 23 15:32:15 hiderm sshd\[11660\]: Invalid user git from 98.156.148.239
Aug 23 15:32:15 hiderm sshd\[11660\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.156.148.239
Aug 23 15:32:17 hiderm sshd\[11660\]: Failed password for invalid user git from 98.156.148.239 port 34848 ssh2
Aug 23 15:37:20 hiderm sshd\[12096\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.156.148.239  user=root
Aug 23 15:37:22 hiderm sshd\[12096\]: Failed password for root from 98.156.148.239 port 52988 ssh2

Aug 17 12:19:48 lcprod sshd\[29343\]: Invalid user rw from 98.156.148.239
Aug 17 12:19:48 lcprod sshd\[29343\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.156.148.239
Aug 17 12:19:50 lcprod sshd\[29343\]: Failed password for invalid user rw from 98.156.148.239 port 54270 ssh2
Aug 17 12:24:20 lcprod sshd\[30129\]: Invalid user qwerty from 98.156.148.239
Aug 17 12:24:20 lcprod sshd\[30129\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.156.148.239

Aug 13 20:18:28 mail sshd[28040]: Invalid user clouderauser from 98.156.148.239
Aug 13 20:18:28 mail sshd[28040]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.156.148.239
Aug 13 20:18:28 mail sshd[28040]: Invalid user clouderauser from 98.156.148.239
Aug 13 20:18:31 mail sshd[28040]: Failed password for invalid user clouderauser from 98.156.148.239 port 40410 ssh2
Aug 13 20:38:35 mail sshd[30441]: Invalid user jefferson from 98.156.148.239
...

Jul 29 00:46:42 vps647732 sshd[31803]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.156.148.239
Jul 29 00:46:44 vps647732 sshd[31803]: Failed password for invalid user msi from 98.156.148.239 port 35186 ssh2
...

May 28 08:04:16 vserver sshd\[6044\]: Failed password for root from 62.210.205.155 port 38063 ssh2May 28 08:07:40 vserver sshd\[6090\]: Invalid user java from 62.210.205.155May 28 08:07:42 vserver sshd\[6090\]: Failed password for invalid user java from 62.210.205.155 port 40948 ssh2May 28 08:11:13 vserver sshd\[6156\]: Failed password for root from 62.210.205.155 port 43848 ssh2
...

SSH/22 MH Probe, BF, Hack -

May 28 11:06:25 vpn01 sshd[12999]: Failed password for root from 106.54.11.34 port 38486 ssh2
...

May 28 10:52:55 * sshd[1552]: Failed password for root from 222.186.190.2 port 56878 ssh2
May 28 10:53:09 * sshd[1552]: error: maximum authentication attempts exceeded for root from 222.186.190.2 port 56878 ssh2 [preauth]

Honeypot attack, port: 445, PTR: dynamic-ip-adsl.viettel.vn.

trying to access non-authorized port

Telnet/23 MH Probe, Scan, BF, Hack -

May 28 09:12:43 srv-ubuntu-dev3 sshd[91218]: Invalid user nasa from 61.92.148.114
May 28 09:12:43 srv-ubuntu-dev3 sshd[91218]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.92.148.114
May 28 09:12:43 srv-ubuntu-dev3 sshd[91218]: Invalid user nasa from 61.92.148.114
May 28 09:12:45 srv-ubuntu-dev3 sshd[91218]: Failed password for invalid user nasa from 61.92.148.114 port 59994 ssh2
May 28 09:16:26 srv-ubuntu-dev3 sshd[91823]: Invalid user zhaowei from 61.92.148.114
May 28 09:16:26 srv-ubuntu-dev3 sshd[91823]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.92.148.114
May 28 09:16:26 srv-ubuntu-dev3 sshd[91823]: Invalid user zhaowei from 61.92.148.114
May 28 09:16:28 srv-ubuntu-dev3 sshd[91823]: Failed password for invalid user zhaowei from 61.92.148.114 port 36510 ssh2
May 28 09:20:05 srv-ubuntu-dev3 sshd[92333]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=
...

Invalid user postgres from 106.13.50.145 port 32848

(sshd) Failed SSH login from 92.246.243.163 (IE/Ireland/-): 5 in the last 3600 secs

SSH login attempts.

2020-05-28T04:53:43.941428beta postfix/smtpd[14602]: NOQUEUE: reject: RCPT from unknown[103.40.242.197]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
2020-05-28T04:53:51.455139beta postfix/smtpd[14602]: NOQUEUE: reject: RCPT from unknown[103.40.242.197]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
2020-05-28T04:53:56.228465beta postfix/smtpd[14602]: NOQUEUE: reject: RCPT from unknown[103.40.242.197]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
...

Failed password for invalid user jira from 90.189.117.121 port 56396 ssh2

2020-05-28T11:11:00.958354afi-git.jinr.ru sshd[20303]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.6.76.71  user=root
2020-05-28T11:11:02.128370afi-git.jinr.ru sshd[20303]: Failed password for root from 175.6.76.71 port 38426 ssh2
2020-05-28T11:13:25.251074afi-git.jinr.ru sshd[20909]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.6.76.71  user=root
2020-05-28T11:13:26.993221afi-git.jinr.ru sshd[20909]: Failed password for root from 175.6.76.71 port 38344 ssh2
2020-05-28T11:15:35.125023afi-git.jinr.ru sshd[21515]: Invalid user dave from 175.6.76.71 port 38264
...

7777/tcp 7474/tcp 2235/tcp...
[2020-04-29/05-27]24pkt,21pt.(tcp),1pt.(udp)