Brute-force attempt banned

Sep  3 04:00:52 logopedia-1vcpu-1gb-nyc1-01 sshd[55406]: Invalid user admin from 119.237.106.195 port 40936
...

Banned for a week because repeated abuses, for example SSH, but not only

Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "root" at 2020-09-02T16:47:31Z

Invalid user contact from 111.229.104.94 port 39592

Sep  3 16:26:23 h2646465 sshd[11260]: Invalid user zck from 46.101.218.221
Sep  3 16:26:23 h2646465 sshd[11260]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.218.221
Sep  3 16:26:23 h2646465 sshd[11260]: Invalid user zck from 46.101.218.221
Sep  3 16:26:25 h2646465 sshd[11260]: Failed password for invalid user zck from 46.101.218.221 port 55060 ssh2
Sep  3 16:28:22 h2646465 sshd[11322]: Invalid user steph from 46.101.218.221
Sep  3 16:28:22 h2646465 sshd[11322]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.218.221
Sep  3 16:28:22 h2646465 sshd[11322]: Invalid user steph from 46.101.218.221
Sep  3 16:28:24 h2646465 sshd[11322]: Failed password for invalid user steph from 46.101.218.221 port 48204 ssh2
Sep  3 16:29:19 h2646465 sshd[11359]: Invalid user download from 46.101.218.221
...

 TCP (SYN) 187.16.255.102:31513 -> port 22, len 48

Fail2Ban Ban Triggered
HTTP Fake Web Crawler

2020-09-03T16:41:55.452791paragon sshd[62237]: Invalid user hduser from 111.160.216.147 port 48571
2020-09-03T16:41:55.456849paragon sshd[62237]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.160.216.147
2020-09-03T16:41:55.452791paragon sshd[62237]: Invalid user hduser from 111.160.216.147 port 48571
2020-09-03T16:41:56.913523paragon sshd[62237]: Failed password for invalid user hduser from 111.160.216.147 port 48571 ssh2
2020-09-03T16:44:06.287346paragon sshd[62417]: Invalid user fanny from 111.160.216.147 port 52936
...

Sep  2 21:04:08 iago sshd[31878]: Address 113.252.191.213 maps to 213-191-252-113-on-nets.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Sep  2 21:04:08 iago sshd[31878]: Invalid user Adminixxxr from 113.252.191.213
Sep  2 21:04:08 iago sshd[31878]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.252.191.213 
Sep  2 21:04:10 iago sshd[31878]: Failed password for invalid user Adminixxxr from 113.252.191.213 port 60458 ssh2
Sep  2 21:04:10 iago sshd[31879]: Connection closed by 113.252.191.213


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=113.252.191.213

(smtpauth) Failed SMTP AUTH login from 45.142.120.166 (RU/Russia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2020-09-03 10:56:25 dovecot_login authenticator failed for (User) [45.142.120.166]:42946: 535 Incorrect authentication data (set_id=sano@xeoserver.com)
2020-09-03 10:56:35 dovecot_login authenticator failed for (User) [45.142.120.166]:14900: 535 Incorrect authentication data (set_id=sano@xeoserver.com)
2020-09-03 10:56:36 dovecot_login authenticator failed for (User) [45.142.120.166]:30756: 535 Incorrect authentication data (set_id=sano@xeoserver.com)
2020-09-03 10:56:42 dovecot_login authenticator failed for (User) [45.142.120.166]:32978: 535 Incorrect authentication data (set_id=sano@xeoserver.com)
2020-09-03 10:56:42 dovecot_login authenticator failed for (User) [45.142.120.166]:14630: 535 Incorrect authentication data (set_id=sano@xeoserver.com)

 TCP (SYN) 45.227.255.204:51750 -> port 1080, len 60

Sep 3 14:55:32 *hidden* sshd[8327]: Failed password for invalid user beo from 142.93.215.19 port 42622 ssh2 Sep 3 14:58:39 *hidden* sshd[8374]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.215.19 user=www Sep 3 14:58:41 *hidden* sshd[8374]: Failed password for *hidden* from 142.93.215.19 port 49472 ssh2

 TCP (SYN,ACK) 51.79.142.79:50002 -> port 55901, len 44

Honeypot hit.