Sep  6 17:07:11 *** sshd[19810]: Failed password for invalid user amp from 144.217.4.14 port 45562 ssh2
Sep  6 17:12:27 *** sshd[19902]: Failed password for invalid user onm from 144.217.4.14 port 40744 ssh2

Sep  6 16:41:03 microserver sshd[49141]: Invalid user ts from 42.200.66.164 port 44912
Sep  6 16:41:03 microserver sshd[49141]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.200.66.164
Sep  6 16:41:05 microserver sshd[49141]: Failed password for invalid user ts from 42.200.66.164 port 44912 ssh2
Sep  6 16:46:12 microserver sshd[49787]: Invalid user daniel from 42.200.66.164 port 60258
Sep  6 16:46:12 microserver sshd[49787]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.200.66.164
Sep  6 17:01:01 microserver sshd[51753]: Invalid user system from 42.200.66.164 port 49824
Sep  6 17:01:01 microserver sshd[51753]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.200.66.164
Sep  6 17:01:03 microserver sshd[51753]: Failed password for invalid user system from 42.200.66.164 port 49824 ssh2
Sep  6 17:06:01 microserver sshd[52444]: Invalid user user1 from 42.200.66.164 port 36934
Sep  6 1

Sep  6 10:52:39 ny01 sshd[1116]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.98.202.216
Sep  6 10:52:42 ny01 sshd[1116]: Failed password for invalid user user from 200.98.202.216 port 45276 ssh2
Sep  6 10:58:28 ny01 sshd[2667]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.98.202.216

Sep  6 09:24:55 hpm sshd\[846\]: Invalid user smbuser from 212.225.149.230
Sep  6 09:24:55 hpm sshd\[846\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.225.149.230
Sep  6 09:24:57 hpm sshd\[846\]: Failed password for invalid user smbuser from 212.225.149.230 port 43828 ssh2
Sep  6 09:29:04 hpm sshd\[1206\]: Invalid user git from 212.225.149.230
Sep  6 09:29:04 hpm sshd\[1206\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.225.149.230

Sep  6 22:03:48 mail sshd\[8691\]: Failed password for root from 49.88.112.72 port 59408 ssh2
Sep  6 22:03:50 mail sshd\[8691\]: Failed password for root from 49.88.112.72 port 59408 ssh2
Sep  6 22:07:00 mail sshd\[9010\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.72  user=root
Sep  6 22:07:02 mail sshd\[9010\]: Failed password for root from 49.88.112.72 port 42543 ssh2
Sep  6 22:07:05 mail sshd\[9010\]: Failed password for root from 49.88.112.72 port 42543 ssh2

Sep  6 16:59:45 mail sshd\[5227\]: Invalid user teamspeak3 from 51.83.32.88 port 42754
Sep  6 16:59:45 mail sshd\[5227\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.32.88
Sep  6 16:59:48 mail sshd\[5227\]: Failed password for invalid user teamspeak3 from 51.83.32.88 port 42754 ssh2
Sep  6 17:05:03 mail sshd\[6355\]: Invalid user postgres from 51.83.32.88 port 56774
Sep  6 17:05:03 mail sshd\[6355\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.32.88

Sep  6 15:36:42 ny01 sshd[24267]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.238.70
Sep  6 15:36:43 ny01 sshd[24267]: Failed password for invalid user ftpuser from 180.76.238.70 port 49720 ssh2
Sep  6 15:39:10 ny01 sshd[24770]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.238.70

Automatic report - Port Scan Attack

SSH invalid-user multiple login try

Sep  6 11:29:22 xtremcommunity sshd\[18753\]: Invalid user factorio from 148.70.54.83 port 57766
Sep  6 11:29:22 xtremcommunity sshd\[18753\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.54.83
Sep  6 11:29:24 xtremcommunity sshd\[18753\]: Failed password for invalid user factorio from 148.70.54.83 port 57766 ssh2
Sep  6 11:37:13 xtremcommunity sshd\[19034\]: Invalid user tomcat from 148.70.54.83 port 45136
Sep  6 11:37:13 xtremcommunity sshd\[19034\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.54.83
...

Sep  6 21:41:49 lenivpn01 kernel: \[31724.455400\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:2f:6c:1b:d2:74:7f:6e:37:e3:08:00 SRC=178.128.87.28 DST=195.201.121.15 LEN=60 TOS=0x00 PREC=0x40 TTL=51 ID=49129 DF PROTO=TCP SPT=46746 DPT=22 WINDOW=14600 RES=0x00 SYN URGP=0 
Sep  6 21:41:50 lenivpn01 kernel: \[31725.455034\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:2f:6c:1b:d2:74:7f:6e:37:e3:08:00 SRC=178.128.87.28 DST=195.201.121.15 LEN=60 TOS=0x00 PREC=0x40 TTL=51 ID=49130 DF PROTO=TCP SPT=46746 DPT=22 WINDOW=14600 RES=0x00 SYN URGP=0 
Sep  6 21:41:52 lenivpn01 kernel: \[31727.454977\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:2f:6c:1b:d2:74:7f:6e:37:e3:08:00 SRC=178.128.87.28 DST=195.201.121.15 LEN=60 TOS=0x00 PREC=0x40 TTL=51 ID=49131 DF PROTO=TCP SPT=46746 DPT=22 WINDOW=14600 RES=0x00 SYN URGP=0 
...

Sep  6 20:07:51 yabzik sshd[7849]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.42.178.137
Sep  6 20:07:53 yabzik sshd[7849]: Failed password for invalid user teamspeak from 94.42.178.137 port 50066 ssh2
Sep  6 20:13:36 yabzik sshd[9880]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.42.178.137

firewall-block, port(s): 2508/tcp, 2879/tcp, 4040/tcp, 4680/tcp, 5610/tcp, 5643/tcp, 5712/tcp, 8169/tcp, 8601/tcp, 9434/tcp, 9876/tcp, 10002/tcp, 10203/tcp, 10432/tcp, 11511/tcp, 16116/tcp, 18108/tcp

Return-Path: 
From: "Cesdeals" 

2019-09-06T19:28:55.168965abusebot-3.cloudsearch.cf sshd\[28586\]: Invalid user admin1 from 107.170.63.196 port 37859