Jun  1 17:30:59 NPSTNNYC01T sshd[18335]: Failed password for root from 206.81.10.104 port 34778 ssh2
Jun  1 17:34:43 NPSTNNYC01T sshd[18571]: Failed password for root from 206.81.10.104 port 39864 ssh2
...

Invalid user ricardo from 206.81.10.104 port 43516

May 30 07:00:30 ns382633 sshd\[32611\]: Invalid user guest from 206.81.10.104 port 53932
May 30 07:00:30 ns382633 sshd\[32611\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.81.10.104
May 30 07:00:32 ns382633 sshd\[32611\]: Failed password for invalid user guest from 206.81.10.104 port 53932 ssh2
May 30 07:04:20 ns382633 sshd\[537\]: Invalid user mimi from 206.81.10.104 port 46244
May 30 07:04:20 ns382633 sshd\[537\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.81.10.104

Invalid user wwwtest from 206.81.10.104 port 48300

SSH bruteforce

Invalid user ricardo from 206.81.10.104 port 43516

2020-05-24T14:10:43.3335931240 sshd\[15071\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.81.10.104  user=root
2020-05-24T14:10:45.5128021240 sshd\[15071\]: Failed password for root from 206.81.10.104 port 51066 ssh2
2020-05-24T14:15:57.7264631240 sshd\[15312\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.81.10.104  user=root
...

Invalid user geidy from 206.81.10.230 port 34172

Sep 12 02:33:24 pkdns2 sshd\[55295\]: Invalid user tester from 206.81.10.230Sep 12 02:33:27 pkdns2 sshd\[55295\]: Failed password for invalid user tester from 206.81.10.230 port 57992 ssh2Sep 12 02:36:59 pkdns2 sshd\[55455\]: Invalid user mandy from 206.81.10.230Sep 12 02:37:00 pkdns2 sshd\[55455\]: Failed password for invalid user mandy from 206.81.10.230 port 47536 ssh2Sep 12 02:40:30 pkdns2 sshd\[55648\]: Invalid user yin from 206.81.10.230Sep 12 02:40:32 pkdns2 sshd\[55648\]: Failed password for invalid user yin from 206.81.10.230 port 37076 ssh2
...

Sep  7 12:23:47 XXX sshd[57168]: Invalid user build from 206.81.10.230 port 47118

Sep  5 09:36:40 php1 sshd\[30033\]: Invalid user admin from 206.81.10.230
Sep  5 09:36:40 php1 sshd\[30033\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.81.10.230
Sep  5 09:36:43 php1 sshd\[30033\]: Failed password for invalid user admin from 206.81.10.230 port 53924 ssh2
Sep  5 09:41:45 php1 sshd\[30576\]: Invalid user sumit from 206.81.10.230
Sep  5 09:41:45 php1 sshd\[30576\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.81.10.230

Sep  1 15:31:15 yabzik sshd[5558]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.81.10.230
Sep  1 15:31:18 yabzik sshd[5558]: Failed password for invalid user test from 206.81.10.230 port 33744 ssh2
Sep  1 15:35:24 yabzik sshd[7267]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.81.10.230

Aug 24 15:04:36 XXX sshd[54671]: Invalid user bss from 206.81.10.230 port 40144

Aug 14 04:42:50 XXX sshd[41902]: Invalid user temp1 from 206.81.10.230 port 59384

Aug 13 21:15:06 dedicated sshd[14281]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.81.10.230  user=root
Aug 13 21:15:08 dedicated sshd[14281]: Failed password for root from 206.81.10.230 port 53880 ssh2

Aug  7 20:10:00 localhost sshd\[1832\]: Invalid user tar from 206.81.10.230
Aug  7 20:10:00 localhost sshd\[1832\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.81.10.230
Aug  7 20:10:02 localhost sshd\[1832\]: Failed password for invalid user tar from 206.81.10.230 port 40622 ssh2
Aug  7 20:14:12 localhost sshd\[2015\]: Invalid user postgres from 206.81.10.230
Aug  7 20:14:12 localhost sshd\[2015\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.81.10.230
...

Jul 28 05:19:16 mail sshd\[3273\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.81.10.230  user=root
Jul 28 05:19:19 mail sshd\[3273\]: Failed password for root from 206.81.10.230 port 37636 ssh2
...

Jul 23 08:30:45 giegler sshd[8194]: Invalid user 123 from 206.81.10.230 port 52022

Jul 22 16:50:48 giegler sshd[18054]: Invalid user tf2mgeserver from 206.81.10.230 port 52780

Jul 14 03:58:06 home sshd[10361]: Invalid user guest from 206.81.10.230 port 53408
Jul 14 03:58:06 home sshd[10361]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.81.10.230
Jul 14 03:58:06 home sshd[10361]: Invalid user guest from 206.81.10.230 port 53408
Jul 14 03:58:08 home sshd[10361]: Failed password for invalid user guest from 206.81.10.230 port 53408 ssh2
Jul 14 04:08:54 home sshd[10398]: Invalid user marcos from 206.81.10.230 port 48484
Jul 14 04:08:54 home sshd[10398]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.81.10.230
Jul 14 04:08:54 home sshd[10398]: Invalid user marcos from 206.81.10.230 port 48484
Jul 14 04:08:56 home sshd[10398]: Failed password for invalid user marcos from 206.81.10.230 port 48484 ssh2
Jul 14 04:13:22 home sshd[10419]: Invalid user admin123 from 206.81.10.230 port 48504
Jul 14 04:13:22 home sshd[10419]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser=

Jul 14 05:27:21 eventyay sshd[25409]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.81.10.230
Jul 14 05:27:23 eventyay sshd[25409]: Failed password for invalid user downloader from 206.81.10.230 port 57488 ssh2
Jul 14 05:32:13 eventyay sshd[26398]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.81.10.230
...

Jul 13 20:09:55 eventyay sshd[16323]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.81.10.230
Jul 13 20:09:57 eventyay sshd[16323]: Failed password for invalid user mcserver from 206.81.10.230 port 38734 ssh2
Jul 13 20:14:44 eventyay sshd[17624]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.81.10.230
...

$f2bV_matches | Triggered by Fail2Ban at Vostok web server

(sshd) Failed SSH login from 52.130.74.149 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun  6 07:22:25 amsweb01 sshd[23531]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.130.74.149  user=root
Jun  6 07:22:27 amsweb01 sshd[23531]: Failed password for root from 52.130.74.149 port 38026 ssh2
Jun  6 07:24:42 amsweb01 sshd[23853]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.130.74.149  user=root
Jun  6 07:24:44 amsweb01 sshd[23853]: Failed password for root from 52.130.74.149 port 38482 ssh2
Jun  6 07:25:55 amsweb01 sshd[24139]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.130.74.149  user=root

Jun  6 07:40:14 eventyay sshd[4708]: Failed password for root from 192.210.192.165 port 45732 ssh2
Jun  6 07:43:52 eventyay sshd[4821]: Failed password for root from 192.210.192.165 port 53848 ssh2
...

Received: from [::1] (port=54480 helo=ip-160-153-251-85.ip.secureserver.net)
	by ip-160-153-251-85.ip.secureserver.net with esmtpa (Exim 4.93)
	(envelope-from )
	id 1jhFpd-0004zY-Kt; Fri, 05 Jun 2020 10:08:37 -0700
MIME-Version: 1.0

Jun  6 07:50:59 eventyay sshd[5078]: Failed password for root from 189.89.213.4 port 39887 ssh2
Jun  6 07:55:11 eventyay sshd[5243]: Failed password for root from 189.89.213.4 port 64872 ssh2
...

Jun  6 06:37:56 localhost sshd[82700]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.73.68.190  user=root
Jun  6 06:37:59 localhost sshd[82700]: Failed password for root from 177.73.68.190 port 51108 ssh2
Jun  6 06:41:51 localhost sshd[83110]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.73.68.190  user=root
Jun  6 06:41:53 localhost sshd[83110]: Failed password for root from 177.73.68.190 port 51018 ssh2
Jun  6 06:45:37 localhost sshd[83510]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.73.68.190  user=root
Jun  6 06:45:39 localhost sshd[83510]: Failed password for root from 177.73.68.190 port 54182 ssh2
...

Jun  6 09:42:03 debian-2gb-nbg1-2 kernel: \[13688073.238920\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.175.93.23 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=63675 PROTO=TCP SPT=55089 DPT=5929 WINDOW=1024 RES=0x00 SYN URGP=0

Jun  6 09:15:53 ns3164893 sshd[31366]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.154.14.234  user=root
Jun  6 09:15:55 ns3164893 sshd[31366]: Failed password for root from 61.154.14.234 port 51956 ssh2
...

Jun  6 06:25:13 ip-172-31-61-156 sshd[31772]: Failed password for root from 116.236.147.38 port 39332 ssh2
Jun  6 06:28:19 ip-172-31-61-156 sshd[31895]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.236.147.38  user=root
Jun  6 06:28:21 ip-172-31-61-156 sshd[31895]: Failed password for root from 116.236.147.38 port 36214 ssh2
Jun  6 06:28:19 ip-172-31-61-156 sshd[31895]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.236.147.38  user=root
Jun  6 06:28:21 ip-172-31-61-156 sshd[31895]: Failed password for root from 116.236.147.38 port 36214 ssh2
...

06/06/2020-01:22:20.616164 185.156.73.65 Protocol: 6 ET SCAN NMAP -sS window 1024

2020-06-06T05:29:41.167595server.espacesoutien.com sshd[10571]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.13.199  user=root
2020-06-06T05:29:42.850943server.espacesoutien.com sshd[10571]: Failed password for root from 104.131.13.199 port 56438 ssh2
2020-06-06T05:33:00.585733server.espacesoutien.com sshd[11010]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.13.199  user=root
2020-06-06T05:33:02.921408server.espacesoutien.com sshd[11010]: Failed password for root from 104.131.13.199 port 55124 ssh2
...

Invalid user minecraft from 190.205.103.12 port 48417

Jun  6 08:52:42 ns382633 sshd\[7305\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=199.227.138.238  user=root
Jun  6 08:52:45 ns382633 sshd\[7305\]: Failed password for root from 199.227.138.238 port 49596 ssh2
Jun  6 09:05:15 ns382633 sshd\[9674\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=199.227.138.238  user=root
Jun  6 09:05:17 ns382633 sshd\[9674\]: Failed password for root from 199.227.138.238 port 53548 ssh2
Jun  6 09:07:46 ns382633 sshd\[9899\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=199.227.138.238  user=root

Jun  6 04:17:40 IngegnereFirenze sshd[588]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.56.232.33  user=root
...

Jun  6 06:10:38 server sshd[32700]: Failed password for root from 54.37.154.248 port 44156 ssh2
Jun  6 06:14:07 server sshd[445]: Failed password for root from 54.37.154.248 port 47710 ssh2
...