$f2bV_matches

Dec  5 00:55:14 plusreed sshd[7116]: Invalid user vvvvvvvv from 124.16.139.243
...

Dec  5 06:25:23 legacy sshd[30095]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.22.152.243
Dec  5 06:25:25 legacy sshd[30095]: Failed password for invalid user netman from 193.22.152.243 port 42136 ssh2
Dec  5 06:31:18 legacy sshd[30345]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.22.152.243
...

2019-11-25 02:58:54,668 fail2ban.actions        [774]: NOTICE  [sshd] Ban 218.92.0.131
2019-11-25 17:30:45,113 fail2ban.actions        [774]: NOTICE  [sshd] Ban 218.92.0.131
2019-11-25 22:20:52,463 fail2ban.actions        [774]: NOTICE  [sshd] Ban 218.92.0.131
...

Dec  5 06:24:49 nextcloud sshd\[6367\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.183  user=root
Dec  5 06:24:51 nextcloud sshd\[6367\]: Failed password for root from 222.186.173.183 port 23326 ssh2
Dec  5 06:24:54 nextcloud sshd\[6367\]: Failed password for root from 222.186.173.183 port 23326 ssh2
...

Dec  4 19:52:19 kapalua sshd\[18428\]: Invalid user channing from 78.192.6.4
Dec  4 19:52:19 kapalua sshd\[18428\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.192.6.4
Dec  4 19:52:21 kapalua sshd\[18428\]: Failed password for invalid user channing from 78.192.6.4 port 52618 ssh2
Dec  4 19:57:51 kapalua sshd\[19084\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.192.6.4  user=root
Dec  4 19:57:53 kapalua sshd\[19084\]: Failed password for root from 78.192.6.4 port 35342 ssh2

Dec  4 19:27:30 hpm sshd\[14723\]: Invalid user hung from 132.145.223.207
Dec  4 19:27:30 hpm sshd\[14723\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.223.207
Dec  4 19:27:33 hpm sshd\[14723\]: Failed password for invalid user hung from 132.145.223.207 port 41364 ssh2
Dec  4 19:33:42 hpm sshd\[15259\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.223.207  user=root
Dec  4 19:33:44 hpm sshd\[15259\]: Failed password for root from 132.145.223.207 port 55044 ssh2

Dec  5 00:17:45 linuxvps sshd\[43298\]: Invalid user apple from 159.65.4.86
Dec  5 00:17:45 linuxvps sshd\[43298\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.4.86
Dec  5 00:17:47 linuxvps sshd\[43298\]: Failed password for invalid user apple from 159.65.4.86 port 38000 ssh2
Dec  5 00:24:07 linuxvps sshd\[46908\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.4.86  user=root
Dec  5 00:24:09 linuxvps sshd\[46908\]: Failed password for root from 159.65.4.86 port 46056 ssh2

2019-12-05T05:28:06.246312shield sshd\[19180\]: Invalid user cav from 59.148.173.231 port 35360
2019-12-05T05:28:06.250537shield sshd\[19180\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=059148173231.ctinets.com
2019-12-05T05:28:08.631294shield sshd\[19180\]: Failed password for invalid user cav from 59.148.173.231 port 35360 ssh2
2019-12-05T05:34:01.795505shield sshd\[20594\]: Invalid user webadmin from 59.148.173.231 port 46850
2019-12-05T05:34:01.799766shield sshd\[20594\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=059148173231.ctinets.com

Dec  5 01:49:49 firewall sshd[3986]: Invalid user jayne from 181.116.50.170
Dec  5 01:49:51 firewall sshd[3986]: Failed password for invalid user jayne from 181.116.50.170 port 28030 ssh2
Dec  5 01:57:00 firewall sshd[4152]: Invalid user server from 181.116.50.170
...

Dec  5 06:29:00 ns381471 sshd[16341]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.217.243.216
Dec  5 06:29:03 ns381471 sshd[16341]: Failed password for invalid user hamsa from 144.217.243.216 port 37370 ssh2

Dec  5 06:56:59 sd-53420 sshd\[32753\]: User root from 218.92.0.184 not allowed because none of user's groups are listed in AllowGroups
Dec  5 06:57:00 sd-53420 sshd\[32753\]: Failed none for invalid user root from 218.92.0.184 port 47226 ssh2
Dec  5 06:57:01 sd-53420 sshd\[32753\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.184  user=root
Dec  5 06:57:03 sd-53420 sshd\[32753\]: Failed password for invalid user root from 218.92.0.184 port 47226 ssh2
Dec  5 06:57:06 sd-53420 sshd\[32753\]: Failed password for invalid user root from 218.92.0.184 port 47226 ssh2
...

Dec  5 07:01:03 vmanager6029 sshd\[6629\]: Invalid user 12345 from 80.211.51.116 port 48146
Dec  5 07:01:03 vmanager6029 sshd\[6629\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.51.116
Dec  5 07:01:04 vmanager6029 sshd\[6629\]: Failed password for invalid user 12345 from 80.211.51.116 port 48146 ssh2

Dec  5 05:56:58  exim[13468]: [1\36] 1icjCD-0003VE-Ls H=(dynamic-ip-186841727.cable.net.co) [186.84.172.7] F= rejected after DATA: This message scored 103.5 spam points.

Automatic report - Port Scan Attack