Unauthorized connection attempt detected from IP address 125.137.133.138 to port 80

80.82.77.86 was recorded 12 times by 6 hosts attempting to connect to the following ports: 626,623. Incident counter (4h, 24h, all-time): 12, 17, 3979

Unauthorized connection attempt detected from IP address 24.51.78.96 to port 23

Unauthorized connection attempt detected from IP address 189.170.120.63 to port 23

Dec 29 14:32:18 firewall sshd[23217]: Invalid user vip-078 from 129.28.188.21
Dec 29 14:32:20 firewall sshd[23217]: Failed password for invalid user vip-078 from 129.28.188.21 port 57782 ssh2
Dec 29 14:36:32 firewall sshd[23252]: Invalid user dinsmore from 129.28.188.21
...

Dec 29 16:15:09 sd-53420 sshd\[31900\]: Invalid user test from 77.70.96.195
Dec 29 16:15:09 sd-53420 sshd\[31900\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.70.96.195
Dec 29 16:15:11 sd-53420 sshd\[31900\]: Failed password for invalid user test from 77.70.96.195 port 37544 ssh2
Dec 29 16:17:24 sd-53420 sshd\[533\]: User root from 77.70.96.195 not allowed because none of user's groups are listed in AllowGroups
Dec 29 16:17:24 sd-53420 sshd\[533\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.70.96.195  user=root
...

Lines containing failures of 81.249.238.131
Dec 26 06:05:51 dns01 sshd[17401]: Invalid user pi from 81.249.238.131 port 56164
Dec 26 06:05:51 dns01 sshd[17401]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.249.238.131
Dec 26 06:05:51 dns01 sshd[17406]: Invalid user pi from 81.249.238.131 port 56168
Dec 26 06:05:51 dns01 sshd[17406]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.249.238.131


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=81.249.238.131

Dec 29 16:42:31 grey postfix/smtpd\[21125\]: NOQUEUE: reject: RCPT from consist.sapuxfiori.com\[63.80.184.99\]: 554 5.7.1 Service unavailable\; Client host \[63.80.184.99\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[63.80.184.99\]\; from=\ to=\ proto=ESMTP helo=\
...

Dec 29 16:17:51 herz-der-gamer sshd[22787]: Invalid user test from 195.154.119.48 port 38072
Dec 29 16:17:51 herz-der-gamer sshd[22787]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.154.119.48
Dec 29 16:17:51 herz-der-gamer sshd[22787]: Invalid user test from 195.154.119.48 port 38072
Dec 29 16:17:53 herz-der-gamer sshd[22787]: Failed password for invalid user test from 195.154.119.48 port 38072 ssh2
...

Dec 29 17:53:22 MK-Soft-Root1 sshd[23395]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.217.83.201 
Dec 29 17:53:24 MK-Soft-Root1 sshd[23395]: Failed password for invalid user mramirez from 144.217.83.201 port 51552 ssh2
...

Automatic report - Banned IP Access

Dec 29 11:51:01 ws24vmsma01 sshd[62525]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.146.141
Dec 29 11:51:03 ws24vmsma01 sshd[62525]: Failed password for invalid user azur from 159.65.146.141 port 45480 ssh2
...

Unauthorized connection attempt detected from IP address 88.247.147.145 to port 9090

Dec 29 17:54:07 dev0-dcde-rnet sshd[2886]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.127.99.87
Dec 29 17:54:09 dev0-dcde-rnet sshd[2886]: Failed password for invalid user shantanu from 40.127.99.87 port 54148 ssh2
Dec 29 17:57:22 dev0-dcde-rnet sshd[2903]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.127.99.87

Dec 29 18:08:11 MK-Soft-VM7 sshd[14416]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.18.215 
Dec 29 18:08:12 MK-Soft-VM7 sshd[14416]: Failed password for invalid user goheen from 139.59.18.215 port 34722 ssh2
...