Aug 26 04:42:19 shivevps sshd[26435]: Bad protocol version identification '\024' from 195.154.108.238 port 38641
Aug 26 04:42:46 shivevps sshd[27840]: Bad protocol version identification '\024' from 195.154.108.238 port 54094
Aug 26 04:43:37 shivevps sshd[29560]: Bad protocol version identification '\024' from 195.154.108.238 port 39945
Aug 26 04:45:29 shivevps sshd[32224]: Bad protocol version identification '\024' from 195.154.108.238 port 49141
...

Aug  8 06:15:27 roki-contabo sshd\[12001\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.154.108.118  user=root
Aug  8 06:15:29 roki-contabo sshd\[12001\]: Failed password for root from 195.154.108.118 port 55910 ssh2
Aug  8 06:35:31 roki-contabo sshd\[12461\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.154.108.118  user=root
Aug  8 06:35:33 roki-contabo sshd\[12461\]: Failed password for root from 195.154.108.118 port 58152 ssh2
Aug  8 06:42:00 roki-contabo sshd\[12689\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.154.108.118  user=root
...

Invalid user pesa from 195.154.108.118 port 58972

Sep 20 13:47:20 ms-srv sshd[5783]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.154.108.194  user=mail
Sep 20 13:47:23 ms-srv sshd[5783]: Failed password for invalid user mail from 195.154.108.194 port 51730 ssh2

Dec 13 08:08:55 ms-srv sshd[62220]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.154.108.203
Dec 13 08:08:56 ms-srv sshd[62220]: Failed password for invalid user bomstein from 195.154.108.203 port 44220 ssh2

SSH Brute Force, server-1 sshd[26990]: Failed password for root from 195.154.108.203 port 44976 ssh2

Dec 12 22:40:22 nextcloud sshd\[10938\]: Invalid user alivado from 195.154.108.203
Dec 12 22:40:22 nextcloud sshd\[10938\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.154.108.203
Dec 12 22:40:24 nextcloud sshd\[10938\]: Failed password for invalid user alivado from 195.154.108.203 port 34498 ssh2
...

Dec  5 07:28:32 [host] sshd[6661]: Invalid user thori from 195.154.108.203
Dec  5 07:28:32 [host] sshd[6661]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.154.108.203
Dec  5 07:28:34 [host] sshd[6661]: Failed password for invalid user thori from 195.154.108.203 port 38046 ssh2

Dec  5 05:57:26 [host] sshd[3820]: Invalid user sg from 195.154.108.203
Dec  5 05:57:26 [host] sshd[3820]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.154.108.203
Dec  5 05:57:28 [host] sshd[3820]: Failed password for invalid user sg from 195.154.108.203 port 41134 ssh2

Dec  2 01:52:26 vibhu-HP-Z238-Microtower-Workstation sshd\[23423\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.154.108.203  user=backup
Dec  2 01:52:28 vibhu-HP-Z238-Microtower-Workstation sshd\[23423\]: Failed password for backup from 195.154.108.203 port 55876 ssh2
Dec  2 02:00:07 vibhu-HP-Z238-Microtower-Workstation sshd\[24073\]: Invalid user casie from 195.154.108.203
Dec  2 02:00:07 vibhu-HP-Z238-Microtower-Workstation sshd\[24073\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.154.108.203
Dec  2 02:00:08 vibhu-HP-Z238-Microtower-Workstation sshd\[24073\]: Failed password for invalid user casie from 195.154.108.203 port 39196 ssh2
...

Nov 29 12:38:57 server sshd\[12169\]: Invalid user server from 195.154.108.203
Nov 29 12:38:57 server sshd\[12169\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195-154-108-203.rev.poneytelecom.eu 
Nov 29 12:39:00 server sshd\[12169\]: Failed password for invalid user server from 195.154.108.203 port 45144 ssh2
Nov 29 12:56:35 server sshd\[16845\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195-154-108-203.rev.poneytelecom.eu  user=root
Nov 29 12:56:38 server sshd\[16845\]: Failed password for root from 195.154.108.203 port 54410 ssh2
...

Nov 29 06:48:21 vps647732 sshd[29353]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.154.108.203
Nov 29 06:48:23 vps647732 sshd[29353]: Failed password for invalid user Aili from 195.154.108.203 port 34886 ssh2
...

Automatic report - Banned IP Access

2019-11-25T15:39:44.387435shield sshd\[26954\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195-154-108-194.rev.poneytelecom.eu  user=root
2019-11-25T15:39:46.617546shield sshd\[26954\]: Failed password for root from 195.154.108.194 port 54574 ssh2
2019-11-25T15:43:00.968072shield sshd\[27667\]: Invalid user d from 195.154.108.194 port 60850
2019-11-25T15:43:00.972624shield sshd\[27667\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195-154-108-194.rev.poneytelecom.eu
2019-11-25T15:43:02.775630shield sshd\[27667\]: Failed password for invalid user d from 195.154.108.194 port 60850 ssh2

Nov 21 22:00:06 kapalua sshd\[7971\]: Invalid user asd from 195.154.108.194
Nov 21 22:00:06 kapalua sshd\[7971\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195-154-108-194.rev.poneytelecom.eu
Nov 21 22:00:13 kapalua sshd\[7971\]: Failed password for invalid user asd from 195.154.108.194 port 37766 ssh2
Nov 21 22:03:23 kapalua sshd\[8310\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195-154-108-194.rev.poneytelecom.eu  user=bin
Nov 21 22:03:26 kapalua sshd\[8310\]: Failed password for bin from 195.154.108.194 port 44506 ssh2

Aug 25 18:45:56 php2 sshd\[31505\]: Invalid user zzz from 142.44.160.173
Aug 25 18:45:56 php2 sshd\[31505\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.ip-142-44-160.net
Aug 25 18:45:58 php2 sshd\[31505\]: Failed password for invalid user zzz from 142.44.160.173 port 44172 ssh2
Aug 25 18:50:10 php2 sshd\[31905\]: Invalid user stanley from 142.44.160.173
Aug 25 18:50:10 php2 sshd\[31905\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.ip-142-44-160.net

Aug 25 18:15:10 auw2 sshd\[25175\]: Invalid user suporte from 75.49.249.16
Aug 25 18:15:10 auw2 sshd\[25175\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=75-49-249-16.lightspeed.snjsca.sbcglobal.net
Aug 25 18:15:12 auw2 sshd\[25175\]: Failed password for invalid user suporte from 75.49.249.16 port 48122 ssh2
Aug 25 18:19:35 auw2 sshd\[25558\]: Invalid user mindy from 75.49.249.16
Aug 25 18:19:35 auw2 sshd\[25558\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=75-49-249-16.lightspeed.snjsca.sbcglobal.net

Aug 25 18:30:15 tdfoods sshd\[14414\]: Invalid user test from 92.222.92.114
Aug 25 18:30:15 tdfoods sshd\[14414\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.ip-92-222-92.eu
Aug 25 18:30:16 tdfoods sshd\[14414\]: Failed password for invalid user test from 92.222.92.114 port 49204 ssh2
Aug 25 18:34:28 tdfoods sshd\[14808\]: Invalid user linuxacademy from 92.222.92.114
Aug 25 18:34:28 tdfoods sshd\[14808\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.ip-92-222-92.eu

2019-08-26T03:59:26.638196abusebot.cloudsearch.cf sshd\[2686\]: Invalid user htt from 211.20.56.184 port 34448
2019-08-26T03:59:26.642258abusebot.cloudsearch.cf sshd\[2686\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211-20-56-184.hinet-ip.hinet.net

Aug 25 18:28:25 tdfoods sshd\[14292\]: Invalid user alphonse from 45.76.237.54
Aug 25 18:28:25 tdfoods sshd\[14292\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.76.237.54
Aug 25 18:28:27 tdfoods sshd\[14292\]: Failed password for invalid user alphonse from 45.76.237.54 port 58117 ssh2
Aug 25 18:32:27 tdfoods sshd\[14657\]: Invalid user sakura from 45.76.237.54
Aug 25 18:32:27 tdfoods sshd\[14657\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.76.237.54

Aug 25 23:24:55 vtv3 sshd\[10056\]: Invalid user vlado from 52.164.211.22 port 50802
Aug 25 23:24:55 vtv3 sshd\[10056\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.164.211.22
Aug 25 23:24:56 vtv3 sshd\[10056\]: Failed password for invalid user vlado from 52.164.211.22 port 50802 ssh2
Aug 25 23:31:14 vtv3 sshd\[13509\]: Invalid user craven from 52.164.211.22 port 41984
Aug 25 23:31:14 vtv3 sshd\[13509\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.164.211.22
Aug 25 23:43:19 vtv3 sshd\[19417\]: Invalid user thunder from 52.164.211.22 port 52448
Aug 25 23:43:19 vtv3 sshd\[19417\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.164.211.22
Aug 25 23:43:21 vtv3 sshd\[19417\]: Failed password for invalid user thunder from 52.164.211.22 port 52448 ssh2
Aug 25 23:49:25 vtv3 sshd\[22367\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser=

$f2bV_matches

Automatic report - Banned IP Access

Aug 25 18:00:54 lcprod sshd\[1744\]: Invalid user qhsupport from 85.222.123.94
Aug 25 18:00:54 lcprod sshd\[1744\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=85-222-123-94.dynamic.chello.pl
Aug 25 18:00:57 lcprod sshd\[1744\]: Failed password for invalid user qhsupport from 85.222.123.94 port 42118 ssh2
Aug 25 18:05:37 lcprod sshd\[2178\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=85-222-123-94.dynamic.chello.pl  user=root
Aug 25 18:05:39 lcprod sshd\[2178\]: Failed password for root from 85.222.123.94 port 60702 ssh2

Aug 26 00:36:31 plusreed sshd[15065]: Invalid user mr from 46.101.204.20
...

Aug 26 06:28:18 dedicated sshd[21464]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.84.180  user=root
Aug 26 06:28:20 dedicated sshd[21464]: Failed password for root from 157.230.84.180 port 38484 ssh2

Aug 26 07:29:56 srv-4 sshd\[31444\]: Invalid user ams from 213.139.144.10
Aug 26 07:29:56 srv-4 sshd\[31444\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.139.144.10
Aug 26 07:29:59 srv-4 sshd\[31444\]: Failed password for invalid user ams from 213.139.144.10 port 62250 ssh2
...

SSH invalid-user multiple login attempts

Aug 26 06:30:44 root sshd[14230]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.184.216.161 
Aug 26 06:30:46 root sshd[14230]: Failed password for invalid user theodora from 118.184.216.161 port 54992 ssh2
Aug 26 06:33:39 root sshd[14247]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.184.216.161 
...

Aug 26 10:59:20 webhost01 sshd[12480]: Failed password for root from 222.186.52.124 port 44932 ssh2
...