Sep 18 17:01:08 ssh2 sshd[28692]: User root from 198-200-124-68.cpe.distributel.net not allowed because not listed in AllowUsers
Sep 18 17:01:08 ssh2 sshd[28692]: Failed password for invalid user root from 198.200.124.68 port 54008 ssh2
Sep 18 17:01:08 ssh2 sshd[28692]: Connection closed by invalid user root 198.200.124.68 port 54008 [preauth]
...

Sep 18 17:01:08 ssh2 sshd[28692]: User root from 198-200-124-68.cpe.distributel.net not allowed because not listed in AllowUsers
Sep 18 17:01:08 ssh2 sshd[28692]: Failed password for invalid user root from 198.200.124.68 port 54008 ssh2
Sep 18 17:01:08 ssh2 sshd[28692]: Connection closed by invalid user root 198.200.124.68 port 54008 [preauth]
...

Sep 18 17:01:08 ssh2 sshd[28692]: User root from 198-200-124-68.cpe.distributel.net not allowed because not listed in AllowUsers
Sep 18 17:01:08 ssh2 sshd[28692]: Failed password for invalid user root from 198.200.124.68 port 54008 ssh2
Sep 18 17:01:08 ssh2 sshd[28692]: Connection closed by invalid user root 198.200.124.68 port 54008 [preauth]
...

2020-03-24T19:16:35.201424shield sshd\[13806\]: Invalid user roy from 198.200.124.197 port 42174
2020-03-24T19:16:35.210705shield sshd\[13806\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=198-200-124-197.cpe.distributel.net
2020-03-24T19:16:37.448699shield sshd\[13806\]: Failed password for invalid user roy from 198.200.124.197 port 42174 ssh2
2020-03-24T19:19:54.959505shield sshd\[14570\]: Invalid user git from 198.200.124.197 port 49978
2020-03-24T19:19:54.968485shield sshd\[14570\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=198-200-124-197.cpe.distributel.net

Nov 25 07:15:56 woltan sshd[11568]: Failed password for invalid user yenor from 198.200.124.197 port 44612 ssh2

(sshd) Failed SSH login from 198.200.124.197 (CA/Canada/198-200-124-197.cpe.distributel.net): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Mar  6 12:23:48 amsweb01 sshd[29804]: Failed password for root from 198.200.124.197 port 39020 ssh2
Mar  6 12:27:05 amsweb01 sshd[30227]: Invalid user ishihara from 198.200.124.197 port 58274
Mar  6 12:27:07 amsweb01 sshd[30227]: Failed password for invalid user ishihara from 198.200.124.197 port 58274 ssh2
Mar  6 12:28:04 amsweb01 sshd[30408]: Invalid user sunlei from 198.200.124.197 port 39530
Mar  6 12:28:06 amsweb01 sshd[30408]: Failed password for invalid user sunlei from 198.200.124.197 port 39530 ssh2

Jan 11 01:32:09 grey postfix/smtpd\[8593\]: NOQUEUE: reject: RCPT from 198-200-124-198.cpe.distributel.net\[198.200.124.198\]: 554 5.7.1 Service unavailable\; Client host \[198.200.124.198\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[198.200.124.198\]\; from=\ to=\ proto=ESMTP helo=\<198-200-124-198.cpe.distributel.net\>
...

Invalid user modesta from 198.200.124.197 port 43628

Dec 11 08:16:45 OPSO sshd\[18430\]: Invalid user garett from 198.200.124.197 port 52174
Dec 11 08:16:45 OPSO sshd\[18430\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.200.124.197
Dec 11 08:16:47 OPSO sshd\[18430\]: Failed password for invalid user garett from 198.200.124.197 port 52174 ssh2
Dec 11 08:22:49 OPSO sshd\[20002\]: Invalid user huhn from 198.200.124.197 port 60558
Dec 11 08:22:49 OPSO sshd\[20002\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.200.124.197

Dec  5 20:35:07 kapalua sshd\[9913\]: Invalid user otohr from 198.200.124.197
Dec  5 20:35:07 kapalua sshd\[9913\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=198-200-124-197.cpe.distributel.net
Dec  5 20:35:09 kapalua sshd\[9913\]: Failed password for invalid user otohr from 198.200.124.197 port 50140 ssh2
Dec  5 20:41:22 kapalua sshd\[10635\]: Invalid user wwwrun from 198.200.124.197
Dec  5 20:41:22 kapalua sshd\[10635\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=198-200-124-197.cpe.distributel.net

$f2bV_matches

Nov 26 19:10:52 sachi sshd\[29076\]: Invalid user nexus from 198.200.124.197
Nov 26 19:10:52 sachi sshd\[29076\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=198-200-124-197.cpe.distributel.net
Nov 26 19:10:54 sachi sshd\[29076\]: Failed password for invalid user nexus from 198.200.124.197 port 60602 ssh2
Nov 26 19:14:11 sachi sshd\[29356\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=198-200-124-197.cpe.distributel.net  user=root
Nov 26 19:14:13 sachi sshd\[29356\]: Failed password for root from 198.200.124.197 port 39166 ssh2

Nov 25 09:16:42 game-panel sshd[9428]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.200.124.197
Nov 25 09:16:45 game-panel sshd[9428]: Failed password for invalid user madlin from 198.200.124.197 port 37542 ssh2
Nov 25 09:20:08 game-panel sshd[9557]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.200.124.197

Nov 22 07:17:15 ns382633 sshd\[9455\]: Invalid user quest from 198.200.124.197 port 56110
Nov 22 07:17:15 ns382633 sshd\[9455\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.200.124.197
Nov 22 07:17:17 ns382633 sshd\[9455\]: Failed password for invalid user quest from 198.200.124.197 port 56110 ssh2
Nov 22 07:21:19 ns382633 sshd\[10251\]: Invalid user haswell from 198.200.124.197 port 41764
Nov 22 07:21:19 ns382633 sshd\[10251\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.200.124.197

Nov  9 16:47:04 woltan sshd[20063]: Failed password for root from 198.200.124.197 port 54494 ssh2

20/5/3@23:54:06: FAIL: Alarm-Network address from=88.147.173.247
...

Access non existent file

May  4 07:57:46 web01 sshd[22771]: Failed password for root from 212.100.155.154 port 33390 ssh2
...

(ftpd) Failed FTP login from 116.53.238.24 (CN/China/24.238.53.116.broad.km.yn.dynamic.163data.com.cn): 10 in the last 3600 secs

2020-05-04T03:24:16.5436451495-001 sshd[8991]: Invalid user krx from 111.93.4.174 port 39912
2020-05-04T03:24:19.2825581495-001 sshd[8991]: Failed password for invalid user krx from 111.93.4.174 port 39912 ssh2
2020-05-04T03:28:37.0225301495-001 sshd[9123]: Invalid user ftpadmin from 111.93.4.174 port 49376
2020-05-04T03:28:37.0256401495-001 sshd[9123]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.93.4.174
2020-05-04T03:28:37.0225301495-001 sshd[9123]: Invalid user ftpadmin from 111.93.4.174 port 49376
2020-05-04T03:28:39.2576691495-001 sshd[9123]: Failed password for invalid user ftpadmin from 111.93.4.174 port 49376 ssh2
...

SSH brutforce

(sshd) Failed SSH login from 138.197.175.236 (CA/Canada/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: May  4 06:44:08 s1 sshd[4374]: Invalid user telnet from 138.197.175.236 port 59430
May  4 06:44:09 s1 sshd[4374]: Failed password for invalid user telnet from 138.197.175.236 port 59430 ssh2
May  4 06:51:06 s1 sshd[4619]: Invalid user spring from 138.197.175.236 port 52800
May  4 06:51:08 s1 sshd[4619]: Failed password for invalid user spring from 138.197.175.236 port 52800 ssh2
May  4 06:54:16 s1 sshd[4720]: Invalid user alex from 138.197.175.236 port 54548

2020-05-04T10:12:16.801805hz01.yumiweb.com sshd\[3616\]: Invalid user admin from 192.34.57.157 port 44328
2020-05-04T10:12:19.189633hz01.yumiweb.com sshd\[3618\]: Invalid user Cisco from 192.34.57.157 port 51220
2020-05-04T10:12:21.637536hz01.yumiweb.com sshd\[3620\]: Invalid user cisco from 192.34.57.157 port 55050
...

$f2bV_matches

May  4 07:40:19 web8 sshd\[8406\]: Invalid user user from 92.63.194.106
May  4 07:40:19 web8 sshd\[8406\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.63.194.106
May  4 07:40:21 web8 sshd\[8406\]: Failed password for invalid user user from 92.63.194.106 port 36211 ssh2
May  4 07:40:48 web8 sshd\[8712\]: Invalid user guest from 92.63.194.106
May  4 07:40:48 web8 sshd\[8712\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.63.194.106

May  4 08:46:42 ns382633 sshd\[6726\]: Invalid user imapuser from 134.209.57.3 port 35636
May  4 08:46:42 ns382633 sshd\[6726\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.57.3
May  4 08:46:43 ns382633 sshd\[6726\]: Failed password for invalid user imapuser from 134.209.57.3 port 35636 ssh2
May  4 09:02:08 ns382633 sshd\[9489\]: Invalid user user from 134.209.57.3 port 54656
May  4 09:02:08 ns382633 sshd\[9489\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.57.3

2020-05-04T03:52:23.436381shield sshd\[7181\]: Invalid user madison from 196.46.192.73 port 40016
2020-05-04T03:52:23.440742shield sshd\[7181\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.46.192.73
2020-05-04T03:52:25.233020shield sshd\[7181\]: Failed password for invalid user madison from 196.46.192.73 port 40016 ssh2
2020-05-04T03:53:34.765940shield sshd\[7387\]: Invalid user test4 from 196.46.192.73 port 45888
2020-05-04T03:53:34.770196shield sshd\[7387\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.46.192.73

2020-05-04T08:12:34.409862vps751288.ovh.net sshd\[6890\]: Invalid user admin from 120.201.125.204 port 59376
2020-05-04T08:12:34.421619vps751288.ovh.net sshd\[6890\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.201.125.204
2020-05-04T08:12:36.564281vps751288.ovh.net sshd\[6890\]: Failed password for invalid user admin from 120.201.125.204 port 59376 ssh2
2020-05-04T08:17:25.386095vps751288.ovh.net sshd\[6899\]: Invalid user upload from 120.201.125.204 port 54681
2020-05-04T08:17:25.392921vps751288.ovh.net sshd\[6899\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.201.125.204

May  4 06:19:09 meumeu sshd[19748]: Failed password for root from 36.91.38.31 port 51032 ssh2
May  4 06:21:25 meumeu sshd[20159]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.91.38.31 
May  4 06:21:26 meumeu sshd[20159]: Failed password for invalid user posp from 36.91.38.31 port 35529 ssh2
...

May  4 09:29:13 piServer sshd[19206]: Failed password for root from 111.229.156.243 port 44698 ssh2
May  4 09:36:12 piServer sshd[19955]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.156.243 
May  4 09:36:15 piServer sshd[19955]: Failed password for invalid user webmaster from 111.229.156.243 port 40258 ssh2
...