Jul 10 07:20:03 santamaria sshd\[32287\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.73.195  user=root
Jul 10 07:20:05 santamaria sshd\[32287\]: Failed password for root from 54.37.73.195 port 59367 ssh2
Jul 10 07:20:07 santamaria sshd\[32287\]: Failed password for root from 54.37.73.195 port 59367 ssh2
...

prod6
...

prod6
...

Jun 25 10:39:11 santamaria sshd\[12681\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.73.195  user=root
Jun 25 10:39:13 santamaria sshd\[12681\]: Failed password for root from 54.37.73.195 port 22178 ssh2
Jun 25 10:39:15 santamaria sshd\[12681\]: Failed password for root from 54.37.73.195 port 22178 ssh2
...

Jun 24 13:19:11 IngegnereFirenze sshd[28563]: User root from 54.37.73.195 not allowed because not listed in AllowUsers
...

2020-06-23T15:49:15.626102linuxbox-skyline sshd[129910]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.73.195  user=root
2020-06-23T15:49:17.613707linuxbox-skyline sshd[129910]: Failed password for root from 54.37.73.195 port 57181 ssh2
...

Invalid user fhcomp from 54.37.73.195 port 34937

Jun  7 22:28:42 prod4 sshd\[25812\]: Failed password for root from 54.37.73.195 port 54282 ssh2
Jun  7 22:28:44 prod4 sshd\[25812\]: Failed password for root from 54.37.73.195 port 54282 ssh2
Jun  7 22:28:46 prod4 sshd\[25812\]: Failed password for root from 54.37.73.195 port 54282 ssh2
...

Jun  1 15:40:34 prod4 sshd\[1931\]: Failed password for root from 54.37.73.195 port 11274 ssh2
Jun  1 15:40:37 prod4 sshd\[1931\]: Failed password for root from 54.37.73.195 port 11274 ssh2
Jun  1 15:40:38 prod4 sshd\[1931\]: Failed password for root from 54.37.73.195 port 11274 ssh2
...

May 28 14:08:08 webctf sshd[17471]: error: maximum authentication attempts exceeded for invalid user webctf from 54.37.73.195 port 59403 ssh2 [preauth]
May 28 14:35:14 webctf sshd[24244]: User root from 54.37.73.195 not allowed because not listed in AllowUsers
May 28 14:35:14 webctf sshd[24244]: User root from 54.37.73.195 not allowed because not listed in AllowUsers
May 28 14:35:14 webctf sshd[24244]: error: maximum authentication attempts exceeded for invalid user root from 54.37.73.195 port 58637 ssh2 [preauth]
May 28 15:02:01 webctf sshd[30866]: User root from 54.37.73.195 not allowed because not listed in AllowUsers
May 28 15:02:01 webctf sshd[30866]: User root from 54.37.73.195 not allowed because not listed in AllowUsers
May 28 15:02:01 webctf sshd[30866]: error: maximum authentication attempts exceeded for invalid user root from 54.37.73.195 port 29967 ssh2 [preauth]
May 28 15:29:21 webctf sshd[5606]: Invalid user webct from 54.37.73.195 port 50705
May 28 15:29:21 webctf sshd[5
...

Jul 23 07:39:32 web8 sshd\[13142\]: Invalid user oiasp from 54.37.73.219
Jul 23 07:39:32 web8 sshd\[13142\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.73.219
Jul 23 07:39:33 web8 sshd\[13142\]: Failed password for invalid user oiasp from 54.37.73.219 port 44540 ssh2
Jul 23 07:39:35 web8 sshd\[13142\]: Failed password for invalid user oiasp from 54.37.73.219 port 44540 ssh2
Jul 23 07:39:38 web8 sshd\[13142\]: Failed password for invalid user oiasp from 54.37.73.219 port 44540 ssh2

prod6
...

Jul 12 11:59:38 IngegnereFirenze sshd[1793]: User root from 54.37.73.219 not allowed because not listed in AllowUsers
...

Jul  7 05:46:14 localhost sshd[42696]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.ip-54-37-73.eu  user=root
Jul  7 05:46:15 localhost sshd[42696]: Failed password for root from 54.37.73.219 port 2019 ssh2
Jul  7 05:46:17 localhost sshd[42696]: Failed password for root from 54.37.73.219 port 2019 ssh2
Jul  7 05:46:14 localhost sshd[42696]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.ip-54-37-73.eu  user=root
Jul  7 05:46:15 localhost sshd[42696]: Failed password for root from 54.37.73.219 port 2019 ssh2
Jul  7 05:46:17 localhost sshd[42696]: Failed password for root from 54.37.73.219 port 2019 ssh2
Jul  7 05:46:14 localhost sshd[42696]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.ip-54-37-73.eu  user=root
Jul  7 05:46:15 localhost sshd[42696]: Failed password for root from 54.37.73.219 port 2019 ssh2
Jul  7 05:46:17 localhost sshd[42696]: Faile
...

Jul  5 03:57:43 localhost sshd[64089]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.ip-54-37-73.eu  user=root
Jul  5 03:57:45 localhost sshd[64089]: Failed password for root from 54.37.73.219 port 64217 ssh2
Jul  5 03:57:48 localhost sshd[64089]: Failed password for root from 54.37.73.219 port 64217 ssh2
Jul  5 03:57:43 localhost sshd[64089]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.ip-54-37-73.eu  user=root
Jul  5 03:57:45 localhost sshd[64089]: Failed password for root from 54.37.73.219 port 64217 ssh2
Jul  5 03:57:48 localhost sshd[64089]: Failed password for root from 54.37.73.219 port 64217 ssh2
Jul  5 03:57:43 localhost sshd[64089]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.ip-54-37-73.eu  user=root
Jul  5 03:57:45 localhost sshd[64089]: Failed password for root from 54.37.73.219 port 64217 ssh2
Jul  5 03:57:48 localhost sshd[64089]: 
...

Jun 22 07:56:42 game-panel sshd[11418]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.73.219
Jun 22 07:56:44 game-panel sshd[11418]: Failed password for invalid user linuxgamepanel from 54.37.73.219 port 5279 ssh2
Jun 22 07:56:46 game-panel sshd[11418]: Failed password for invalid user linuxgamepanel from 54.37.73.219 port 5279 ssh2
Jun 22 07:56:49 game-panel sshd[11418]: Failed password for invalid user linuxgamepanel from 54.37.73.219 port 5279 ssh2

Jun 21 22:27:16 vmd17057 sshd[29385]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.73.219 
Jun 21 22:27:17 vmd17057 sshd[29385]: Failed password for invalid user shoply from 54.37.73.219 port 7266 ssh2
...

prod6
...

Jun  7 12:02:57 vps670341 sshd[30988]: Invalid user theom from 54.37.73.219 port 40226

Jun  6 15:41:17 Ubuntu-1404-trusty-64-minimal sshd\[11960\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.73.219  user=root
Jun  6 15:41:19 Ubuntu-1404-trusty-64-minimal sshd\[11960\]: Failed password for root from 54.37.73.219 port 14418 ssh2
Jun  6 15:41:22 Ubuntu-1404-trusty-64-minimal sshd\[11960\]: Failed password for root from 54.37.73.219 port 14418 ssh2
Jun  6 15:41:24 Ubuntu-1404-trusty-64-minimal sshd\[11960\]: Failed password for root from 54.37.73.219 port 14418 ssh2
Jun  6 21:28:24 Ubuntu-1404-trusty-64-minimal sshd\[28308\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.73.219  user=root

Sep 20 20:50:45 OPSO sshd\[19688\]: Invalid user vusa from 54.37.73.26 port 39112
Sep 20 20:50:45 OPSO sshd\[19688\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.73.26
Sep 20 20:50:47 OPSO sshd\[19688\]: Failed password for invalid user vusa from 54.37.73.26 port 39112 ssh2
Sep 20 20:54:54 OPSO sshd\[20450\]: Invalid user ROOT500 from 54.37.73.26 port 60051
Sep 20 20:54:54 OPSO sshd\[20450\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.73.26

Aug 30 13:36:22 vps647732 sshd[7413]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.73.26
Aug 30 13:36:25 vps647732 sshd[7413]: Failed password for invalid user tester from 54.37.73.26 port 33867 ssh2
...

Aug 25 19:21:01 vps647732 sshd[17447]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.73.26
Aug 25 19:21:03 vps647732 sshd[17447]: Failed password for invalid user mailtest from 54.37.73.26 port 58787 ssh2
...

Invalid user ahmed from 54.37.73.26 port 40554

(From gretchen.nichols779@gmail.com) Hello,

I'm quite certain you're aware that most successful businesses always have their website come up on the first page of Google search results since they're more relevant, popular, and more credible compared to the other companies found on page 2 or so on. Have you ever wondered how these websites dominated the first page? It's not at all difficult to achieve! We can put your site on the first page using search engine optimization.

I ran a few tests on your website and found out that there are many keywords you can potentially rank for. These are crucial for you to be easily found while people searching on Google input words relevant to your products or services. To give you an idea of my work, I will send you case studies of websites I've worked with before and how they gained more profit after the optimization.

I'll also give you a free consultation over the phone, and the information about your website can benefit you whether or not you choose to avail of m

fail2ban honeypot

2019-10-05T05:00:37.165458abusebot-7.cloudsearch.cf sshd\[23436\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=host217-35-75-193.in-addr.btopenworld.com  user=root

[Aegis] @ 2019-10-05 04:50:47  0100 -> Attempted Administrator Privilege Gain: ET SCAN LibSSH Based Frequent SSH Connections Likely BruteForce Attack

Oct  4 **REMOVED** dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 6 secs\): user=\, method=PLAIN, rip=221.226.50.162, lip=**REMOVED**, TLS, session=\
Oct  4 **REMOVED** dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 6 secs\): user=\, method=PLAIN, rip=221.226.50.162, lip=**REMOVED**, TLS: Disconnected, session=\
Oct  5 **REMOVED** dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 6 secs\): user=\, method=PLAIN, rip=221.226.50.162, lip=**REMOVED**, TLS: Disconnected, session=\

Automatic report - SSH Brute-Force Attack

Oct  5 00:16:34 xtremcommunity sshd\[193497\]: Invalid user 123China from 149.202.206.206 port 42088
Oct  5 00:16:35 xtremcommunity sshd\[193497\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.202.206.206
Oct  5 00:16:37 xtremcommunity sshd\[193497\]: Failed password for invalid user 123China from 149.202.206.206 port 42088 ssh2
Oct  5 00:20:08 xtremcommunity sshd\[193563\]: Invalid user p0o9i8u7 from 149.202.206.206 port 33976
Oct  5 00:20:08 xtremcommunity sshd\[193563\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.202.206.206
...

firewall-block, port(s): 5386/tcp

Oct  5 08:09:56 mintao sshd\[31211\]: Invalid user svt from 159.192.137.43\
Oct  5 08:14:55 mintao sshd\[31222\]: Invalid user svn from 159.192.137.43\

Invalid user pat from 46.101.187.76 port 50098

Oct  5 07:07:48 www sshd\[242367\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.17.156  user=root
Oct  5 07:07:50 www sshd\[242367\]: Failed password for root from 140.143.17.156 port 44960 ssh2
Oct  5 07:11:44 www sshd\[242535\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.17.156  user=root
...

Oct  5 04:07:43 www_kotimaassa_fi sshd[29763]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.42.79
Oct  5 04:07:45 www_kotimaassa_fi sshd[29763]: Failed password for invalid user 1234@QWER from 49.234.42.79 port 38453 ssh2
...

Oct  5 09:31:29 meumeu sshd[6511]: Failed password for root from 168.126.85.225 port 39952 ssh2
Oct  5 09:35:51 meumeu sshd[7101]: Failed password for root from 168.126.85.225 port 51792 ssh2
...

Honeypot attack, port: 445, PTR: PTR record not found

Oct  5 07:06:30 www5 sshd\[49151\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.72.238.180  user=root
Oct  5 07:06:32 www5 sshd\[49151\]: Failed password for root from 201.72.238.180 port 40178 ssh2
Oct  5 07:11:20 www5 sshd\[50136\]: Invalid user 123 from 201.72.238.180
...