Apr 21 12:08:43 vtv3 sshd[4811]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.163.99.10
Apr 26 23:35:14 vtv3 sshd[20104]: Invalid user ibmadrc from 164.163.99.10 port 50790
Apr 26 23:35:14 vtv3 sshd[20104]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.163.99.10
Apr 26 23:35:16 vtv3 sshd[20104]: Failed password for invalid user ibmadrc from 164.163.99.10 port 50790 ssh2
Apr 26 23:41:35 vtv3 sshd[23521]: Invalid user train from 164.163.99.10 port 47676
Apr 26 23:41:35 vtv3 sshd[23521]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.163.99.10
Apr 26 23:53:05 vtv3 sshd[29457]: Invalid user prosync from 164.163.99.10 port 41634
Apr 26 23:53:05 vtv3 sshd[29457]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.163.99.10
Apr 26 23:53:07 vtv3 sshd[29457]: Failed password for invalid user prosync from 164.163.99.10 port 41634 ssh2
Apr 26 2

Dec  8 08:05:37 jane sshd[10296]: Failed password for root from 218.92.0.182 port 46915 ssh2
Dec  8 08:05:42 jane sshd[10296]: Failed password for root from 218.92.0.182 port 46915 ssh2
...

Dec  8 08:42:50 localhost sshd\[22971\]: Invalid user web from 62.28.34.125
Dec  8 08:42:50 localhost sshd\[22971\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.28.34.125
Dec  8 08:42:52 localhost sshd\[22971\]: Failed password for invalid user web from 62.28.34.125 port 40481 ssh2
Dec  8 08:50:07 localhost sshd\[23451\]: Invalid user lehre from 62.28.34.125
Dec  8 08:50:07 localhost sshd\[23451\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.28.34.125
...

Dec  8 08:24:51 markkoudstaal sshd[21687]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.192.231.218
Dec  8 08:24:53 markkoudstaal sshd[21687]: Failed password for invalid user goeling from 203.192.231.218 port 4785 ssh2
Dec  8 08:31:53 markkoudstaal sshd[22499]: Failed password for backup from 203.192.231.218 port 6438 ssh2

Dec  8 12:34:53 gw1 sshd[16802]: Failed password for root from 106.12.107.17 port 45072 ssh2
...

Dec  8 08:51:47 localhost sshd\[15103\]: Invalid user teraji from 192.144.204.101 port 34858
Dec  8 08:51:47 localhost sshd\[15103\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.144.204.101
Dec  8 08:51:49 localhost sshd\[15103\]: Failed password for invalid user teraji from 192.144.204.101 port 34858 ssh2

SSH invalid-user multiple login attempts

\[2019-12-08 02:19:47\] NOTICE\[2754\] chan_sip.c: Registration from '"130" \' failed for '185.53.88.95:5333' - Wrong password
\[2019-12-08 02:19:47\] SECURITY\[2765\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-12-08T02:19:47.932-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="130",SessionID="0x7f26c6230548",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.95/5333",Challenge="1d32fc78",ReceivedChallenge="1d32fc78",ReceivedHash="c69df3737abe1da95679f1afde8c3d99"
\[2019-12-08 02:19:48\] NOTICE\[2754\] chan_sip.c: Registration from '"130" \' failed for '185.53.88.95:5333' - Wrong password
\[2019-12-08 02:19:48\] SECURITY\[2765\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-12-08T02:19:48.074-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="130",SessionID="0x7f26c40cecf8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.

Dec  7 21:26:55 kapalua sshd\[28041\]: Invalid user yanaro from 157.230.31.236
Dec  7 21:26:55 kapalua sshd\[28041\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.31.236
Dec  7 21:26:57 kapalua sshd\[28041\]: Failed password for invalid user yanaro from 157.230.31.236 port 43796 ssh2
Dec  7 21:32:10 kapalua sshd\[28528\]: Invalid user rooty from 157.230.31.236
Dec  7 21:32:10 kapalua sshd\[28528\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.31.236

Dec  8 10:53:01 server sshd\[5755\]: Invalid user hibler from 190.145.25.166
Dec  8 10:53:01 server sshd\[5755\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.145.25.166 
Dec  8 10:53:03 server sshd\[5755\]: Failed password for invalid user hibler from 190.145.25.166 port 47790 ssh2
Dec  8 10:59:50 server sshd\[7419\]: Invalid user mc from 190.145.25.166
Dec  8 10:59:50 server sshd\[7419\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.145.25.166 
...

2019-12-08 07:29:38,402 fail2ban.actions: WARNING [ssh] Ban 52.142.216.102

2019-12-08T06:29:22.192166abusebot-8.cloudsearch.cf sshd\[594\]: Invalid user test from 152.32.187.177 port 49246

Dec  8 02:23:10 TORMINT sshd\[21462\]: Invalid user guest from 178.217.173.54
Dec  8 02:23:10 TORMINT sshd\[21462\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.217.173.54
Dec  8 02:23:12 TORMINT sshd\[21462\]: Failed password for invalid user guest from 178.217.173.54 port 41044 ssh2
...

Triggered by Fail2Ban at Vostok web server

<6 unauthorized SSH connections