Jun 23 07:30:25 jane sshd[4943]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.107.114 
Jun 23 07:30:26 jane sshd[4943]: Failed password for invalid user sss from 128.199.107.114 port 43999 ssh2
...

<6 unauthorized SSH connections

$f2bV_matches

2020-06-13 18:18:57 server sshd[40180]: Failed password for invalid user root from 128.199.107.114 port 33842 ssh2

2020-05-26T08:50:14.086758sd-86998 sshd[30474]: Invalid user lsfadmin from 128.199.107.114 port 50907
2020-05-26T08:50:14.091591sd-86998 sshd[30474]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.107.114
2020-05-26T08:50:14.086758sd-86998 sshd[30474]: Invalid user lsfadmin from 128.199.107.114 port 50907
2020-05-26T08:50:15.559560sd-86998 sshd[30474]: Failed password for invalid user lsfadmin from 128.199.107.114 port 50907 ssh2
2020-05-26T08:57:05.273042sd-86998 sshd[31344]: Invalid user ctrac from 128.199.107.114 port 53920
...

May  2 07:14:54 server1 sshd\[7090\]: Invalid user sm from 128.199.107.114
May  2 07:14:54 server1 sshd\[7090\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.107.114 
May  2 07:14:56 server1 sshd\[7090\]: Failed password for invalid user sm from 128.199.107.114 port 35566 ssh2
May  2 07:22:28 server1 sshd\[9737\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.107.114  user=root
May  2 07:22:30 server1 sshd\[9737\]: Failed password for root from 128.199.107.114 port 40077 ssh2
...

2020-04-21 16:53:48 server sshd[19172]: Failed password for invalid user rz from 128.199.107.114 port 47625 ssh2

2020-10-13T15:49:16.580760mail0 sshd[5162]: Invalid user yogesh from 128.199.107.111 port 54070
2020-10-13T15:49:18.739259mail0 sshd[5162]: Failed password for invalid user yogesh from 128.199.107.111 port 54070 ssh2
2020-10-13T15:53:02.458972mail0 sshd[5251]: Invalid user teamspeak from 128.199.107.111 port 54044
...

Invalid user carshowguide from 128.199.107.111 port 40500

no

2020-10-10T16:18:20.516882n23.at sshd[2665709]: Failed password for root from 128.199.107.111 port 52866 ssh2
2020-10-10T16:22:10.147725n23.at sshd[2668989]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.107.111  user=root
2020-10-10T16:22:11.652811n23.at sshd[2668989]: Failed password for root from 128.199.107.111 port 55708 ssh2
...

2020-10-10T04:08:33.108051morrigan.ad5gb.com sshd[3875068]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.107.111  user=root
2020-10-10T04:08:35.367135morrigan.ad5gb.com sshd[3875068]: Failed password for root from 128.199.107.111 port 35006 ssh2

Sep 30 23:39:54 abendstille sshd\[26961\]: Invalid user share from 128.199.107.111
Sep 30 23:39:54 abendstille sshd\[26961\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.107.111
Sep 30 23:39:56 abendstille sshd\[26961\]: Failed password for invalid user share from 128.199.107.111 port 36852 ssh2
Sep 30 23:43:50 abendstille sshd\[30809\]: Invalid user csgoserver from 128.199.107.111
Sep 30 23:43:50 abendstille sshd\[30809\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.107.111
...

Automatic Fail2ban report - Trying login SSH

Sep 30 06:18:18 meumeu sshd[1015229]: Invalid user tom1 from 128.199.107.111 port 38942
Sep 30 06:18:18 meumeu sshd[1015229]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.107.111 
Sep 30 06:18:18 meumeu sshd[1015229]: Invalid user tom1 from 128.199.107.111 port 38942
Sep 30 06:18:20 meumeu sshd[1015229]: Failed password for invalid user tom1 from 128.199.107.111 port 38942 ssh2
Sep 30 06:21:14 meumeu sshd[1015354]: Invalid user photo from 128.199.107.111 port 54812
Sep 30 06:21:14 meumeu sshd[1015354]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.107.111 
Sep 30 06:21:14 meumeu sshd[1015354]: Invalid user photo from 128.199.107.111 port 54812
Sep 30 06:21:16 meumeu sshd[1015354]: Failed password for invalid user photo from 128.199.107.111 port 54812 ssh2
Sep 30 06:24:12 meumeu sshd[1015490]: Invalid user restart from 128.199.107.111 port 42450
...

2020-09-16T14:48:17.869413vps-d63064a2 sshd[41604]: User root from 128.199.107.111 not allowed because not listed in AllowUsers
2020-09-16T14:48:20.350727vps-d63064a2 sshd[41604]: Failed password for invalid user root from 128.199.107.111 port 58032 ssh2
2020-09-16T14:49:46.570684vps-d63064a2 sshd[41630]: User root from 128.199.107.111 not allowed because not listed in AllowUsers
2020-09-16T14:49:46.587253vps-d63064a2 sshd[41630]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.107.111  user=root
2020-09-16T14:49:46.570684vps-d63064a2 sshd[41630]: User root from 128.199.107.111 not allowed because not listed in AllowUsers
2020-09-16T14:49:48.266183vps-d63064a2 sshd[41630]: Failed password for invalid user root from 128.199.107.111 port 49368 ssh2
...

Invalid user kabincha from 128.199.107.111 port 51830

Sep 15 16:56:19 *** sshd[21094]: User root from 128.199.107.111 not allowed because not listed in AllowUsers

Invalid user kabincha from 128.199.107.111 port 51830

2020-08-28T06:50:21.999224mail.standpoint.com.ua sshd[5118]: Invalid user geral from 128.199.107.111 port 55782
2020-08-28T06:50:22.001735mail.standpoint.com.ua sshd[5118]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.107.111
2020-08-28T06:50:21.999224mail.standpoint.com.ua sshd[5118]: Invalid user geral from 128.199.107.111 port 55782
2020-08-28T06:50:23.810710mail.standpoint.com.ua sshd[5118]: Failed password for invalid user geral from 128.199.107.111 port 55782 ssh2
2020-08-28T06:54:40.843871mail.standpoint.com.ua sshd[5805]: Invalid user indu from 128.199.107.111 port 32996
...

Invalid user gigi from 128.199.107.111 port 33100

2020-08-23T03:51:45.623986shield sshd\[3739\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.107.111  user=root
2020-08-23T03:51:47.084929shield sshd\[3739\]: Failed password for root from 128.199.107.111 port 59202 ssh2
2020-08-23T03:55:53.256198shield sshd\[4763\]: Invalid user test from 128.199.107.111 port 37956
2020-08-23T03:55:53.279853shield sshd\[4763\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.107.111
2020-08-23T03:55:55.121682shield sshd\[4763\]: Failed password for invalid user test from 128.199.107.111 port 37956 ssh2

Jan  8 08:43:19 TORMINT sshd\[555\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.138  user=root
Jan  8 08:43:21 TORMINT sshd\[555\]: Failed password for root from 218.92.0.138 port 23501 ssh2
Jan  8 08:43:51 TORMINT sshd\[562\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.138  user=root
...

2020-01-08 07:05:31 dovecot_login authenticator failed for (mfmpa) [183.166.170.237]:49904 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=zhangjie@lerctr.org)
2020-01-08 07:05:38 dovecot_login authenticator failed for (qwjhq) [183.166.170.237]:49904 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=zhangjie@lerctr.org)
2020-01-08 07:05:49 dovecot_login authenticator failed for (wccwm) [183.166.170.237]:49904 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=zhangjie@lerctr.org)
...

Jan  8 14:05:57 srv01 sshd[26104]: Invalid user raphaell from 111.198.88.86 port 48830
...

1578488771 - 01/08/2020 14:06:11 Host: 179.228.93.239/179.228.93.239 Port: 445 TCP Blocked

01/08/2020-14:05:26.016845 178.95.193.111 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433

Jan  8 03:55:35 hanapaa sshd\[7727\]: Invalid user fy from 116.203.203.73
Jan  8 03:55:35 hanapaa sshd\[7727\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=static.73.203.203.116.clients.your-server.de
Jan  8 03:55:37 hanapaa sshd\[7727\]: Failed password for invalid user fy from 116.203.203.73 port 41732 ssh2
Jan  8 03:57:32 hanapaa sshd\[7892\]: Invalid user zr from 116.203.203.73
Jan  8 03:57:32 hanapaa sshd\[7892\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=static.73.203.203.116.clients.your-server.de

Jan  8 15:27:59 server sshd\[32521\]: Invalid user wwUser from 174.127.165.238
Jan  8 15:27:59 server sshd\[32521\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.127.165.238 
Jan  8 15:28:02 server sshd\[32521\]: Failed password for invalid user wwUser from 174.127.165.238 port 38362 ssh2
Jan  8 16:05:41 server sshd\[9245\]: Invalid user yellon from 174.127.165.238
Jan  8 16:05:41 server sshd\[9245\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.127.165.238 
...

Jan  8 15:11:21 ks10 sshd[763971]: Failed password for root from 222.186.175.215 port 50314 ssh2
Jan  8 15:11:27 ks10 sshd[763971]: Failed password for root from 222.186.175.215 port 50314 ssh2
...

Jan  8 05:48:56 server sshd\[28102\]: Invalid user radius from 128.199.170.33
Jan  8 05:48:56 server sshd\[28102\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.170.33 
Jan  8 05:48:57 server sshd\[28102\]: Failed password for invalid user radius from 128.199.170.33 port 54070 ssh2
Jan  8 16:06:19 server sshd\[9381\]: Invalid user anon from 128.199.170.33
Jan  8 16:06:19 server sshd\[9381\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.170.33 
...

2020-01-08 06:36:34 dovecot_login authenticator failed for (nxnno) [111.72.196.196]:49732 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=liyong@lerctr.org)
2020-01-08 07:05:55 dovecot_login authenticator failed for (fcjze) [111.72.196.196]:61233 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=liyong@lerctr.org)
2020-01-08 07:06:03 dovecot_login authenticator failed for (rspji) [111.72.196.196]:61233 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=liyong@lerctr.org)
...

01/08/2020-14:32:04.973454 18.197.125.181 Protocol: 6 ET POLICY Cleartext WordPress Login

Unauthorized connection attempt detected from IP address 47.182.54.96 to port 8000

Lines containing failures of 35.220.222.65
Jan  7 05:42:58 kmh-vmh-001-fsn05 sshd[10811]: Invalid user frk from 35.220.222.65 port 49038
Jan  7 05:42:58 kmh-vmh-001-fsn05 sshd[10811]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.220.222.65 
Jan  7 05:43:00 kmh-vmh-001-fsn05 sshd[10811]: Failed password for invalid user frk from 35.220.222.65 port 49038 ssh2
Jan  7 05:43:01 kmh-vmh-001-fsn05 sshd[10811]: Received disconnect from 35.220.222.65 port 49038:11: Bye Bye [preauth]
Jan  7 05:43:01 kmh-vmh-001-fsn05 sshd[10811]: Disconnected from invalid user frk 35.220.222.65 port 49038 [preauth]
Jan  7 05:59:53 kmh-vmh-001-fsn05 sshd[13744]: Invalid user monhostnameor from 35.220.222.65 port 59144
Jan  7 05:59:53 kmh-vmh-001-fsn05 sshd[13744]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.220.222.65 
Jan  7 05:59:55 kmh-vmh-001-fsn05 sshd[13744]: Failed password for invalid user monhostna........
------------------------------

Jan  8 12:58:08 ip-172-31-62-245 sshd\[20485\]: Failed password for mail from 180.250.248.169 port 57156 ssh2\
Jan  8 13:01:53 ip-172-31-62-245 sshd\[20599\]: Invalid user jk from 180.250.248.169\
Jan  8 13:01:55 ip-172-31-62-245 sshd\[20599\]: Failed password for invalid user jk from 180.250.248.169 port 38200 ssh2\
Jan  8 13:05:47 ip-172-31-62-245 sshd\[20628\]: Invalid user miner from 180.250.248.169\
Jan  8 13:05:49 ip-172-31-62-245 sshd\[20628\]: Failed password for invalid user miner from 180.250.248.169 port 49198 ssh2\

Jan  8 14:43:08 xeon sshd[41300]: Failed password for invalid user cod from 129.211.110.175 port 60393 ssh2