2019-12-08T05:50:46.457873vps751288.ovh.net sshd\[10495\]: Invalid user rizzuti from 221.125.165.59 port 44674
2019-12-08T05:50:46.465675vps751288.ovh.net sshd\[10495\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.125.165.59
2019-12-08T05:50:47.973656vps751288.ovh.net sshd\[10495\]: Failed password for invalid user rizzuti from 221.125.165.59 port 44674 ssh2
2019-12-08T05:56:32.493337vps751288.ovh.net sshd\[10557\]: Invalid user lyall from 221.125.165.59 port 35330
2019-12-08T05:56:32.498266vps751288.ovh.net sshd\[10557\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.125.165.59

Dec  8 00:56:20 ny01 sshd[14646]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.138.172
Dec  8 00:56:22 ny01 sshd[14646]: Failed password for invalid user pehong from 54.37.138.172 port 38006 ssh2
Dec  8 01:01:54 ny01 sshd[15378]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.138.172

Dec  8 06:53:39 [host] sshd[6114]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.229.178  user=root
Dec  8 06:53:41 [host] sshd[6114]: Failed password for root from 51.75.229.178 port 46830 ssh2
Dec  8 06:59:08 [host] sshd[6210]: Invalid user guest from 51.75.229.178
Dec  8 06:59:08 [host] sshd[6210]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.229.178

--- report ---
Dec  8 02:30:17 sshd: Connection from 218.92.0.145 port 31702
Dec  8 02:30:18 sshd: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.145  user=root
Dec  8 02:30:20 sshd: Failed password for root from 218.92.0.145 port 31702 ssh2
Dec  8 02:30:21 sshd: Received disconnect from 218.92.0.145: 11:  [preauth]

Dec  7 12:09:00 server sshd\[14439\]: Invalid user cpanel from 223.247.223.39
Dec  7 12:09:00 server sshd\[14439\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.247.223.39 
Dec  7 12:09:02 server sshd\[14439\]: Failed password for invalid user cpanel from 223.247.223.39 port 37690 ssh2
Dec  8 09:20:01 server sshd\[11757\]: Invalid user web from 223.247.223.39
Dec  8 09:20:01 server sshd\[11757\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.247.223.39 
...

Dec  8 05:56:14 grey postfix/smtpd\[15914\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.134\]: 554 5.7.1 Service unavailable\; Client host \[181.41.216.134\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[181.41.216.134\]\; from=\<49z9zn0iz2h2t@sofinova.com.ua\> to=\ proto=ESMTP helo=\<\[181.41.216.131\]\>Dec  8 05:56:14 grey postfix/smtpd\[15914\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.134\]: 554 5.7.1 Service unavailable\; Client host \[181.41.216.134\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[181.41.216.134\]\; from=\<49z9zn0iz2h2t@sofinova.com.ua\> to=\ proto=ESMTP helo=\<\[181.41.216.131\]\>
...

Dec  7 23:55:40 Tower sshd[28105]: Connection from 163.172.223.186 port 41024 on 192.168.10.220 port 22
Dec  7 23:55:40 Tower sshd[28105]: Failed password for root from 163.172.223.186 port 41024 ssh2
Dec  7 23:55:41 Tower sshd[28105]: Received disconnect from 163.172.223.186 port 41024:11: Bye Bye [preauth]
Dec  7 23:55:41 Tower sshd[28105]: Disconnected from authenticating user root 163.172.223.186 port 41024 [preauth]

--- report ---
Dec  8 02:19:49 sshd: Connection from 145.131.32.232 port 51056
Dec  8 02:19:50 sshd: Invalid user ca_scalar from 145.131.32.232
Dec  8 02:19:52 sshd: Failed password for invalid user ca_scalar from 145.131.32.232 port 51056 ssh2
Dec  8 02:19:52 sshd: Received disconnect from 145.131.32.232: 11: Bye Bye [preauth]

Dec  8 07:00:40 lnxmail61 sshd[17916]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.0.155.150

Dec  8 06:50:43 vps691689 sshd[17857]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.138.18.35
Dec  8 06:50:45 vps691689 sshd[17857]: Failed password for invalid user snediker from 123.138.18.35 port 38831 ssh2
Dec  8 06:57:16 vps691689 sshd[18041]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.138.18.35
...

2019-12-08T06:00:48.729247abusebot-5.cloudsearch.cf sshd\[16621\]: Invalid user ez from 202.106.93.46 port 32792

Dec  7 20:07:51 php1 sshd\[29587\]: Invalid user richad from 123.31.29.203
Dec  7 20:07:51 php1 sshd\[29587\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.31.29.203
Dec  7 20:07:54 php1 sshd\[29587\]: Failed password for invalid user richad from 123.31.29.203 port 58094 ssh2
Dec  7 20:14:34 php1 sshd\[30451\]: Invalid user je from 123.31.29.203
Dec  7 20:14:34 php1 sshd\[30451\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.31.29.203

port scan and connect, tcp 23 (telnet)

Too many connections or unauthorized access detected from Arctic banned ip

Dec  8 10:22:25 gw1 sshd[9255]: Failed password for root from 51.79.70.223 port 37680 ssh2
...