Apr 27 19:09:53 ws22vmsma01 sshd[82873]: Failed password for root from 51.68.231.103 port 56198 ssh2
Apr 27 19:15:12 ws22vmsma01 sshd[95226]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.231.103
...

$f2bV_matches

Brute force SMTP login attempted.
...

SSH Brute Force

Apr 19 00:59:39 host sshd[29966]: Invalid user ubuntu from 51.68.231.103 port 52450
...

Apr 13 19:40:59 localhost sshd[17115]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.ip-51-68-231.eu  user=root
Apr 13 19:41:01 localhost sshd[17115]: Failed password for root from 51.68.231.103 port 58230 ssh2
Apr 13 19:45:01 localhost sshd[17648]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.ip-51-68-231.eu  user=games
Apr 13 19:45:02 localhost sshd[17648]: Failed password for games from 51.68.231.103 port 37712 ssh2
Apr 13 19:48:39 localhost sshd[18128]: Invalid user admin from 51.68.231.103 port 45422
...

Apr 13 06:09:58 ncomp sshd[27803]: Invalid user alien from 51.68.231.103
Apr 13 06:09:58 ncomp sshd[27803]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.231.103
Apr 13 06:09:58 ncomp sshd[27803]: Invalid user alien from 51.68.231.103
Apr 13 06:10:00 ncomp sshd[27803]: Failed password for invalid user alien from 51.68.231.103 port 42298 ssh2

Apr 10 20:29:38  sshd[22269]: Failed password for invalid user home from 51.68.231.103 port 51754 ssh2

2020-04-06T21:54:17.706062centos sshd[21484]: Invalid user altibase from 51.68.231.103 port 47372
2020-04-06T21:54:19.946390centos sshd[21484]: Failed password for invalid user altibase from 51.68.231.103 port 47372 ssh2
2020-04-06T21:58:26.441197centos sshd[21799]: Invalid user admin from 51.68.231.103 port 57960
...

5x Failed Password

2019-12-16T05:58:07.460272suse-nuc sshd[24468]: Invalid user universitaetsgelaende from 51.68.231.103 port 32840
...

Dec 19 19:58:07 dallas01 sshd[7093]: Failed password for invalid user toni from 51.68.231.103 port 34496 ssh2
Dec 19 20:03:04 dallas01 sshd[11536]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.231.103
Dec 19 20:03:07 dallas01 sshd[11536]: Failed password for invalid user home from 51.68.231.103 port 41006 ssh2

Jan 16 14:05:28 lnxded63 sshd[6682]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.231.103

Unauthorized connection attempt detected from IP address 51.68.231.103 to port 2220 [J]

Jan  7 22:41:40 plex sshd[10511]: Invalid user aris from 51.68.231.103 port 42618

Dec 30 20:07:46 zeus sshd[10406]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.231.103 
Dec 30 20:07:48 zeus sshd[10406]: Failed password for invalid user design from 51.68.231.103 port 53504 ssh2
Dec 30 20:12:05 zeus sshd[10613]: Failed password for root from 51.68.231.103 port 35556 ssh2
Dec 30 20:14:38 zeus sshd[10690]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.231.103

Dec 23 01:45:14 server sshd\[487\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.ip-51-68-231.eu  user=root
Dec 23 01:45:16 server sshd\[487\]: Failed password for root from 51.68.231.103 port 59082 ssh2
Dec 23 01:52:00 server sshd\[2152\]: Invalid user charle from 51.68.231.103
Dec 23 01:52:00 server sshd\[2152\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.ip-51-68-231.eu 
Dec 23 01:52:02 server sshd\[2152\]: Failed password for invalid user charle from 51.68.231.103 port 57766 ssh2
...

...

Dec 14 06:29:51 meumeu sshd[12356]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.231.103 
Dec 14 06:29:53 meumeu sshd[12356]: Failed password for invalid user mysql from 51.68.231.103 port 39308 ssh2
Dec 14 06:34:44 meumeu sshd[13062]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.231.103 
...

Dec  8 18:19:31 dedicated sshd[5469]: Invalid user goldie from 51.68.231.103 port 56476

2019-12-03T11:46:37.735392abusebot.cloudsearch.cf sshd\[7184\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.ip-51-68-231.eu  user=root

Nov  5 20:07:19 eddieflores sshd\[16652\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.ip-51-68-231.eu  user=root
Nov  5 20:07:21 eddieflores sshd\[16652\]: Failed password for root from 51.68.231.103 port 40054 ssh2
Nov  5 20:10:57 eddieflores sshd\[17042\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.ip-51-68-231.eu  user=root
Nov  5 20:10:59 eddieflores sshd\[17042\]: Failed password for root from 51.68.231.103 port 49030 ssh2
Nov  5 20:14:42 eddieflores sshd\[17348\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.ip-51-68-231.eu  user=root

Nov  5 06:25:56 [host] sshd[30692]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.231.103  user=root
Nov  5 06:25:58 [host] sshd[30692]: Failed password for root from 51.68.231.103 port 56692 ssh2
Nov  5 06:29:24 [host] sshd[30747]: Invalid user acitoolkit from 51.68.231.103
Nov  5 06:29:24 [host] sshd[30747]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.231.103

Nov  3 23:12:26 itv-usvr-01 sshd[3797]: Invalid user hipolito from 51.68.231.103
Nov  3 23:12:26 itv-usvr-01 sshd[3797]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.231.103
Nov  3 23:12:26 itv-usvr-01 sshd[3797]: Invalid user hipolito from 51.68.231.103
Nov  3 23:12:28 itv-usvr-01 sshd[3797]: Failed password for invalid user hipolito from 51.68.231.103 port 44580 ssh2

Oct 21 19:07:34 server sshd\[3164\]: Invalid user overview from 51.68.231.103
Oct 21 19:07:34 server sshd\[3164\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.ip-51-68-231.eu 
Oct 21 19:07:37 server sshd\[3164\]: Failed password for invalid user overview from 51.68.231.103 port 39158 ssh2
Oct 21 19:30:10 server sshd\[8865\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.ip-51-68-231.eu  user=root
Oct 21 19:30:13 server sshd\[8865\]: Failed password for root from 51.68.231.103 port 37518 ssh2
...

Unauthorized connection attempt detected from IP address 51.68.231.147 to port 2220 [J]

Unauthorized connection attempt detected from IP address 51.68.231.147 to port 2220 [J]

Unauthorized connection attempt detected from IP address 51.68.231.147 to port 2220 [J]

...

Jan  6 18:45:51 areeb-Workstation sshd[22014]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.231.147 
Jan  6 18:45:53 areeb-Workstation sshd[22014]: Failed password for invalid user flf from 51.68.231.147 port 43874 ssh2
...

$f2bV_matches

$f2bV_matches_ltvn

Dec  9 20:59:17 php1 sshd\[12510\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.ip-51-68-231.eu  user=root
Dec  9 20:59:19 php1 sshd\[12510\]: Failed password for root from 51.68.231.147 port 35294 ssh2
Dec  9 21:04:36 php1 sshd\[13221\]: Invalid user cn from 51.68.231.147
Dec  9 21:04:36 php1 sshd\[13221\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.ip-51-68-231.eu
Dec  9 21:04:38 php1 sshd\[13221\]: Failed password for invalid user cn from 51.68.231.147 port 43312 ssh2

Dec  9 21:20:44 MK-Soft-VM3 sshd[15098]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.231.147 
Dec  9 21:20:45 MK-Soft-VM3 sshd[15098]: Failed password for invalid user dbus from 51.68.231.147 port 44808 ssh2
...

Wordpress Admin Login attack

Aug 13 20:21:21 XXX sshd[7282]: Invalid user postgres from 51.68.231.147 port 33448

Invalid user gt from 51.68.231.147 port 44702

Aug 10 04:40:52 *** sshd[28823]: Invalid user bouncerke from 51.68.231.147

Aug  9 00:34:05 localhost sshd\[15500\]: Invalid user dasusr1 from 51.68.231.147 port 55556
Aug  9 00:34:05 localhost sshd\[15500\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.231.147
Aug  9 00:34:08 localhost sshd\[15500\]: Failed password for invalid user dasusr1 from 51.68.231.147 port 55556 ssh2

Aug  6 17:40:28 yabzik sshd[9079]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.231.147
Aug  6 17:40:31 yabzik sshd[9079]: Failed password for invalid user 123456 from 51.68.231.147 port 56806 ssh2
Aug  6 17:45:05 yabzik sshd[10478]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.231.147

Mar  3 23:46:45 gw1 sshd[25825]: Failed password for root from 112.85.42.174 port 39103 ssh2
Mar  3 23:46:59 gw1 sshd[25825]: error: maximum authentication attempts exceeded for root from 112.85.42.174 port 39103 ssh2 [preauth]
...

2020-01-14T22:33:49.978Z CLOSE host=37.204.101.200 port=46010 fd=4 time=20.017 bytes=17
...

Nov 12 18:56:25 mercury wordpress(lukegirvin.com)[23017]: XML-RPC authentication failure for luke from 101.50.1.32
...

Telnet Server BruteForce Attack

REQUESTED PAGE: /wp-admin/edit.php?post_type=wd_ads_ads&export=export_csv&path=../wp-config.php

[Fri Oct 25 14:17:19.071891 2019] [access_compat:error] [pid 23907] [client 101.53.141.97:61008] AH01797: client denied by server configuration: /var/www/html/luke/wp-login.php
...

SMTP brute force
...

Dec  8 18:56:17 mercury smtpd[1197]: 239b476bdd4ccbfe smtp event=failed-command address=103.139.44.155 host=103.139.44.155 command="AUTH LOGIN" result="503 5.5.1 Invalid command: Command not supported"
...

REQUESTED PAGE: /wp-admin/admin.php?page=newsletters-history&wpmlmethod=exportdownload&file=../wp-config.php

Mar  3 10:22:24 ws24vmsma01 sshd[163516]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.189.209.143
Mar  3 10:22:26 ws24vmsma01 sshd[163516]: Failed password for invalid user chef from 177.189.209.143 port 62946 ssh2
...

Nov 28 14:10:48 mercury smtpd[1220]: bd65e95284a0d2ae smtp event=failed-command address=103.114.104.149 host=103.114.104.149 command="RCPT to:" result="550 Invalid recipient"
...

suspicious action Tue, 03 Mar 2020 10:22:36 -0300

2020-02-18T11:03:20.628Z CLOSE host=1.53.196.177 port=46948 fd=5 time=20.008 bytes=8
...

20/3/3@08:22:25: FAIL: Alarm-Network address from=201.249.66.226
...

Nov 20 16:15:10 mercury smtpd[1220]: bd65e1f076840358 smtp event=failed-command address=103.199.17.2 host=103.199.17.2 command="RCPT to:" result="550 Invalid recipient"
...