Failed password for invalid user takamatsu from 51.77.195.1 port 40168 ssh2
Invalid user activiti from 51.77.195.1 port 60306
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.195.1
Failed password for invalid user activiti from 51.77.195.1 port 60306 ssh2
Invalid user remote from 51.77.195.1 port 52212

<6 unauthorized SSH connections

Jan 21 10:18:35 XXX sshd[62537]: Invalid user gabi from 51.77.195.1 port 59622

Unauthorized connection attempt detected from IP address 51.77.195.1 to port 2220 [J]

Invalid user savannah from 51.77.195.1 port 49624

Dec 31 21:58:54 serwer sshd\[32454\]: Invalid user ae from 51.77.195.1 port 51396
Dec 31 21:58:54 serwer sshd\[32454\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.195.1
Dec 31 21:58:56 serwer sshd\[32454\]: Failed password for invalid user ae from 51.77.195.1 port 51396 ssh2
...

$f2bV_matches

Dec 23 17:03:35 dedicated sshd[5100]: Invalid user patrick from 51.77.195.1 port 36404

Dec 22 11:17:46 plusreed sshd[3415]: Invalid user Heslo from 51.77.195.1
...

$f2bV_matches

Dec  1 05:34:00 firewall sshd[18886]: Invalid user chack from 51.77.195.1
Dec  1 05:34:02 firewall sshd[18886]: Failed password for invalid user chack from 51.77.195.1 port 35366 ssh2
Dec  1 05:37:01 firewall sshd[18929]: Invalid user cattien from 51.77.195.1
...

2019-11-20T22:15:42.113302  sshd[6486]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.195.1  user=root
2019-11-20T22:15:43.935028  sshd[6486]: Failed password for root from 51.77.195.1 port 58106 ssh2
2019-11-20T22:19:10.845319  sshd[6533]: Invalid user heiligenberg from 51.77.195.1 port 38240
2019-11-20T22:19:10.859008  sshd[6533]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.195.1
2019-11-20T22:19:10.845319  sshd[6533]: Invalid user heiligenberg from 51.77.195.1 port 38240
2019-11-20T22:19:12.569896  sshd[6533]: Failed password for invalid user heiligenberg from 51.77.195.1 port 38240 ssh2
...

Automatic report - Banned IP Access

Nov 15 01:27:56 server sshd\[5432\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.ip-51-77-195.eu  user=root
Nov 15 01:27:58 server sshd\[5432\]: Failed password for root from 51.77.195.1 port 45742 ssh2
Nov 15 01:33:04 server sshd\[6664\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.ip-51-77-195.eu  user=root
Nov 15 01:33:07 server sshd\[6664\]: Failed password for root from 51.77.195.1 port 35678 ssh2
Nov 15 01:36:23 server sshd\[7917\]: Invalid user COM from 51.77.195.1
...

Nov  8 16:13:30 SilenceServices sshd[30548]: Failed password for root from 51.77.195.1 port 33634 ssh2
Nov  8 16:17:21 SilenceServices sshd[571]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.195.1
Nov  8 16:17:23 SilenceServices sshd[571]: Failed password for invalid user newadmin from 51.77.195.1 port 43338 ssh2

SSH brutforce

Nov  2 13:52:55 icinga sshd[6337]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.195.1
Nov  2 13:52:57 icinga sshd[6337]: Failed password for invalid user client from 51.77.195.1 port 33556 ssh2
...

Nov  1 05:03:23 SilenceServices sshd[16692]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.195.1
Nov  1 05:03:25 SilenceServices sshd[16692]: Failed password for invalid user 111111 from 51.77.195.1 port 39276 ssh2
Nov  1 05:07:18 SilenceServices sshd[17786]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.195.1

May 23 22:15:39 santamaria sshd\[2137\]: Invalid user bt1944 from 51.77.195.112
May 23 22:15:39 santamaria sshd\[2137\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.195.112
May 23 22:15:41 santamaria sshd\[2137\]: Failed password for invalid user bt1944 from 51.77.195.112 port 46752 ssh2
...

Feb 17 00:00:07 lnxded64 sshd[25393]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.195.149
Feb 17 00:00:07 lnxded64 sshd[25393]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.195.149

Feb 15 06:00:58 silence02 sshd[7544]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.195.149
Feb 15 06:00:59 silence02 sshd[7544]: Failed password for invalid user newpass from 51.77.195.149 port 43476 ssh2
Feb 15 06:04:08 silence02 sshd[7828]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.195.149

Feb 12 01:19:45 amit sshd\[6632\]: Invalid user kc from 51.77.195.149
Feb 12 01:19:45 amit sshd\[6632\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.195.149
Feb 12 01:19:47 amit sshd\[6632\]: Failed password for invalid user kc from 51.77.195.149 port 52284 ssh2
...

Feb 11 16:54:09 web8 sshd\[3590\]: Invalid user izt from 51.77.195.149
Feb 11 16:54:09 web8 sshd\[3590\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.195.149
Feb 11 16:54:11 web8 sshd\[3590\]: Failed password for invalid user izt from 51.77.195.149 port 38718 ssh2
Feb 11 16:57:54 web8 sshd\[5383\]: Invalid user dcx from 51.77.195.149
Feb 11 16:57:54 web8 sshd\[5383\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.195.149

detected by Fail2Ban

Dec  1 11:28:11 server sshd\[22646\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.ip-51-77-195.eu  user=root
Dec  1 11:28:13 server sshd\[22646\]: Failed password for root from 51.77.195.149 port 39820 ssh2
Dec  1 11:44:20 server sshd\[26624\]: Invalid user svoboda from 51.77.195.149
Dec  1 11:44:20 server sshd\[26624\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.ip-51-77-195.eu 
Dec  1 11:44:22 server sshd\[26624\]: Failed password for invalid user svoboda from 51.77.195.149 port 40484 ssh2
...

Nov 28 09:31:30 eventyay sshd[9313]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.195.149
Nov 28 09:31:31 eventyay sshd[9313]: Failed password for invalid user weizmann from 51.77.195.149 port 48848 ssh2
Nov 28 09:39:30 eventyay sshd[9446]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.195.149
...

Nov 26 14:25:03 php1 sshd\[18752\]: Invalid user ver from 51.77.195.149
Nov 26 14:25:03 php1 sshd\[18752\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.195.149
Nov 26 14:25:05 php1 sshd\[18752\]: Failed password for invalid user ver from 51.77.195.149 port 45010 ssh2
Nov 26 14:33:24 php1 sshd\[19434\]: Invalid user Webster@123 from 51.77.195.149
Nov 26 14:33:24 php1 sshd\[19434\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.195.149

Nov 26 06:03:19 sachi sshd\[12446\]: Invalid user mrak from 51.77.195.149
Nov 26 06:03:19 sachi sshd\[12446\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.ip-51-77-195.eu
Nov 26 06:03:21 sachi sshd\[12446\]: Failed password for invalid user mrak from 51.77.195.149 port 60040 ssh2
Nov 26 06:11:06 sachi sshd\[13155\]: Invalid user admin from 51.77.195.149
Nov 26 06:11:06 sachi sshd\[13155\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.ip-51-77-195.eu

Nov 23 19:56:55 vmanager6029 sshd\[24041\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.195.149  user=root
Nov 23 19:56:57 vmanager6029 sshd\[24041\]: Failed password for root from 51.77.195.149 port 57270 ssh2
Nov 23 20:05:06 vmanager6029 sshd\[24375\]: Invalid user ubnt from 51.77.195.149 port 37730

Nov 17 17:28:00 server sshd\[31007\]: Invalid user cecile from 51.77.195.149
Nov 17 17:28:00 server sshd\[31007\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.ip-51-77-195.eu 
Nov 17 17:28:02 server sshd\[31007\]: Failed password for invalid user cecile from 51.77.195.149 port 43640 ssh2
Nov 17 17:37:31 server sshd\[1066\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.ip-51-77-195.eu  user=root
Nov 17 17:37:34 server sshd\[1066\]: Failed password for root from 51.77.195.149 port 33874 ssh2
...

5x Failed Password

Nov 14 12:14:57 SilenceServices sshd[28761]: Failed password for uucp from 51.77.195.149 port 33046 ssh2
Nov 14 12:22:01 SilenceServices sshd[30905]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.195.149
Nov 14 12:22:03 SilenceServices sshd[30905]: Failed password for invalid user chinh from 51.77.195.149 port 42016 ssh2

SSH brute-force: detected 16 distinct usernames within a 24-hour window.

Jun  8 04:35:47 ZTCN001 sshd[289824]: User r.r from 161.35.60.51 not allowed because not listed in AllowUsers
Jun  8 04:35:47 ZTCN001 sshd[289824]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.60.51  user=r.r
Jun  8 04:35:47 ZTCN001 sshd[289824]: User r.r from 161.35.60.51 not allowed because not listed in AllowUsers
Jun  8 04:35:49 ZTCN001 sshd[289824]: Failed password for invalid user r.r from 161.35.60.51 port 41136 ssh2
Jun  8 04:38:59 ZTCN001 sshd[289874]: User r.r from 161.35.60.51 not allowed because not listed in AllowUsers


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=161.35.60.51

$f2bV_matches

1591588314 - 06/08/2020 05:51:54 Host: 180.245.51.208/180.245.51.208 Port: 445 TCP Blocked

Jun  8 09:07:09 lukav-desktop sshd\[22799\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.171.160  user=root
Jun  8 09:07:12 lukav-desktop sshd\[22799\]: Failed password for root from 137.74.171.160 port 42306 ssh2
Jun  8 09:11:10 lukav-desktop sshd\[25113\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.171.160  user=root
Jun  8 09:11:12 lukav-desktop sshd\[25113\]: Failed password for root from 137.74.171.160 port 44684 ssh2
Jun  8 09:15:15 lukav-desktop sshd\[12135\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.171.160  user=root

Jun  7 18:00:55 php1 sshd\[19826\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.117.179.134  user=root
Jun  7 18:00:57 php1 sshd\[19826\]: Failed password for root from 138.117.179.134 port 60900 ssh2
Jun  7 18:05:00 php1 sshd\[20354\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.117.179.134  user=root
Jun  7 18:05:02 php1 sshd\[20354\]: Failed password for root from 138.117.179.134 port 33822 ssh2
Jun  7 18:09:11 php1 sshd\[20924\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.117.179.134  user=root

Jun  8 07:06:10 cdc sshd[11673]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.124.199.251  user=root
Jun  8 07:06:12 cdc sshd[11673]: Failed password for invalid user root from 125.124.199.251 port 58048 ssh2

2020-06-08T06:09:22.818599homeassistant sshd[3206]: Invalid user 1234 from 141.98.81.6 port 1894
2020-06-08T06:09:22.831422homeassistant sshd[3206]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.81.6
...

2020-06-08T08:16:19.963945vps773228.ovh.net sshd[3200]: Failed password for root from 139.155.22.165 port 48624 ssh2
2020-06-08T08:18:22.456224vps773228.ovh.net sshd[3220]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.22.165  user=root
2020-06-08T08:18:24.905752vps773228.ovh.net sshd[3220]: Failed password for root from 139.155.22.165 port 57758 ssh2
2020-06-08T08:20:25.881133vps773228.ovh.net sshd[3282]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.22.165  user=root
2020-06-08T08:20:27.883865vps773228.ovh.net sshd[3282]: Failed password for root from 139.155.22.165 port 38110 ssh2
...

Port scan denied

Automatic report - Banned IP Access

IP 190.201.86.143 attacked honeypot on port: 1434 at 6/8/2020 4:51:10 AM

Fail2Ban Ban Triggered

Jun  7 23:59:06 server1 sshd\[31879\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.65.71.3  user=root
Jun  7 23:59:08 server1 sshd\[31879\]: Failed password for root from 209.65.71.3 port 35097 ssh2
Jun  8 00:02:54 server1 sshd\[616\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.65.71.3  user=root
Jun  8 00:02:57 server1 sshd\[616\]: Failed password for root from 209.65.71.3 port 36704 ssh2
Jun  8 00:06:37 server1 sshd\[1660\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.65.71.3  user=root
...

Jun  7 19:09:29 php1 sshd\[27091\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.55.74  user=root
Jun  7 19:09:31 php1 sshd\[27091\]: Failed password for root from 111.231.55.74 port 41486 ssh2
Jun  7 19:14:10 php1 sshd\[27546\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.55.74  user=root
Jun  7 19:14:11 php1 sshd\[27546\]: Failed password for root from 111.231.55.74 port 37852 ssh2
Jun  7 19:18:57 php1 sshd\[27988\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.55.74  user=root

Port Scanner