Invalid user loyal from 51.68.47.44 port 39692

Feb 24 15:59:04 web1 sshd\[12321\]: Invalid user compose from 51.68.47.44
Feb 24 15:59:04 web1 sshd\[12321\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.47.44
Feb 24 15:59:05 web1 sshd\[12321\]: Failed password for invalid user compose from 51.68.47.44 port 56104 ssh2
Feb 24 16:06:48 web1 sshd\[13312\]: Invalid user speech-dispatcher from 51.68.47.44
Feb 24 16:06:48 web1 sshd\[13312\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.47.44

Feb 14 07:30:43 l02a sshd[28275]: Invalid user motion from 51.68.47.44
Feb 14 07:30:43 l02a sshd[28275]: Invalid user motion from 51.68.47.44
Feb 14 07:30:45 l02a sshd[28275]: Failed password for invalid user motion from 51.68.47.44 port 50786 ssh2

Feb  5 03:47:06 hpm sshd\[13637\]: Invalid user tao from 51.68.47.44
Feb  5 03:47:06 hpm sshd\[13637\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=44.ip-51-68-47.eu
Feb  5 03:47:09 hpm sshd\[13637\]: Failed password for invalid user tao from 51.68.47.44 port 38922 ssh2
Feb  5 03:50:08 hpm sshd\[13961\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=44.ip-51-68-47.eu  user=root
Feb  5 03:50:10 hpm sshd\[13961\]: Failed password for root from 51.68.47.44 port 39440 ssh2

Lines containing failures of 51.68.47.226
May 28 02:01:46 ghostnameioc sshd[23647]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.47.226  user=r.r
May 28 02:01:47 ghostnameioc sshd[23647]: Failed password for r.r from 51.68.47.226 port 58736 ssh2
May 28 02:01:47 ghostnameioc sshd[23647]: Received disconnect from 51.68.47.226 port 58736:11: Bye Bye [preauth]
May 28 02:01:47 ghostnameioc sshd[23647]: Disconnected from authenticating user r.r 51.68.47.226 port 58736 [preauth]
May 28 02:13:08 ghostnameioc sshd[23791]: Invalid user logger from 51.68.47.226 port 41184
May 28 02:13:08 ghostnameioc sshd[23791]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.47.226 
May 28 02:13:10 ghostnameioc sshd[23791]: Failed password for invalid user logger from 51.68.47.226 port 41184 ssh2
May 28 02:13:12 ghostnameioc sshd[23791]: Received disconnect from 51.68.47.226 port 41184:11: Bye Bye [prea........
------------------------------

2020-02-27T08:06:35.726147shield sshd\[27549\]: Invalid user administrator from 51.68.47.45 port 35840
2020-02-27T08:06:35.731692shield sshd\[27549\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.ip-51-68-47.eu
2020-02-27T08:06:37.609081shield sshd\[27549\]: Failed password for invalid user administrator from 51.68.47.45 port 35840 ssh2
2020-02-27T08:15:27.138999shield sshd\[29148\]: Invalid user liaowenjie from 51.68.47.45 port 47524
2020-02-27T08:15:27.145815shield sshd\[29148\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.ip-51-68-47.eu

Feb 25 18:13:57 silence02 sshd[27974]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.47.45
Feb 25 18:13:59 silence02 sshd[27974]: Failed password for invalid user n from 51.68.47.45 port 46778 ssh2
Feb 25 18:23:12 silence02 sshd[28532]: Failed password for root from 51.68.47.45 port 35722 ssh2

Feb 12 01:57:31 markkoudstaal sshd[28137]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.47.45
Feb 12 01:57:33 markkoudstaal sshd[28137]: Failed password for invalid user elasticsearch123456 from 51.68.47.45 port 39706 ssh2
Feb 12 02:00:02 markkoudstaal sshd[28604]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.47.45

Feb  7 16:45:45 serwer sshd\[11342\]: Invalid user ohw from 51.68.47.45 port 54186
Feb  7 16:45:45 serwer sshd\[11342\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.47.45
Feb  7 16:45:48 serwer sshd\[11342\]: Failed password for invalid user ohw from 51.68.47.45 port 54186 ssh2
...

Feb  6 11:00:00 MK-Soft-Root2 sshd[28002]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.47.45 
Feb  6 11:00:02 MK-Soft-Root2 sshd[28002]: Failed password for invalid user knj from 51.68.47.45 port 37712 ssh2
...

Unauthorized connection attempt detected from IP address 51.68.47.45 to port 2220 [J]

Jan 24 19:08:50 odroid64 sshd\[17585\]: Invalid user api from 51.68.47.45
Jan 24 19:08:50 odroid64 sshd\[17585\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.47.45
...

Unauthorized connection attempt detected from IP address 51.68.47.45 to port 2220 [J]

SSH authentication failure x 6 reported by Fail2Ban
...

Unauthorized connection attempt detected from IP address 51.68.47.45 to port 22

$f2bV_matches

Dec 26 11:30:42 pornomens sshd\[3895\]: Invalid user webmaster from 51.68.47.45 port 55862
Dec 26 11:30:42 pornomens sshd\[3895\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.47.45
Dec 26 11:30:44 pornomens sshd\[3895\]: Failed password for invalid user webmaster from 51.68.47.45 port 55862 ssh2
...

Dec 16 18:42:39 eventyay sshd[13915]: Failed password for root from 51.68.47.45 port 42544 ssh2
Dec 16 18:48:09 eventyay sshd[14056]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.47.45
Dec 16 18:48:12 eventyay sshd[14056]: Failed password for invalid user holli from 51.68.47.45 port 50420 ssh2
...

Dec 12 10:37:07 markkoudstaal sshd[21648]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.47.45
Dec 12 10:37:09 markkoudstaal sshd[21648]: Failed password for invalid user apple from 51.68.47.45 port 37118 ssh2
Dec 12 10:42:23 markkoudstaal sshd[22256]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.47.45

May 27 14:18:07 plex sshd[16496]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.167.200.10  user=root
May 27 14:18:09 plex sshd[16496]: Failed password for root from 109.167.200.10 port 38480 ssh2

May 27 11:49:07 UTC__SANYALnet-Labs__cac14 sshd[14265]: Connection from 162.223.91.145 port 32908 on 64.137.176.112 port 22
May 27 11:49:08 UTC__SANYALnet-Labs__cac14 sshd[14265]: Address 162.223.91.145 maps to ussrv.colopart.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
May 27 11:49:08 UTC__SANYALnet-Labs__cac14 sshd[14265]: Invalid user zabbix from 162.223.91.145
May 27 11:49:08 UTC__SANYALnet-Labs__cac14 sshd[14265]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.223.91.145 
May 27 11:49:10 UTC__SANYALnet-Labs__cac14 sshd[14265]: Failed password for invalid user zabbix from 162.223.91.145 port 32908 ssh2
May 27 11:49:10 UTC__SANYALnet-Labs__cac14 sshd[14265]: Received disconnect from 162.223.91.145: 11: Bye Bye [preauth]
May 27 11:55:25 UTC__SANYALnet-Labs__cac14 sshd[14476]: Connection from 162.223.91.145 port 57512 on 64.137.176.112 port 22
May 27 11:55:31 UTC__SANYALnet-Labs__cac14 sshd[144........
-------------------------------

GPL SNMP public access udp - port: 161 proto: UDP cat: Attempted Information Leak

May 27 02:22:17 php1 sshd\[8769\]: Invalid user replicator from 160.155.113.19
May 27 02:22:17 php1 sshd\[8769\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=160.155.113.19
May 27 02:22:18 php1 sshd\[8769\]: Failed password for invalid user replicator from 160.155.113.19 port 58428 ssh2
May 27 02:25:47 php1 sshd\[9070\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=160.155.113.19  user=root
May 27 02:25:49 php1 sshd\[9070\]: Failed password for root from 160.155.113.19 port 54615 ssh2

May 27 13:41:52 ns382633 sshd\[2390\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.69.80  user=root
May 27 13:41:55 ns382633 sshd\[2390\]: Failed password for root from 49.235.69.80 port 38276 ssh2
May 27 13:55:16 ns382633 sshd\[5114\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.69.80  user=root
May 27 13:55:18 ns382633 sshd\[5114\]: Failed password for root from 49.235.69.80 port 38022 ssh2
May 27 13:56:49 ns382633 sshd\[5249\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.69.80  user=root

May 27 14:33:11 plex sshd[16730]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.218  user=root
May 27 14:33:13 plex sshd[16730]: Failed password for root from 222.186.30.218 port 16524 ssh2

Invalid user schoolman from 168.63.151.21 port 59670

Automatic report - Port Scan Attack

May 27 11:56:53 IngegnereFirenze sshd[16710]: User root from 104.46.36.244 not allowed because not listed in AllowUsers
...

1590580638 - 05/27/2020 13:57:18 Host: 2.135.2.229/2.135.2.229 Port: 445 TCP Blocked

prod11
...

May 27 13:56:33 tuxlinux sshd[50742]: Invalid user yassin from 187.16.108.154 port 44604
May 27 13:56:33 tuxlinux sshd[50742]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.16.108.154 
May 27 13:56:33 tuxlinux sshd[50742]: Invalid user yassin from 187.16.108.154 port 44604
May 27 13:56:33 tuxlinux sshd[50742]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.16.108.154 
May 27 13:56:33 tuxlinux sshd[50742]: Invalid user yassin from 187.16.108.154 port 44604
May 27 13:56:33 tuxlinux sshd[50742]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.16.108.154 
May 27 13:56:35 tuxlinux sshd[50742]: Failed password for invalid user yassin from 187.16.108.154 port 44604 ssh2
...

[2020-05-27 08:54:00] NOTICE[1157][C-00009e6b] chan_sip.c: Call from '' (212.129.60.155:64684) to extension '912011972592277524' rejected because extension not found in context 'public'.
[2020-05-27 08:54:00] SECURITY[1173] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-05-27T08:54:00.909-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="912011972592277524",SessionID="0x7f5f100266a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.129.60.155/64684",ACLName="no_extension_match"
[2020-05-27 08:57:27] NOTICE[1157][C-00009e6c] chan_sip.c: Call from '' (212.129.60.155:64951) to extension '911011972592277524' rejected because extension not found in context 'public'.
[2020-05-27 08:57:27] SECURITY[1173] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-05-27T08:57:27.831-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="911011972592277524",SessionID="0x7f5f100266a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAdd
...

Fail2Ban - HTTP Auth Bruteforce Attempt

May 27 11:56:32 IngegnereFirenze sshd[16684]: Failed password for invalid user curelea from 178.62.0.215 port 42460 ssh2
...