Sep  9 07:49:48 meumeu sshd[25938]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.27.254 
Sep  9 07:49:50 meumeu sshd[25938]: Failed password for invalid user zabbix from 51.75.27.254 port 49172 ssh2
Sep  9 07:55:38 meumeu sshd[26642]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.27.254 
...

Aug 26 16:57:06 SilenceServices sshd[9806]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.27.254
Aug 26 16:57:08 SilenceServices sshd[9806]: Failed password for invalid user beagleindex from 51.75.27.254 port 49902 ssh2
Aug 26 17:01:17 SilenceServices sshd[12109]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.27.254

Automatic report - Banned IP Access

Invalid user geena from 51.75.27.254 port 58164

Aug 20 13:28:37 SilenceServices sshd[5123]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.27.254
Aug 20 13:28:39 SilenceServices sshd[5123]: Failed password for invalid user date from 51.75.27.254 port 52104 ssh2
Aug 20 13:32:29 SilenceServices sshd[8441]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.27.254

Aug 20 01:32:03 SilenceServices sshd[31250]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.27.254
Aug 20 01:32:05 SilenceServices sshd[31250]: Failed password for invalid user minlon from 51.75.27.254 port 59464 ssh2
Aug 20 01:36:15 SilenceServices sshd[1423]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.27.254

ssh failed login

Aug  8 06:57:54 srv-4 sshd\[25778\]: Invalid user dax from 51.75.27.254
Aug  8 06:57:54 srv-4 sshd\[25778\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.27.254
Aug  8 06:57:56 srv-4 sshd\[25778\]: Failed password for invalid user dax from 51.75.27.254 port 53738 ssh2
...

$f2bV_matches

Invalid user postgres from 51.75.27.254 port 50800
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.27.254
Failed password for invalid user postgres from 51.75.27.254 port 50800 ssh2
Invalid user setup from 51.75.27.254 port 47344
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.27.254

Jul 12 12:42:53 vps647732 sshd[14102]: Failed password for root from 51.75.27.254 port 48576 ssh2
...

Jul 12 10:19:51 vps647732 sshd[10529]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.27.254
Jul 12 10:19:53 vps647732 sshd[10529]: Failed password for invalid user mark from 51.75.27.254 port 33844 ssh2
...

Invalid user timemachine from 51.75.27.254 port 39156

Apr 28 14:58:23 eventyay sshd[15829]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.27.78
Apr 28 14:58:25 eventyay sshd[15829]: Failed password for invalid user blue from 51.75.27.78 port 37396 ssh2
Apr 28 15:02:41 eventyay sshd[16017]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.27.78
...

Apr 13 23:22:45 gw1 sshd[19646]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.27.239
Apr 13 23:22:47 gw1 sshd[19646]: Failed password for invalid user alex from 51.75.27.239 port 36216 ssh2
...

2020-04-07T13:29:27.010810abusebot-2.cloudsearch.cf sshd[8036]: Invalid user user from 51.75.27.78 port 33464
2020-04-07T13:29:27.017268abusebot-2.cloudsearch.cf sshd[8036]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.ip-51-75-27.eu
2020-04-07T13:29:27.010810abusebot-2.cloudsearch.cf sshd[8036]: Invalid user user from 51.75.27.78 port 33464
2020-04-07T13:29:29.272932abusebot-2.cloudsearch.cf sshd[8036]: Failed password for invalid user user from 51.75.27.78 port 33464 ssh2
2020-04-07T13:37:41.645523abusebot-2.cloudsearch.cf sshd[8667]: Invalid user amy from 51.75.27.78 port 34856
2020-04-07T13:37:41.651339abusebot-2.cloudsearch.cf sshd[8667]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.ip-51-75-27.eu
2020-04-07T13:37:41.645523abusebot-2.cloudsearch.cf sshd[8667]: Invalid user amy from 51.75.27.78 port 34856
2020-04-07T13:37:43.723156abusebot-2.cloudsearch.cf sshd[8667]: Failed password for inv
...

2020-04-02T17:28:58.138183vps773228.ovh.net sshd[20445]: Failed password for root from 51.75.27.78 port 55522 ssh2
2020-04-02T17:33:40.457856vps773228.ovh.net sshd[22206]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.ip-51-75-27.eu  user=root
2020-04-02T17:33:42.814908vps773228.ovh.net sshd[22206]: Failed password for root from 51.75.27.78 port 40590 ssh2
2020-04-02T17:38:18.136416vps773228.ovh.net sshd[23915]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.ip-51-75-27.eu  user=root
2020-04-02T17:38:19.991219vps773228.ovh.net sshd[23915]: Failed password for root from 51.75.27.78 port 53892 ssh2
...

Apr  2 08:45:37 pve sshd[16062]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.27.239 
Apr  2 08:45:40 pve sshd[16062]: Failed password for invalid user oracle from 51.75.27.239 port 41533 ssh2
Apr  2 08:55:19 pve sshd[17524]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.27.239

Apr  2 02:10:23 pve sshd[17406]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.27.239 
Apr  2 02:10:25 pve sshd[17406]: Failed password for invalid user git-admin from 51.75.27.239 port 34260 ssh2
Apr  2 02:12:55 pve sshd[17813]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.27.239

Mar 29 23:27:02 vmanager6029 sshd\[2610\]: Invalid user db2inst1 from 51.75.27.239 port 55244
Mar 29 23:29:33 vmanager6029 sshd\[2657\]: Invalid user db2inst1 from 51.75.27.239 port 57458
Mar 29 23:32:11 vmanager6029 sshd\[2691\]: Invalid user db2inst1 from 51.75.27.239 port 59672

2020-03-29T03:55:57.700502shield sshd\[1250\]: Invalid user hxr from 51.75.27.78 port 35584
2020-03-29T03:55:57.708231shield sshd\[1250\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.ip-51-75-27.eu
2020-03-29T03:56:00.469582shield sshd\[1250\]: Failed password for invalid user hxr from 51.75.27.78 port 35584 ssh2
2020-03-29T03:59:57.789492shield sshd\[2027\]: Invalid user unw from 51.75.27.78 port 48708
2020-03-29T03:59:57.800213shield sshd\[2027\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.ip-51-75-27.eu

Mar 28 16:47:36 vps46666688 sshd[20280]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.27.78
Mar 28 16:47:38 vps46666688 sshd[20280]: Failed password for invalid user cwg from 51.75.27.78 port 45220 ssh2
...

2020-03-26T07:46:53.628260sorsha.thespaminator.com sshd[12497]: Invalid user josiane from 51.75.27.78 port 35130
2020-03-26T07:46:55.624561sorsha.thespaminator.com sshd[12497]: Failed password for invalid user josiane from 51.75.27.78 port 35130 ssh2
...

2020-03-21T16:12:21.724996linuxbox-skyline sshd[68641]: Invalid user superman from 51.75.27.78 port 33168
...

Automatic report - SSH Brute-Force Attack

SSH brute-force attempt

SSH Login Bruteforce

Mar 13 22:38:09 plex sshd[18237]: Invalid user debian from 51.75.27.230 port 44672

Icarus honeypot on github

2020-10-12T22:33:33.332939abusebot-6.cloudsearch.cf sshd[25188]: Invalid user arnold from 120.92.114.71 port 34246
2020-10-12T22:33:33.338555abusebot-6.cloudsearch.cf sshd[25188]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.92.114.71
2020-10-12T22:33:33.332939abusebot-6.cloudsearch.cf sshd[25188]: Invalid user arnold from 120.92.114.71 port 34246
2020-10-12T22:33:35.109198abusebot-6.cloudsearch.cf sshd[25188]: Failed password for invalid user arnold from 120.92.114.71 port 34246 ssh2
2020-10-12T22:37:29.744283abusebot-6.cloudsearch.cf sshd[25376]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.92.114.71  user=root
2020-10-12T22:37:31.916070abusebot-6.cloudsearch.cf sshd[25376]: Failed password for root from 120.92.114.71 port 25252 ssh2
2020-10-12T22:41:22.503667abusebot-6.cloudsearch.cf sshd[25391]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.92.
...

Oct 13 07:03:00 nas sshd[16161]: Failed password for root from 95.182.122.131 port 49049 ssh2
Oct 13 07:07:12 nas sshd[16317]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.182.122.131 
Oct 13 07:07:14 nas sshd[16317]: Failed password for invalid user hori from 95.182.122.131 port 50822 ssh2
...

SSH break in attempt
...

Oct 13 01:23:06 *** sshd[29976]: Invalid user shekhar from 152.136.196.155

Unauthorized connection attempt from IP address 218.4.239.146

Oct 13 06:02:42 buvik sshd[15619]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.140.168
Oct 13 06:02:44 buvik sshd[15619]: Failed password for invalid user wangyi from 106.12.140.168 port 35384 ssh2
Oct 13 06:04:48 buvik sshd[15853]: Invalid user rolf from 106.12.140.168
...

Invalid user testweblogic from 188.166.11.150 port 43604

Oct 13 07:42:03 Invalid user miquelfi from 218.2.197.240 port 43494

php WP PHPmyadamin ABUSE blocked for 12h

Automatic report - Banned IP Access

Oct 13 08:16:48 vps639187 sshd\[27115\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.115  user=root
Oct 13 08:16:49 vps639187 sshd\[27115\]: Failed password for root from 222.186.15.115 port 29595 ssh2
Oct 13 08:16:53 vps639187 sshd\[27115\]: Failed password for root from 222.186.15.115 port 29595 ssh2
...

Lines containing failures of 186.96.98.160
Oct 12 22:32:20 kopano sshd[15251]: warning: /etc/hosts.allow, line 13: host name/address mismatch: 186.96.98.160 != azteca-comunicaciones.com
Oct 12 22:32:22 kopano sshd[15251]: Invalid user admin from 186.96.98.160 port 60204
Oct 12 22:32:22 kopano sshd[15251]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.96.98.160
Oct 12 22:32:25 kopano sshd[15251]: Failed password for invalid user admin from 186.96.98.160 port 60204 ssh2
Oct 12 22:32:25 kopano sshd[15251]: Connection closed by invalid user admin 186.96.98.160 port 60204 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=186.96.98.160

20 attempts against mh-ssh on mist

Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "cvsroot" at 2020-10-13T06:05:55Z