Aug  4 19:16:14 myhostname sshd[27962]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.246.233  user=r.r
Aug  4 19:16:16 myhostname sshd[27962]: Failed password for r.r from 122.51.246.233 port 55562 ssh2
Aug  4 19:16:17 myhostname sshd[27962]: Received disconnect from 122.51.246.233 port 55562:11: Bye Bye [preauth]
Aug  4 19:16:17 myhostname sshd[27962]: Disconnected from 122.51.246.233 port 55562 [preauth]
Aug  4 19:26:47 myhostname sshd[2621]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.246.233  user=r.r


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=122.51.246.233

Aug  9 05:26:55 sip sshd[7240]: Failed password for root from 122.51.246.233 port 50850 ssh2
Aug  9 05:45:59 sip sshd[12443]: Failed password for root from 122.51.246.233 port 36496 ssh2

Brute-force attempt banned

2020-08-05 07:13:22.140444-0500  localhost sshd[74741]: Failed password for root from 122.51.246.233 port 49782 ssh2

user     ssh:notty    122.51.246.97    2020-10-01T10:37:19-03:00 - 2020-10-01T10:37:19-03:00  (00:00)
...

(sshd) Failed SSH login from 122.51.246.97 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct  1 02:54:31 server2 sshd[23382]: Invalid user admin from 122.51.246.97
Oct  1 02:54:31 server2 sshd[23382]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.246.97 
Oct  1 02:54:32 server2 sshd[23382]: Failed password for invalid user admin from 122.51.246.97 port 55062 ssh2
Oct  1 03:09:54 server2 sshd[4151]: Invalid user it from 122.51.246.97
Oct  1 03:09:54 server2 sshd[4151]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.246.97

Time:     Wed Sep 23 06:31:58 2020 +0000
IP:       122.51.246.97 (CN/China/-)
Failures: 5 (sshd)
Interval: 3600 seconds
Blocked:  Permanent Block [LF_SSHD]

Log entries:

Sep 23 05:56:52 3 sshd[9783]: Invalid user ian from 122.51.246.97 port 53722
Sep 23 05:56:54 3 sshd[9783]: Failed password for invalid user ian from 122.51.246.97 port 53722 ssh2
Sep 23 06:14:53 3 sshd[16141]: Invalid user cent from 122.51.246.97 port 59566
Sep 23 06:14:55 3 sshd[16141]: Failed password for invalid user cent from 122.51.246.97 port 59566 ssh2
Sep 23 06:31:55 3 sshd[23042]: Invalid user xia from 122.51.246.97 port 49710

Sep 23 05:39:17 inter-technics sshd[16019]: Invalid user invite from 122.51.246.97 port 43968
Sep 23 05:39:17 inter-technics sshd[16019]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.246.97
Sep 23 05:39:17 inter-technics sshd[16019]: Invalid user invite from 122.51.246.97 port 43968
Sep 23 05:39:18 inter-technics sshd[16019]: Failed password for invalid user invite from 122.51.246.97 port 43968 ssh2
Sep 23 05:44:10 inter-technics sshd[16283]: Invalid user jean from 122.51.246.97 port 44044
...

$f2bV_matches

Invalid user pan from 122.51.246.97 port 40076

Sep 18 09:47:09 hosting sshd[12705]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.246.97  user=root
Sep 18 09:47:11 hosting sshd[12705]: Failed password for root from 122.51.246.97 port 36668 ssh2
...

Invalid user pan from 122.51.246.97 port 40076

Sep  7 12:16:53 fhem-rasp sshd[8928]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.246.97  user=root
Sep  7 12:16:55 fhem-rasp sshd[8928]: Failed password for root from 122.51.246.97 port 44934 ssh2
...

Sep  7 12:16:53 fhem-rasp sshd[8928]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.246.97  user=root
Sep  7 12:16:55 fhem-rasp sshd[8928]: Failed password for root from 122.51.246.97 port 44934 ssh2
...

(sshd) Failed SSH login from 122.51.246.97 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Aug 15 14:05:59 amsweb01 sshd[20573]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.246.97  user=root
Aug 15 14:06:01 amsweb01 sshd[20573]: Failed password for root from 122.51.246.97 port 47476 ssh2
Aug 15 14:21:08 amsweb01 sshd[22868]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.246.97  user=root
Aug 15 14:21:11 amsweb01 sshd[22868]: Failed password for root from 122.51.246.97 port 53462 ssh2
Aug 15 14:27:50 amsweb01 sshd[23696]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.246.97  user=root

Aug  6 10:05:52 NPSTNNYC01T sshd[4864]: Failed password for root from 122.51.246.97 port 37984 ssh2
Aug  6 10:07:39 NPSTNNYC01T sshd[4991]: Failed password for root from 122.51.246.97 port 53436 ssh2
...

SSH/22 MH Probe, BF, Hack -

Apr  1 23:45:26 pve sshd[25260]: Failed password for root from 122.51.246.47 port 34174 ssh2
Apr  1 23:49:14 pve sshd[25905]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.246.47 
Apr  1 23:49:16 pve sshd[25905]: Failed password for invalid user test from 122.51.246.47 port 38132 ssh2

2020-04-01T12:36:06.381373ionos.janbro.de sshd[29661]: Failed password for root from 122.51.246.47 port 35356 ssh2
2020-04-01T12:41:59.946770ionos.janbro.de sshd[29706]: Invalid user dev from 122.51.246.47 port 38154
2020-04-01T12:42:00.497535ionos.janbro.de sshd[29706]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.246.47
2020-04-01T12:41:59.946770ionos.janbro.de sshd[29706]: Invalid user dev from 122.51.246.47 port 38154
2020-04-01T12:42:02.529020ionos.janbro.de sshd[29706]: Failed password for invalid user dev from 122.51.246.47 port 38154 ssh2
2020-04-01T12:47:12.808226ionos.janbro.de sshd[29729]: Invalid user tencent from 122.51.246.47 port 40980
2020-04-01T12:47:13.057894ionos.janbro.de sshd[29729]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.246.47
2020-04-01T12:47:12.808226ionos.janbro.de sshd[29729]: Invalid user tencent from 122.51.246.47 port 40980
2020-04-01T12:47:15.406321io
...

2020-08-30T17:53:29.995633paragon sshd[861590]: Invalid user tomcat from 121.43.189.248 port 55856
2020-08-30T17:53:29.998164paragon sshd[861590]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.43.189.248
2020-08-30T17:53:29.995633paragon sshd[861590]: Invalid user tomcat from 121.43.189.248 port 55856
2020-08-30T17:53:31.751826paragon sshd[861590]: Failed password for invalid user tomcat from 121.43.189.248 port 55856 ssh2
2020-08-30T17:54:23.595131paragon sshd[861677]: Invalid user ftp123 from 121.43.189.248 port 60860
...

Aug 30 15:14:45 instance-2 sshd[22197]: Failed password for root from 222.186.173.238 port 61516 ssh2
Aug 30 15:14:49 instance-2 sshd[22197]: Failed password for root from 222.186.173.238 port 61516 ssh2
Aug 30 15:14:53 instance-2 sshd[22197]: Failed password for root from 222.186.173.238 port 61516 ssh2
Aug 30 15:14:58 instance-2 sshd[22197]: Failed password for root from 222.186.173.238 port 61516 ssh2

(sshd) Failed SSH login from 64.183.249.110 (US/United States/rrcs-64-183-249-110.sw.biz.rr.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Aug 30 07:28:33 server sshd[6687]: Invalid user gas from 64.183.249.110 port 40331
Aug 30 07:28:36 server sshd[6687]: Failed password for invalid user gas from 64.183.249.110 port 40331 ssh2
Aug 30 08:11:41 server sshd[18316]: Invalid user wzr from 64.183.249.110 port 51584
Aug 30 08:11:43 server sshd[18316]: Failed password for invalid user wzr from 64.183.249.110 port 51584 ssh2
Aug 30 08:14:32 server sshd[18921]: Invalid user software from 64.183.249.110 port 17470

Aug 30 03:00:20 web1 sshd\[23673\]: Invalid user cassandra from 106.55.145.125
Aug 30 03:00:20 web1 sshd\[23673\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.55.145.125
Aug 30 03:00:22 web1 sshd\[23673\]: Failed password for invalid user cassandra from 106.55.145.125 port 57812 ssh2
Aug 30 03:04:29 web1 sshd\[24047\]: Invalid user app from 106.55.145.125
Aug 30 03:04:29 web1 sshd\[24047\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.55.145.125

Fail2Ban automatic report:
SSH multiple root login attempts:
Aug 30 14:14:37 serw sshd[23645]: Connection closed by authenticating user root 85.209.0.161 port 29514 [preauth]

Aug 30 19:28:22 gw1 sshd[31626]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.6.84.34
Aug 30 19:28:24 gw1 sshd[31626]: Failed password for invalid user mob from 116.6.84.34 port 28289 ssh2
...

Aug 30 17:42:26 router sshd[11837]: Failed password for root from 222.186.175.154 port 42760 ssh2
Aug 30 17:42:31 router sshd[11837]: Failed password for root from 222.186.175.154 port 42760 ssh2
Aug 30 17:42:35 router sshd[11837]: Failed password for root from 222.186.175.154 port 42760 ssh2
Aug 30 17:42:40 router sshd[11837]: Failed password for root from 222.186.175.154 port 42760 ssh2
...

Aug 30 14:03:00 minden010 postfix/smtpd[8568]: NOQUEUE: reject: RCPT from p2e5324a0.dip0.t-ipconnect.de[46.83.36.160]: 450 4.7.1 : Helo command rejected: Host not found; from=<> to= proto=ESMTP helo=
Aug 30 14:03:01 minden010 postfix/smtpd[10222]: NOQUEUE: reject: RCPT from p2e5324a0.dip0.t-ipconnect.de[46.83.36.160]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Aug 30 14:03:01 minden010 postfix/smtpd[8568]: NOQUEUE: reject: RCPT from p2e5324a0.dip0.t-ipconnect.de[46.83.36.160]: 450 4.7.1 : Helo command rejected: Host not found; from=<> to= proto=ESMTP helo=
Aug 30 14:03:03 minden010 postfix/smtpd[10858]: NOQUEUE: reject: RCPT from p2e5324a0.dip0.t-ipconnect.de[46.83.36.160]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=

Unauthorized connection attempt detected from IP address 122.116.239.213 to port 23 [T]

Aug 30 15:04:08 game-panel sshd[2189]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.46.239.131
Aug 30 15:04:11 game-panel sshd[2189]: Failed password for invalid user operatore from 103.46.239.131 port 39234 ssh2
Aug 30 15:05:41 game-panel sshd[2244]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.46.239.131

2020-08-30T18:29:19.235433afi-git.jinr.ru sshd[13927]: Failed password for root from 222.186.169.192 port 27274 ssh2
2020-08-30T18:29:23.262749afi-git.jinr.ru sshd[13927]: Failed password for root from 222.186.169.192 port 27274 ssh2
2020-08-30T18:29:26.332916afi-git.jinr.ru sshd[13927]: Failed password for root from 222.186.169.192 port 27274 ssh2
2020-08-30T18:29:26.333053afi-git.jinr.ru sshd[13927]: error: maximum authentication attempts exceeded for root from 222.186.169.192 port 27274 ssh2 [preauth]
2020-08-30T18:29:26.333067afi-git.jinr.ru sshd[13927]: Disconnecting: Too many authentication failures [preauth]
...

2020-08-30T17:15[Censored Hostname] sshd[13727]: Invalid user mega from 129.28.172.220 port 35916
2020-08-30T17:15[Censored Hostname] sshd[13727]: Failed password for invalid user mega from 129.28.172.220 port 35916 ssh2
2020-08-30T17:26[Censored Hostname] sshd[19768]: Invalid user temp from 129.28.172.220 port 33906[...]

Banned for a week because repeated abuses, for example SSH, but not only

 TCP (SYN) 204.135.8.50:14417 -> port 23, len 44

2020-08-30T14:14:20+0200 Failed SSH Authentication/Brute Force Attack.(Server 2)