Jul 26 11:22:27 vps647732 sshd[4965]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.231.161
Jul 26 11:22:29 vps647732 sshd[4965]: Failed password for invalid user ladev from 51.77.231.161 port 56188 ssh2
...

Nov 15 10:36:19 vps647732 sshd[12593]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.231.161
Nov 15 10:36:20 vps647732 sshd[12593]: Failed password for invalid user minecraft from 51.77.231.161 port 55654 ssh2
...

Nov 14 23:53:13 vps666546 sshd\[12167\]: Invalid user db2inst2 from 51.77.231.161 port 37032
Nov 14 23:53:13 vps666546 sshd\[12167\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.231.161
Nov 14 23:53:15 vps666546 sshd\[12167\]: Failed password for invalid user db2inst2 from 51.77.231.161 port 37032 ssh2
Nov 14 23:54:02 vps666546 sshd\[12205\]: Invalid user db2inst3 from 51.77.231.161 port 47228
Nov 14 23:54:02 vps666546 sshd\[12205\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.231.161
...

Nov  8 18:50:31 web1 sshd\[1377\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.231.161  user=root
Nov  8 18:50:33 web1 sshd\[1377\]: Failed password for root from 51.77.231.161 port 36874 ssh2
Nov  8 18:52:05 web1 sshd\[1553\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.231.161  user=root
Nov  8 18:52:07 web1 sshd\[1553\]: Failed password for root from 51.77.231.161 port 42534 ssh2
Nov  8 18:53:42 web1 sshd\[1731\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.231.161  user=root

Nov  7 07:27:00 vps sshd[15876]: Failed password for root from 51.77.231.161 port 55058 ssh2
Nov  7 07:28:23 vps sshd[15919]: Failed password for root from 51.77.231.161 port 60334 ssh2
...

Nov  4 15:31:43 SilenceServices sshd[19662]: Failed password for root from 51.77.231.161 port 45520 ssh2
Nov  4 15:33:13 SilenceServices sshd[20059]: Failed password for root from 51.77.231.161 port 51292 ssh2

Nov  4 11:13:11 markkoudstaal sshd[31164]: Failed password for root from 51.77.231.161 port 48610 ssh2
Nov  4 11:14:41 markkoudstaal sshd[31309]: Failed password for root from 51.77.231.161 port 54528 ssh2

Fail2Ban Ban Triggered

$f2bV_matches

Oct 13 21:24:12 spy sshd[21255]: Failed password for r.r from 51.77.231.161 port 51886 ssh2
Oct 13 21:25:43 spy sshd[21257]: Failed password for r.r from 51.77.231.161 port 57756 ssh2
Oct 13 21:27:22 spy sshd[21262]: Failed password for r.r from 51.77.231.161 port 35126 ssh2
Oct 13 21:28:55 spy sshd[21264]: Failed password for r.r from 51.77.231.161 port 41124 ssh2
Oct 13 21:30:29 spy sshd[21268]: Invalid user oracle from 51.77.231.161
Oct 13 21:30:31 spy sshd[21268]: Failed password for invalid user oracle from 51.77.231.161 port 46816 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=51.77.231.161

2020-09-27T12:41:45.741227mail.thespaminator.com sshd[5553]: Invalid user ubuntu from 51.77.231.236 port 33252
2020-09-27T12:41:47.314962mail.thespaminator.com sshd[5553]: Failed password for invalid user ubuntu from 51.77.231.236 port 33252 ssh2
...

2020-09-27T05:52:41.515639shield sshd\[20675\]: Invalid user web from 51.77.231.236 port 35242
2020-09-27T05:52:41.525239shield sshd\[20675\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=vps-bd5167ba.vps.ovh.net
2020-09-27T05:52:43.982741shield sshd\[20675\]: Failed password for invalid user web from 51.77.231.236 port 35242 ssh2
2020-09-27T05:55:54.956124shield sshd\[21266\]: Invalid user userftp from 51.77.231.236 port 34965
2020-09-27T05:55:54.962019shield sshd\[21266\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=vps-bd5167ba.vps.ovh.net

Brute-force attempt banned

Jul  8 00:52:00 mx sshd[16665]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.231.216
Jul  8 00:52:03 mx sshd[16665]: Failed password for invalid user calla from 51.77.231.216 port 38932 ssh2

invalid user

trying to access non-authorized port

Feb 28 05:53:07 icecube postfix/smtpd[56865]: NOQUEUE: reject: RCPT from account.bizpropelled.com[51.77.231.238]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=

Automatic report - Banned IP Access

Dec 22 15:31:13 web8 sshd\[28582\]: Invalid user rpc from 51.77.231.213
Dec 22 15:31:13 web8 sshd\[28582\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.231.213
Dec 22 15:31:15 web8 sshd\[28582\]: Failed password for invalid user rpc from 51.77.231.213 port 40886 ssh2
Dec 22 15:36:43 web8 sshd\[31252\]: Invalid user server from 51.77.231.213
Dec 22 15:36:43 web8 sshd\[31252\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.231.213

Dec 16 12:20:24 eddieflores sshd\[26399\]: Invalid user anna from 51.77.231.213
Dec 16 12:20:24 eddieflores sshd\[26399\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.ip-51-77-231.eu
Dec 16 12:20:27 eddieflores sshd\[26399\]: Failed password for invalid user anna from 51.77.231.213 port 44670 ssh2
Dec 16 12:26:03 eddieflores sshd\[26893\]: Invalid user user from 51.77.231.213
Dec 16 12:26:03 eddieflores sshd\[26893\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.ip-51-77-231.eu

Dec 15 10:24:19 server sshd\[16058\]: Invalid user tidsdelt from 51.77.231.213
Dec 15 10:24:19 server sshd\[16058\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.ip-51-77-231.eu 
Dec 15 10:24:21 server sshd\[16058\]: Failed password for invalid user tidsdelt from 51.77.231.213 port 54022 ssh2
Dec 15 10:34:45 server sshd\[19332\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.ip-51-77-231.eu  user=uucp
Dec 15 10:34:47 server sshd\[19332\]: Failed password for uucp from 51.77.231.213 port 57820 ssh2
...

$f2bV_matches

Dec 12 09:34:47 cvbnet sshd[6766]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.231.213 
Dec 12 09:34:49 cvbnet sshd[6766]: Failed password for invalid user owsiak from 51.77.231.213 port 39536 ssh2
...

$f2bV_matches

sshd jail - ssh hack attempt

web-1 [ssh] SSH Attack

Aug 22 23:36:45 lnxded64 sshd[16364]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.199.180

Aug 23 00:29:34 ns341937 sshd[13944]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.94.38.82
Aug 23 00:29:36 ns341937 sshd[13944]: Failed password for invalid user arabelle from 115.94.38.82 port 35307 ssh2
Aug 23 00:35:27 ns341937 sshd[15563]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.94.38.82
...

[portscan] Port scan

Automatic report - Port Scan Attack

$f2bV_matches

\[2019-08-22 23:34:30\] NOTICE\[2943\] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '\' failed for '5.62.41.134:2371' \(callid: 85076378-615406404-1587909906\) - Failed to authenticate
\[2019-08-22 23:34:30\] SECURITY\[1715\] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2019-08-22T23:34:30.521+0200",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="\",SessionID="85076378-615406404-1587909906",LocalAddress="IPV4/UDP/188.40.118.248/5060",RemoteAddress="IPV4/UDP/5.62.41.134/2371",Challenge="1566509670/f2722cca449c16f54c59162ba16af33c",Response="31427d1ea3ef5e572f844baf86de758b",ExpectedResponse=""
\[2019-08-22 23:34:30\] NOTICE\[9368\] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '\' failed for '5.62.41.134:2371' \(callid: 85076378-615406404-1587909906\) - Failed to authenticate
\[2019-08-22 23:34:30\] SECURITY\[1715\] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventT

Invalid user madison from 211.223.119.65 port 52224

Aug 23 00:02:16 mail sshd\[4870\]: Failed password for root from 218.92.0.204 port 36109 ssh2
Aug 23 00:03:06 mail sshd\[1734\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.204  user=root
Aug 23 00:03:08 mail sshd\[1734\]: Failed password for root from 218.92.0.204 port 10500 ssh2
Aug 23 00:03:10 mail sshd\[1734\]: Failed password for root from 218.92.0.204 port 10500 ssh2
Aug 23 00:03:13 mail sshd\[1734\]: Failed password for root from 218.92.0.204 port 10500 ssh2

Aug 22 12:10:00 friendsofhawaii sshd\[25263\]: Invalid user nokia from 181.28.240.161
Aug 22 12:10:00 friendsofhawaii sshd\[25263\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.28.240.161
Aug 22 12:10:02 friendsofhawaii sshd\[25263\]: Failed password for invalid user nokia from 181.28.240.161 port 42017 ssh2
Aug 22 12:16:07 friendsofhawaii sshd\[25851\]: Invalid user beginner from 181.28.240.161
Aug 22 12:16:07 friendsofhawaii sshd\[25851\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.28.240.161

Aug 22 22:19:08 web8 sshd\[4774\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.86.179.186  user=nobody
Aug 22 22:19:10 web8 sshd\[4774\]: Failed password for nobody from 92.86.179.186 port 37206 ssh2
Aug 22 22:23:31 web8 sshd\[6901\]: Invalid user contas from 92.86.179.186
Aug 22 22:23:31 web8 sshd\[6901\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.86.179.186
Aug 22 22:23:33 web8 sshd\[6901\]: Failed password for invalid user contas from 92.86.179.186 port 54702 ssh2

Aug 22 16:14:49 TORMINT sshd\[8418\]: Invalid user winston from 139.59.20.248
Aug 22 16:14:49 TORMINT sshd\[8418\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.20.248
Aug 22 16:14:50 TORMINT sshd\[8418\]: Failed password for invalid user winston from 139.59.20.248 port 35620 ssh2
...

Aug 21 19:20:21 mail sshd\[9858\]: Failed password for invalid user fou from 37.59.98.64 port 44526 ssh2
Aug 21 19:24:22 mail sshd\[10309\]: Invalid user appadmin from 37.59.98.64 port 33676
Aug 21 19:24:22 mail sshd\[10309\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.59.98.64
Aug 21 19:24:24 mail sshd\[10309\]: Failed password for invalid user appadmin from 37.59.98.64 port 33676 ssh2
Aug 21 19:28:36 mail sshd\[10879\]: Invalid user lesly from 37.59.98.64 port 51058
Aug 21 19:28:36 mail sshd\[10879\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.59.98.64

Aug 21 23:43:17 mail sshd\[11555\]: Failed password for invalid user ivan from 122.192.33.102 port 55714 ssh2
Aug 21 23:46:26 mail sshd\[11996\]: Invalid user xz from 122.192.33.102 port 56194
Aug 21 23:46:26 mail sshd\[11996\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.192.33.102
Aug 21 23:46:29 mail sshd\[11996\]: Failed password for invalid user xz from 122.192.33.102 port 56194 ssh2
Aug 21 23:49:34 mail sshd\[12359\]: Invalid user k from 122.192.33.102 port 56664

2019-08-22T22:08:14.623405abusebot-7.cloudsearch.cf sshd\[12073\]: Invalid user !@! from 121.78.137.14 port 53876