Oct 13 08:55:05 jane sshd[24179]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.56.22 
Oct 13 08:55:08 jane sshd[24179]: Failed password for invalid user 1q2w3e from 129.226.56.22 port 54892 ssh2
...

2019-10-04T23:58:53.582146tmaserv sshd\[13673\]: Invalid user Compilern123 from 129.226.56.22 port 35066
2019-10-04T23:58:53.586397tmaserv sshd\[13673\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.56.22
2019-10-04T23:58:55.774902tmaserv sshd\[13673\]: Failed password for invalid user Compilern123 from 129.226.56.22 port 35066 ssh2
2019-10-05T00:03:27.520994tmaserv sshd\[16423\]: Invalid user Jelszo_111 from 129.226.56.22 port 47138
2019-10-05T00:03:27.525311tmaserv sshd\[16423\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.56.22
2019-10-05T00:03:28.995964tmaserv sshd\[16423\]: Failed password for invalid user Jelszo_111 from 129.226.56.22 port 47138 ssh2
...

Oct  3 23:16:26 php1 sshd\[26373\]: Invalid user Admin666 from 129.226.56.22
Oct  3 23:16:26 php1 sshd\[26373\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.56.22
Oct  3 23:16:28 php1 sshd\[26373\]: Failed password for invalid user Admin666 from 129.226.56.22 port 44284 ssh2
Oct  3 23:21:09 php1 sshd\[26758\]: Invalid user Tomato@2017 from 129.226.56.22
Oct  3 23:21:09 php1 sshd\[26758\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.56.22

Oct  3 17:46:50 microserver sshd[54887]: Invalid user ftpuser from 129.226.56.22 port 47764
Oct  3 17:46:50 microserver sshd[54887]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.56.22
Oct  3 17:46:52 microserver sshd[54887]: Failed password for invalid user ftpuser from 129.226.56.22 port 47764 ssh2
Oct  3 17:51:43 microserver sshd[55522]: Invalid user betteti from 129.226.56.22 port 32930
Oct  3 17:51:43 microserver sshd[55522]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.56.22
Oct  3 18:06:08 microserver sshd[57515]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.56.22  user=mysql
Oct  3 18:06:10 microserver sshd[57515]: Failed password for mysql from 129.226.56.22 port 44884 ssh2
Oct  3 18:11:03 microserver sshd[58192]: Invalid user zipcode from 129.226.56.22 port 58286
Oct  3 18:11:03 microserver sshd[58192]: pam_unix(sshd:auth): authentication failure; lo

Sep 27 06:18:00 ny01 sshd[1604]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.56.22
Sep 27 06:18:02 ny01 sshd[1604]: Failed password for invalid user stylofrete from 129.226.56.22 port 32786 ssh2
Sep 27 06:22:46 ny01 sshd[2520]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.56.22

Sep 24 18:21:45 server sshd\[425\]: Invalid user 987654321 from 129.226.56.22 port 59682
Sep 24 18:21:45 server sshd\[425\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.56.22
Sep 24 18:21:47 server sshd\[425\]: Failed password for invalid user 987654321 from 129.226.56.22 port 59682 ssh2
Sep 24 18:26:29 server sshd\[26818\]: Invalid user \#654298\# from 129.226.56.22 port 44352
Sep 24 18:26:29 server sshd\[26818\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.56.22

Sep 23 08:36:29 hpm sshd\[27887\]: Invalid user gmodserver from 129.226.56.22
Sep 23 08:36:29 hpm sshd\[27887\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.56.22
Sep 23 08:36:31 hpm sshd\[27887\]: Failed password for invalid user gmodserver from 129.226.56.22 port 44852 ssh2
Sep 23 08:41:26 hpm sshd\[28469\]: Invalid user test from 129.226.56.22
Sep 23 08:41:26 hpm sshd\[28469\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.56.22

Sep 21 11:09:22 meumeu sshd[11794]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.56.22 
Sep 21 11:09:23 meumeu sshd[11794]: Failed password for invalid user george from 129.226.56.22 port 51278 ssh2
Sep 21 11:13:19 meumeu sshd[12335]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.56.22 
...

Aug 24 01:26:04 aiointranet sshd\[6176\]: Invalid user dspace from 129.226.56.22
Aug 24 01:26:04 aiointranet sshd\[6176\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.56.22
Aug 24 01:26:06 aiointranet sshd\[6176\]: Failed password for invalid user dspace from 129.226.56.22 port 40756 ssh2
Aug 24 01:30:57 aiointranet sshd\[6602\]: Invalid user gray from 129.226.56.22
Aug 24 01:30:57 aiointranet sshd\[6602\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.56.22

Aug 20 19:08:11 friendsofhawaii sshd\[10692\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.56.22  user=root
Aug 20 19:08:13 friendsofhawaii sshd\[10692\]: Failed password for root from 129.226.56.22 port 54002 ssh2
Aug 20 19:12:36 friendsofhawaii sshd\[11262\]: Invalid user lotus from 129.226.56.22
Aug 20 19:12:36 friendsofhawaii sshd\[11262\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.56.22
Aug 20 19:12:38 friendsofhawaii sshd\[11262\]: Failed password for invalid user lotus from 129.226.56.22 port 40414 ssh2

Aug 20 05:08:12 friendsofhawaii sshd\[23940\]: Invalid user soporte from 129.226.56.22
Aug 20 05:08:12 friendsofhawaii sshd\[23940\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.56.22
Aug 20 05:08:14 friendsofhawaii sshd\[23940\]: Failed password for invalid user soporte from 129.226.56.22 port 39476 ssh2
Aug 20 05:13:10 friendsofhawaii sshd\[24548\]: Invalid user minecraft from 129.226.56.22
Aug 20 05:13:10 friendsofhawaii sshd\[24548\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.56.22

Aug  2 23:24:13 www sshd\[62744\]: Invalid user angelo from 129.226.56.22
Aug  2 23:24:13 www sshd\[62744\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.56.22
Aug  2 23:24:14 www sshd\[62744\]: Failed password for invalid user angelo from 129.226.56.22 port 58170 ssh2
...

129.226.56.24 - - [29/Aug/2019:01:54:05 +0200] "GET /webdav/ HTTP/1.1" 301 178 "-" "Mozilla/5.0"
129.226.56.24 - - [29/Aug/2019:01:54:06 +0200] "GET /help.php HTTP/1.1" 301 178 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)"
...

Brute force SMTP login attempted.
...

Jan 10 14:29:11 [host] sshd[31831]: Invalid user master from 54.39.145.59
Jan 10 14:29:11 [host] sshd[31831]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.145.59
Jan 10 14:29:12 [host] sshd[31831]: Failed password for invalid user master from 54.39.145.59 port 51742 ssh2

Jan 10 05:31:42 web9 sshd\[22047\]: Invalid user gt from 106.54.189.93
Jan 10 05:31:42 web9 sshd\[22047\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.189.93
Jan 10 05:31:44 web9 sshd\[22047\]: Failed password for invalid user gt from 106.54.189.93 port 37444 ssh2
Jan 10 05:35:32 web9 sshd\[22764\]: Invalid user zar from 106.54.189.93
Jan 10 05:35:32 web9 sshd\[22764\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.189.93

Telnetd brute force attack detected by fail2ban

2020-01-10T15:34:32.027495scmdmz1 sshd[26053]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.199.124.109  user=root
2020-01-10T15:34:34.766680scmdmz1 sshd[26053]: Failed password for root from 198.199.124.109 port 57451 ssh2
2020-01-10T15:38:24.763379scmdmz1 sshd[26402]: Invalid user asdf from 198.199.124.109 port 43144
2020-01-10T15:38:24.765937scmdmz1 sshd[26402]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.199.124.109
2020-01-10T15:38:24.763379scmdmz1 sshd[26402]: Invalid user asdf from 198.199.124.109 port 43144
2020-01-10T15:38:26.686551scmdmz1 sshd[26402]: Failed password for invalid user asdf from 198.199.124.109 port 43144 ssh2
...

1578660992 - 01/10/2020 13:56:32 Host: 181.65.234.50/181.65.234.50 Port: 445 TCP Blocked

142.93.125.73 - - [10/Jan/2020:12:57:03 +0000] "POST /wp-login.php HTTP/1.1" 200 6409 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
142.93.125.73 - - [10/Jan/2020:12:57:03 +0000] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...

01/10/2020-13:57:30.894042 61.147.59.140 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 62

RDP Bruteforce

Jan 10 13:57:44 grey postfix/smtpd\[30252\]: NOQUEUE: reject: RCPT from unknown\[115.72.29.115\]: 554 5.7.1 Service unavailable\; Client host \[115.72.29.115\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[115.72.29.115\]\; from=\ to=\ proto=ESMTP helo=\
...

Jan 10 17:51:49 dcd-gentoo sshd[5629]: User root from 222.186.30.76 not allowed because none of user's groups are listed in AllowGroups
Jan 10 17:51:51 dcd-gentoo sshd[5629]: error: PAM: Authentication failure for illegal user root from 222.186.30.76
Jan 10 17:51:49 dcd-gentoo sshd[5629]: User root from 222.186.30.76 not allowed because none of user's groups are listed in AllowGroups
Jan 10 17:51:51 dcd-gentoo sshd[5629]: error: PAM: Authentication failure for illegal user root from 222.186.30.76
Jan 10 17:51:49 dcd-gentoo sshd[5629]: User root from 222.186.30.76 not allowed because none of user's groups are listed in AllowGroups
Jan 10 17:51:51 dcd-gentoo sshd[5629]: error: PAM: Authentication failure for illegal user root from 222.186.30.76
Jan 10 17:51:51 dcd-gentoo sshd[5629]: Failed keyboard-interactive/pam for invalid user root from 222.186.30.76 port 52332 ssh2
...

SSH authentication failure x 6 reported by Fail2Ban
...

Jan 10 17:43:26 icinga sshd[55990]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.78.14.83 
Jan 10 17:43:28 icinga sshd[55990]: Failed password for invalid user user from 27.78.14.83 port 43900 ssh2
Jan 10 17:43:45 icinga sshd[56352]: Failed password for root from 27.78.14.83 port 40628 ssh2
...

$f2bV_matches

Jan 10 18:08:37 dcd-gentoo sshd[6770]: Invalid user test3 from 36.66.149.211 port 34794
Jan 10 18:11:09 dcd-gentoo sshd[6936]: Invalid user carlos from 36.66.149.211 port 54794
Jan 10 18:13:46 dcd-gentoo sshd[7096]: Invalid user test from 36.66.149.211 port 46560
...

Jan  9 18:30:40 server sshd\[1046\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.171.93.106  user=root
Jan  9 18:30:42 server sshd\[1046\]: Failed password for root from 14.171.93.106 port 62863 ssh2
Jan 10 16:19:36 server sshd\[32695\]: Invalid user admin from 14.171.93.106
Jan 10 16:19:37 server sshd\[32695\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.171.93.106 
Jan 10 16:19:39 server sshd\[32695\]: Failed password for invalid user admin from 14.171.93.106 port 61880 ssh2
...