Sep 23 14:50:46 venus sshd\[10772\]: Invalid user plugins from 80.211.133.140 port 54020
Sep 23 14:50:46 venus sshd\[10772\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.133.140
Sep 23 14:50:48 venus sshd\[10772\]: Failed password for invalid user plugins from 80.211.133.140 port 54020 ssh2
...

Sep 15 04:08:04 hcbb sshd\[19390\]: Invalid user walter from 80.211.133.140
Sep 15 04:08:04 hcbb sshd\[19390\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.133.140
Sep 15 04:08:06 hcbb sshd\[19390\]: Failed password for invalid user walter from 80.211.133.140 port 47414 ssh2
Sep 15 04:17:02 hcbb sshd\[20425\]: Invalid user sccs from 80.211.133.140
Sep 15 04:17:02 hcbb sshd\[20425\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.133.140

Sep 14 21:23:14 sshgateway sshd\[5244\]: Invalid user sc from 80.211.133.140
Sep 14 21:23:14 sshgateway sshd\[5244\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.133.140
Sep 14 21:23:16 sshgateway sshd\[5244\]: Failed password for invalid user sc from 80.211.133.140 port 37538 ssh2

Sep 12 07:03:18 itv-usvr-01 sshd[2706]: Invalid user miusuario from 80.211.133.140
Sep 12 07:03:18 itv-usvr-01 sshd[2706]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.133.140
Sep 12 07:03:18 itv-usvr-01 sshd[2706]: Invalid user miusuario from 80.211.133.140
Sep 12 07:03:20 itv-usvr-01 sshd[2706]: Failed password for invalid user miusuario from 80.211.133.140 port 44098 ssh2
Sep 12 07:09:45 itv-usvr-01 sshd[3095]: Invalid user deploy from 80.211.133.140

Sep  5 03:28:53 microserver sshd[64318]: Invalid user test101 from 80.211.133.140 port 52148
Sep  5 03:28:53 microserver sshd[64318]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.133.140
Sep  5 03:28:56 microserver sshd[64318]: Failed password for invalid user test101 from 80.211.133.140 port 52148 ssh2
Sep  5 03:34:35 microserver sshd[64999]: Invalid user ubuntu from 80.211.133.140 port 57088
Sep  5 03:34:35 microserver sshd[64999]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.133.140
Sep  5 03:46:02 microserver sshd[1630]: Invalid user git_user from 80.211.133.140 port 37318
Sep  5 03:46:02 microserver sshd[1630]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.133.140
Sep  5 03:46:04 microserver sshd[1630]: Failed password for invalid user git_user from 80.211.133.140 port 37318 ssh2
Sep  5 03:51:58 microserver sshd[2365]: Invalid user invoices from 80.211.133.1

Sep  3 05:57:10 dedicated sshd[13988]: Invalid user redis2 from 80.211.133.140 port 55840

Jan 31 10:59:03 prox sshd[1614]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.133.238 
Jan 31 10:59:05 prox sshd[1614]: Failed password for invalid user aaron from 80.211.133.238 port 38500 ssh2

Unauthorized connection attempt detected from IP address 80.211.133.238 to port 2220 [J]

Unauthorized connection attempt detected from IP address 80.211.133.238 to port 2220 [J]

Unauthorized connection attempt detected from IP address 80.211.133.238 to port 2220 [J]

Dec 16 15:39:54 legacy sshd[1484]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.133.238
Dec 16 15:39:56 legacy sshd[1484]: Failed password for invalid user diana from 80.211.133.238 port 47288 ssh2
Dec 16 15:45:24 legacy sshd[1738]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.133.238
...

Dec 12 14:23:05 vibhu-HP-Z238-Microtower-Workstation sshd\[11731\]: Invalid user connock from 80.211.133.238
Dec 12 14:23:05 vibhu-HP-Z238-Microtower-Workstation sshd\[11731\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.133.238
Dec 12 14:23:07 vibhu-HP-Z238-Microtower-Workstation sshd\[11731\]: Failed password for invalid user connock from 80.211.133.238 port 53020 ssh2
Dec 12 14:28:41 vibhu-HP-Z238-Microtower-Workstation sshd\[12379\]: Invalid user 123456 from 80.211.133.238
Dec 12 14:28:41 vibhu-HP-Z238-Microtower-Workstation sshd\[12379\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.133.238
...

SSH Bruteforce attempt

Dec  4 21:44:19 wbs sshd\[17964\]: Invalid user stoan from 80.211.133.219
Dec  4 21:44:19 wbs sshd\[17964\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.energetycznie.com.pl
Dec  4 21:44:20 wbs sshd\[17964\]: Failed password for invalid user stoan from 80.211.133.219 port 41938 ssh2
Dec  4 21:50:00 wbs sshd\[18516\]: Invalid user wnews from 80.211.133.219
Dec  4 21:50:00 wbs sshd\[18516\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.energetycznie.com.pl

Dec  4 20:22:58 MK-Soft-VM5 sshd[2816]: Failed password for root from 80.211.133.238 port 54098 ssh2
...

Dec  4 18:47:10 cvbnet sshd[15502]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.133.238 
Dec  4 18:47:12 cvbnet sshd[15502]: Failed password for invalid user zhangrui from 80.211.133.238 port 43240 ssh2
...

Dec  4 09:21:31 MK-Soft-VM7 sshd[23529]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.133.238 
Dec  4 09:21:33 MK-Soft-VM7 sshd[23529]: Failed password for invalid user 123456 from 80.211.133.238 port 58516 ssh2
...

Dec  3 07:21:11 Ubuntu-1404-trusty-64-minimal sshd\[28778\]: Invalid user qi from 80.211.133.238
Dec  3 07:21:11 Ubuntu-1404-trusty-64-minimal sshd\[28778\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.133.238
Dec  3 07:21:13 Ubuntu-1404-trusty-64-minimal sshd\[28778\]: Failed password for invalid user qi from 80.211.133.238 port 50616 ssh2
Dec  3 07:27:00 Ubuntu-1404-trusty-64-minimal sshd\[31272\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.133.238  user=root
Dec  3 07:27:01 Ubuntu-1404-trusty-64-minimal sshd\[31272\]: Failed password for root from 80.211.133.238 port 41720 ssh2

Dec  3 08:11:23 minden010 sshd[3840]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.133.219
Dec  3 08:11:25 minden010 sshd[3840]: Failed password for invalid user fillis from 80.211.133.219 port 46306 ssh2
Dec  3 08:17:09 minden010 sshd[5721]: Failed password for root from 80.211.133.219 port 51966 ssh2
...

Dec  1 12:56:25 server sshd\[11050\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=cultadv.cloud  user=root
Dec  1 12:56:27 server sshd\[11050\]: Failed password for root from 80.211.133.238 port 53904 ssh2
Dec  1 13:16:45 server sshd\[15795\]: Invalid user glueck from 80.211.133.238
Dec  1 13:16:45 server sshd\[15795\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=cultadv.cloud 
Dec  1 13:16:46 server sshd\[15795\]: Failed password for invalid user glueck from 80.211.133.238 port 52668 ssh2
...

Invalid user backup from 80.211.133.219 port 38479

Jan  7 13:50:15 powerpi2 sshd[12838]: Invalid user yph from 218.78.54.80 port 50969
Jan  7 13:50:17 powerpi2 sshd[12838]: Failed password for invalid user yph from 218.78.54.80 port 50969 ssh2
Jan  7 13:55:45 powerpi2 sshd[13086]: Invalid user ubnt from 218.78.54.80 port 35070
...

Unauthorized connection attempt detected from IP address 103.52.216.52 to port 81

Jan  7 09:24:36 ny01 sshd[2692]: Failed password for root from 222.186.52.86 port 13597 ssh2
Jan  7 09:25:59 ny01 sshd[3539]: Failed password for root from 222.186.52.86 port 51928 ssh2

Jan  7 05:12:37 hanapaa sshd\[978\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.174  user=root
Jan  7 05:12:39 hanapaa sshd\[978\]: Failed password for root from 112.85.42.174 port 44028 ssh2
Jan  7 05:12:56 hanapaa sshd\[1016\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.174  user=root
Jan  7 05:12:58 hanapaa sshd\[1016\]: Failed password for root from 112.85.42.174 port 12315 ssh2
Jan  7 05:13:01 hanapaa sshd\[1016\]: Failed password for root from 112.85.42.174 port 12315 ssh2

Automatic report - Port Scan Attack

Jan  7 14:02:28 pornomens sshd\[24925\]: Invalid user je from 41.160.119.218 port 56502
Jan  7 14:02:28 pornomens sshd\[24925\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.160.119.218
Jan  7 14:02:30 pornomens sshd\[24925\]: Failed password for invalid user je from 41.160.119.218 port 56502 ssh2
...

Unauthorized connection attempt detected from IP address 1.245.61.144 to port 2220 [J]

Jan  7 14:02:20 icecube postfix/smtpd[25587]: NOQUEUE: reject: RCPT from unknown[190.113.162.53]: 450 4.7.1 <190-113-162-53.supercanal.com.ar>: Helo command rejected: Host not found; from= to= proto=ESMTP helo=<190-113-162-53.supercanal.com.ar>

badbot

Unauthorized connection attempt detected from IP address 131.221.97.70 to port 2220 [J]

Jan  7 07:48:47 neweola sshd[18948]: Did not receive identification string from 194.146.43.172 port 42580
Jan  7 07:58:17 neweola sshd[19172]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.146.43.172  user=bin
Jan  7 07:58:19 neweola sshd[19172]: Failed password for bin from 194.146.43.172 port 59546 ssh2
Jan  7 07:58:20 neweola sshd[19172]: Received disconnect from 194.146.43.172 port 59546:11: Normal Shutdown, Thank you for playing [preauth]
Jan  7 07:58:20 neweola sshd[19172]: Disconnected from authenticating user bin 194.146.43.172 port 59546 [preauth]
Jan  7 08:00:14 neweola sshd[19209]: Invalid user daemond from 194.146.43.172 port 60476
Jan  7 08:00:14 neweola sshd[19209]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.146.43.172 
Jan  7 08:00:15 neweola sshd[19209]: Failed password for invalid user daemond from 194.146.43.172 port 60476 ssh2
Jan  7 08:00:17 neweola sshd[19........
-------------------------------

Unauthorized connection attempt from IP address 123.16.130.74 on Port 445(SMB)

Jan  7 04:34:50 wbs sshd\[16341\]: Invalid user demo from 122.15.82.92
Jan  7 04:34:50 wbs sshd\[16341\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.15.82.92
Jan  7 04:34:51 wbs sshd\[16341\]: Failed password for invalid user demo from 122.15.82.92 port 50544 ssh2
Jan  7 04:38:12 wbs sshd\[16736\]: Invalid user aatul from 122.15.82.92
Jan  7 04:38:12 wbs sshd\[16736\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.15.82.92

Acesso a página sensível
[REQ] => GET /onestepcheckout/index/ HTTP/1.1
[UA] => Mozilla/5.0 (iPhone; CPU iPhone OS 13_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.4 Mobile/15E148 Safari/604.1
 [DATA] => 07/Jan/2020:11:31:41 +0000
[POSTD] => /checkout/onepage/

Jan  7 14:54:11 ns381471 sshd[21159]: Failed password for root from 218.92.0.165 port 63137 ssh2
Jan  7 14:54:26 ns381471 sshd[21159]: error: maximum authentication attempts exceeded for root from 218.92.0.165 port 63137 ssh2 [preauth]