Unauthorized connection attempt detected from IP address 51.75.170.116 to port 2220 [J]

SSH Brute Force

$f2bV_matches

2019-12-04 19:58:07,509 fail2ban.actions        \[14488\]: NOTICE  \[sshd\] Ban 51.75.170.116
2019-12-04 20:30:22,289 fail2ban.actions        \[14488\]: NOTICE  \[sshd\] Ban 51.75.170.116
2019-12-04 21:06:26,337 fail2ban.actions        \[14488\]: NOTICE  \[sshd\] Ban 51.75.170.116
2019-12-04 21:39:50,292 fail2ban.actions        \[14488\]: NOTICE  \[sshd\] Ban 51.75.170.116
2019-12-04 22:11:04,029 fail2ban.actions        \[14488\]: NOTICE  \[sshd\] Ban 51.75.170.116
...

(sshd) Failed SSH login from 51.75.170.116 (GB/United Kingdom/116.ip-51-75-170.eu): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Dec  6 09:15:39 andromeda sshd[30569]: Invalid user twadmin from 51.75.170.116 port 40590
Dec  6 09:15:41 andromeda sshd[30569]: Failed password for invalid user twadmin from 51.75.170.116 port 40590 ssh2
Dec  6 09:20:50 andromeda sshd[31144]: Invalid user columbo from 51.75.170.116 port 51488

Dec  4 12:36:19 server sshd\[18859\]: Invalid user Arho from 51.75.170.116
Dec  4 12:36:19 server sshd\[18859\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.ip-51-75-170.eu 
Dec  4 12:36:21 server sshd\[18859\]: Failed password for invalid user Arho from 51.75.170.116 port 54950 ssh2
Dec  4 12:43:40 server sshd\[20779\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.ip-51-75-170.eu  user=root
Dec  4 12:43:42 server sshd\[20779\]: Failed password for root from 51.75.170.116 port 39958 ssh2
...

Dec  2 18:28:58 zeus sshd[2934]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.170.116 
Dec  2 18:28:59 zeus sshd[2934]: Failed password for invalid user adrian from 51.75.170.116 port 38678 ssh2
Dec  2 18:34:07 zeus sshd[3132]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.170.116 
Dec  2 18:34:09 zeus sshd[3132]: Failed password for invalid user ggggg from 51.75.170.116 port 50486 ssh2

Nov 30 13:03:15 sip sshd[16779]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.170.116
Nov 30 13:03:17 sip sshd[16779]: Failed password for invalid user thomey from 51.75.170.116 port 59090 ssh2
Nov 30 13:18:18 sip sshd[19501]: Failed password for root from 51.75.170.116 port 53444 ssh2

Nov 27 08:57:42 www5 sshd\[36193\]: Invalid user ftpuser from 51.75.170.116
Nov 27 08:57:42 www5 sshd\[36193\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.170.116
Nov 27 08:57:44 www5 sshd\[36193\]: Failed password for invalid user ftpuser from 51.75.170.116 port 51304 ssh2
...

SSH brutforce

2020-10-08 05:27:09.094728-0500  localhost sshd[52732]: Failed password for root from 51.75.170.128 port 56082 ssh2

$f2bV_matches

Autoban   51.75.170.188 AUTH/CONNECT

Dec  8 15:45:14 fr01 sshd[26286]: Invalid user ssh from 51.75.170.13
Dec  8 15:45:14 fr01 sshd[26286]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.170.13
Dec  8 15:45:14 fr01 sshd[26286]: Invalid user ssh from 51.75.170.13
Dec  8 15:45:15 fr01 sshd[26286]: Failed password for invalid user ssh from 51.75.170.13 port 55908 ssh2
Dec  8 15:56:12 fr01 sshd[28206]: Invalid user santella from 51.75.170.13
...

Dec  8 09:20:14 server sshd\[12266\]: Invalid user rejoin from 51.75.170.13
Dec  8 09:20:14 server sshd\[12266\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.ip-51-75-170.eu 
Dec  8 09:20:17 server sshd\[12266\]: Failed password for invalid user rejoin from 51.75.170.13 port 47498 ssh2
Dec  8 09:29:44 server sshd\[15069\]: Invalid user macayla from 51.75.170.13
Dec  8 09:29:44 server sshd\[15069\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.ip-51-75-170.eu 
...

Dec  6 00:24:19 hpm sshd\[32684\]: Invalid user ching from 51.75.170.13
Dec  6 00:24:19 hpm sshd\[32684\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.ip-51-75-170.eu
Dec  6 00:24:21 hpm sshd\[32684\]: Failed password for invalid user ching from 51.75.170.13 port 36800 ssh2
Dec  6 00:29:26 hpm sshd\[711\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.ip-51-75-170.eu  user=root
Dec  6 00:29:28 hpm sshd\[711\]: Failed password for root from 51.75.170.13 port 45716 ssh2

Nov  5 17:04:53 server sshd\[518\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.ip-51-75-170.eu  user=root
Nov  5 17:04:55 server sshd\[518\]: Failed password for root from 51.75.170.13 port 58728 ssh2
Nov  5 17:32:10 server sshd\[7344\]: Invalid user ftpuser from 51.75.170.13
Nov  5 17:32:10 server sshd\[7344\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.ip-51-75-170.eu 
Nov  5 17:32:11 server sshd\[7344\]: Failed password for invalid user ftpuser from 51.75.170.13 port 50424 ssh2
...

Oct 31 15:58:39 server sshd\[24483\]: Failed password for root from 51.75.170.13 port 55864 ssh2
Nov  1 06:40:05 server sshd\[28355\]: Invalid user ranger from 51.75.170.13
Nov  1 06:40:05 server sshd\[28355\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.ip-51-75-170.eu 
Nov  1 06:40:07 server sshd\[28355\]: Failed password for invalid user ranger from 51.75.170.13 port 40636 ssh2
Nov  1 06:50:06 server sshd\[30471\]: Invalid user cssserver from 51.75.170.13
...

Oct 23 01:41:50 hpm sshd\[22567\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.ip-51-75-170.eu  user=root
Oct 23 01:41:52 hpm sshd\[22567\]: Failed password for root from 51.75.170.13 port 44776 ssh2
Oct 23 01:45:58 hpm sshd\[22864\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.ip-51-75-170.eu  user=root
Oct 23 01:46:00 hpm sshd\[22864\]: Failed password for root from 51.75.170.13 port 55556 ssh2
Oct 23 01:50:00 hpm sshd\[23172\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.ip-51-75-170.eu  user=root

Oct  9 12:58:52 localhost sshd\[83216\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.170.13  user=root
Oct  9 12:58:54 localhost sshd\[83216\]: Failed password for root from 51.75.170.13 port 44150 ssh2
Oct  9 13:02:54 localhost sshd\[83322\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.170.13  user=root
Oct  9 13:02:56 localhost sshd\[83322\]: Failed password for root from 51.75.170.13 port 55584 ssh2
Oct  9 13:06:54 localhost sshd\[83454\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.170.13  user=root
...

Oct  2 09:36:31 SilenceServices sshd[15718]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.170.13
Oct  2 09:36:33 SilenceServices sshd[15718]: Failed password for invalid user brad from 51.75.170.13 port 33682 ssh2
Oct  2 09:40:24 SilenceServices sshd[16823]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.170.13

Sep 23 15:18:30 SilenceServices sshd[4520]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.170.13
Sep 23 15:18:32 SilenceServices sshd[4520]: Failed password for invalid user xz@123 from 51.75.170.13 port 46648 ssh2
Sep 23 15:22:33 SilenceServices sshd[5937]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.170.13

Sep 23 12:03:49 SilenceServices sshd[15810]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.170.13
Sep 23 12:03:51 SilenceServices sshd[15810]: Failed password for invalid user welcome from 51.75.170.13 port 47936 ssh2
Sep 23 12:07:46 SilenceServices sshd[16907]: Failed password for root from 51.75.170.13 port 33198 ssh2

Aug 28 15:50:54 sachi sshd\[17590\]: Invalid user ubuntu from 51.75.170.13
Aug 28 15:50:54 sachi sshd\[17590\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.ip-51-75-170.eu
Aug 28 15:50:56 sachi sshd\[17590\]: Failed password for invalid user ubuntu from 51.75.170.13 port 41602 ssh2
Aug 28 15:54:46 sachi sshd\[17909\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.ip-51-75-170.eu  user=root
Aug 28 15:54:48 sachi sshd\[17909\]: Failed password for root from 51.75.170.13 port 58230 ssh2

Aug 27 23:36:14 SilenceServices sshd[8556]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.222.72.130
Aug 27 23:36:15 SilenceServices sshd[8556]: Failed password for invalid user postgres from 92.222.72.130 port 45250 ssh2
Aug 27 23:40:29 SilenceServices sshd[10237]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.222.72.130

Unauthorized connection attempt from IP address 201.249.167.250 on Port 445(SMB)

$f2bV_matches

Aug 27 23:02:24 mail kernel: [2028561.551698] [UFW BLOCK] IN=eth0 OUT= MAC=fa:16:3e:d3:64:42:4c:5e:0c:c9:30:5f:08:00 SRC=92.118.37.74 DST=185.101.93.72 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=32883 PROTO=TCP SPT=46525 DPT=27496 WINDOW=1024 RES=0x00 SYN URGP=0 
Aug 27 23:02:40 mail kernel: [2028577.976119] [UFW BLOCK] IN=eth0 OUT= MAC=fa:16:3e:d3:64:42:4c:5e:0c:c9:30:5f:08:00 SRC=92.118.37.74 DST=185.101.93.72 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=14839 PROTO=TCP SPT=46525 DPT=19231 WINDOW=1024 RES=0x00 SYN URGP=0 
Aug 27 23:04:02 mail kernel: [2028659.616612] [UFW BLOCK] IN=eth0 OUT= MAC=fa:16:3e:d3:64:42:4c:5e:0c:c9:30:5f:08:00 SRC=92.118.37.74 DST=185.101.93.72 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=43759 PROTO=TCP SPT=46525 DPT=39861 WINDOW=1024 RES=0x00 SYN URGP=0 
Aug 27 23:07:48 mail kernel: [2028886.070429] [UFW BLOCK] IN=eth0 OUT= MAC=fa:16:3e:d3:64:42:4c:5e:0c:c9:30:5f:08:00 SRC=92.118.37.74 DST=185.101.93.72 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=54342 PROTO=TCP SPT=46525 DPT=24451 WINDOW=1024 RES=0x00 SYN

Aug 28 00:41:24 MK-Soft-Root1 sshd\[17991\]: Invalid user cisco from 138.197.179.111 port 42676
Aug 28 00:41:24 MK-Soft-Root1 sshd\[17991\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.179.111
Aug 28 00:41:27 MK-Soft-Root1 sshd\[17991\]: Failed password for invalid user cisco from 138.197.179.111 port 42676 ssh2
...

Unauthorized connection attempt from IP address 202.144.184.73 on Port 445(SMB)

Unauthorized connection attempt from IP address 94.54.136.191 on Port 445(SMB)

2019-08-27T21:33:01.598988stark.klein-stark.info postfix/smtpd\[25321\]: NOQUEUE: reject: RCPT from smtp7.hpmail.revohost.hu\[185.187.74.43\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\
...

Telnet/23 MH Probe, BF, Hack -

Automatic report - Port Scan Attack

Forged login request.

Aug 27 23:00:46 dedicated sshd[28798]: Invalid user adminit from 81.142.80.97 port 57339

WordPress XMLRPC scan :: 5.80.31.171 0.112 BYPASS [28/Aug/2019:05:33:57  1000] [censored_1] "GET /xmlrpc.php HTTP/1.1" 405 53 "-" "Mozilla/5.0 (X11; Linux i686; rv:2.0.1) Gecko/20100101 Firefox/4.0.1"

" "

Unauthorized connection attempt from IP address 103.11.179.3 on Port 445(SMB)