Apr 20 11:30:32 h2779839 sshd[2804]: Invalid user grid from 51.83.70.229 port 47755
Apr 20 11:30:32 h2779839 sshd[2804]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.70.229
Apr 20 11:30:32 h2779839 sshd[2804]: Invalid user grid from 51.83.70.229 port 47755
Apr 20 11:30:34 h2779839 sshd[2804]: Failed password for invalid user grid from 51.83.70.229 port 47755 ssh2
Apr 20 11:34:59 h2779839 sshd[2814]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.70.229  user=root
Apr 20 11:35:01 h2779839 sshd[2814]: Failed password for root from 51.83.70.229 port 57041 ssh2
Apr 20 11:39:21 h2779839 sshd[2867]: Invalid user x from 51.83.70.229 port 38090
Apr 20 11:39:21 h2779839 sshd[2867]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.70.229
Apr 20 11:39:21 h2779839 sshd[2867]: Invalid user x from 51.83.70.229 port 38090
Apr 20 11:39:22 h2779839 sshd[2867]: Fai
...

Apr 12 07:21:36 pi sshd[28010]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.70.229  user=root
Apr 12 07:21:38 pi sshd[28010]: Failed password for invalid user root from 51.83.70.229 port 43539 ssh2

2020-04-10T04:02:37.835649abusebot-7.cloudsearch.cf sshd[8680]: Invalid user hans from 51.83.70.229 port 59192
2020-04-10T04:02:37.842375abusebot-7.cloudsearch.cf sshd[8680]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=229.ip-51-83-70.eu
2020-04-10T04:02:37.835649abusebot-7.cloudsearch.cf sshd[8680]: Invalid user hans from 51.83.70.229 port 59192
2020-04-10T04:02:40.044132abusebot-7.cloudsearch.cf sshd[8680]: Failed password for invalid user hans from 51.83.70.229 port 59192 ssh2
2020-04-10T04:07:01.915663abusebot-7.cloudsearch.cf sshd[9028]: Invalid user tomcat from 51.83.70.229 port 35484
2020-04-10T04:07:01.920810abusebot-7.cloudsearch.cf sshd[9028]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=229.ip-51-83-70.eu
2020-04-10T04:07:01.915663abusebot-7.cloudsearch.cf sshd[9028]: Invalid user tomcat from 51.83.70.229 port 35484
2020-04-10T04:07:04.415869abusebot-7.cloudsearch.cf sshd[9028]: Failed pas
...

Apr  7 03:09:05 localhost sshd\[7256\]: Invalid user carlos from 51.83.70.229
Apr  7 03:09:05 localhost sshd\[7256\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.70.229
Apr  7 03:09:07 localhost sshd\[7256\]: Failed password for invalid user carlos from 51.83.70.229 port 36100 ssh2
Apr  7 03:12:47 localhost sshd\[7464\]: Invalid user admin from 51.83.70.229
Apr  7 03:12:47 localhost sshd\[7464\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.70.229
...

$f2bV_matches

SSH bruteforce

Total attacks: 2

SSH brute-force: detected 6 distinct usernames within a 24-hour window.

Mar 27 11:26:25 mail sshd[16805]: Invalid user mjf from 51.83.70.229
Mar 27 11:26:25 mail sshd[16805]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.70.229
Mar 27 11:26:25 mail sshd[16805]: Invalid user mjf from 51.83.70.229
Mar 27 11:26:27 mail sshd[16805]: Failed password for invalid user mjf from 51.83.70.229 port 57263 ssh2
...

frenzy

Mar 24 01:11:04 plex sshd[6493]: Invalid user peuser from 51.83.70.229 port 47540

Mar 22 19:56:01 ift sshd\[49323\]: Invalid user postgres from 51.83.70.229Mar 22 19:56:03 ift sshd\[49323\]: Failed password for invalid user postgres from 51.83.70.229 port 40006 ssh2Mar 22 20:00:39 ift sshd\[50103\]: Invalid user qbchen from 51.83.70.229Mar 22 20:00:41 ift sshd\[50103\]: Failed password for invalid user qbchen from 51.83.70.229 port 48121 ssh2Mar 22 20:04:57 ift sshd\[50554\]: Invalid user prey from 51.83.70.229
...

Mar 21 17:30:59 firewall sshd[25319]: Invalid user vp from 51.83.70.229
Mar 21 17:31:02 firewall sshd[25319]: Failed password for invalid user vp from 51.83.70.229 port 35140 ssh2
Mar 21 17:35:04 firewall sshd[25713]: Invalid user hb from 51.83.70.229
...

Invalid user test from 51.83.70.93 port 51642

Sep 21 10:45:25 marvibiene sshd[44795]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.70.93  user=root
Sep 21 10:45:27 marvibiene sshd[44795]: Failed password for root from 51.83.70.93 port 32888 ssh2
Sep 21 10:58:48 marvibiene sshd[18063]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.70.93  user=root
Sep 21 10:58:49 marvibiene sshd[18063]: Failed password for root from 51.83.70.93 port 60358 ssh2

reported through recidive - multiple failed attempts(SSH)

Aug 14 06:14:15 piServer sshd[26387]: Failed password for root from 51.83.70.93 port 35224 ssh2
Aug 14 06:17:02 piServer sshd[26653]: Failed password for root from 51.83.70.93 port 54402 ssh2
...

SSH Bruteforce

Aug  1 20:33:40 ip40 sshd[3021]: Failed password for root from 51.83.70.93 port 46542 ssh2
...

<6 unauthorized SSH connections

Jul 20 13:12:08 ny01 sshd[15934]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.70.93
Jul 20 13:12:10 ny01 sshd[15934]: Failed password for invalid user simon from 51.83.70.93 port 39818 ssh2
Jul 20 13:16:17 ny01 sshd[16395]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.70.93

Jul 11 09:56:09 firewall sshd[30799]: Invalid user elijah from 51.83.70.93
Jul 11 09:56:11 firewall sshd[30799]: Failed password for invalid user elijah from 51.83.70.93 port 37136 ssh2
Jul 11 09:59:10 firewall sshd[30881]: Invalid user ag from 51.83.70.93
...

Jun 26 22:57:37 ip-172-31-61-156 sshd[17748]: Invalid user xing from 51.83.70.93
Jun 26 22:57:38 ip-172-31-61-156 sshd[17748]: Failed password for invalid user xing from 51.83.70.93 port 52810 ssh2
Jun 26 23:01:41 ip-172-31-61-156 sshd[18003]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.70.93  user=ubuntu
Jun 26 23:01:43 ip-172-31-61-156 sshd[18003]: Failed password for ubuntu from 51.83.70.93 port 53138 ssh2
Jun 26 23:05:15 ip-172-31-61-156 sshd[18190]: Invalid user dreambox from 51.83.70.93
...

Jun 20 14:49:52 OPSO sshd\[26679\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.70.93  user=root
Jun 20 14:49:54 OPSO sshd\[26679\]: Failed password for root from 51.83.70.93 port 51174 ssh2
Jun 20 14:53:09 OPSO sshd\[27508\]: Invalid user user from 51.83.70.93 port 50170
Jun 20 14:53:09 OPSO sshd\[27508\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.70.93
Jun 20 14:53:11 OPSO sshd\[27508\]: Failed password for invalid user user from 51.83.70.93 port 50170 ssh2

Jun  8 22:17:23 rotator sshd\[12231\]: Invalid user telcel1 from 51.83.70.93Jun  8 22:17:25 rotator sshd\[12231\]: Failed password for invalid user telcel1 from 51.83.70.93 port 34364 ssh2Jun  8 22:21:28 rotator sshd\[13038\]: Invalid user cjg from 51.83.70.93Jun  8 22:21:30 rotator sshd\[13038\]: Failed password for invalid user cjg from 51.83.70.93 port 37170 ssh2Jun  8 22:25:10 rotator sshd\[13346\]: Invalid user admin from 51.83.70.93Jun  8 22:25:12 rotator sshd\[13346\]: Failed password for invalid user admin from 51.83.70.93 port 39978 ssh2
...

Jun  5 13:00:53 ajax sshd[23584]: Failed password for root from 51.83.70.93 port 60618 ssh2

2020-06-03T14:55:38.926331sd-86998 sshd[41023]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.ip-51-83-70.eu  user=root
2020-06-03T14:55:41.234468sd-86998 sshd[41023]: Failed password for root from 51.83.70.93 port 56552 ssh2
2020-06-03T14:59:19.695775sd-86998 sshd[41562]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.ip-51-83-70.eu  user=root
2020-06-03T14:59:21.341457sd-86998 sshd[41562]: Failed password for root from 51.83.70.93 port 33726 ssh2
2020-06-03T15:02:52.980816sd-86998 sshd[42213]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.ip-51-83-70.eu  user=root
2020-06-03T15:02:54.868360sd-86998 sshd[42213]: Failed password for root from 51.83.70.93 port 39130 ssh2
...

Jun  2 13:54:35 pornomens sshd\[1007\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.70.93  user=root
Jun  2 13:54:38 pornomens sshd\[1007\]: Failed password for root from 51.83.70.93 port 39512 ssh2
Jun  2 14:09:01 pornomens sshd\[1147\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.70.93  user=root
...

2020-07-21T13:43:25.428696server.mjenks.net sshd[2975191]: Invalid user User from 183.82.121.34 port 57724
2020-07-21T13:43:25.435994server.mjenks.net sshd[2975191]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.82.121.34
2020-07-21T13:43:25.428696server.mjenks.net sshd[2975191]: Invalid user User from 183.82.121.34 port 57724
2020-07-21T13:43:27.414648server.mjenks.net sshd[2975191]: Failed password for invalid user User from 183.82.121.34 port 57724 ssh2
2020-07-21T13:46:03.612603server.mjenks.net sshd[2975530]: Invalid user zsd from 183.82.121.34 port 34108
...

Unauthorized connection attempt detected from IP address 104.211.142.129 to port 1433 [T]

Unauthorized connection attempt detected from IP address 183.106.94.37 to port 23

Jul 21 12:25:06 XXXXXX sshd[20384]: Invalid user guij from 203.195.157.137 port 55088

Unauthorized connection attempt detected from IP address 20.188.46.82 to port 1433

Unauthorized connection attempt detected from IP address 5.42.92.31 to port 23 [T]

Unauthorized connection attempt detected from IP address 45.32.62.11 to port 80 [T]

Unauthorized connection attempt detected from IP address 196.30.10.86 to port 445 [T]

Unauthorized connection attempt detected from IP address 164.52.24.168 to port 25 [T]

" "

Unauthorized connection attempt detected from IP address 46.148.135.187 to port 8080 [T]

Jul 21 20:41:34 haigwepa sshd[7798]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.14.195.58 
Jul 21 20:41:36 haigwepa sshd[7798]: Failed password for invalid user hello from 122.14.195.58 port 40620 ssh2
...

Jul 21 19:12:21 vz239 sshd[10892]: Invalid user admin from 219.73.28.136
Jul 21 19:12:24 vz239 sshd[10892]: Failed password for invalid user admin from 219.73.28.136 port 41426 ssh2
Jul 21 19:12:24 vz239 sshd[10892]: Received disconnect from 219.73.28.136: 11: Bye Bye [preauth]
Jul 21 19:12:29 vz239 sshd[10896]: Failed password for r.r from 219.73.28.136 port 41546 ssh2
Jul 21 19:12:29 vz239 sshd[10896]: Received disconnect from 219.73.28.136: 11: Bye Bye [preauth]
Jul 21 19:12:31 vz239 sshd[10898]: Invalid user admin from 219.73.28.136
Jul 21 19:12:32 vz239 sshd[10898]: Failed password for invalid user admin from 219.73.28.136 port 41835 ssh2
Jul 21 19:12:33 vz239 sshd[10898]: Received disconnect from 219.73.28.136: 11: Bye Bye [preauth]
Jul 21 19:12:34 vz239 sshd[10901]: Invalid user admin from 219.73.28.136


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=219.73.28.136

Unauthorized connection attempt detected from IP address 69.174.184.91 to port 22 [T]

Unauthorized connection attempt detected from IP address 13.84.217.13 to port 1433 [T]