Dec 10 10:27:03 debian-2gb-vpn-nbg1-1 kernel: [341209.050967] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=185.143.223.130 DST=78.46.192.101 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=30951 PROTO=TCP SPT=52156 DPT=12073 WINDOW=1024 RES=0x00 SYN URGP=0

Lines containing failures of 191.242.238.54
Dec 10 07:46:30 hvs sshd[189844]: Invalid user user from 191.242.238.54 port 7623
Dec 10 07:46:30 hvs sshd[189844]: Connection closed by invalid user user 191.242.238.54 port 7623 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=191.242.238.54

Dec 10 12:31:30 areeb-Workstation sshd[15567]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.0.197.237 
Dec 10 12:31:32 areeb-Workstation sshd[15567]: Failed password for invalid user ku from 109.0.197.237 port 47272 ssh2
...

SSH authentication failure x 6 reported by Fail2Ban
...

Dec 10 07:01:10 localhost sshd\[119449\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.93.246.171  user=root
Dec 10 07:01:12 localhost sshd\[119449\]: Failed password for root from 111.93.246.171 port 46570 ssh2
Dec 10 07:07:34 localhost sshd\[119661\]: Invalid user admin from 111.93.246.171 port 58808
Dec 10 07:07:34 localhost sshd\[119661\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.93.246.171
Dec 10 07:07:36 localhost sshd\[119661\]: Failed password for invalid user admin from 111.93.246.171 port 58808 ssh2
...

SSH Bruteforce attempt

Dec 10 06:30:45 flomail dovecot: imap-login: Disconnected (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=146.71.16.96, lip=10.140.194.78, TLS, session=
Dec 10 06:31:04 flomail dovecot: imap-login: Disconnected (auth failed, 1 attempts in 8 secs): user=, method=PLAIN, rip=146.71.16.96, lip=10.140.194.78, TLS: Disconnected, session=

Dec 10 10:05:13 microserver sshd[49416]: Invalid user mark from 202.205.160.240 port 44898
Dec 10 10:05:13 microserver sshd[49416]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.205.160.240
Dec 10 10:05:15 microserver sshd[49416]: Failed password for invalid user mark from 202.205.160.240 port 44898 ssh2
Dec 10 10:05:50 microserver sshd[49623]: Invalid user john from 202.205.160.240 port 45717
Dec 10 10:05:50 microserver sshd[49623]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.205.160.240
Dec 10 10:19:02 microserver sshd[51928]: Invalid user adolf from 202.205.160.240 port 42339
Dec 10 10:19:02 microserver sshd[51928]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.205.160.240
Dec 10 10:19:04 microserver sshd[51928]: Failed password for invalid user adolf from 202.205.160.240 port 42339 ssh2
Dec 10 10:19:26 microserver sshd[51980]: Invalid user william from 202.205.160.240

Dec 10 08:16:23 root sshd[8974]: Failed password for root from 222.186.173.238 port 49484 ssh2
Dec 10 08:16:27 root sshd[8974]: Failed password for root from 222.186.173.238 port 49484 ssh2
Dec 10 08:16:30 root sshd[8974]: Failed password for root from 222.186.173.238 port 49484 ssh2
Dec 10 08:16:34 root sshd[8974]: Failed password for root from 222.186.173.238 port 49484 ssh2
...

Dec 10 08:04:15 h2779839 sshd[512]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.181  user=root
Dec 10 08:04:17 h2779839 sshd[512]: Failed password for root from 222.186.175.181 port 54153 ssh2
Dec 10 08:04:27 h2779839 sshd[512]: Failed password for root from 222.186.175.181 port 54153 ssh2
Dec 10 08:04:15 h2779839 sshd[512]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.181  user=root
Dec 10 08:04:17 h2779839 sshd[512]: Failed password for root from 222.186.175.181 port 54153 ssh2
Dec 10 08:04:27 h2779839 sshd[512]: Failed password for root from 222.186.175.181 port 54153 ssh2
Dec 10 08:04:15 h2779839 sshd[512]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.181  user=root
Dec 10 08:04:17 h2779839 sshd[512]: Failed password for root from 222.186.175.181 port 54153 ssh2
Dec 10 08:04:27 h2779839 sshd[512]: Failed password for r
...

2019-12-10T07:20:21.721629  sshd[30070]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.30.238  user=rpc
2019-12-10T07:20:23.890008  sshd[30070]: Failed password for rpc from 51.75.30.238 port 53442 ssh2
2019-12-10T07:25:37.841965  sshd[30146]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.30.238  user=root
2019-12-10T07:25:39.724276  sshd[30146]: Failed password for root from 51.75.30.238 port 33722 ssh2
2019-12-10T07:30:49.957669  sshd[30293]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.30.238  user=root
2019-12-10T07:30:51.674034  sshd[30293]: Failed password for root from 51.75.30.238 port 42238 ssh2
...

slow and persistent scanner

Dec 10 06:30:06 l02a sshd[4118]: Invalid user blenda from 178.128.7.249
Dec 10 06:30:06 l02a sshd[4118]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.7.249 
Dec 10 06:30:06 l02a sshd[4118]: Invalid user blenda from 178.128.7.249
Dec 10 06:30:08 l02a sshd[4118]: Failed password for invalid user blenda from 178.128.7.249 port 50114 ssh2

Dec 10 09:26:26 sauna sshd[112671]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.254.0.145
Dec 10 09:26:28 sauna sshd[112671]: Failed password for invalid user password321 from 188.254.0.145 port 38684 ssh2
...

2019-12-09T23:31:02.678322-07:00 suse-nuc sshd[24886]: Invalid user sill from 159.65.13.203 port 52403
...