(sshd) Failed SSH login from 51.178.86.49 (FR/France/49.ip-51-178-86.eu): 5 in the last 3600 secs

Icarus honeypot on github

2020-07-06T05:51:28+02:00  exim[18575]: [1\50] 1jsIA9-0004pb-Sh H=zany.isefardi.com (zany.iiswdelhi.com) [194.146.50.59] F= rejected after DATA: This message scored 102.4 spam points.

Jul  6 08:16:15 dbanaszewski sshd[6336]: Unable to negotiate with 61.177.172.41 port 43909: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth]
Jul  6 09:05:25 dbanaszewski sshd[6599]: Unable to negotiate with 61.177.172.41 port 27816: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth]
Jul  6 09:10:59 dbanaszewski sshd[6653]: Unable to negotiate with 61.177.172.41 port 52855: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth]

Jul  6 06:17:31 piServer sshd[31285]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.59.235 
Jul  6 06:17:32 piServer sshd[31285]: Failed password for invalid user jboss from 123.206.59.235 port 56154 ssh2
Jul  6 06:21:41 piServer sshd[31692]: Failed password for root from 123.206.59.235 port 48410 ssh2
...

Jul  6 05:50:58 rush sshd[4338]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=86.210.71.37
Jul  6 05:51:00 rush sshd[4338]: Failed password for invalid user cloud from 86.210.71.37 port 59910 ssh2
Jul  6 05:55:12 rush sshd[4447]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=86.210.71.37
...

2020-07-06T04:51:04.518114shield sshd\[26330\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.97.248.227  user=root
2020-07-06T04:51:06.907380shield sshd\[26330\]: Failed password for root from 61.97.248.227 port 56126 ssh2
2020-07-06T04:54:59.645681shield sshd\[27874\]: Invalid user ctopup from 61.97.248.227 port 54894
2020-07-06T04:54:59.649487shield sshd\[27874\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.97.248.227
2020-07-06T04:55:01.632376shield sshd\[27874\]: Failed password for invalid user ctopup from 61.97.248.227 port 54894 ssh2

Jul  6 13:04:41 webhost01 sshd[5203]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.167.177.111
Jul  6 13:04:43 webhost01 sshd[5203]: Failed password for invalid user web from 60.167.177.111 port 39752 ssh2
...

2020-07-06T03:52:48.906961abusebot-6.cloudsearch.cf sshd[6432]: Invalid user boss from 134.175.227.112 port 41610
2020-07-06T03:52:48.912329abusebot-6.cloudsearch.cf sshd[6432]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.227.112
2020-07-06T03:52:48.906961abusebot-6.cloudsearch.cf sshd[6432]: Invalid user boss from 134.175.227.112 port 41610
2020-07-06T03:52:51.026384abusebot-6.cloudsearch.cf sshd[6432]: Failed password for invalid user boss from 134.175.227.112 port 41610 ssh2
2020-07-06T03:56:14.703796abusebot-6.cloudsearch.cf sshd[6696]: Invalid user starbound from 134.175.227.112 port 33508
2020-07-06T03:56:14.709857abusebot-6.cloudsearch.cf sshd[6696]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.227.112
2020-07-06T03:56:14.703796abusebot-6.cloudsearch.cf sshd[6696]: Invalid user starbound from 134.175.227.112 port 33508
2020-07-06T03:56:16.437494abusebot-6.cloudsearch.cf sshd[66
...

[MK-VM2] SSH login failed

Unauthorized connection attempt detected from IP address 203.195.152.113 to port 443

Jul  6 02:41:52 NPSTNNYC01T sshd[7494]: Failed password for root from 222.186.31.83 port 36035 ssh2
Jul  6 02:42:02 NPSTNNYC01T sshd[7505]: Failed password for root from 222.186.31.83 port 55338 ssh2
...

Jul  6 12:15:06 dhoomketu sshd[1321372]: Invalid user ves from 209.105.243.145 port 37281
Jul  6 12:15:06 dhoomketu sshd[1321372]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.105.243.145 
Jul  6 12:15:06 dhoomketu sshd[1321372]: Invalid user ves from 209.105.243.145 port 37281
Jul  6 12:15:09 dhoomketu sshd[1321372]: Failed password for invalid user ves from 209.105.243.145 port 37281 ssh2
Jul  6 12:18:14 dhoomketu sshd[1321463]: Invalid user noreply from 209.105.243.145 port 35194
...

2020-07-06T07:58:36.475068vps751288.ovh.net sshd\[7761\]: Invalid user user10 from 51.77.200.101 port 53310
2020-07-06T07:58:36.480709vps751288.ovh.net sshd\[7761\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.ip-51-77-200.eu
2020-07-06T07:58:38.809447vps751288.ovh.net sshd\[7761\]: Failed password for invalid user user10 from 51.77.200.101 port 53310 ssh2
2020-07-06T08:01:38.300696vps751288.ovh.net sshd\[7827\]: Invalid user ubuntu from 51.77.200.101 port 50684
2020-07-06T08:01:38.309388vps751288.ovh.net sshd\[7827\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.ip-51-77-200.eu

Jul  6 08:52:53 * sshd[20081]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.245.53.163
Jul  6 08:52:55 * sshd[20081]: Failed password for invalid user hadoop from 198.245.53.163 port 32862 ssh2