May 25 13:27:08 dev0-dcde-rnet sshd[14062]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.115.221
May 25 13:27:10 dev0-dcde-rnet sshd[14062]: Failed password for invalid user corneo from 49.235.115.221 port 33984 ssh2
May 25 13:31:16 dev0-dcde-rnet sshd[14088]: Failed password for root from 49.235.115.221 port 48342 ssh2

May 17 00:40:40 santamaria sshd\[32623\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.115.221  user=root
May 17 00:40:42 santamaria sshd\[32623\]: Failed password for root from 49.235.115.221 port 58264 ssh2
May 17 00:46:21 santamaria sshd\[32734\]: Invalid user test from 49.235.115.221
May 17 00:46:21 santamaria sshd\[32734\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.115.221
...

20 attempts against mh-ssh on install-test

2020-05-01T22:23:55.120662shield sshd\[12453\]: Invalid user walter from 49.235.115.221 port 38350
2020-05-01T22:23:55.125062shield sshd\[12453\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.115.221
2020-05-01T22:23:57.588298shield sshd\[12453\]: Failed password for invalid user walter from 49.235.115.221 port 38350 ssh2
2020-05-01T22:25:59.391137shield sshd\[12680\]: Invalid user olivia from 49.235.115.221 port 59252
2020-05-01T22:25:59.394882shield sshd\[12680\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.115.221

odoo8
...

Apr  7 20:53:55 h2829583 sshd[13845]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.115.221

Apr  5 00:51:11  sshd\[5465\]: User root from 49.235.115.221 not allowed because not listed in AllowUsersApr  5 00:51:14  sshd\[5465\]: Failed password for invalid user root from 49.235.115.221 port 54232 ssh2
...

$f2bV_matches

Apr  2 07:01:36 server sshd[15470]: Failed password for root from 49.235.115.221 port 44268 ssh2
Apr  2 07:07:35 server sshd[17101]: Failed password for root from 49.235.115.221 port 46054 ssh2
Apr  2 07:13:35 server sshd[18671]: Failed password for root from 49.235.115.221 port 47846 ssh2

Mar 19 20:54:08 minden010 sshd[23297]: Failed password for root from 49.235.115.221 port 41552 ssh2
Mar 19 20:58:14 minden010 sshd[25380]: Failed password for root from 49.235.115.221 port 53734 ssh2
Mar 19 21:02:38 minden010 sshd[26845]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.115.221
...

SSH invalid-user multiple login attempts

Feb 19 16:22:17 srv-ubuntu-dev3 sshd[70684]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.115.221  user=lp
Feb 19 16:22:19 srv-ubuntu-dev3 sshd[70684]: Failed password for lp from 49.235.115.221 port 41234 ssh2
Feb 19 16:26:46 srv-ubuntu-dev3 sshd[70987]: Invalid user avatar from 49.235.115.221
Feb 19 16:26:46 srv-ubuntu-dev3 sshd[70987]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.115.221
Feb 19 16:26:46 srv-ubuntu-dev3 sshd[70987]: Invalid user avatar from 49.235.115.221
Feb 19 16:26:48 srv-ubuntu-dev3 sshd[70987]: Failed password for invalid user avatar from 49.235.115.221 port 38130 ssh2
Feb 19 16:31:26 srv-ubuntu-dev3 sshd[71329]: Invalid user zq from 49.235.115.221
Feb 19 16:31:26 srv-ubuntu-dev3 sshd[71329]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.115.221
Feb 19 16:31:26 srv-ubuntu-dev3 sshd[71329]: Invalid user zq from 49.23
...

2020-02-04T22:24:42.5906331495-001 sshd[55041]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.115.221  user=r.r
2020-02-04T22:24:44.5371541495-001 sshd[55041]: Failed password for r.r from 49.235.115.221 port 37902 ssh2
2020-02-04T22:35:19.4277381495-001 sshd[55673]: Invalid user lammeyqtrhoeclipses from 49.235.115.221 port 32994
2020-02-04T22:35:19.4360861495-001 sshd[55673]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.115.221
2020-02-04T22:35:19.4277381495-001 sshd[55673]: Invalid user lammeyqtrhoeclipses from 49.235.115.221 port 32994
2020-02-04T22:35:21.1634151495-001 sshd[55673]: Failed password for invalid user lammeyqtrhoeclipses from 49.235.115.221 port 32994 ssh2
2020-02-04T22:37:54.2432551495-001 sshd[55863]: Invalid user uranus from 49.235.115.221 port 48618
2020-02-04T22:37:54.2508051495-001 sshd[55863]: pam_unix(sshd:auth): authentication failure; logname= uid........
------------------------------

2020-10-10T03:14:33.951567hostname sshd[116561]: Failed password for root from 49.235.115.192 port 51644 ssh2
...

3x Failed Password

Oct  7 18:14:32 s2 sshd[323]: Failed password for root from 49.235.115.192 port 45740 ssh2
Oct  7 18:18:02 s2 sshd[536]: Failed password for root from 49.235.115.192 port 56446 ssh2

Oct  7 08:01:00 s2 sshd[30232]: Failed password for root from 49.235.115.192 port 49544 ssh2
Oct  7 08:06:06 s2 sshd[30481]: Failed password for root from 49.235.115.192 port 48004 ssh2

Pattern match "\\b(\\d+) ?(?:=|<>|<=>|<|>|!=) ?\\1\\b|[\'"\\`\\\xc2\xb4\\\xe2\x80\x99\\\xe2\x80\x98](\\d+)[\'"\\`\\\xc2\xb4\\\xe2\x80\x99\\\xe2\x80\x98] ?(?:=|<>|<=>|<|>|!=) ?[\'"\\`\\\xc2\xb4\\\xe2\x80\x99\\\xe2\x80\x98]\\2\\b|[\'"\\`\\\xc2\xb4\\\xe2\x80\x98](\\w+)[\'"\\`\\\xc2\xb4\\\xe2\x80\x99\\\xe2\x80\x98] ?(?:=|<>|<=>|<|>|!=) ?[\'"\\`\\\xc2\xb4\\\xe2\x80\x99\\\xe2\x80\x98]\\3\\b|([\'"\\;\\`\\\xc2\xb4\\\xe2\x80\x99\\\xe2\x80\x98]*)?\\s+(and|or)\\s+([\\s\'"\\` ..."

Jul 28 11:25:45 ns382633 sshd\[28794\]: Invalid user wcf from 49.235.115.4 port 45606
Jul 28 11:25:45 ns382633 sshd\[28794\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.115.4
Jul 28 11:25:47 ns382633 sshd\[28794\]: Failed password for invalid user wcf from 49.235.115.4 port 45606 ssh2
Jul 28 11:33:34 ns382633 sshd\[30099\]: Invalid user mchen from 49.235.115.4 port 36882
Jul 28 11:33:34 ns382633 sshd\[30099\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.115.4

2020-07-20T08:57:11.285760sd-86998 sshd[37323]: Invalid user erwin from 49.235.115.4 port 43314
2020-07-20T08:57:11.288024sd-86998 sshd[37323]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.115.4
2020-07-20T08:57:11.285760sd-86998 sshd[37323]: Invalid user erwin from 49.235.115.4 port 43314
2020-07-20T08:57:13.172004sd-86998 sshd[37323]: Failed password for invalid user erwin from 49.235.115.4 port 43314 ssh2
2020-07-20T09:00:46.724276sd-86998 sshd[37889]: Invalid user f from 49.235.115.4 port 53848
...

(smtpauth) Failed SMTP AUTH login from 193.239.147.179 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-09-28 14:32:10 plain authenticator failed for (qghthdwqcc) [193.239.147.179]: 535 Incorrect authentication data (set_id=support@breadnarin.com)

Sep 28 02:34:59 *hidden* sshd[19068]: Invalid user teamspeak from 132.232.230.220 port 41075 Sep 28 02:34:59 *hidden* sshd[19068]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.230.220 Sep 28 02:35:01 *hidden* sshd[19068]: Failed password for invalid user teamspeak from 132.232.230.220 port 41075 ssh2

Sep 27 22:38:38 mavik sshd[18371]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.114.183.18
Sep 27 22:38:40 mavik sshd[18371]: Failed password for invalid user sispac from 122.114.183.18 port 48200 ssh2
Sep 27 22:42:19 mavik sshd[18575]: Invalid user administrador from 122.114.183.18
Sep 27 22:42:19 mavik sshd[18575]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.114.183.18
Sep 27 22:42:22 mavik sshd[18575]: Failed password for invalid user administrador from 122.114.183.18 port 38294 ssh2
...

Sep 28 10:49:59 MainVPS sshd[29362]: Invalid user bbs from 157.230.109.166 port 44150
Sep 28 10:49:59 MainVPS sshd[29362]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.109.166
Sep 28 10:49:59 MainVPS sshd[29362]: Invalid user bbs from 157.230.109.166 port 44150
Sep 28 10:50:01 MainVPS sshd[29362]: Failed password for invalid user bbs from 157.230.109.166 port 44150 ssh2
Sep 28 10:54:04 MainVPS sshd[8274]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.109.166  user=root
Sep 28 10:54:06 MainVPS sshd[8274]: Failed password for root from 157.230.109.166 port 39808 ssh2
...

Invalid user pippo from 59.127.152.203 port 46174

2020-09-28T15:54:03.206585hostname sshd[7648]: Failed password for invalid user peter from 101.227.82.60 port 46974 ssh2
2020-09-28T16:00:42.856665hostname sshd[10159]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.227.82.60  user=root
2020-09-28T16:00:44.877601hostname sshd[10159]: Failed password for root from 101.227.82.60 port 56260 ssh2
...

Sep 28 10:28:01 game-panel sshd[20581]: Failed password for root from 167.71.230.253 port 36654 ssh2
Sep 28 10:36:57 game-panel sshd[20939]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.230.253
Sep 28 10:36:59 game-panel sshd[20939]: Failed password for invalid user gpadmin from 167.71.230.253 port 46022 ssh2

$f2bV_matches

Time:     Mon Sep 28 08:54:21 2020 +0000
IP:       115.159.106.132 (CN/China/-)
Failures: 5 (sshd)
Interval: 3600 seconds
Blocked:  Permanent Block [LF_SSHD]

Log entries:

Sep 28 08:25:38 1 sshd[4455]: Invalid user userftp from 115.159.106.132 port 33680
Sep 28 08:25:39 1 sshd[4455]: Failed password for invalid user userftp from 115.159.106.132 port 33680 ssh2
Sep 28 08:49:59 1 sshd[5128]: Invalid user jinzhenj from 115.159.106.132 port 47898
Sep 28 08:50:01 1 sshd[5128]: Failed password for invalid user jinzhenj from 115.159.106.132 port 47898 ssh2
Sep 28 08:54:17 1 sshd[5241]: Did not receive identification string from 115.159.106.132 port 48638

Invalid user cod4server from 218.28.133.2 port 45743

Sep 28 06:24:44 vps333114 sshd[9290]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.223.142.211
Sep 28 06:24:46 vps333114 sshd[9290]: Failed password for invalid user solr from 41.223.142.211 port 42536 ssh2
...

Connection to SSH Honeypot - Detected by HoneypotDB

Sep 28 10:42:23 s2 sshd[22166]: Failed password for root from 140.206.72.238 port 46184 ssh2
Sep 28 10:51:24 s2 sshd[22590]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.206.72.238 
Sep 28 10:51:26 s2 sshd[22590]: Failed password for invalid user prueba from 140.206.72.238 port 57284 ssh2

2020-09-28T01:42:48.634800centos sshd[16318]: Failed password for invalid user testftp from 222.180.250.42 port 2048 ssh2
2020-09-28T01:46:54.930110centos sshd[16572]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.180.250.42  user=games
2020-09-28T01:46:56.652369centos sshd[16572]: Failed password for games from 222.180.250.42 port 2049 ssh2
...

2020-09-28T00:23:32.383396morrigan.ad5gb.com sshd[1741667]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.40.243.99  user=root
2020-09-28T00:23:34.274684morrigan.ad5gb.com sshd[1741667]: Failed password for root from 45.40.243.99 port 60790 ssh2