Nov  1 22:22:37 ip-172-31-1-72 sshd\[15334\]: Invalid user xiangIDC from 51.75.123.85
Nov  1 22:22:37 ip-172-31-1-72 sshd\[15334\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.123.85
Nov  1 22:22:39 ip-172-31-1-72 sshd\[15334\]: Failed password for invalid user xiangIDC from 51.75.123.85 port 36368 ssh2
Nov  1 22:26:31 ip-172-31-1-72 sshd\[15402\]: Invalid user bohica from 51.75.123.85
Nov  1 22:26:31 ip-172-31-1-72 sshd\[15402\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.123.85

Oct 31 19:30:30 MK-Soft-Root2 sshd[7935]: Failed password for root from 51.75.123.85 port 37228 ssh2
...

Oct 30 21:22:57 localhost sshd\[13444\]: Invalid user spark from 51.75.123.85
Oct 30 21:22:57 localhost sshd\[13444\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.123.85
Oct 30 21:22:59 localhost sshd\[13444\]: Failed password for invalid user spark from 51.75.123.85 port 43920 ssh2
Oct 30 21:26:37 localhost sshd\[13630\]: Invalid user ubnt from 51.75.123.85
Oct 30 21:26:37 localhost sshd\[13630\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.123.85
...

Invalid user miner from 51.75.123.85 port 37974

Oct 23 05:57:53 vpn01 sshd[5334]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.123.85
Oct 23 05:57:55 vpn01 sshd[5334]: Failed password for invalid user user from 51.75.123.85 port 48084 ssh2
...

ssh failed login

Oct  9 18:34:31 web9 sshd\[25916\]: Invalid user QWERT@1234 from 51.75.123.85
Oct  9 18:34:31 web9 sshd\[25916\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.123.85
Oct  9 18:34:32 web9 sshd\[25916\]: Failed password for invalid user QWERT@1234 from 51.75.123.85 port 34774 ssh2
Oct  9 18:38:28 web9 sshd\[26436\]: Invalid user Citroen2017 from 51.75.123.85
Oct  9 18:38:28 web9 sshd\[26436\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.123.85

Oct  8 14:42:17 SilenceServices sshd[19460]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.123.85
Oct  8 14:42:19 SilenceServices sshd[19460]: Failed password for invalid user Amigo2017 from 51.75.123.85 port 55398 ssh2
Oct  8 14:46:12 SilenceServices sshd[20512]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.123.85

Invalid user adela from 51.75.123.85 port 52240

Invalid user vbox from 51.75.123.85 port 36400

Sep  7 23:43:52 bouncer sshd\[25649\]: Invalid user passw0rd from 51.75.123.85 port 47464
Sep  7 23:43:52 bouncer sshd\[25649\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.123.85 
Sep  7 23:43:54 bouncer sshd\[25649\]: Failed password for invalid user passw0rd from 51.75.123.85 port 47464 ssh2
...

2019-09-06T03:01:18.197053abusebot-8.cloudsearch.cf sshd\[27860\]: Invalid user p@ssw0rd from 51.75.123.85 port 55060

2019-09-05T17:26:48.985233abusebot-8.cloudsearch.cf sshd\[25812\]: Invalid user demo from 51.75.123.85 port 41444

Aug 30 00:04:31 pkdns2 sshd\[23215\]: Invalid user ju from 51.75.123.85Aug 30 00:04:34 pkdns2 sshd\[23215\]: Failed password for invalid user ju from 51.75.123.85 port 39692 ssh2Aug 30 00:08:29 pkdns2 sshd\[23409\]: Invalid user student from 51.75.123.85Aug 30 00:08:31 pkdns2 sshd\[23409\]: Failed password for invalid user student from 51.75.123.85 port 56222 ssh2Aug 30 00:12:13 pkdns2 sshd\[23604\]: Invalid user warcraft from 51.75.123.85Aug 30 00:12:15 pkdns2 sshd\[23604\]: Failed password for invalid user warcraft from 51.75.123.85 port 44526 ssh2
...

Aug 27 03:08:43 localhost sshd[7100]: Invalid user minecraft from 51.75.123.85 port 59516
Aug 27 03:08:43 localhost sshd[7100]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.123.85
Aug 27 03:08:43 localhost sshd[7100]: Invalid user minecraft from 51.75.123.85 port 59516
Aug 27 03:08:45 localhost sshd[7100]: Failed password for invalid user minecraft from 51.75.123.85 port 59516 ssh2
...

Aug 24 09:17:37 friendsofhawaii sshd\[14014\]: Invalid user charlott from 51.75.123.85
Aug 24 09:17:37 friendsofhawaii sshd\[14014\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.ip-51-75-123.eu
Aug 24 09:17:39 friendsofhawaii sshd\[14014\]: Failed password for invalid user charlott from 51.75.123.85 port 38052 ssh2
Aug 24 09:21:48 friendsofhawaii sshd\[14381\]: Invalid user farai from 51.75.123.85
Aug 24 09:21:48 friendsofhawaii sshd\[14381\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.ip-51-75-123.eu

Aug 24 11:37:24 pkdns2 sshd\[61919\]: Invalid user agneta from 51.75.123.85Aug 24 11:37:26 pkdns2 sshd\[61919\]: Failed password for invalid user agneta from 51.75.123.85 port 35260 ssh2Aug 24 11:41:17 pkdns2 sshd\[62102\]: Invalid user samba from 51.75.123.85Aug 24 11:41:19 pkdns2 sshd\[62102\]: Failed password for invalid user samba from 51.75.123.85 port 53056 ssh2Aug 24 11:45:11 pkdns2 sshd\[62306\]: Invalid user waredox from 51.75.123.85Aug 24 11:45:13 pkdns2 sshd\[62306\]: Failed password for invalid user waredox from 51.75.123.85 port 42614 ssh2
...

ssh failed login

Aug  4 16:49:27 www sshd\[131539\]: Invalid user nh from 51.75.123.85
Aug  4 16:49:27 www sshd\[131539\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.123.85
Aug  4 16:49:29 www sshd\[131539\]: Failed password for invalid user nh from 51.75.123.85 port 41170 ssh2
...

Aug  4 08:16:40 ArkNodeAT sshd\[19714\]: Invalid user mathandazo from 51.75.123.85
Aug  4 08:16:40 ArkNodeAT sshd\[19714\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.123.85
Aug  4 08:16:42 ArkNodeAT sshd\[19714\]: Failed password for invalid user mathandazo from 51.75.123.85 port 57434 ssh2

(sshd) Failed SSH login from 51.75.123.107 (FR/France/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 13 12:37:19 server2 sshd[30782]: Invalid user ssh from 51.75.123.107 port 60328
Oct 13 12:37:21 server2 sshd[30782]: Failed password for invalid user ssh from 51.75.123.107 port 60328 ssh2
Oct 13 12:46:32 server2 sshd[1072]: Invalid user msg from 51.75.123.107 port 57126
Oct 13 12:46:35 server2 sshd[1072]: Failed password for invalid user msg from 51.75.123.107 port 57126 ssh2
Oct 13 12:49:56 server2 sshd[2179]: Invalid user kikuchi from 51.75.123.107 port 60756

SSH login attempts.

SSH Brute Force

Oct 12 21:41:04 localhost sshd\[1546\]: Invalid user ftptest from 51.75.123.107
Oct 12 21:41:04 localhost sshd\[1546\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.123.107
Oct 12 21:41:06 localhost sshd\[1546\]: Failed password for invalid user ftptest from 51.75.123.107 port 46576 ssh2
Oct 12 21:44:31 localhost sshd\[1643\]: Invalid user baxter from 51.75.123.107
Oct 12 21:44:31 localhost sshd\[1643\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.123.107
...

Invalid user x from 51.75.123.107 port 50106

Oct  4 19:49:34 gospond sshd[30774]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.123.107  user=root
Oct  4 19:49:36 gospond sshd[30774]: Failed password for root from 51.75.123.107 port 52876 ssh2
...

Oct  4 11:19:09 ns381471 sshd[14032]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.123.107
Oct  4 11:19:10 ns381471 sshd[14032]: Failed password for invalid user tor from 51.75.123.107 port 51372 ssh2

Invalid user devin from 51.75.123.107 port 57208

Sep 22 04:38:26 email sshd\[28499\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.123.107  user=root
Sep 22 04:38:28 email sshd\[28499\]: Failed password for root from 51.75.123.107 port 57750 ssh2
Sep 22 04:41:56 email sshd\[29112\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.123.107  user=root
Sep 22 04:41:58 email sshd\[29112\]: Failed password for root from 51.75.123.107 port 38552 ssh2
Sep 22 04:45:32 email sshd\[29738\]: Invalid user oracle from 51.75.123.107
...

Sep 21 21:52:33 ws26vmsma01 sshd[200670]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.123.107
Sep 21 21:52:35 ws26vmsma01 sshd[200670]: Failed password for invalid user user from 51.75.123.107 port 51446 ssh2
...

detected by Fail2Ban

Invalid user scpuser from 51.75.123.107 port 47130

Sep 11 01:12:59 * sshd[19185]: Failed password for root from 51.75.123.107 port 36494 ssh2

sshd: Failed password for invalid user .... from 51.75.123.107 port 36648 ssh2

2020-09-09T22:41:16+0000 Failed SSH Authentication/Brute Force Attack. (Server 6)

SSH authentication failure x 6 reported by Fail2Ban
...

Automatic report generated by Wazuh

2020-01-03T00:25:01.678456xentho-1 sshd[396411]: Invalid user ii from 128.199.185.42 port 41814
2020-01-03T00:25:01.685882xentho-1 sshd[396411]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.185.42
2020-01-03T00:25:01.678456xentho-1 sshd[396411]: Invalid user ii from 128.199.185.42 port 41814
2020-01-03T00:25:04.243907xentho-1 sshd[396411]: Failed password for invalid user ii from 128.199.185.42 port 41814 ssh2
2020-01-03T00:26:15.965584xentho-1 sshd[396419]: Invalid user mysql from 128.199.185.42 port 47392
2020-01-03T00:26:15.974050xentho-1 sshd[396419]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.185.42
2020-01-03T00:26:15.965584xentho-1 sshd[396419]: Invalid user mysql from 128.199.185.42 port 47392
2020-01-03T00:26:18.020835xentho-1 sshd[396419]: Failed password for invalid user mysql from 128.199.185.42 port 47392 ssh2
2020-01-03T00:27:29.686382xentho-1 sshd[396452]: Invalid user
...

2020-01-02 22:53:00 H=(v1AL3a34W1) [60.167.112.176]:55101 I=[192.147.25.65]:25 F= rejected RCPT <1142411189@qq.com>: Sender verify failed
2020-01-02 22:53:05 dovecot_login authenticator failed for (wKeezBqcG) [60.167.112.176]:55422 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=hgow@lerctr.org)
2020-01-02 22:53:12 dovecot_login authenticator failed for (pY8qbp) [60.167.112.176]:55803 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=hgow@lerctr.org)
...

2020-01-03T05:52:50.0499771240 sshd\[15094\]: Invalid user fka from 51.68.70.72 port 39990
2020-01-03T05:52:50.0528061240 sshd\[15094\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.70.72
2020-01-03T05:52:52.8502651240 sshd\[15094\]: Failed password for invalid user fka from 51.68.70.72 port 39990 ssh2
...

Invalid user bijons from 165.227.179.138 port 51836

Jan  3 05:09:05 sshgateway sshd\[4593\]: Invalid user budha from 165.22.144.206
Jan  3 05:09:05 sshgateway sshd\[4593\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.144.206
Jan  3 05:09:07 sshgateway sshd\[4593\]: Failed password for invalid user budha from 165.22.144.206 port 59146 ssh2

20/1/3@00:13:45: FAIL: Alarm-Network address from=186.94.213.215
20/1/3@00:13:46: FAIL: Alarm-Network address from=186.94.213.215
...

Automatic report - SSH Brute-Force Attack

Jan  3 06:46:11 dedicated sshd[9947]: Invalid user dns from 106.13.44.100 port 39334

Jan  3 05:52:47 MK-Soft-VM4 sshd[6165]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.19.67 
Jan  3 05:52:49 MK-Soft-VM4 sshd[6165]: Failed password for invalid user hdduser from 106.54.19.67 port 43130 ssh2
...

Jan  2 19:09:48 server sshd\[24765\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.99.28.247  user=root
Jan  2 19:09:50 server sshd\[24765\]: Failed password for root from 192.99.28.247 port 46170 ssh2
Jan  3 08:38:10 server sshd\[19164\]: Invalid user user from 192.99.28.247
Jan  3 08:38:10 server sshd\[19164\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.99.28.247 
Jan  3 08:38:12 server sshd\[19164\]: Failed password for invalid user user from 192.99.28.247 port 46852 ssh2
...

Jan  3 06:42:19 dedicated sshd[9187]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.61.17.7  user=root
Jan  3 06:42:21 dedicated sshd[9187]: Failed password for root from 217.61.17.7 port 57464 ssh2

Jan  3 06:21:06 srv-ubuntu-dev3 sshd[17033]: Invalid user gking from 120.195.162.71
Jan  3 06:21:06 srv-ubuntu-dev3 sshd[17033]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.195.162.71
Jan  3 06:21:06 srv-ubuntu-dev3 sshd[17033]: Invalid user gking from 120.195.162.71
Jan  3 06:21:09 srv-ubuntu-dev3 sshd[17033]: Failed password for invalid user gking from 120.195.162.71 port 45968 ssh2
Jan  3 06:25:41 srv-ubuntu-dev3 sshd[18662]: Invalid user bank from 120.195.162.71
Jan  3 06:25:41 srv-ubuntu-dev3 sshd[18662]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.195.162.71
Jan  3 06:25:41 srv-ubuntu-dev3 sshd[18662]: Invalid user bank from 120.195.162.71
Jan  3 06:25:43 srv-ubuntu-dev3 sshd[18662]: Failed password for invalid user bank from 120.195.162.71 port 40048 ssh2
Jan  3 06:30:13 srv-ubuntu-dev3 sshd[23943]: Invalid user wx from 120.195.162.71
...

Lines containing failures of 190.28.183.222
Dec 30 22:32:47 shared11 sshd[30996]: Invalid user admin from 190.28.183.222 port 54245
Dec 30 22:32:47 shared11 sshd[30996]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.28.183.222
Dec 30 22:32:49 shared11 sshd[30996]: Failed password for invalid user admin from 190.28.183.222 port 54245 ssh2
Dec 30 22:32:49 shared11 sshd[30996]: Connection closed by invalid user admin 190.28.183.222 port 54245 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=190.28.183.222