Jan  6 17:28:41 Server1 sshd[13126]: Did not receive identification string from 103.104.104.104 port 46364
Jan  6 17:31:37 Server1 sshd[13429]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.104.104.104  user=r.r
Jan  6 17:31:40 Server1 sshd[13429]: Failed password for r.r from 103.104.104.104 port 44350 ssh2
Jan  6 17:31:41 Server1 sshd[13429]: Received disconnect from 103.104.104.104 port 44350:11: Normal Shutdown, Thank you for playing [preauth]
Jan  6 17:31:41 Server1 sshd[13429]: Disconnected from authenticating user r.r 103.104.104.104 port 44350 [preauth]
Jan  6 17:32:53 Server1 sshd[13465]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.104.104.104  user=r.r


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=103.104.104.104

Unauthorized connection attempt detected from IP address 49.235.77.252 to port 2220 [J]

2020-01-07T20:16:52.250701  sshd[22393]: Invalid user obg from 50.53.179.3 port 37046
2020-01-07T20:16:52.264970  sshd[22393]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=50.53.179.3
2020-01-07T20:16:52.250701  sshd[22393]: Invalid user obg from 50.53.179.3 port 37046
2020-01-07T20:16:54.256696  sshd[22393]: Failed password for invalid user obg from 50.53.179.3 port 37046 ssh2
2020-01-07T20:33:18.468403  sshd[22755]: Invalid user test from 50.53.179.3 port 50238
...

Unauthorized connection attempt detected from IP address 114.112.58.134 to port 2220 [J]

C1,WP GET /wp-login.php

Automated report (2020-01-07T15:38:50+00:00). Scraper detected at this address.

Jan  8 00:58:03 gw1 sshd[20114]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.220.237
Jan  8 00:58:06 gw1 sshd[20114]: Failed password for invalid user cvsroot from 118.24.220.237 port 56570 ssh2
...

Jan  7 19:19:01 grey postfix/smtpd\[24772\]: NOQUEUE: reject: RCPT from static.232.255.47.78.clients.your-server.de\[78.47.255.232\]: 554 5.7.1 Service unavailable\; Client host \[78.47.255.232\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[78.47.255.232\]\; from=\ to=\ proto=SMTP helo=\
...

Automatic report - Banned IP Access

Fail2Ban Ban Triggered

Unauthorized connection attempt detected from IP address 206.189.153.178 to port 2220 [J]

2020-01-07T20:16:01.381752shield sshd\[15879\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.148  user=root
2020-01-07T20:16:03.588658shield sshd\[15879\]: Failed password for root from 218.92.0.148 port 55807 ssh2
2020-01-07T20:16:07.095278shield sshd\[15879\]: Failed password for root from 218.92.0.148 port 55807 ssh2
2020-01-07T20:16:10.161024shield sshd\[15879\]: Failed password for root from 218.92.0.148 port 55807 ssh2
2020-01-07T20:16:13.628040shield sshd\[15879\]: Failed password for root from 218.92.0.148 port 55807 ssh2

Jan  7 19:56:12 sshgateway sshd\[3560\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.226  user=root
Jan  7 19:56:14 sshgateway sshd\[3560\]: Failed password for root from 222.186.173.226 port 51020 ssh2
Jan  7 19:56:27 sshgateway sshd\[3560\]: error: maximum authentication attempts exceeded for root from 222.186.173.226 port 51020 ssh2 \[preauth\]

Jan  7 17:58:48 haigwepa sshd[22849]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.160.156 
Jan  7 17:58:50 haigwepa sshd[22849]: Failed password for invalid user admin from 68.183.160.156 port 7434 ssh2
...

Jan  7 21:06:16 v22018053744266470 sshd[24945]: Failed password for root from 49.88.112.67 port 28895 ssh2
Jan  7 21:09:08 v22018053744266470 sshd[25125]: Failed password for root from 49.88.112.67 port 11531 ssh2
...