Dec 19 22:28:59 localhost sshd\[48656\]: Invalid user wezeman from 187.199.88.157 port 54902
Dec 19 22:28:59 localhost sshd\[48656\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.199.88.157
Dec 19 22:29:01 localhost sshd\[48656\]: Failed password for invalid user wezeman from 187.199.88.157 port 54902 ssh2
Dec 19 22:35:40 localhost sshd\[48848\]: Invalid user gidaro from 187.199.88.157 port 34258
Dec 19 22:35:40 localhost sshd\[48848\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.199.88.157
...

Dec 19 23:35:40 srv206 sshd[23573]: Invalid user crosswell from 125.124.30.186
...

Dec 19 12:30:35 kapalua sshd\[25806\]: Invalid user 6t5r4e from 178.128.247.219
Dec 19 12:30:35 kapalua sshd\[25806\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.247.219
Dec 19 12:30:37 kapalua sshd\[25806\]: Failed password for invalid user 6t5r4e from 178.128.247.219 port 56506 ssh2
Dec 19 12:35:38 kapalua sshd\[26349\]: Invalid user taguchi from 178.128.247.219
Dec 19 12:35:38 kapalua sshd\[26349\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.247.219

Automatic report - Port Scan Attack

Dec 19 17:56:16 TORMINT sshd\[15899\]: Invalid user server from 178.128.213.126
Dec 19 17:56:16 TORMINT sshd\[15899\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.213.126
Dec 19 17:56:18 TORMINT sshd\[15899\]: Failed password for invalid user server from 178.128.213.126 port 59500 ssh2
...

Dec 19 23:57:07 vpn01 sshd[8680]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.20.121
Dec 19 23:57:09 vpn01 sshd[8680]: Failed password for invalid user bushman from 129.211.20.121 port 48566 ssh2
...

Dec 20 01:13:55 vtv3 sshd[30837]: Failed password for root from 112.111.0.245 port 32149 ssh2
Dec 20 01:18:47 vtv3 sshd[772]: Failed password for root from 112.111.0.245 port 52396 ssh2
Dec 20 01:38:09 vtv3 sshd[9899]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.111.0.245 
Dec 20 01:38:11 vtv3 sshd[9899]: Failed password for invalid user server from 112.111.0.245 port 10554 ssh2
Dec 20 01:43:01 vtv3 sshd[12084]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.111.0.245 
Dec 20 01:53:13 vtv3 sshd[16760]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.111.0.245 
Dec 20 01:53:15 vtv3 sshd[16760]: Failed password for invalid user asuka from 112.111.0.245 port 50375 ssh2
Dec 20 01:58:09 vtv3 sshd[19066]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.111.0.245

Automatic report - Port Scan Attack

22 attempts against mh_ha-misbehave-ban on sonic.magehost.pro

2019-12-19T22:45:45.652757shield sshd\[9294\]: Invalid user asterisk from 192.241.202.169 port 54968
2019-12-19T22:45:45.657487shield sshd\[9294\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.241.202.169
2019-12-19T22:45:47.792861shield sshd\[9294\]: Failed password for invalid user asterisk from 192.241.202.169 port 54968 ssh2
2019-12-19T22:50:52.800075shield sshd\[11324\]: Invalid user frankcom from 192.241.202.169 port 33840
2019-12-19T22:50:52.803945shield sshd\[11324\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.241.202.169

Invalid user tanchak from 167.71.60.209 port 38162

Invalid user nafisha from 54.37.14.3 port 55322

Attempt to attack host OS, exploiting network vulnerabilities, on 19-12-2019 22:35:09.

Dec 19 23:35:23 grey postfix/smtpd\[30252\]: NOQUEUE: reject: RCPT from pets.jcnovel.com\[63.81.87.193\]: 554 5.7.1 Service unavailable\; Client host \[63.81.87.193\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[63.81.87.193\]\; from=\ to=\ proto=ESMTP helo=\
...

Dec 19 23:56:35 jane sshd[27997]: Failed password for root from 218.92.0.134 port 36780 ssh2
Dec 19 23:56:41 jane sshd[27997]: Failed password for root from 218.92.0.134 port 36780 ssh2
...