May 10 05:27:52 marvibiene sshd[28884]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.190.14  user=root
May 10 05:27:54 marvibiene sshd[28884]: Failed password for root from 222.186.190.14 port 38889 ssh2
May 10 05:27:56 marvibiene sshd[28884]: Failed password for root from 222.186.190.14 port 38889 ssh2
May 10 05:27:52 marvibiene sshd[28884]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.190.14  user=root
May 10 05:27:54 marvibiene sshd[28884]: Failed password for root from 222.186.190.14 port 38889 ssh2
May 10 05:27:56 marvibiene sshd[28884]: Failed password for root from 222.186.190.14 port 38889 ssh2
...

Received: from mail.dotscom.rest ([95.141.23.123]:35463)
From: "Audiobooks Offer" 
Subject: Choose 3 Audiobooks from more than 125,000 titles

fail2ban/May 10 05:49:25 h1962932 sshd[28376]: Invalid user bash from 122.51.34.215 port 51964
May 10 05:49:25 h1962932 sshd[28376]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.34.215
May 10 05:49:25 h1962932 sshd[28376]: Invalid user bash from 122.51.34.215 port 51964
May 10 05:49:27 h1962932 sshd[28376]: Failed password for invalid user bash from 122.51.34.215 port 51964 ssh2
May 10 05:55:12 h1962932 sshd[29481]: Invalid user user from 122.51.34.215 port 54050

2020-05-10T05:11:05.688511shield sshd\[22290\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.28.62  user=root
2020-05-10T05:11:08.019178shield sshd\[22290\]: Failed password for root from 134.175.28.62 port 60736 ssh2
2020-05-10T05:16:56.260975shield sshd\[24519\]: Invalid user ferenc from 134.175.28.62 port 40020
2020-05-10T05:16:56.265156shield sshd\[24519\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.28.62
2020-05-10T05:16:58.449902shield sshd\[24519\]: Failed password for invalid user ferenc from 134.175.28.62 port 40020 ssh2

May 10 05:55:32 roki sshd[14253]: Invalid user pi from 46.31.205.14
May 10 05:55:32 roki sshd[14254]: Invalid user pi from 46.31.205.14
May 10 05:55:32 roki sshd[14253]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.31.205.14
May 10 05:55:32 roki sshd[14254]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.31.205.14
May 10 05:55:34 roki sshd[14253]: Failed password for invalid user pi from 46.31.205.14 port 35728 ssh2
May 10 05:55:34 roki sshd[14254]: Failed password for invalid user pi from 46.31.205.14 port 35730 ssh2
...

May 10 04:35:13 game-panel sshd[3010]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.152.206.103
May 10 04:35:14 game-panel sshd[3010]: Failed password for invalid user dan from 194.152.206.103 port 51049 ssh2
May 10 04:43:15 game-panel sshd[3362]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.152.206.103

sshd jail - ssh hack attempt

May 10 05:49:56 sip sshd[195321]: Invalid user admin from 211.83.111.191 port 33509
May 10 05:49:58 sip sshd[195321]: Failed password for invalid user admin from 211.83.111.191 port 33509 ssh2
May 10 05:55:03 sip sshd[195357]: Invalid user varnish from 211.83.111.191 port 31842
...

May 10 01:12:08 ny01 sshd[14983]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.86.244
May 10 01:12:10 ny01 sshd[14983]: Failed password for invalid user arturo from 49.232.86.244 port 51336 ssh2
May 10 01:14:17 ny01 sshd[15228]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.86.244

May 10 05:55:43 ns3164893 sshd[23357]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.239.73.160
May 10 05:55:46 ns3164893 sshd[23357]: Failed password for invalid user noc from 14.239.73.160 port 64409 ssh2
...

2020-05-10T13:50:16.926463vivaldi2.tree2.info sshd[26739]: Invalid user clark from 91.218.85.69
2020-05-10T13:50:16.940957vivaldi2.tree2.info sshd[26739]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.218.85.69
2020-05-10T13:50:16.926463vivaldi2.tree2.info sshd[26739]: Invalid user clark from 91.218.85.69
2020-05-10T13:50:19.141583vivaldi2.tree2.info sshd[26739]: Failed password for invalid user clark from 91.218.85.69 port 24196 ssh2
2020-05-10T13:54:13.224324vivaldi2.tree2.info sshd[26898]: Invalid user manu from 91.218.85.69
...

$f2bV_matches

05/10/2020-01:01:15.038523 80.82.65.190 Protocol: 6 ET DROP Dshield Block Listed Source group 1

SSH brutforce

(smtpauth) Failed SMTP AUTH login from 93.99.4.22 (CZ/Czechia/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-05-10 08:25:06 plain authenticator failed for ([93.99.4.22]) [93.99.4.22]: 535 Incorrect authentication data (set_id=sale@emad-security.com)