Nov  5 17:37:50 srv2 sshd\[7366\]: Invalid user usuario from 128.106.195.126
Nov  5 17:37:50 srv2 sshd\[7366\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.106.195.126
Nov  5 17:37:51 srv2 sshd\[7366\]: Failed password for invalid user usuario from 128.106.195.126 port 52375 ssh2
...

Connection by 71.6.167.142 on port: 9600 got caught by honeypot at 11/5/2019 9:54:09 PM

Lines containing failures of 23.95.25.76
Nov  5 18:42:35 cdb sshd[8424]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.95.25.76  user=r.r
Nov  5 18:42:38 cdb sshd[8424]: Failed password for r.r from 23.95.25.76 port 60456 ssh2
Nov  5 18:42:38 cdb sshd[8424]: Received disconnect from 23.95.25.76 port 60456:11: Bye Bye [preauth]
Nov  5 18:42:38 cdb sshd[8424]: Disconnected from authenticating user r.r 23.95.25.76 port 60456 [preauth]
Nov  5 19:02:41 cdb sshd[10059]: Invalid user WinD3str0y from 23.95.25.76 port 58434
Nov  5 19:02:41 cdb sshd[10059]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.95.25.76
Nov  5 19:02:43 cdb sshd[10059]: Failed password for invalid user WinD3str0y from 23.95.25.76 port 58434 ssh2
Nov  5 19:02:43 cdb sshd[10059]: Received disconnect from 23.95.25.76 port 58434:11: Bye Bye [preauth]
Nov  5 19:02:43 cdb sshd[10059]: Disconnected from invalid user WinD3str0........
------------------------------

Nov  6 00:30:19 vps01 sshd[25419]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.74.118.139
Nov  6 00:30:21 vps01 sshd[25419]: Failed password for invalid user adkinsson from 61.74.118.139 port 49734 ssh2

Nov  5 22:29:41 ip-172-31-62-245 sshd\[20985\]: Invalid user fnjoroge from 159.89.111.136\
Nov  5 22:29:43 ip-172-31-62-245 sshd\[20985\]: Failed password for invalid user fnjoroge from 159.89.111.136 port 36906 ssh2\
Nov  5 22:33:26 ip-172-31-62-245 sshd\[21001\]: Invalid user denver from 159.89.111.136\
Nov  5 22:33:27 ip-172-31-62-245 sshd\[21001\]: Failed password for invalid user denver from 159.89.111.136 port 46644 ssh2\
Nov  5 22:37:15 ip-172-31-62-245 sshd\[21026\]: Failed password for root from 159.89.111.136 port 56384 ssh2\

Nov  6 01:06:43 site1 sshd\[27022\]: Failed password for root from 96.84.177.225 port 34370 ssh2Nov  6 01:09:46 site1 sshd\[27280\]: Invalid user mainville from 96.84.177.225Nov  6 01:09:48 site1 sshd\[27280\]: Failed password for invalid user mainville from 96.84.177.225 port 38100 ssh2Nov  6 01:12:59 site1 sshd\[27931\]: Invalid user admin from 96.84.177.225Nov  6 01:13:01 site1 sshd\[27931\]: Failed password for invalid user admin from 96.84.177.225 port 41828 ssh2Nov  6 01:16:13 site1 sshd\[28063\]: Failed password for root from 96.84.177.225 port 45540 ssh2
...

2019-11-05 16:37:18 SMTP protocol synchronization error (input sent without waiting for greeting): rejected connection from H=[114.234.216.221]:2216 I=[192.147.25.65]:25 input="QUIT
"
2019-11-05 16:37:30 H=(hxybgu.edu) [114.234.216.221]:2476 I=[192.147.25.65]:25 sender verify fail for : Unrouteable address
2019-11-05 16:37:30 H=(hxybgu.edu) [114.234.216.221]:2476 I=[192.147.25.65]:25 F= rejected RCPT : Sender verify failed
...

Nov  5 13:08:52 auw2 sshd\[15209\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.186.127  user=root
Nov  5 13:08:54 auw2 sshd\[15209\]: Failed password for root from 106.13.186.127 port 49466 ssh2
Nov  5 13:13:33 auw2 sshd\[15691\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.186.127  user=root
Nov  5 13:13:35 auw2 sshd\[15691\]: Failed password for root from 106.13.186.127 port 59026 ssh2
Nov  5 13:18:18 auw2 sshd\[16074\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.186.127  user=root

Nov  6 00:48:00 dedicated sshd[6247]: Invalid user puser from 138.122.202.200 port 37552

Nov  6 00:57:35 dedicated sshd[7874]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.212.207.205  user=root
Nov  6 00:57:37 dedicated sshd[7874]: Failed password for root from 125.212.207.205 port 55886 ssh2

Fail2Ban - FTP Abuse Attempt

Nov  6 00:32:55 sauna sshd[10858]: Failed password for root from 43.240.127.90 port 54668 ssh2
...

Nov  6 00:50:24 relay postfix/smtpd\[27132\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Nov  6 00:51:08 relay postfix/smtpd\[31113\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Nov  6 00:51:34 relay postfix/smtpd\[27132\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Nov  6 00:52:17 relay postfix/smtpd\[22570\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Nov  6 00:52:43 relay postfix/smtpd\[24690\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...

Nov  5 23:35:33 *** sshd[14701]: User root from 106.248.249.26 not allowed because not listed in AllowUsers

2019-11-05T23:44:43.407023shield sshd\[23388\]: Invalid user vipidc from 157.230.156.51 port 50814
2019-11-05T23:44:43.411311shield sshd\[23388\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.156.51
2019-11-05T23:44:45.114387shield sshd\[23388\]: Failed password for invalid user vipidc from 157.230.156.51 port 50814 ssh2
2019-11-05T23:48:33.452681shield sshd\[23928\]: Invalid user vjpass from 157.230.156.51 port 60938
2019-11-05T23:48:33.456855shield sshd\[23928\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.156.51