May 31 08:43:20 serwer sshd\[23093\]: Invalid user test from 106.12.47.108 port 52722
May 31 08:43:20 serwer sshd\[23093\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.47.108
May 31 08:43:21 serwer sshd\[23093\]: Failed password for invalid user test from 106.12.47.108 port 52722 ssh2
May 31 08:55:36 serwer sshd\[24269\]: Invalid user www from 106.12.47.108 port 54840
May 31 08:55:36 serwer sshd\[24269\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.47.108
May 31 08:55:38 serwer sshd\[24269\]: Failed password for invalid user www from 106.12.47.108 port 54840 ssh2
May 31 08:57:13 serwer sshd\[24372\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.47.108  user=root
May 31 08:57:15 serwer sshd\[24372\]: Failed password for root from 106.12.47.108 port 44118 ssh2
May 31 08:58:45 serwer sshd\[24497\]: pam_unix\(sshd:auth\): authentic
...

20/6/1@08:09:44: FAIL: Alarm-Network address from=180.183.11.116
...

Jun  1 14:44:16 mout sshd[16190]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.43.236  user=root
Jun  1 14:44:18 mout sshd[16190]: Failed password for root from 117.50.43.236 port 60338 ssh2

Jun  1 13:51:39 pornomens sshd\[17077\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.73.210  user=root
Jun  1 13:51:42 pornomens sshd\[17077\]: Failed password for root from 106.13.73.210 port 48568 ssh2
Jun  1 14:09:25 pornomens sshd\[17285\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.73.210  user=root
...

Jun  1 12:00:26 vlre-nyc-1 sshd\[11536\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.137.34.248  user=root
Jun  1 12:00:28 vlre-nyc-1 sshd\[11536\]: Failed password for root from 79.137.34.248 port 42640 ssh2
Jun  1 12:05:53 vlre-nyc-1 sshd\[11764\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.137.34.248  user=root
Jun  1 12:05:55 vlre-nyc-1 sshd\[11764\]: Failed password for root from 79.137.34.248 port 53939 ssh2
Jun  1 12:09:38 vlre-nyc-1 sshd\[11902\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.137.34.248  user=root
...

Fail2Ban Ban Triggered

2020-03-14 09:19:41 H=\(\[101.2.191.44\]\) \[101.2.191.44\]:38140 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
2020-03-14 09:20:17 H=\(\[101.2.191.44\]\) \[101.2.191.44\]:38096 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
2020-03-14 09:20:42 H=\(\[101.2.191.44\]\) \[101.2.191.44\]:38269 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
...

Jun  1 08:21:03 ny01 sshd[12036]: Failed password for root from 159.203.30.50 port 36862 ssh2
Jun  1 08:24:48 ny01 sshd[12492]: Failed password for root from 159.203.30.50 port 40900 ssh2

2020-06-01T12:20:47.839004shield sshd\[30788\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.ip-51-254-137.eu  user=root
2020-06-01T12:20:49.664750shield sshd\[30788\]: Failed password for root from 51.254.137.206 port 44255 ssh2
2020-06-01T12:22:05.126598shield sshd\[31224\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.ip-51-254-137.eu  user=root
2020-06-01T12:22:06.986815shield sshd\[31224\]: Failed password for root from 51.254.137.206 port 56926 ssh2
2020-06-01T12:23:23.551173shield sshd\[31707\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.ip-51-254-137.eu  user=root

Jun  1 05:03:44 mockhub sshd[31578]: Failed password for root from 37.187.105.36 port 39074 ssh2
...

May 30 21:18:11 serwer sshd\[26666\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.89.206  user=root
May 30 21:18:13 serwer sshd\[26666\]: Failed password for root from 106.12.89.206 port 54866 ssh2
May 30 21:27:22 serwer sshd\[27606\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.89.206  user=root
May 30 21:27:25 serwer sshd\[27606\]: Failed password for root from 106.12.89.206 port 42102 ssh2
May 30 21:29:18 serwer sshd\[27782\]: Invalid user sqlbase from 106.12.89.206 port 34954
May 30 21:29:18 serwer sshd\[27782\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.89.206
May 30 21:29:19 serwer sshd\[27782\]: Failed password for invalid user sqlbase from 106.12.89.206 port 34954 ssh2
May 30 21:31:03 serwer sshd\[28017\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.89.206  user=r
...

scans 12 times in preceeding hours on the ports (in chronological order) 4485 4499 4476 4469 4467 4477 4458 4455 4475 4472 4494 4453

Jun  1 13:31:58 combo sshd[6872]: Failed password for root from 112.85.42.181 port 7866 ssh2
Jun  1 13:32:14 combo sshd[6919]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.181  user=root
Jun  1 13:32:16 combo sshd[6919]: Failed password for root from 112.85.42.181 port 35986 ssh2
...

Jun  1 13:58:39 ourumov-web sshd\[14617\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=24.38.95.46  user=root
Jun  1 13:58:41 ourumov-web sshd\[14617\]: Failed password for root from 24.38.95.46 port 22607 ssh2
Jun  1 14:09:18 ourumov-web sshd\[15406\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=24.38.95.46  user=root
...

WordPress XML-RPC attack.