Oct 13 13:29:33 vps-51d81928 sshd[818088]: Failed password for root from 51.77.210.17 port 50900 ssh2
Oct 13 13:33:10 vps-51d81928 sshd[818113]: Invalid user thea from 51.77.210.17 port 54696
Oct 13 13:33:10 vps-51d81928 sshd[818113]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.210.17 
Oct 13 13:33:10 vps-51d81928 sshd[818113]: Invalid user thea from 51.77.210.17 port 54696
Oct 13 13:33:12 vps-51d81928 sshd[818113]: Failed password for invalid user thea from 51.77.210.17 port 54696 ssh2
...

Oct 13 01:59:24 eventyay sshd[4619]: Failed password for root from 51.77.210.17 port 49690 ssh2
Oct 13 02:03:00 eventyay sshd[4866]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.210.17
Oct 13 02:03:02 eventyay sshd[4866]: Failed password for invalid user rob from 51.77.210.17 port 55612 ssh2
...

Sep 18 11:38:10 IngegnereFirenze sshd[6383]: User root from 51.77.210.17 not allowed because not listed in AllowUsers
...

Sep 18 04:35:01 h2865660 sshd[31465]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.210.17  user=root
Sep 18 04:35:03 h2865660 sshd[31465]: Failed password for root from 51.77.210.17 port 34418 ssh2
Sep 18 04:45:39 h2865660 sshd[31938]: Invalid user ftp from 51.77.210.17 port 33994
Sep 18 04:45:39 h2865660 sshd[31938]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.210.17
Sep 18 04:45:39 h2865660 sshd[31938]: Invalid user ftp from 51.77.210.17 port 33994
Sep 18 04:45:42 h2865660 sshd[31938]: Failed password for invalid user ftp from 51.77.210.17 port 33994 ssh2
...

2020-09-17T17:55:19.661267server.espacesoutien.com sshd[28277]: Invalid user jasoncreek from 51.77.210.17 port 52630
2020-09-17T17:55:21.937588server.espacesoutien.com sshd[28277]: Failed password for invalid user jasoncreek from 51.77.210.17 port 52630 ssh2
2020-09-17T17:59:19.461519server.espacesoutien.com sshd[28544]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.210.17  user=root
2020-09-17T17:59:21.338187server.espacesoutien.com sshd[28544]: Failed password for root from 51.77.210.17 port 36762 ssh2
...

Aug  9 14:11:19 kh-dev-server sshd[7023]: Failed password for root from 51.77.210.17 port 56174 ssh2
...

Aug  8 18:36:22 ny01 sshd[7826]: Failed password for root from 51.77.210.17 port 56308 ssh2
Aug  8 18:40:21 ny01 sshd[8342]: Failed password for root from 51.77.210.17 port 39620 ssh2

Aug  7 16:26:55 Tower sshd[7792]: Connection from 51.77.210.17 port 53680 on 192.168.10.220 port 22 rdomain ""
Aug  7 16:26:55 Tower sshd[7792]: Failed password for root from 51.77.210.17 port 53680 ssh2
Aug  7 16:26:55 Tower sshd[7792]: Received disconnect from 51.77.210.17 port 53680:11: Bye Bye [preauth]
Aug  7 16:26:55 Tower sshd[7792]: Disconnected from authenticating user root 51.77.210.17 port 53680 [preauth]

Aug  4 12:20:04 abendstille sshd\[2271\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.210.17  user=root
Aug  4 12:20:05 abendstille sshd\[2271\]: Failed password for root from 51.77.210.17 port 52966 ssh2
Aug  4 12:24:06 abendstille sshd\[6023\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.210.17  user=root
Aug  4 12:24:08 abendstille sshd\[6023\]: Failed password for root from 51.77.210.17 port 36818 ssh2
Aug  4 12:28:11 abendstille sshd\[9879\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.210.17  user=root
...

Jul 26 14:18:55 lanister sshd[7967]: Invalid user sorrentino from 51.77.210.17
Jul 26 14:18:55 lanister sshd[7967]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.210.17
Jul 26 14:18:55 lanister sshd[7967]: Invalid user sorrentino from 51.77.210.17
Jul 26 14:18:57 lanister sshd[7967]: Failed password for invalid user sorrentino from 51.77.210.17 port 54356 ssh2

Jul 20 02:27:12 ws24vmsma01 sshd[170802]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.210.17
Jul 20 02:27:14 ws24vmsma01 sshd[170802]: Failed password for invalid user dep from 51.77.210.17 port 48308 ssh2
...

Sep  2 02:57:17 h2646465 sshd[16821]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.210.201  user=root
Sep  2 02:57:19 h2646465 sshd[16821]: Failed password for root from 51.77.210.201 port 37316 ssh2
Sep  2 02:57:21 h2646465 sshd[16821]: Failed password for root from 51.77.210.201 port 37316 ssh2
Sep  2 02:57:17 h2646465 sshd[16821]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.210.201  user=root
Sep  2 02:57:19 h2646465 sshd[16821]: Failed password for root from 51.77.210.201 port 37316 ssh2
Sep  2 02:57:21 h2646465 sshd[16821]: Failed password for root from 51.77.210.201 port 37316 ssh2
Sep  2 02:57:17 h2646465 sshd[16821]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.210.201  user=root
Sep  2 02:57:19 h2646465 sshd[16821]: Failed password for root from 51.77.210.201 port 37316 ssh2
Sep  2 02:57:21 h2646465 sshd[16821]: Failed password for root from 51.77.210.201

Sep  2 00:30:24 pve1 sshd[29213]: Failed password for root from 51.77.210.201 port 45188 ssh2
Sep  2 00:30:27 pve1 sshd[29213]: Failed password for root from 51.77.210.201 port 45188 ssh2
...

Invalid user ith from 51.77.210.216 port 54906

May 15 00:39:41 NPSTNNYC01T sshd[12928]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.210.216
May 15 00:39:43 NPSTNNYC01T sshd[12928]: Failed password for invalid user kang from 51.77.210.216 port 47638 ssh2
May 15 00:43:36 NPSTNNYC01T sshd[13359]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.210.216
...

$f2bV_matches

(sshd) Failed SSH login from 51.77.210.216 (FR/France/216.ip-51-77-210.eu): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: May 12 10:43:32 srv sshd[13931]: Invalid user bbb from 51.77.210.216 port 59574
May 12 10:43:33 srv sshd[13931]: Failed password for invalid user bbb from 51.77.210.216 port 59574 ssh2
May 12 10:48:16 srv sshd[14057]: Invalid user bobby from 51.77.210.216 port 40586
May 12 10:48:18 srv sshd[14057]: Failed password for invalid user bobby from 51.77.210.216 port 40586 ssh2
May 12 10:52:29 srv sshd[14160]: Invalid user tobin from 51.77.210.216 port 48250

Invalid user admin from 51.77.210.216 port 34686

Apr 17 21:18:09 minden010 sshd[11687]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.210.216
Apr 17 21:18:10 minden010 sshd[11687]: Failed password for invalid user nm from 51.77.210.216 port 42990 ssh2
Apr 17 21:23:46 minden010 sshd[14688]: Failed password for root from 51.77.210.216 port 37088 ssh2
...

Apr  5 21:46:08 mockhub sshd[4797]: Failed password for root from 51.77.210.216 port 55050 ssh2
...

Apr  3 18:42:26 *** sshd[4163]: User root from 51.77.210.216 not allowed because not listed in AllowUsers

2020-03-31T05:51:57.128344abusebot.cloudsearch.cf sshd[749]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=216.ip-51-77-210.eu  user=root
2020-03-31T05:51:59.137730abusebot.cloudsearch.cf sshd[749]: Failed password for root from 51.77.210.216 port 40052 ssh2
2020-03-31T05:56:03.419346abusebot.cloudsearch.cf sshd[1000]: Invalid user mc from 51.77.210.216 port 52256
2020-03-31T05:56:03.425383abusebot.cloudsearch.cf sshd[1000]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=216.ip-51-77-210.eu
2020-03-31T05:56:03.419346abusebot.cloudsearch.cf sshd[1000]: Invalid user mc from 51.77.210.216 port 52256
2020-03-31T05:56:05.874476abusebot.cloudsearch.cf sshd[1000]: Failed password for invalid user mc from 51.77.210.216 port 52256 ssh2
2020-03-31T06:00:08.035702abusebot.cloudsearch.cf sshd[1288]: Invalid user mc from 51.77.210.216 port 36232
...

detected by Fail2Ban

Mar  5 20:41:32 web1 sshd\[2516\]: Invalid user temp from 51.77.210.216
Mar  5 20:41:32 web1 sshd\[2516\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.210.216
Mar  5 20:41:35 web1 sshd\[2516\]: Failed password for invalid user temp from 51.77.210.216 port 35860 ssh2
Mar  5 20:47:37 web1 sshd\[3111\]: Invalid user csgo from 51.77.210.216
Mar  5 20:47:37 web1 sshd\[3111\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.210.216

Feb 10 20:12:47 sachi sshd\[22846\]: Invalid user wdf from 51.77.210.216
Feb 10 20:12:47 sachi sshd\[22846\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=216.ip-51-77-210.eu
Feb 10 20:12:49 sachi sshd\[22846\]: Failed password for invalid user wdf from 51.77.210.216 port 47806 ssh2
Feb 10 20:15:00 sachi sshd\[23036\]: Invalid user ifk from 51.77.210.216
Feb 10 20:15:00 sachi sshd\[23036\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=216.ip-51-77-210.eu

fraudulent SSH attempt

2019-10-06T11:50:54.054945  sshd[23797]: Invalid user P@$$W0RD2016 from 51.68.47.45 port 41916
2019-10-06T11:50:54.064261  sshd[23797]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.47.45
2019-10-06T11:50:54.054945  sshd[23797]: Invalid user P@$$W0RD2016 from 51.68.47.45 port 41916
2019-10-06T11:50:55.533100  sshd[23797]: Failed password for invalid user P@$$W0RD2016 from 51.68.47.45 port 41916 ssh2
2019-10-06T11:54:44.301816  sshd[23842]: Invalid user P@$$word@123 from 51.68.47.45 port 54006
...

SS1,DEF GET /wp-login.php

Oct  6 08:29:37 herz-der-gamer sshd[24128]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.138.143  user=root
Oct  6 08:29:40 herz-der-gamer sshd[24128]: Failed password for root from 51.68.138.143 port 35664 ssh2
Oct  6 08:35:48 herz-der-gamer sshd[24337]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.138.143  user=root
Oct  6 08:35:49 herz-der-gamer sshd[24337]: Failed password for root from 51.68.138.143 port 37739 ssh2
...

Unauthorised access (Oct  6) SRC=123.188.238.169 LEN=40 TTL=49 ID=26256 TCP DPT=8080 WINDOW=10618 SYN

Oct  5 21:19:21 sachi sshd\[618\]: Invalid user Feeling@2017 from 94.191.120.164
Oct  5 21:19:21 sachi sshd\[618\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.120.164
Oct  5 21:19:23 sachi sshd\[618\]: Failed password for invalid user Feeling@2017 from 94.191.120.164 port 55784 ssh2
Oct  5 21:23:52 sachi sshd\[1586\]: Invalid user P4rol4321 from 94.191.120.164
Oct  5 21:23:52 sachi sshd\[1586\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.120.164

Automatic report - Banned IP Access

Oct  6 05:54:04 ny01 sshd[24016]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.152.14.178
Oct  6 05:54:06 ny01 sshd[24016]: Failed password for invalid user testuser from 190.152.14.178 port 32854 ssh2
Oct  6 05:59:52 ny01 sshd[25395]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.152.14.178

Oct  6 03:38:35 plusreed sshd[19474]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.19.218.134  user=root
Oct  6 03:38:37 plusreed sshd[19474]: Failed password for root from 134.19.218.134 port 44852 ssh2
...

Oct  6 12:19:06 vps01 sshd[23803]: Failed password for root from 220.76.107.50 port 46786 ssh2

Attempt to attack host OS, exploiting network vulnerabilities, on 06-10-2019 04:45:31.

Oct  6 07:42:39 SilenceServices sshd[17936]: Failed password for root from 137.74.171.160 port 60274 ssh2
Oct  6 07:46:25 SilenceServices sshd[18936]: Failed password for root from 137.74.171.160 port 43648 ssh2

B: Magento admin pass test (wrong country)

2019-10-06T10:18:28.945278lon01.zurich-datacenter.net sshd\[25557\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.ip-54-37-69.eu  user=root
2019-10-06T10:18:31.051163lon01.zurich-datacenter.net sshd\[25557\]: Failed password for root from 54.37.69.113 port 39447 ssh2
2019-10-06T10:22:11.462203lon01.zurich-datacenter.net sshd\[25624\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.ip-54-37-69.eu  user=root
2019-10-06T10:22:12.852377lon01.zurich-datacenter.net sshd\[25624\]: Failed password for root from 54.37.69.113 port 58847 ssh2
2019-10-06T10:25:59.653148lon01.zurich-datacenter.net sshd\[25692\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.ip-54-37-69.eu  user=root
...

3389BruteforceFW21

3389BruteforceFW21