2019-12-10T08:50:20.693510abusebot-5.cloudsearch.cf sshd\[3954\]: Invalid user crabtree from 51.38.231.249 port 36986

Dec  9 23:29:11 home sshd[9086]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.189.93  user=root
Dec  9 23:29:13 home sshd[9086]: Failed password for root from 106.54.189.93 port 33802 ssh2
Dec  9 23:56:19 home sshd[9305]: Invalid user server from 106.54.189.93 port 48968
Dec  9 23:56:19 home sshd[9305]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.189.93
Dec  9 23:56:19 home sshd[9305]: Invalid user server from 106.54.189.93 port 48968
Dec  9 23:56:22 home sshd[9305]: Failed password for invalid user server from 106.54.189.93 port 48968 ssh2
Dec 10 00:03:05 home sshd[9341]: Invalid user samba from 106.54.189.93 port 44852
Dec 10 00:03:05 home sshd[9341]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.189.93
Dec 10 00:03:05 home sshd[9341]: Invalid user samba from 106.54.189.93 port 44852
Dec 10 00:03:07 home sshd[9341]: Failed password for invalid user samba from

Dec 10 07:28:42 hell sshd[30481]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.131.68.210
Dec 10 07:28:44 hell sshd[30481]: Failed password for invalid user nfs from 221.131.68.210 port 40600 ssh2
...

2019-12-10T09:28:54.302565abusebot-5.cloudsearch.cf sshd\[6020\]: Invalid user hp from 119.196.83.30 port 60078

Dec 10 07:28:57 grey postfix/smtpd\[6518\]: NOQUEUE: reject: RCPT from unknown\[185.234.216.130\]: 554 5.7.1 Service unavailable\; Client host \[185.234.216.130\] blocked using bl.spamcop.net\; Blocked - see https://www.spamcop.net/bl.shtml\?185.234.216.130\; from=\ to=\ proto=ESMTP helo=\
...

--- report ---
Dec 10 05:37:12 sshd: Connection from 218.92.0.212 port 26841
Dec 10 05:37:23 sshd: Received disconnect from 218.92.0.212: 11:  [preauth]

Dec 10 09:49:36 markkoudstaal sshd[11058]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.219.181
Dec 10 09:49:37 markkoudstaal sshd[11058]: Failed password for invalid user yukioka from 128.199.219.181 port 53529 ssh2
Dec 10 09:55:55 markkoudstaal sshd[11716]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.219.181

2019-12-10T09:35:32.536809scmdmz1 sshd\[29417\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=236.ip-54-36-180.eu  user=root
2019-12-10T09:35:34.579325scmdmz1 sshd\[29417\]: Failed password for root from 54.36.180.236 port 59192 ssh2
2019-12-10T09:41:47.075863scmdmz1 sshd\[29721\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=236.ip-54-36-180.eu  user=named
...

Dec 10 09:12:56 pkdns2 sshd\[55425\]: Invalid user cpotter from 218.94.136.90Dec 10 09:12:58 pkdns2 sshd\[55425\]: Failed password for invalid user cpotter from 218.94.136.90 port 63195 ssh2Dec 10 09:17:58 pkdns2 sshd\[55759\]: Invalid user jennyd from 218.94.136.90Dec 10 09:18:00 pkdns2 sshd\[55759\]: Failed password for invalid user jennyd from 218.94.136.90 port 40967 ssh2Dec 10 09:22:33 pkdns2 sshd\[56085\]: Invalid user amjad from 218.94.136.90Dec 10 09:22:36 pkdns2 sshd\[56085\]: Failed password for invalid user amjad from 218.94.136.90 port 41871 ssh2
...

Dec 10 14:21:36 gw1 sshd[7361]: Failed password for root from 13.75.69.108 port 5282 ssh2
Dec 10 14:26:59 gw1 sshd[7514]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.75.69.108
...

52.73.169.169 was recorded 12 times by 12 hosts attempting to connect to the following ports: 123. Incident counter (4h, 24h, all-time): 12, 45, 665

12/10/2019-01:29:13.909866 185.153.198.196 Protocol: 6 ET SCAN NMAP -sS window 1024

pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.161  user=root
Failed password for root from 222.186.175.161 port 53202 ssh2
Failed password for root from 222.186.175.161 port 53202 ssh2
Failed password for root from 222.186.175.161 port 53202 ssh2
Failed password for root from 222.186.175.161 port 53202 ssh2

Dec 10 10:14:48 loxhost sshd\[22702\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.202.75.205  user=root
Dec 10 10:14:50 loxhost sshd\[22702\]: Failed password for root from 149.202.75.205 port 36302 ssh2
Dec 10 10:19:36 loxhost sshd\[22872\]: Invalid user quentin from 149.202.75.205 port 45140
Dec 10 10:19:36 loxhost sshd\[22872\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.202.75.205
Dec 10 10:19:38 loxhost sshd\[22872\]: Failed password for invalid user quentin from 149.202.75.205 port 45140 ssh2
...

Automatic report - Port Scan Attack