Aug 23 12:30:56 lnxmail61 sshd[24014]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.101

2019-08-19T02:38:45.034426abusebot-6.cloudsearch.cf sshd\[27790\]: Invalid user appserver from 45.14.148.101 port 53604

Invalid user www from 45.14.148.141 port 51550

Sep 29 09:46:55 dev0-dcde-rnet sshd[19775]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.141
Sep 29 09:46:57 dev0-dcde-rnet sshd[19775]: Failed password for invalid user postgres5 from 45.14.148.141 port 53390 ssh2
Sep 29 09:56:01 dev0-dcde-rnet sshd[19910]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.141

Sep 29 01:16:02 myhostname sshd[7303]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.141  user=r.r
Sep 29 01:16:03 myhostname sshd[7303]: Failed password for r.r from 45.14.148.141 port 53122 ssh2
Sep 29 01:16:03 myhostname sshd[7303]: Received disconnect from 45.14.148.141 port 53122:11: Bye Bye [preauth]
Sep 29 01:16:03 myhostname sshd[7303]: Disconnected from 45.14.148.141 port 53122 [preauth]
Sep 29 01:28:04 myhostname sshd[20778]: Invalid user nagios3 from 45.14.148.141
Sep 29 01:28:04 myhostname sshd[20778]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.141


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=45.14.148.141

Sep 26 15:50:49 mout sshd[7016]: Disconnected from invalid user storm 45.14.148.141 port 47714 [preauth]
Sep 26 15:58:47 mout sshd[7989]: Invalid user test2 from 45.14.148.141 port 44844

Sep 26 15:50:49 mout sshd[7016]: Disconnected from invalid user storm 45.14.148.141 port 47714 [preauth]
Sep 26 15:58:47 mout sshd[7989]: Invalid user test2 from 45.14.148.141 port 44844

Sep 25 22:44:19 h2646465 sshd[29358]: Invalid user weblogic from 45.14.148.141
Sep 25 22:44:19 h2646465 sshd[29358]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.141
Sep 25 22:44:19 h2646465 sshd[29358]: Invalid user weblogic from 45.14.148.141
Sep 25 22:44:21 h2646465 sshd[29358]: Failed password for invalid user weblogic from 45.14.148.141 port 48042 ssh2
Sep 25 22:55:55 h2646465 sshd[31066]: Invalid user ospite from 45.14.148.141
Sep 25 22:55:55 h2646465 sshd[31066]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.141
Sep 25 22:55:55 h2646465 sshd[31066]: Invalid user ospite from 45.14.148.141
Sep 25 22:55:57 h2646465 sshd[31066]: Failed password for invalid user ospite from 45.14.148.141 port 48194 ssh2
Sep 25 23:06:08 h2646465 sshd[32748]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.141  user=root
Sep 25 23:06:10 h2646465 sshd[32748]: Failed password

 TCP (SYN) 45.14.148.191:50832 -> port 22, len 44

Port scan denied

Failed password for invalid user test from 45.14.148.95 port 48020 ssh2
Invalid user play from 45.14.148.95 port 43540
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.95
Failed password for invalid user play from 45.14.148.95 port 43540 ssh2
Invalid user tjd from 45.14.148.95 port 39586

Jul 15 01:25:00 h1745522 sshd[6026]: Invalid user idd from 45.14.148.95 port 39970
Jul 15 01:25:00 h1745522 sshd[6026]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.95
Jul 15 01:25:00 h1745522 sshd[6026]: Invalid user idd from 45.14.148.95 port 39970
Jul 15 01:25:01 h1745522 sshd[6026]: Failed password for invalid user idd from 45.14.148.95 port 39970 ssh2
Jul 15 01:28:45 h1745522 sshd[6604]: Invalid user xuy from 45.14.148.95 port 47142
Jul 15 01:28:45 h1745522 sshd[6604]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.95
Jul 15 01:28:45 h1745522 sshd[6604]: Invalid user xuy from 45.14.148.95 port 47142
Jul 15 01:28:48 h1745522 sshd[6604]: Failed password for invalid user xuy from 45.14.148.95 port 47142 ssh2
Jul 15 01:32:25 h1745522 sshd[7122]: Invalid user developer from 45.14.148.95 port 53726
...

Jul 13 05:44:43 ns382633 sshd\[31650\]: Invalid user farmacia from 45.14.148.95 port 48638
Jul 13 05:44:43 ns382633 sshd\[31650\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.95
Jul 13 05:44:45 ns382633 sshd\[31650\]: Failed password for invalid user farmacia from 45.14.148.95 port 48638 ssh2
Jul 13 05:56:05 ns382633 sshd\[1371\]: Invalid user orange from 45.14.148.95 port 34496
Jul 13 05:56:05 ns382633 sshd\[1371\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.95

Jul  9 07:27:41 vmd26974 sshd[16755]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.95
Jul  9 07:27:43 vmd26974 sshd[16755]: Failed password for invalid user znc from 45.14.148.95 port 59952 ssh2
...

Jul  6 23:34:30 inter-technics sshd[10133]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.95  user=root
Jul  6 23:34:32 inter-technics sshd[10133]: Failed password for root from 45.14.148.95 port 57130 ssh2
Jul  6 23:38:08 inter-technics sshd[10366]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.95  user=root
Jul  6 23:38:09 inter-technics sshd[10366]: Failed password for root from 45.14.148.95 port 33586 ssh2
Jul  6 23:41:43 inter-technics sshd[10648]: Invalid user testsftp from 45.14.148.95 port 37868
...

SSH auth scanning - multiple failed logins

SSH Brute-Force attacks

Aug 20 16:08:03 web9 sshd\[4855\]: Invalid user alejandro from 183.131.83.73
Aug 20 16:08:03 web9 sshd\[4855\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.131.83.73
Aug 20 16:08:05 web9 sshd\[4855\]: Failed password for invalid user alejandro from 183.131.83.73 port 59171 ssh2
Aug 20 16:13:01 web9 sshd\[5944\]: Invalid user camille from 183.131.83.73
Aug 20 16:13:01 web9 sshd\[5944\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.131.83.73

Aug 21 04:00:33 OPSO sshd\[13264\]: Invalid user daphne from 213.251.185.51 port 41906
Aug 21 04:00:33 OPSO sshd\[13264\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.251.185.51
Aug 21 04:00:35 OPSO sshd\[13264\]: Failed password for invalid user daphne from 213.251.185.51 port 41906 ssh2
Aug 21 04:04:26 OPSO sshd\[13926\]: Invalid user ark from 213.251.185.51 port 58440
Aug 21 04:04:26 OPSO sshd\[13926\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.251.185.51

2019-08-12T15:30:03.358195wiz-ks3 sshd[30225]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=160.emeraldonion.org  user=root
2019-08-12T15:30:05.452959wiz-ks3 sshd[30225]: Failed password for root from 23.129.64.160 port 21160 ssh2
2019-08-12T15:30:07.693121wiz-ks3 sshd[30225]: Failed password for root from 23.129.64.160 port 21160 ssh2
2019-08-12T15:30:03.358195wiz-ks3 sshd[30225]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=160.emeraldonion.org  user=root
2019-08-12T15:30:05.452959wiz-ks3 sshd[30225]: Failed password for root from 23.129.64.160 port 21160 ssh2
2019-08-12T15:30:07.693121wiz-ks3 sshd[30225]: Failed password for root from 23.129.64.160 port 21160 ssh2
2019-08-12T15:30:03.358195wiz-ks3 sshd[30225]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=160.emeraldonion.org  user=root
2019-08-12T15:30:05.452959wiz-ks3 sshd[30225]: Failed password for root from 23.129.64.160 port

Automatic report - Banned IP Access

MagicSpam Rule: block_rbl_lists (dyna.spamrats.com); Spammer IP: 115.164.223.76

Automatic report - Port Scan Attack

SSH Bruteforce attack

Aug 21 01:49:45 hb sshd\[28366\]: Invalid user tyler from 190.147.159.34
Aug 21 01:49:45 hb sshd\[28366\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.147.159.34
Aug 21 01:49:47 hb sshd\[28366\]: Failed password for invalid user tyler from 190.147.159.34 port 41172 ssh2
Aug 21 01:54:45 hb sshd\[28773\]: Invalid user postgres from 190.147.159.34
Aug 21 01:54:45 hb sshd\[28773\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.147.159.34

Aug 21 03:34:27 mout sshd[3118]: Invalid user postgres from 177.64.148.162 port 43410

Aug 20 15:30:10 web9 sshd\[29337\]: Invalid user sn from 164.132.38.167
Aug 20 15:30:10 web9 sshd\[29337\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.38.167
Aug 20 15:30:13 web9 sshd\[29337\]: Failed password for invalid user sn from 164.132.38.167 port 49178 ssh2
Aug 20 15:34:12 web9 sshd\[30187\]: Invalid user sesamus from 164.132.38.167
Aug 20 15:34:12 web9 sshd\[30187\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.38.167

Aug 20 15:47:26 friendsofhawaii sshd\[22803\]: Invalid user redis from 167.71.212.68
Aug 20 15:47:26 friendsofhawaii sshd\[22803\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.212.68
Aug 20 15:47:27 friendsofhawaii sshd\[22803\]: Failed password for invalid user redis from 167.71.212.68 port 42984 ssh2
Aug 20 15:53:47 friendsofhawaii sshd\[23385\]: Invalid user matt from 167.71.212.68
Aug 20 15:53:47 friendsofhawaii sshd\[23385\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.212.68

Aug 21 03:33:53 vpn01 sshd\[29986\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.1.99.12  user=root
Aug 21 03:33:56 vpn01 sshd\[29986\]: Failed password for root from 196.1.99.12 port 58049 ssh2
Aug 21 03:37:25 vpn01 sshd\[30002\]: Invalid user test from 196.1.99.12

Aug 21 02:34:35 mail sshd\[20303\]: Invalid user ross from 213.203.173.179 port 36058
Aug 21 02:34:35 mail sshd\[20303\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.203.173.179
...

Aug 20 16:08:26 lcdev sshd\[23458\]: Invalid user ftpuser from 174.138.20.87
Aug 20 16:08:26 lcdev sshd\[23458\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.20.87
Aug 20 16:08:28 lcdev sshd\[23458\]: Failed password for invalid user ftpuser from 174.138.20.87 port 41691 ssh2
Aug 20 16:13:36 lcdev sshd\[24032\]: Invalid user alias from 174.138.20.87
Aug 20 16:13:36 lcdev sshd\[24032\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.20.87

Automatic report - Banned IP Access