2020-08-17T11:19:45.442438vps1033 sshd[11776]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.120.49
2020-08-17T11:19:45.436875vps1033 sshd[11776]: Invalid user workflow from 180.76.120.49 port 43966
2020-08-17T11:19:47.770149vps1033 sshd[11776]: Failed password for invalid user workflow from 180.76.120.49 port 43966 ssh2
2020-08-17T11:21:26.840576vps1033 sshd[15360]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.120.49  user=root
2020-08-17T11:21:29.034318vps1033 sshd[15360]: Failed password for root from 180.76.120.49 port 59582 ssh2
...

Aug 15 17:05:03 ns382633 sshd\[14879\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.120.49  user=root
Aug 15 17:05:05 ns382633 sshd\[14879\]: Failed password for root from 180.76.120.49 port 46108 ssh2
Aug 15 17:10:51 ns382633 sshd\[16218\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.120.49  user=root
Aug 15 17:10:53 ns382633 sshd\[16218\]: Failed password for root from 180.76.120.49 port 55092 ssh2
Aug 15 17:14:07 ns382633 sshd\[16434\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.120.49  user=root

Aug 15 05:57:54 mout sshd[20894]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.120.49  user=root
Aug 15 05:57:56 mout sshd[20894]: Failed password for root from 180.76.120.49 port 48536 ssh2

Aug 14 02:18:07 web1 sshd\[29300\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.120.49  user=root
Aug 14 02:18:09 web1 sshd\[29300\]: Failed password for root from 180.76.120.49 port 53190 ssh2
Aug 14 02:22:24 web1 sshd\[29609\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.120.49  user=root
Aug 14 02:22:26 web1 sshd\[29609\]: Failed password for root from 180.76.120.49 port 56972 ssh2
Aug 14 02:26:47 web1 sshd\[29950\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.120.49  user=root

Aug 12 05:53:51 mail sshd[2436]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.120.49  user=root
Aug 12 05:53:53 mail sshd[2436]: Failed password for root from 180.76.120.49 port 35018 ssh2
...

Aug 10 09:13:08 vm0 sshd[28883]: Failed password for root from 180.76.120.49 port 48294 ssh2
Aug 10 14:56:32 vm0 sshd[16799]: Failed password for root from 180.76.120.49 port 43644 ssh2
...

"Unauthorized connection attempt on SSHD detected"

Aug  6 01:20:48 Ubuntu-1404-trusty-64-minimal sshd\[350\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.120.49  user=root
Aug  6 01:20:50 Ubuntu-1404-trusty-64-minimal sshd\[350\]: Failed password for root from 180.76.120.49 port 52770 ssh2
Aug  6 01:38:17 Ubuntu-1404-trusty-64-minimal sshd\[12188\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.120.49  user=root
Aug  6 01:38:19 Ubuntu-1404-trusty-64-minimal sshd\[12188\]: Failed password for root from 180.76.120.49 port 46382 ssh2
Aug  6 01:43:13 Ubuntu-1404-trusty-64-minimal sshd\[14524\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.120.49  user=root

2020-07-26T10:02:43.835717lavrinenko.info sshd[3289]: Invalid user ci from 180.76.120.49 port 49372
2020-07-26T10:02:43.845673lavrinenko.info sshd[3289]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.120.49
2020-07-26T10:02:43.835717lavrinenko.info sshd[3289]: Invalid user ci from 180.76.120.49 port 49372
2020-07-26T10:02:45.932115lavrinenko.info sshd[3289]: Failed password for invalid user ci from 180.76.120.49 port 49372 ssh2
2020-07-26T10:06:31.331815lavrinenko.info sshd[3488]: Invalid user edna from 180.76.120.49 port 40022
...

Jul 20 09:26:56 ny01 sshd[18406]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.120.49
Jul 20 09:26:58 ny01 sshd[18406]: Failed password for invalid user yqc from 180.76.120.49 port 44962 ssh2
Jul 20 09:32:51 ny01 sshd[19302]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.120.49

ssh brute force

Failed password for invalid user 02 from 180.76.120.135 port 33372 ssh2

2020-06-18T14:00:43.836672centos sshd[2371]: Invalid user maestro from 180.76.120.135 port 56284
2020-06-18T14:00:45.367663centos sshd[2371]: Failed password for invalid user maestro from 180.76.120.135 port 56284 ssh2
2020-06-18T14:05:29.202342centos sshd[2671]: Invalid user ajay from 180.76.120.135 port 52390
...

SSH brute-force attempt

Invalid user admin from 180.76.120.135 port 37328

2019-12-18T20:42:39.936248vps751288.ovh.net sshd\[20930\]: Invalid user schollenberger from 68.183.110.49 port 59882
2019-12-18T20:42:39.945368vps751288.ovh.net sshd\[20930\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.110.49
2019-12-18T20:42:42.344124vps751288.ovh.net sshd\[20930\]: Failed password for invalid user schollenberger from 68.183.110.49 port 59882 ssh2
2019-12-18T20:47:49.600205vps751288.ovh.net sshd\[20937\]: Invalid user ismail from 68.183.110.49 port 39138
2019-12-18T20:47:49.608722vps751288.ovh.net sshd\[20937\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.110.49

\[2019-12-18 14:36:53\] NOTICE\[2839\] chan_sip.c: Registration from '\' failed for '185.147.212.8:58231' - Wrong password
\[2019-12-18 14:36:53\] SECURITY\[2857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-12-18T14:36:53.739-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="83739",SessionID="0x7f0fb43ef588",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.212.8/58231",Challenge="1abeebb1",ReceivedChallenge="1abeebb1",ReceivedHash="4fa4650876876849bbfcb427bbef8a75"
\[2019-12-18 14:37:25\] NOTICE\[2839\] chan_sip.c: Registration from '\' failed for '185.147.212.8:64178' - Wrong password
\[2019-12-18 14:37:25\] SECURITY\[2857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-12-18T14:37:25.765-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="23224",SessionID="0x7f0fb46c6168",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.1

Dec 18 05:01:28 eddieflores sshd\[25437\]: Invalid user jayne from 90.84.185.24
Dec 18 05:01:28 eddieflores sshd\[25437\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ecs-90-84-185-24.compute.prod-cloud-ocb.orange-business.com
Dec 18 05:01:30 eddieflores sshd\[25437\]: Failed password for invalid user jayne from 90.84.185.24 port 52904 ssh2
Dec 18 05:07:04 eddieflores sshd\[25938\]: Invalid user lisa from 90.84.185.24
Dec 18 05:07:04 eddieflores sshd\[25938\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ecs-90-84-185-24.compute.prod-cloud-ocb.orange-business.com

SSH invalid-user multiple login attempts

Dec 18 18:57:55 web8 sshd\[5495\]: Invalid user arreygue from 156.96.153.116
Dec 18 18:57:55 web8 sshd\[5495\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.96.153.116
Dec 18 18:57:57 web8 sshd\[5495\]: Failed password for invalid user arreygue from 156.96.153.116 port 57948 ssh2
Dec 18 19:06:04 web8 sshd\[9453\]: Invalid user wwwrun from 156.96.153.116
Dec 18 19:06:04 web8 sshd\[9453\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.96.153.116

Unauthorized connection attempt from IP address 177.204.23.67 on Port 445(SMB)

Dec 18 20:14:20 minden010 sshd[20219]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.243.136.198
Dec 18 20:14:22 minden010 sshd[20219]: Failed password for invalid user nfs from 95.243.136.198 port 63567 ssh2
Dec 18 20:19:50 minden010 sshd[21932]: Failed password for root from 95.243.136.198 port 51031 ssh2
...

Dec 18 09:09:22 sachi sshd\[10765\]: Invalid user floy from 153.139.239.41
Dec 18 09:09:22 sachi sshd\[10765\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.139.239.41
Dec 18 09:09:25 sachi sshd\[10765\]: Failed password for invalid user floy from 153.139.239.41 port 32790 ssh2
Dec 18 09:15:46 sachi sshd\[11386\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.139.239.41  user=root
Dec 18 09:15:48 sachi sshd\[11386\]: Failed password for root from 153.139.239.41 port 38318 ssh2

Dec 18 14:07:09 mail sshd\[38764\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.32.181.96  user=root
...

Dec 18 15:47:23 srv01 sshd[31770]: Invalid user chensf from 1.227.191.138 port 60716
Dec 18 15:47:23 srv01 sshd[31770]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.227.191.138
Dec 18 15:47:23 srv01 sshd[31770]: Invalid user chensf from 1.227.191.138 port 60716
Dec 18 15:47:24 srv01 sshd[31770]: Failed password for invalid user chensf from 1.227.191.138 port 60716 ssh2
Dec 18 15:54:22 srv01 sshd[32255]: Invalid user www from 1.227.191.138 port 44298
...

2019-12-18T14:45:09.921361shield sshd\[6756\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.241.16.105  user=root
2019-12-18T14:45:12.492767shield sshd\[6756\]: Failed password for root from 106.241.16.105 port 59367 ssh2
2019-12-18T14:51:21.025992shield sshd\[7988\]: Invalid user sarnawi from 106.241.16.105 port 19635
2019-12-18T14:51:21.030130shield sshd\[7988\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.241.16.105
2019-12-18T14:51:22.668390shield sshd\[7988\]: Failed password for invalid user sarnawi from 106.241.16.105 port 19635 ssh2

Unauthorized connection attempt from IP address 43.243.140.74 on Port 445(SMB)

Dec 18 16:40:09 grey postfix/smtpd\[22041\]: NOQUEUE: reject: RCPT from unknown\[91.232.96.3\]: 554 5.7.1 Service unavailable\; Client host \[91.232.96.3\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[91.232.96.3\]\; from=\ to=\ proto=ESMTP helo=\
...

Dec 18 08:38:41 server sshd\[6109\]: Failed password for invalid user polaris from 46.101.72.145 port 45736 ssh2
Dec 18 22:06:29 server sshd\[8850\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=kallealanen.fi  user=root
Dec 18 22:06:31 server sshd\[8850\]: Failed password for root from 46.101.72.145 port 36762 ssh2
Dec 18 22:15:52 server sshd\[11481\]: Invalid user user01 from 46.101.72.145
Dec 18 22:15:52 server sshd\[11481\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=kallealanen.fi 
...

Dec 18 19:13:11 pornomens sshd\[4630\]: Invalid user alsager from 144.217.40.3 port 49454
Dec 18 19:13:11 pornomens sshd\[4630\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.217.40.3
Dec 18 19:13:12 pornomens sshd\[4630\]: Failed password for invalid user alsager from 144.217.40.3 port 49454 ssh2
...