Feb  5 23:19:47 v22018076622670303 sshd\[9723\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.166.249  user=root
Feb  5 23:19:49 v22018076622670303 sshd\[9723\]: Failed password for root from 129.211.166.249 port 40828 ssh2
Feb  5 23:22:54 v22018076622670303 sshd\[9763\]: Invalid user corp from 129.211.166.249 port 39140
Feb  5 23:22:54 v22018076622670303 sshd\[9763\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.166.249
...

2020-01-26T04:44:25.732114abusebot-8.cloudsearch.cf sshd[16149]: Invalid user student from 129.211.166.249 port 36210
2020-01-26T04:44:25.741174abusebot-8.cloudsearch.cf sshd[16149]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.166.249
2020-01-26T04:44:25.732114abusebot-8.cloudsearch.cf sshd[16149]: Invalid user student from 129.211.166.249 port 36210
2020-01-26T04:44:27.823998abusebot-8.cloudsearch.cf sshd[16149]: Failed password for invalid user student from 129.211.166.249 port 36210 ssh2
2020-01-26T04:49:10.775041abusebot-8.cloudsearch.cf sshd[16853]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.166.249  user=root
2020-01-26T04:49:12.315278abusebot-8.cloudsearch.cf sshd[16853]: Failed password for root from 129.211.166.249 port 44002 ssh2
2020-01-26T04:52:10.284847abusebot-8.cloudsearch.cf sshd[17337]: Invalid user amon from 129.211.166.249 port 42218
...

2020-01-21T09:57:50.3228681495-001 sshd[36184]: Invalid user rcs from 129.211.166.249 port 56164
2020-01-21T09:57:50.3317681495-001 sshd[36184]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.166.249
2020-01-21T09:57:50.3228681495-001 sshd[36184]: Invalid user rcs from 129.211.166.249 port 56164
2020-01-21T09:57:52.6939571495-001 sshd[36184]: Failed password for invalid user rcs from 129.211.166.249 port 56164 ssh2
2020-01-21T09:59:15.8921001495-001 sshd[36225]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.166.249  user=root
2020-01-21T09:59:18.2545821495-001 sshd[36225]: Failed password for root from 129.211.166.249 port 37526 ssh2
2020-01-21T10:00:45.5258261495-001 sshd[36262]: Invalid user ny from 129.211.166.249 port 47124
2020-01-21T10:00:45.5301891495-001 sshd[36262]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.166.249
2020-01-21T
...

Jan 11 18:52:44 MK-Soft-VM7 sshd[16833]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.166.249 
Jan 11 18:52:46 MK-Soft-VM7 sshd[16833]: Failed password for invalid user family from 129.211.166.249 port 49352 ssh2
...

Dec 16 23:29:07 sd-53420 sshd\[24550\]: User root from 129.211.166.249 not allowed because none of user's groups are listed in AllowGroups
Dec 16 23:29:07 sd-53420 sshd\[24550\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.166.249  user=root
Dec 16 23:29:09 sd-53420 sshd\[24550\]: Failed password for invalid user root from 129.211.166.249 port 47200 ssh2
Dec 16 23:35:06 sd-53420 sshd\[26820\]: Invalid user nfs from 129.211.166.249
Dec 16 23:35:06 sd-53420 sshd\[26820\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.166.249
...

Dec 12 09:40:57 eddieflores sshd\[7247\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.166.249  user=root
Dec 12 09:40:59 eddieflores sshd\[7247\]: Failed password for root from 129.211.166.249 port 49786 ssh2
Dec 12 09:46:59 eddieflores sshd\[7787\]: Invalid user host from 129.211.166.249
Dec 12 09:47:00 eddieflores sshd\[7787\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.166.249
Dec 12 09:47:02 eddieflores sshd\[7787\]: Failed password for invalid user host from 129.211.166.249 port 55562 ssh2

2019-12-06T07:00:17.611616shield sshd\[7375\]: Invalid user mulero from 129.211.166.249 port 60868
2019-12-06T07:00:17.615909shield sshd\[7375\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.166.249
2019-12-06T07:00:19.851168shield sshd\[7375\]: Failed password for invalid user mulero from 129.211.166.249 port 60868 ssh2
2019-12-06T07:07:14.312186shield sshd\[9318\]: Invalid user host from 129.211.166.249 port 42960
2019-12-06T07:07:14.316439shield sshd\[9318\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.166.249

Nov 24 22:19:39 vibhu-HP-Z238-Microtower-Workstation sshd\[3040\]: Invalid user eisenach from 129.211.166.249
Nov 24 22:19:39 vibhu-HP-Z238-Microtower-Workstation sshd\[3040\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.166.249
Nov 24 22:19:41 vibhu-HP-Z238-Microtower-Workstation sshd\[3040\]: Failed password for invalid user eisenach from 129.211.166.249 port 52764 ssh2
Nov 24 22:27:10 vibhu-HP-Z238-Microtower-Workstation sshd\[3371\]: Invalid user kennwort from 129.211.166.249
Nov 24 22:27:10 vibhu-HP-Z238-Microtower-Workstation sshd\[3371\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.166.249
...

May  4 14:47:37 h1745522 sshd[9241]: Invalid user satish from 54.38.190.48 port 40216
May  4 14:47:37 h1745522 sshd[9241]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.190.48
May  4 14:47:37 h1745522 sshd[9241]: Invalid user satish from 54.38.190.48 port 40216
May  4 14:47:40 h1745522 sshd[9241]: Failed password for invalid user satish from 54.38.190.48 port 40216 ssh2
May  4 14:52:12 h1745522 sshd[9442]: Invalid user user from 54.38.190.48 port 56294
May  4 14:52:12 h1745522 sshd[9442]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.190.48
May  4 14:52:12 h1745522 sshd[9442]: Invalid user user from 54.38.190.48 port 56294
May  4 14:52:14 h1745522 sshd[9442]: Failed password for invalid user user from 54.38.190.48 port 56294 ssh2
May  4 14:56:09 h1745522 sshd[9623]: Invalid user sales1 from 54.38.190.48 port 37384
...

May  4 15:16:07 h1745522 sshd[10501]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.101.46.118  user=root
May  4 15:16:10 h1745522 sshd[10501]: Failed password for root from 42.101.46.118 port 33649 ssh2
May  4 15:18:32 h1745522 sshd[10561]: Invalid user hardware from 42.101.46.118 port 46397
May  4 15:18:32 h1745522 sshd[10561]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.101.46.118
May  4 15:18:32 h1745522 sshd[10561]: Invalid user hardware from 42.101.46.118 port 46397
May  4 15:18:34 h1745522 sshd[10561]: Failed password for invalid user hardware from 42.101.46.118 port 46397 ssh2
May  4 15:20:58 h1745522 sshd[10636]: Invalid user test from 42.101.46.118 port 59145
May  4 15:20:58 h1745522 sshd[10636]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.101.46.118
May  4 15:20:58 h1745522 sshd[10636]: Invalid user test from 42.101.46.118 port 59145
May 
...

May  4 14:59:22 prox sshd[11241]: Failed password for root from 203.162.13.68 port 37372 ssh2

May  4 13:55:18 localhost sshd[68355]: Invalid user test01 from 95.167.225.85 port 49588
May  4 13:55:18 localhost sshd[68355]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.167.225.85
May  4 13:55:18 localhost sshd[68355]: Invalid user test01 from 95.167.225.85 port 49588
May  4 13:55:20 localhost sshd[68355]: Failed password for invalid user test01 from 95.167.225.85 port 49588 ssh2
May  4 14:01:25 localhost sshd[68947]: Invalid user don from 95.167.225.85 port 59070
...

Fail2Ban Ban Triggered

May  4 13:31:06 localhost sshd[66221]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.3.249  user=root
May  4 13:31:08 localhost sshd[66221]: Failed password for root from 222.186.3.249 port 59275 ssh2
May  4 13:31:10 localhost sshd[66221]: Failed password for root from 222.186.3.249 port 59275 ssh2
May  4 13:31:06 localhost sshd[66221]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.3.249  user=root
May  4 13:31:08 localhost sshd[66221]: Failed password for root from 222.186.3.249 port 59275 ssh2
May  4 13:31:10 localhost sshd[66221]: Failed password for root from 222.186.3.249 port 59275 ssh2
May  4 13:31:06 localhost sshd[66221]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.3.249  user=root
May  4 13:31:08 localhost sshd[66221]: Failed password for root from 222.186.3.249 port 59275 ssh2
May  4 13:31:10 localhost sshd[66221]: Failed pas
...

[Mon May  4 11:50:21 2020 GMT] Jonathan Morris [RDNS_NONE], Subject: Attention: Important Notice!!

May  4 09:58:52 ny01 sshd[342]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.200.117
May  4 09:58:54 ny01 sshd[342]: Failed password for invalid user natalie from 128.199.200.117 port 39156 ssh2
May  4 10:01:53 ny01 sshd[699]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.200.117

May  4 12:06:49 ip-172-31-62-245 sshd\[5751\]: Invalid user zhangle from 51.38.71.36\
May  4 12:06:52 ip-172-31-62-245 sshd\[5751\]: Failed password for invalid user zhangle from 51.38.71.36 port 49612 ssh2\
May  4 12:10:28 ip-172-31-62-245 sshd\[5861\]: Invalid user www from 51.38.71.36\
May  4 12:10:30 ip-172-31-62-245 sshd\[5861\]: Failed password for invalid user www from 51.38.71.36 port 58494 ssh2\
May  4 12:13:57 ip-172-31-62-245 sshd\[5884\]: Invalid user priscila from 51.38.71.36\

proto=tcp  .  spt=54270  .  dpt=143  .  src=185.176.27.170  .  dst=xx.xx.4.1  .     Found on   Alienvault      (219)

May  4 12:14:25 localhost sshd\[24850\]: Invalid user git from 37.59.241.18
May  4 12:14:31 localhost sshd\[24852\]: Invalid user git from 37.59.241.18
May  4 12:14:36 localhost sshd\[24854\]: Invalid user git from 37.59.241.18
...

May  4 16:23:27 plex sshd[12806]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.86.144  user=root
May  4 16:23:30 plex sshd[12806]: Failed password for root from 139.155.86.144 port 44728 ssh2

2020-05-04T12:10:36.974192dmca.cloudsearch.cf sshd[26363]: Invalid user www from 62.122.225.1 port 19224
2020-05-04T12:10:36.985734dmca.cloudsearch.cf sshd[26363]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.122.225.1
2020-05-04T12:10:36.974192dmca.cloudsearch.cf sshd[26363]: Invalid user www from 62.122.225.1 port 19224
2020-05-04T12:10:39.231321dmca.cloudsearch.cf sshd[26363]: Failed password for invalid user www from 62.122.225.1 port 19224 ssh2
2020-05-04T12:13:56.669064dmca.cloudsearch.cf sshd[26654]: Invalid user user1 from 62.122.225.1 port 12575
2020-05-04T12:13:56.675594dmca.cloudsearch.cf sshd[26654]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.122.225.1
2020-05-04T12:13:56.669064dmca.cloudsearch.cf sshd[26654]: Invalid user user1 from 62.122.225.1 port 12575
2020-05-04T12:13:58.709641dmca.cloudsearch.cf sshd[26654]: Failed password for invalid user user1 from 62.122.225.1 port 12575
...

2020-05-04T12:09:16.679473abusebot-5.cloudsearch.cf sshd[6282]: Invalid user xh from 49.235.108.3 port 33546
2020-05-04T12:09:16.685266abusebot-5.cloudsearch.cf sshd[6282]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.108.3
2020-05-04T12:09:16.679473abusebot-5.cloudsearch.cf sshd[6282]: Invalid user xh from 49.235.108.3 port 33546
2020-05-04T12:09:18.614873abusebot-5.cloudsearch.cf sshd[6282]: Failed password for invalid user xh from 49.235.108.3 port 33546 ssh2
2020-05-04T12:14:17.343316abusebot-5.cloudsearch.cf sshd[6285]: Invalid user sklep from 49.235.108.3 port 55420
2020-05-04T12:14:17.352501abusebot-5.cloudsearch.cf sshd[6285]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.108.3
2020-05-04T12:14:17.343316abusebot-5.cloudsearch.cf sshd[6285]: Invalid user sklep from 49.235.108.3 port 55420
2020-05-04T12:14:18.935874abusebot-5.cloudsearch.cf sshd[6285]: Failed password for invalid us
...

May  4 15:59:42 server sshd[22669]: Failed password for invalid user library from 111.231.70.144 port 36780 ssh2
May  4 16:03:24 server sshd[25853]: Failed password for invalid user senga from 111.231.70.144 port 57054 ssh2
May  4 16:06:59 server sshd[28500]: Failed password for invalid user rf from 111.231.70.144 port 48862 ssh2