Jun  3 14:57:03 nextcloud sshd\[26858\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.124.215  user=root
Jun  3 14:57:06 nextcloud sshd\[26858\]: Failed password for root from 51.75.124.215 port 45414 ssh2
Jun  3 15:00:46 nextcloud sshd\[506\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.124.215  user=root

May 29 08:15:05 cdc sshd[25820]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.124.215 
May 29 08:15:07 cdc sshd[25820]: Failed password for invalid user ya from 51.75.124.215 port 46760 ssh2

Invalid user hyl from 51.75.124.215 port 58452

May 20 20:54:41 [host] sshd[710]: Invalid user sme
May 20 20:54:41 [host] sshd[710]: pam_unix(sshd:au
May 20 20:54:42 [host] sshd[710]: Failed password

May  4 21:24:59 NPSTNNYC01T sshd[31586]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.124.215
May  4 21:25:01 NPSTNNYC01T sshd[31586]: Failed password for invalid user sop from 51.75.124.215 port 53988 ssh2
May  4 21:28:47 NPSTNNYC01T sshd[31938]: Failed password for root from 51.75.124.215 port 35696 ssh2
...

Apr 27 09:52:47 lukav-desktop sshd\[3011\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.124.215  user=root
Apr 27 09:52:50 lukav-desktop sshd\[3011\]: Failed password for root from 51.75.124.215 port 47680 ssh2
Apr 27 09:56:53 lukav-desktop sshd\[3184\]: Invalid user bird from 51.75.124.215
Apr 27 09:56:53 lukav-desktop sshd\[3184\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.124.215
Apr 27 09:56:54 lukav-desktop sshd\[3184\]: Failed password for invalid user bird from 51.75.124.215 port 56880 ssh2

(sshd) Failed SSH login from 51.75.124.215 (FR/France/215.ip-51-75-124.eu): 5 in the last 3600 secs

Invalid user ta from 51.75.124.215 port 59954

5x Failed Password

SSH Brute-Force reported by Fail2Ban

5x Failed Password

Brute force attempt

$f2bV_matches

Mar 30 10:11:28 vpn01 sshd[8630]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.124.215
Mar 30 10:11:30 vpn01 sshd[8630]: Failed password for invalid user oha from 51.75.124.215 port 60432 ssh2
...

Mar 17 02:34:50 lukav-desktop sshd\[14079\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.124.215  user=root
Mar 17 02:34:52 lukav-desktop sshd\[14079\]: Failed password for root from 51.75.124.215 port 56334 ssh2
Mar 17 02:37:59 lukav-desktop sshd\[14096\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.124.215  user=root
Mar 17 02:38:01 lukav-desktop sshd\[14096\]: Failed password for root from 51.75.124.215 port 55198 ssh2
Mar 17 02:41:16 lukav-desktop sshd\[14110\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.124.215  user=root

Nov 15 01:41:00 odroid64 sshd\[16144\]: User root from 51.75.124.215 not allowed because not listed in AllowUsers
Nov 15 01:41:00 odroid64 sshd\[16144\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.124.215  user=root
...

Feb 16 17:39:31 plex sshd[3402]: Invalid user una from 51.75.124.215 port 42990

" "

Dec 30 09:48:45 firewall sshd[19368]: Invalid user jeofry from 51.75.124.215
Dec 30 09:48:47 firewall sshd[19368]: Failed password for invalid user jeofry from 51.75.124.215 port 51266 ssh2
Dec 30 09:55:25 firewall sshd[19510]: Invalid user taletda from 51.75.124.215
...

Brute-force attempt banned

Invalid user LENEL from 51.75.124.215 port 41994

Invalid user drabek from 51.75.124.215 port 54270
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.124.215
Failed password for invalid user drabek from 51.75.124.215 port 54270 ssh2
Invalid user admin from 51.75.124.215 port 33360
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.124.215

Too many connections or unauthorized access detected from Arctic banned ip

sshd jail - ssh hack attempt

2019-12-15T00:36:55.405603shield sshd\[19360\]: Invalid user ftpuser from 51.75.124.215 port 34264
2019-12-15T00:36:55.410087shield sshd\[19360\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=215.ip-51-75-124.eu
2019-12-15T00:36:57.480955shield sshd\[19360\]: Failed password for invalid user ftpuser from 51.75.124.215 port 34264 ssh2
2019-12-15T00:41:32.739934shield sshd\[20327\]: Invalid user mathilde from 51.75.124.215 port 39710
2019-12-15T00:41:32.744821shield sshd\[20327\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=215.ip-51-75-124.eu

2019-12-13T22:34:07.673224shield sshd\[399\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=215.ip-51-75-124.eu  user=root
2019-12-13T22:34:09.364573shield sshd\[399\]: Failed password for root from 51.75.124.215 port 54038 ssh2
2019-12-13T22:41:28.671307shield sshd\[1585\]: Invalid user admin from 51.75.124.215 port 33216
2019-12-13T22:41:28.676226shield sshd\[1585\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=215.ip-51-75-124.eu
2019-12-13T22:41:30.573085shield sshd\[1585\]: Failed password for invalid user admin from 51.75.124.215 port 33216 ssh2

Dec 11 13:43:31 kapalua sshd\[7909\]: Invalid user pcap from 51.75.124.215
Dec 11 13:43:31 kapalua sshd\[7909\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=215.ip-51-75-124.eu
Dec 11 13:43:33 kapalua sshd\[7909\]: Failed password for invalid user pcap from 51.75.124.215 port 57200 ssh2
Dec 11 13:48:35 kapalua sshd\[8487\]: Invalid user dns1 from 51.75.124.215
Dec 11 13:48:35 kapalua sshd\[8487\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=215.ip-51-75-124.eu

2019-12-08T06:16:53.212944abusebot-8.cloudsearch.cf sshd\[458\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=215.ip-51-75-124.eu  user=root

Dec  6 10:21:04 meumeu sshd[17743]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.124.215 
Dec  6 10:21:06 meumeu sshd[17743]: Failed password for invalid user mcclendon from 51.75.124.215 port 44234 ssh2
Dec  6 10:26:18 meumeu sshd[18546]: Failed password for root from 51.75.124.215 port 53242 ssh2
...

Dec  6 01:04:16 legacy sshd[10513]: Failed password for root from 51.75.124.215 port 47678 ssh2
Dec  6 01:09:39 legacy sshd[10712]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.124.215
Dec  6 01:09:41 legacy sshd[10712]: Failed password for invalid user ssh from 51.75.124.215 port 58164 ssh2
...

fail2ban

2019-10-24T08:54:32.844714Z 0ec68a2b008e New connection: 51.75.124.199:59348 (172.17.0.3:2222) [session: 0ec68a2b008e]
2019-10-24T09:00:54.880569Z f50753a63d7a New connection: 51.75.124.199:57382 (172.17.0.3:2222) [session: f50753a63d7a]

Oct 23 02:02:29 firewall sshd[2199]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.124.199
Oct 23 02:02:29 firewall sshd[2199]: Invalid user domingos from 51.75.124.199
Oct 23 02:02:31 firewall sshd[2199]: Failed password for invalid user domingos from 51.75.124.199 port 57922 ssh2
...

Automatic report - Banned IP Access

vps1:pam-generic

Oct  3 11:14:55 h2177944 sshd\[15710\]: Invalid user super from 51.75.124.199 port 43770
Oct  3 11:14:55 h2177944 sshd\[15710\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.124.199
Oct  3 11:14:57 h2177944 sshd\[15710\]: Failed password for invalid user super from 51.75.124.199 port 43770 ssh2
Oct  3 11:19:13 h2177944 sshd\[15990\]: Invalid user nora from 51.75.124.199 port 57256
...

Oct  2 02:26:33 dedicated sshd[31501]: Invalid user admin from 51.75.124.199 port 43058

Sep 29 17:12:54 SilenceServices sshd[7635]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.124.199
Sep 29 17:12:57 SilenceServices sshd[7635]: Failed password for invalid user anna from 51.75.124.199 port 42998 ssh2
Sep 29 17:17:09 SilenceServices sshd[8816]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.124.199

Sep 16 19:11:57 hanapaa sshd\[24775\]: Invalid user Vision from 51.75.124.199
Sep 16 19:11:57 hanapaa sshd\[24775\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=199.ip-51-75-124.eu
Sep 16 19:11:59 hanapaa sshd\[24775\]: Failed password for invalid user Vision from 51.75.124.199 port 56196 ssh2
Sep 16 19:15:58 hanapaa sshd\[25093\]: Invalid user temp from 51.75.124.199
Sep 16 19:15:58 hanapaa sshd\[25093\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=199.ip-51-75-124.eu

Sep 16 21:56:36 SilenceServices sshd[16124]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.124.199
Sep 16 21:56:38 SilenceServices sshd[16124]: Failed password for invalid user anonymous. from 51.75.124.199 port 54086 ssh2
Sep 16 22:00:24 SilenceServices sshd[17570]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.124.199

Sep  8 03:52:14 SilenceServices sshd[32638]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.124.199
Sep  8 03:52:16 SilenceServices sshd[32638]: Failed password for invalid user admin from 51.75.124.199 port 33150 ssh2
Sep  8 03:56:22 SilenceServices sshd[1673]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.124.199

Sep  7 17:32:13 meumeu sshd[28830]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.124.199 
Sep  7 17:32:15 meumeu sshd[28830]: Failed password for invalid user user1 from 51.75.124.199 port 37492 ssh2
Sep  7 17:36:49 meumeu sshd[29376]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.124.199 
...

Aug  9 10:04:50 eventyay sshd[10299]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.124.76
Aug  9 10:04:53 eventyay sshd[10299]: Failed password for invalid user sakai from 51.75.124.76 port 57162 ssh2
Aug  9 10:08:51 eventyay sshd[11039]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.124.76
...

Aug  2 03:09:41 s64-1 sshd[13520]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.124.76
Aug  2 03:09:43 s64-1 sshd[13520]: Failed password for invalid user er from 51.75.124.76 port 51692 ssh2
Aug  2 03:13:38 s64-1 sshd[13577]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.124.76
...

Jul 31 01:11:10 localhost sshd\[42769\]: Invalid user tempuser from 51.75.124.76 port 49410
Jul 31 01:11:10 localhost sshd\[42769\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.124.76
...

Automatic report - Port Scan

B: Magento admin pass test (wrong country)

Unauthorized IMAP connection attempt

v+ssh-bruteforce

[ssh] SSH attack

SSH bruteforce more then 50 syn to 22 port per 10 seconds.

Mar 12 08:05:44 nextcloud sshd\[11297\]: Invalid user edward from 103.52.52.22
Mar 12 08:05:44 nextcloud sshd\[11297\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.52.52.22
Mar 12 08:05:46 nextcloud sshd\[11297\]: Failed password for invalid user edward from 103.52.52.22 port 55327 ssh2

Automatic report BANNED IP

SSH brute-force attempt

Mar 12 04:43:53 serwer sshd\[13540\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.218.32.119  user=root
Mar 12 04:43:55 serwer sshd\[13540\]: Failed password for root from 61.218.32.119 port 50192 ssh2
Mar 12 04:52:08 serwer sshd\[14292\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.218.32.119  user=root
...

Unauthorized access or intrusion attempt detected from Thor banned IP

Mar 12 08:56:41 [host] sshd[12823]: pam_unix(sshd:
Mar 12 08:56:43 [host] sshd[12823]: Failed passwor
Mar 12 08:56:45 [host] sshd[12823]: Failed passwor

SSH auth scanning - multiple failed logins

Invalid user asterisk from 122.51.188.20 port 60882

Brute-force attempt banned