Oct  3 18:58:14 tdfoods sshd\[11446\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114-32-218-5.hinet-ip.hinet.net  user=root
Oct  3 18:58:16 tdfoods sshd\[11446\]: Failed password for root from 114.32.218.5 port 34502 ssh2
Oct  3 19:02:54 tdfoods sshd\[11820\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114-32-218-5.hinet-ip.hinet.net  user=root
Oct  3 19:02:56 tdfoods sshd\[11820\]: Failed password for root from 114.32.218.5 port 47356 ssh2
Oct  3 19:07:38 tdfoods sshd\[12227\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114-32-218-5.hinet-ip.hinet.net  user=root

Oct  4 04:50:26 game-panel sshd[1243]: Failed password for root from 8.208.22.5 port 56328 ssh2
Oct  4 04:54:29 game-panel sshd[1381]: Failed password for root from 8.208.22.5 port 40944 ssh2

$f2bV_matches

2019-10-04T07:31:02.152657tmaserv sshd\[18775\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=136.34.218.11  user=root
2019-10-04T07:31:04.131996tmaserv sshd\[18775\]: Failed password for root from 136.34.218.11 port 39921 ssh2
2019-10-04T07:35:18.750420tmaserv sshd\[18976\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=136.34.218.11  user=root
2019-10-04T07:35:20.538973tmaserv sshd\[18976\]: Failed password for root from 136.34.218.11 port 61286 ssh2
2019-10-04T07:39:31.748808tmaserv sshd\[19205\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=136.34.218.11  user=root
2019-10-04T07:39:33.939363tmaserv sshd\[19205\]: Failed password for root from 136.34.218.11 port 33739 ssh2
...

2019-10-02T03:05:43.053898 server010.mediaedv.de sshd[19353]: Invalid user admin from 213.80.113.81
2019-10-02T03:05:43.057377 server010.mediaedv.de sshd[19353]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.80.113.81
2019-10-02T03:05:45.089382 server010.mediaedv.de sshd[19353]: Failed password for invalid user admin from 213.80.113.81 port 56404 ssh2
2019-10-02T03:05:48.232037 server010.mediaedv.de sshd[19385]: Invalid user ubuntu from 213.80.113.81
2019-10-02T03:05:48.235434 server010.mediaedv.de sshd[19385]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.80.113.81

........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=213.80.113.81

Oct  4 06:49:40 intra sshd\[24674\]: Invalid user Caramel@123 from 82.223.24.191Oct  4 06:49:42 intra sshd\[24674\]: Failed password for invalid user Caramel@123 from 82.223.24.191 port 56016 ssh2Oct  4 06:54:06 intra sshd\[24779\]: Invalid user Australia@2017 from 82.223.24.191Oct  4 06:54:08 intra sshd\[24779\]: Failed password for invalid user Australia@2017 from 82.223.24.191 port 41126 ssh2Oct  4 06:58:38 intra sshd\[24834\]: Invalid user 123Pharmacy from 82.223.24.191Oct  4 06:58:39 intra sshd\[24834\]: Failed password for invalid user 123Pharmacy from 82.223.24.191 port 54464 ssh2
...

Oct  4 07:04:33 vps691689 sshd[15655]: Failed password for root from 51.38.128.94 port 39784 ssh2
Oct  4 07:09:02 vps691689 sshd[15735]: Failed password for root from 51.38.128.94 port 53242 ssh2
...

10/03/2019-23:58:10.054429 39.135.1.160 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433

2019-10-04 07:18:44 H=\(\[193.32.160.143\]\) \[193.32.160.143\] F=\ rejected RCPT \: Unrouteable address
2019-10-04 07:18:44 H=\(\[193.32.160.143\]\) \[193.32.160.143\] F=\ rejected RCPT \: Unrouteable address
2019-10-04 07:18:44 H=\(\[193.32.160.143\]\) \[193.32.160.143\] F=\ rejected RCPT \: Unrouteable address
2019-10-04 07:18:44 H=\(\[193.32.160.143\]\) \[193.32.160.143\] F=\ rejected RCPT \: Unrouteable address
2019-10-04 07:18:44 H=\(\[193.32.160.143\]\) \[193.32.160.143\] F=\ rejected RCPT \: Unrouteable address
2019-10-04 07:18:44 H=\(\[193.32.160.143\]\) \[193.32.160.143\] F=\ rejected RCPT \: Unrouteable address
2019-10-04 07:18:44 H=\(\[193.32.160.143\]\) \[193.32.160.143\] F=\

Oct  4 05:53:43 icinga sshd[7261]: Failed password for root from 154.8.164.214 port 54643 ssh2
...

Invalid user paul from 67.184.64.224 port 40922

2019-10-04T04:32:11.949729abusebot-6.cloudsearch.cf sshd\[8156\]: Invalid user Fantasy@2017 from 110.50.106.255 port 4673

" "

2019-10-04T04:32:24.011250shield sshd\[20841\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.168.248.218  user=root
2019-10-04T04:32:25.775794shield sshd\[20841\]: Failed password for root from 121.168.248.218 port 45670 ssh2
2019-10-04T04:37:11.787815shield sshd\[21970\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.168.248.218  user=root
2019-10-04T04:37:13.090615shield sshd\[21970\]: Failed password for root from 121.168.248.218 port 58802 ssh2
2019-10-04T04:42:03.498852shield sshd\[23221\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.168.248.218  user=root

Oct  4 06:16:35 reporting2 sshd[24778]: User r.r from 203.177.70.171 not allowed because not listed in AllowUsers
Oct  4 06:16:35 reporting2 sshd[24778]: Failed password for invalid user r.r from 203.177.70.171 port 57174 ssh2
Oct  4 06:28:25 reporting2 sshd[26004]: User r.r from 203.177.70.171 not allowed because not listed in AllowUsers
Oct  4 06:28:25 reporting2 sshd[26004]: Failed password for invalid user r.r from 203.177.70.171 port 56310 ssh2
Oct  4 06:32:44 reporting2 sshd[26447]: User r.r from 203.177.70.171 not allowed because not listed in AllowUsers
Oct  4 06:32:44 reporting2 sshd[26447]: Failed password for invalid user r.r from 203.177.70.171 port 40698 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=203.177.70.171