detected by Fail2Ban

2019-08-08T05:47:55.6975281240 sshd\[19647\]: Invalid user pio from 167.71.186.181 port 42604
2019-08-08T05:47:55.7024771240 sshd\[19647\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.186.181
2019-08-08T05:47:57.5991271240 sshd\[19647\]: Failed password for invalid user pio from 167.71.186.181 port 42604 ssh2
...

Aug  8 09:11:34 SilenceServices sshd[28972]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.105.110.79
Aug  8 09:11:37 SilenceServices sshd[28972]: Failed password for invalid user jeronimo from 46.105.110.79 port 42206 ssh2
Aug  8 09:15:47 SilenceServices sshd[32430]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.105.110.79

Aug  8 04:17:34 localhost sshd\[71250\]: Invalid user molisoft from 138.197.166.233 port 47096
Aug  8 04:17:34 localhost sshd\[71250\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.166.233
Aug  8 04:17:36 localhost sshd\[71250\]: Failed password for invalid user molisoft from 138.197.166.233 port 47096 ssh2
Aug  8 04:21:39 localhost sshd\[71276\]: Invalid user elsje from 138.197.166.233 port 41258
Aug  8 04:21:39 localhost sshd\[71276\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.166.233
...

Aug  8 07:07:47 MK-Soft-VM4 sshd\[1852\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.125.167  user=root
Aug  8 07:07:49 MK-Soft-VM4 sshd\[1852\]: Failed password for root from 129.211.125.167 port 35869 ssh2
Aug  8 07:12:29 MK-Soft-VM4 sshd\[4590\]: Invalid user lrioland from 129.211.125.167 port 58435
...

20 attempts against mh-misbehave-ban on pluto.magehost.pro

Aug  7 04:26:21 wildwolf ssh-honeypotd[26164]: Failed password for r.r from 49.74.15.246 port 36700 ssh2 (target: 158.69.100.132:22, password: nosoup4u)
Aug  7 04:26:21 wildwolf ssh-honeypotd[26164]: Failed password for r.r from 49.74.15.246 port 36700 ssh2 (target: 158.69.100.132:22, password: raspberrypi)
Aug  7 04:26:21 wildwolf ssh-honeypotd[26164]: Failed password for r.r from 49.74.15.246 port 36700 ssh2 (target: 158.69.100.132:22, password: 111111)
Aug  7 04:26:22 wildwolf ssh-honeypotd[26164]: Failed password for r.r from 49.74.15.246 port 36700 ssh2 (target: 158.69.100.132:22, password: dreambox)
Aug  7 04:26:22 wildwolf ssh-honeypotd[26164]: Failed password for r.r from 49.74.15.246 port 36700 ssh2 (target: 158.69.100.132:22, password: anko)
Aug  7 04:26:22 wildwolf ssh-honeypotd[26164]: Failed password for r.r from 49.74.15.246 port 36700 ssh2 (target: 158.69.100.132:22, password: password)
Aug  7 04:26:22 wildwolf ssh-honeypotd[26164]: Failed password for r.r........
------------------------------

Automatic report - Banned IP Access

Aug  8 02:35:51 xb3 sshd[12925]: Failed password for invalid user juan from 106.12.77.199 port 57876 ssh2
Aug  8 02:35:51 xb3 sshd[12925]: Received disconnect from 106.12.77.199: 11: Bye Bye [preauth]
Aug  8 02:54:13 xb3 sshd[18753]: Failed password for invalid user philip from 106.12.77.199 port 59268 ssh2
Aug  8 02:54:14 xb3 sshd[18753]: Received disconnect from 106.12.77.199: 11: Bye Bye [preauth]
Aug  8 02:58:51 xb3 sshd[15901]: Failed password for invalid user apples from 106.12.77.199 port 39098 ssh2
Aug  8 02:58:51 xb3 sshd[15901]: Received disconnect from 106.12.77.199: 11: Bye Bye [preauth]
Aug  8 03:02:35 xb3 sshd[12621]: Failed password for invalid user brock from 106.12.77.199 port 47200 ssh2
Aug  8 03:02:35 xb3 sshd[12621]: Received disconnect from 106.12.77.199: 11: Bye Bye [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=106.12.77.199

port scan and connect, tcp 22 (ssh)

Aug  8 04:18:06 smtp postfix/smtpd[13896]: NOQUEUE: reject: RCPT from silvery.keyboardleds.com[45.95.32.142]: 554 5.7.1 Service unavailable; Client host [45.95.32.142] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=
...

Aug  8 05:45:49 yesfletchmain sshd\[31215\]: Invalid user test1234 from 206.189.108.59 port 37076
Aug  8 05:45:49 yesfletchmain sshd\[31215\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.108.59
Aug  8 05:45:51 yesfletchmain sshd\[31215\]: Failed password for invalid user test1234 from 206.189.108.59 port 37076 ssh2
Aug  8 05:51:53 yesfletchmain sshd\[31259\]: Invalid user columbia from 206.189.108.59 port 60446
Aug  8 05:51:53 yesfletchmain sshd\[31259\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.108.59
...

Aug  6 21:32:37 cp1server sshd[31580]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.86.123.242  user=r.r
Aug  6 21:32:39 cp1server sshd[31580]: Failed password for r.r from 218.86.123.242 port 19495 ssh2
Aug  6 21:32:39 cp1server sshd[31581]: Received disconnect from 218.86.123.242: 11: Bye Bye
Aug  6 21:44:06 cp1server sshd[392]: Invalid user hostmaster from 218.86.123.242
Aug  6 21:44:06 cp1server sshd[392]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.86.123.242 
Aug  6 21:44:08 cp1server sshd[392]: Failed password for invalid user hostmaster from 218.86.123.242 port 15194 ssh2
Aug  6 21:44:08 cp1server sshd[393]: Received disconnect from 218.86.123.242: 11: Bye Bye
Aug  6 21:47:52 cp1server sshd[1028]: Invalid user dakota from 218.86.123.242
Aug  6 21:47:52 cp1server sshd[1028]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.86.1........
-------------------------------

$f2bV_matches_ltvn

Aug  8 14:39:10 webhost01 sshd[23819]: Failed password for root from 218.92.0.190 port 32551 ssh2
...