Oct 30 07:16:16 lnxded64 sshd[9243]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.65.209

Oct 20 23:37:23 ns381471 sshd[10105]: Failed password for root from 51.75.65.209 port 57432 ssh2
Oct 20 23:40:43 ns381471 sshd[10392]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.65.209
Oct 20 23:40:45 ns381471 sshd[10392]: Failed password for invalid user master from 51.75.65.209 port 40048 ssh2

Oct 13 11:37:08 hcbbdb sshd\[6215\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.ip-51-75-65.eu  user=root
Oct 13 11:37:10 hcbbdb sshd\[6215\]: Failed password for root from 51.75.65.209 port 50440 ssh2
Oct 13 11:40:25 hcbbdb sshd\[6689\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.ip-51-75-65.eu  user=root
Oct 13 11:40:27 hcbbdb sshd\[6689\]: Failed password for root from 51.75.65.209 port 58996 ssh2
Oct 13 11:43:45 hcbbdb sshd\[7183\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.ip-51-75-65.eu  user=root

Oct  7 17:34:38 fr01 sshd[19258]: Invalid user Lucas@123 from 51.75.65.209
...

SSH brute-force: detected 13 distinct usernames within a 24-hour window.

2019-10-04T17:28:13.453038abusebot-2.cloudsearch.cf sshd\[11345\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.ip-51-75-65.eu  user=root

Oct  3 22:33:23 areeb-Workstation sshd[9492]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.65.209
Oct  3 22:33:25 areeb-Workstation sshd[9492]: Failed password for invalid user boldseasftp from 51.75.65.209 port 49834 ssh2
...

Oct  1 05:46:55 SilenceServices sshd[1788]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.65.209
Oct  1 05:46:57 SilenceServices sshd[1788]: Failed password for invalid user bt from 51.75.65.209 port 54322 ssh2
Oct  1 05:50:27 SilenceServices sshd[2757]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.65.209

Sep 28 06:04:36 icinga sshd[62584]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.65.209 
Sep 28 06:04:38 icinga sshd[62584]: Failed password for invalid user uftp from 51.75.65.209 port 43694 ssh2
Sep 28 06:12:14 icinga sshd[2627]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.65.209 
...

Sep 22 21:03:36 sachi sshd\[9202\]: Invalid user test101 from 51.75.65.209
Sep 22 21:03:36 sachi sshd\[9202\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.ip-51-75-65.eu
Sep 22 21:03:37 sachi sshd\[9202\]: Failed password for invalid user test101 from 51.75.65.209 port 55104 ssh2
Sep 22 21:07:01 sachi sshd\[9474\]: Invalid user versa from 51.75.65.209
Sep 22 21:07:01 sachi sshd\[9474\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.ip-51-75-65.eu

2019-09-12T10:22:44.225508  sshd[1766]: Invalid user student123 from 51.75.65.209 port 40272
2019-09-12T10:22:44.233869  sshd[1766]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.65.209
2019-09-12T10:22:44.225508  sshd[1766]: Invalid user student123 from 51.75.65.209 port 40272
2019-09-12T10:22:46.314994  sshd[1766]: Failed password for invalid user student123 from 51.75.65.209 port 40272 ssh2
2019-09-12T10:28:02.800536  sshd[1804]: Invalid user hduser from 51.75.65.209 port 44654
...

Sep 11 11:33:48 SilenceServices sshd[22430]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.65.209
Sep 11 11:33:50 SilenceServices sshd[22430]: Failed password for invalid user bkpuser from 51.75.65.209 port 41632 ssh2
Sep 11 11:39:11 SilenceServices sshd[24504]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.65.209

2019-09-09T17:41:25.379619abusebot-3.cloudsearch.cf sshd\[13108\]: Invalid user csczserver from 51.75.65.209 port 33600

2019-09-02T20:31:43.307894abusebot-8.cloudsearch.cf sshd\[7931\]: Invalid user wx from 51.75.65.209 port 57484

2019-10-19T21:50:39.762949abusebot-3.cloudsearch.cf sshd\[14885\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=72.ip-51-75-65.eu  user=games

Oct 16 21:26:14 SilenceServices sshd[13282]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.65.72
Oct 16 21:26:16 SilenceServices sshd[13282]: Failed password for invalid user 123456 from 51.75.65.72 port 47379 ssh2
Oct 16 21:29:59 SilenceServices sshd[14214]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.65.72

Oct 13 13:47:05 icinga sshd[13154]: Failed password for root from 51.75.65.72 port 48429 ssh2
...

Oct  5 15:56:00 OPSO sshd\[4178\]: Invalid user p@\$\$w0rd@2018 from 51.75.65.72 port 42654
Oct  5 15:56:00 OPSO sshd\[4178\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.65.72
Oct  5 15:56:02 OPSO sshd\[4178\]: Failed password for invalid user p@\$\$w0rd@2018 from 51.75.65.72 port 42654 ssh2
Oct  5 16:00:06 OPSO sshd\[5227\]: Invalid user Qaz@12345 from 51.75.65.72 port 34455
Oct  5 16:00:06 OPSO sshd\[5227\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.65.72

Oct  2 18:38:06 auw2 sshd\[1132\]: Invalid user oracle from 51.75.65.72
Oct  2 18:38:06 auw2 sshd\[1132\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=72.ip-51-75-65.eu
Oct  2 18:38:09 auw2 sshd\[1132\]: Failed password for invalid user oracle from 51.75.65.72 port 60687 ssh2
Oct  2 18:41:58 auw2 sshd\[1589\]: Invalid user admin from 51.75.65.72
Oct  2 18:41:58 auw2 sshd\[1589\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=72.ip-51-75-65.eu

detected by Fail2Ban

Sep 26 19:13:09 pkdns2 sshd\[49872\]: Invalid user aczel from 51.75.65.72Sep 26 19:13:10 pkdns2 sshd\[49872\]: Failed password for invalid user aczel from 51.75.65.72 port 34467 ssh2Sep 26 19:17:25 pkdns2 sshd\[50046\]: Invalid user tr from 51.75.65.72Sep 26 19:17:28 pkdns2 sshd\[50046\]: Failed password for invalid user tr from 51.75.65.72 port 55350 ssh2Sep 26 19:21:30 pkdns2 sshd\[50227\]: Invalid user ps from 51.75.65.72Sep 26 19:21:33 pkdns2 sshd\[50227\]: Failed password for invalid user ps from 51.75.65.72 port 48002 ssh2
...

Sep 19 17:19:42 ny01 sshd[4517]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.65.72
Sep 19 17:19:45 ny01 sshd[4517]: Failed password for invalid user mp3 from 51.75.65.72 port 37997 ssh2
Sep 19 17:23:45 ny01 sshd[5275]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.65.72

Sep  7 15:34:12 SilenceServices sshd[17058]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.65.72
Sep  7 15:34:13 SilenceServices sshd[17058]: Failed password for invalid user vserver from 51.75.65.72 port 33887 ssh2
Sep  7 15:38:16 SilenceServices sshd[18585]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.65.72

Sep  2 06:25:16 minden010 sshd[11432]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.65.72
Sep  2 06:25:18 minden010 sshd[11432]: Failed password for invalid user lorelai from 51.75.65.72 port 44777 ssh2
Sep  2 06:29:06 minden010 sshd[12992]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.65.72
...

Sep  1 17:04:24 tux-35-217 sshd\[17410\]: Invalid user mediax from 51.75.65.72 port 50037
Sep  1 17:04:24 tux-35-217 sshd\[17410\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.65.72
Sep  1 17:04:26 tux-35-217 sshd\[17410\]: Failed password for invalid user mediax from 51.75.65.72 port 50037 ssh2
Sep  1 17:08:22 tux-35-217 sshd\[17441\]: Invalid user tomi from 51.75.65.72 port 44066
Sep  1 17:08:22 tux-35-217 sshd\[17441\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.65.72
...

$f2bV_matches

Aug 27 16:04:24 meumeu sshd[24189]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.65.72 
Aug 27 16:04:26 meumeu sshd[24189]: Failed password for invalid user didier from 51.75.65.72 port 37029 ssh2
Aug 27 16:08:42 meumeu sshd[24728]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.65.72 
...

Aug 27 02:33:54 SilenceServices sshd[8082]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.65.72
Aug 27 02:33:57 SilenceServices sshd[8082]: Failed password for invalid user swift from 51.75.65.72 port 49695 ssh2
Aug 27 02:38:02 SilenceServices sshd[9714]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.65.72

frenzy

Jun  8 06:41:57 vlre-nyc-1 sshd\[18261\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.107.225  user=root
Jun  8 06:41:59 vlre-nyc-1 sshd\[18261\]: Failed password for root from 138.68.107.225 port 34886 ssh2
Jun  8 06:45:28 vlre-nyc-1 sshd\[18406\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.107.225  user=root
Jun  8 06:45:30 vlre-nyc-1 sshd\[18406\]: Failed password for root from 138.68.107.225 port 37888 ssh2
Jun  8 06:48:57 vlre-nyc-1 sshd\[18565\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.107.225  user=root
...

IP 190.201.86.143 attacked honeypot on port: 1434 at 6/8/2020 4:51:10 AM

Automatic report - Banned IP Access

Jun  8 11:21:47 webhost01 sshd[24590]: Failed password for root from 187.34.241.226 port 44913 ssh2
...

Jun  8 06:01:15 nas sshd[10115]: Failed password for root from 106.54.223.22 port 40786 ssh2
Jun  8 06:10:41 nas sshd[10346]: Failed password for root from 106.54.223.22 port 60720 ssh2
...

Jun  8 08:15:28 home sshd[22157]: Failed password for root from 128.199.92.187 port 41204 ssh2
Jun  8 08:19:18 home sshd[22561]: Failed password for root from 128.199.92.187 port 44178 ssh2
...

06/08/2020-02:17:52.481122 185.176.27.54 Protocol: 6 ET DROP Dshield Block Listed Source group 1

$f2bV_matches

Jun  8 08:06:05 ajax sshd[20967]: Failed password for root from 183.237.191.186 port 54446 ssh2

Lines containing failures of 106.75.56.56 (max 1000)
Jun  8 08:41:19 HOSTNAME sshd[31909]: User r.r from 106.75.56.56 not allowed because not listed in AllowUsers
Jun  8 08:41:19 HOSTNAME sshd[31909]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.56.56  user=r.r
Jun  8 08:41:21 HOSTNAME sshd[31909]: Failed password for invalid user r.r from 106.75.56.56 port 59274 ssh2
Jun  8 08:41:22 HOSTNAME sshd[31909]: Received disconnect from 106.75.56.56 port 59274:11: Bye Bye [preauth]
Jun  8 08:41:22 HOSTNAME sshd[31909]: Disconnected from 106.75.56.56 port 59274 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=106.75.56.56

"demo/wp-includes/wlwmanifest.xml"_

1591588228 - 06/08/2020 05:50:28 Host: 36.81.7.66/36.81.7.66 Port: 445 TCP Blocked

$f2bV_matches

Jun  8 07:25:39 buvik sshd[14358]: Failed password for root from 171.34.173.17 port 55917 ssh2
Jun  8 07:30:12 buvik sshd[15152]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.34.173.17  user=root
Jun  8 07:30:14 buvik sshd[15152]: Failed password for root from 171.34.173.17 port 50669 ssh2
...

20/6/7@23:50:28: FAIL: Alarm-Network address from=203.205.26.10
20/6/7@23:50:29: FAIL: Alarm-Network address from=203.205.26.10
...