Nov  9 18:58:09 server sshd\[16490\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.86.96  user=root
Nov  9 18:58:11 server sshd\[16490\]: Failed password for root from 80.211.86.96 port 39140 ssh2
Nov  9 19:18:56 server sshd\[21597\]: Invalid user openvpn_as from 80.211.86.96
Nov  9 19:18:56 server sshd\[21597\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.86.96 
Nov  9 19:18:59 server sshd\[21597\]: Failed password for invalid user openvpn_as from 80.211.86.96 port 50682 ssh2
...

(sshd) Failed SSH login from 80.211.86.96 (IT/Italy/Province of Arezzo/Arezzo/host96-86-211-80.serverdedicati.aruba.it/[AS31034 Aruba S.p.A.]): 1 in the last 3600 secs

Oct 30 19:26:21 web9 sshd\[25853\]: Invalid user aobcd8663 from 80.211.86.96
Oct 30 19:26:21 web9 sshd\[25853\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.86.96
Oct 30 19:26:24 web9 sshd\[25853\]: Failed password for invalid user aobcd8663 from 80.211.86.96 port 50484 ssh2
Oct 30 19:30:35 web9 sshd\[26545\]: Invalid user 01zzzzxx from 80.211.86.96
Oct 30 19:30:35 web9 sshd\[26545\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.86.96

Invalid user vnc from 80.211.86.96 port 52936

Invalid user downloader from 80.211.86.96 port 42072

Invalid user downloader from 80.211.86.96 port 42072

Oct 22 22:05:20 MK-Soft-Root2 sshd[5783]: Failed password for root from 80.211.86.96 port 43460 ssh2
...

$f2bV_matches

Oct  9 16:37:48 localhost sshd\[11704\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.86.96  user=root
Oct  9 16:37:50 localhost sshd\[11704\]: Failed password for root from 80.211.86.96 port 41298 ssh2
Oct  9 16:53:14 localhost sshd\[11987\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.86.96  user=root
...

Oct  9 12:40:58 vps647732 sshd[2817]: Failed password for root from 80.211.86.96 port 56602 ssh2
...

Lines containing failures of 80.211.86.96
Oct  5 19:07:03 nextcloud sshd[25540]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.86.96  user=r.r
Oct  5 19:07:05 nextcloud sshd[25540]: Failed password for r.r from 80.211.86.96 port 51026 ssh2
Oct  5 19:07:05 nextcloud sshd[25540]: Received disconnect from 80.211.86.96 port 51026:11: Bye Bye [preauth]
Oct  5 19:07:05 nextcloud sshd[25540]: Disconnected from authenticating user r.r 80.211.86.96 port 51026 [preauth]
Oct  5 19:14:09 nextcloud sshd[27834]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.86.96  user=r.r
Oct  5 19:14:11 nextcloud sshd[27834]: Failed password for r.r from 80.211.86.96 port 36472 ssh2
Oct  5 19:14:11 nextcloud sshd[27834]: Received disconnect from 80.211.86.96 port 36472:11: Bye Bye [preauth]
Oct  5 19:14:11 nextcloud sshd[27834]: Disconnected from authenticating user r.r 80.211.86.96 port 36472 [preauth]........
------------------------------

MALWARE-CNC User-Agent known malicious user-agent string ZmEu - vulnerability scanner

Unauthorized connection attempt detected from IP address 80.211.86.245 to port 2220 [J]

Jan  4 08:59:48 mail sshd\[10162\]: Invalid user test4 from 80.211.86.245
Jan  4 08:59:48 mail sshd\[10162\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.86.245
Jan  4 08:59:50 mail sshd\[10162\]: Failed password for invalid user test4 from 80.211.86.245 port 55574 ssh2
...

2020-01-02T14:29:23.585723xentho-1 sshd[387530]: Invalid user ts from 80.211.86.245 port 43658
2020-01-02T14:29:23.594396xentho-1 sshd[387530]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.86.245
2020-01-02T14:29:23.585723xentho-1 sshd[387530]: Invalid user ts from 80.211.86.245 port 43658
2020-01-02T14:29:25.946682xentho-1 sshd[387530]: Failed password for invalid user ts from 80.211.86.245 port 43658 ssh2
2020-01-02T14:31:14.890051xentho-1 sshd[387547]: Invalid user oracle from 80.211.86.245 port 32838
2020-01-02T14:31:14.896538xentho-1 sshd[387547]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.86.245
2020-01-02T14:31:14.890051xentho-1 sshd[387547]: Invalid user oracle from 80.211.86.245 port 32838
2020-01-02T14:31:16.485671xentho-1 sshd[387547]: Failed password for invalid user oracle from 80.211.86.245 port 32838 ssh2
2020-01-02T14:33:11.274783xentho-1 sshd[387571]: Invalid user user
...

Invalid user server from 80.211.86.245 port 43338

Fail2Ban - SSH Bruteforce Attempt

Dec 14 19:06:32 hosting sshd[27143]: Invalid user minority from 80.211.86.245 port 33544
...

Dec 13 20:27:08 sso sshd[12175]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.86.245
Dec 13 20:27:10 sso sshd[12175]: Failed password for invalid user tarrant from 80.211.86.245 port 47184 ssh2
...

Dec  4 05:06:47 auw2 sshd\[18949\]: Invalid user ib@123 from 80.211.86.245
Dec  4 05:06:47 auw2 sshd\[18949\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.86.245
Dec  4 05:06:49 auw2 sshd\[18949\]: Failed password for invalid user ib@123 from 80.211.86.245 port 56726 ssh2
Dec  4 05:12:35 auw2 sshd\[19636\]: Invalid user 12345 from 80.211.86.245
Dec  4 05:12:35 auw2 sshd\[19636\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.86.245

F2B jail: sshd. Time: 2019-12-03 16:54:01, Reported by: VKReport

Nov 29 07:28:16 MK-Soft-VM3 sshd[19551]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.86.245 
Nov 29 07:28:18 MK-Soft-VM3 sshd[19551]: Failed password for invalid user stolp from 80.211.86.245 port 60066 ssh2
...

Nov 25 01:04:23 SilenceServices sshd[2552]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.86.245
Nov 25 01:04:24 SilenceServices sshd[2552]: Failed password for invalid user test from 80.211.86.245 port 53154 ssh2
Nov 25 01:10:30 SilenceServices sshd[4378]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.86.245

SSH brutforce

Nov 11 06:21:32 ws19vmsma01 sshd[57550]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.86.245
Nov 11 06:21:34 ws19vmsma01 sshd[57550]: Failed password for invalid user shiro from 80.211.86.245 port 36352 ssh2
...

Nov  7 10:59:21 vps01 sshd[21378]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.86.245
Nov  7 10:59:23 vps01 sshd[21378]: Failed password for invalid user jwanza123 from 80.211.86.245 port 40024 ssh2

Apr  6 07:54:22 raspberrypi sshd\[20478\]: Failed password for root from 36.89.251.105 port 39736 ssh2Apr  6 09:05:52 raspberrypi sshd\[7799\]: Failed password for root from 36.89.251.105 port 40368 ssh2Apr  6 09:10:12 raspberrypi sshd\[10736\]: Failed password for root from 36.89.251.105 port 60498 ssh2
...

Lines containing failures of 185.95.204.42
Apr  6 00:19:41 shared11 sshd[3360]: Invalid user admin1 from 185.95.204.42 port 48262
Apr  6 00:19:42 shared11 sshd[3360]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.95.204.42
Apr  6 00:19:43 shared11 sshd[3360]: Failed password for invalid user admin1 from 185.95.204.42 port 48262 ssh2
Apr  6 00:19:44 shared11 sshd[3360]: Connection closed by invalid user admin1 185.95.204.42 port 48262 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=185.95.204.42

ssh intrusion attempt

Apr  6 12:20:28 sip sshd[21383]: Failed password for root from 211.20.181.186 port 1344 ssh2
Apr  6 12:27:18 sip sshd[23905]: Failed password for root from 211.20.181.186 port 56682 ssh2

Apr  6 14:20:02 Ubuntu-1404-trusty-64-minimal sshd\[22995\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.148  user=root
Apr  6 14:20:03 Ubuntu-1404-trusty-64-minimal sshd\[22995\]: Failed password for root from 218.92.0.148 port 34560 ssh2
Apr  6 14:20:07 Ubuntu-1404-trusty-64-minimal sshd\[22995\]: Failed password for root from 218.92.0.148 port 34560 ssh2
Apr  6 14:20:17 Ubuntu-1404-trusty-64-minimal sshd\[22995\]: Failed password for root from 218.92.0.148 port 34560 ssh2
Apr  6 14:20:34 Ubuntu-1404-trusty-64-minimal sshd\[30729\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.148  user=root

Apr  6 11:45:00 ms-srv sshd[53148]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.113.111  user=root
Apr  6 11:45:02 ms-srv sshd[53148]: Failed password for invalid user root from 106.12.113.111 port 60996 ssh2

Automatic report - XMLRPC Attack

Apr  5 21:46:08 mockhub sshd[4797]: Failed password for root from 51.77.210.216 port 55050 ssh2
...

2020-04-06T12:44:27.152582librenms sshd[5671]: Failed password for root from 164.132.225.229 port 44200 ssh2
2020-04-06T12:48:46.071014librenms sshd[6284]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=229.ip-164-132-225.eu  user=root
2020-04-06T12:48:48.578653librenms sshd[6284]: Failed password for root from 164.132.225.229 port 33016 ssh2
...

Apr  6 13:36:15 ns382633 sshd\[29269\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.199.67  user=root
Apr  6 13:36:17 ns382633 sshd\[29269\]: Failed password for root from 111.229.199.67 port 43314 ssh2
Apr  6 13:54:52 ns382633 sshd\[573\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.199.67  user=root
Apr  6 13:54:53 ns382633 sshd\[573\]: Failed password for root from 111.229.199.67 port 44962 ssh2
Apr  6 13:59:36 ns382633 sshd\[1694\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.199.67  user=root

Apr  6 02:37:59 web9 sshd\[22650\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.66.244.246  user=root
Apr  6 02:38:01 web9 sshd\[22650\]: Failed password for root from 146.66.244.246 port 52328 ssh2
Apr  6 02:42:05 web9 sshd\[23178\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.66.244.246  user=root
Apr  6 02:42:06 web9 sshd\[23178\]: Failed password for root from 146.66.244.246 port 35236 ssh2
Apr  6 02:46:00 web9 sshd\[23970\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.66.244.246  user=root

Apr  6 14:43:05 eventyay sshd[13908]: Failed password for root from 222.186.175.23 port 35080 ssh2
Apr  6 14:43:07 eventyay sshd[13908]: Failed password for root from 222.186.175.23 port 35080 ssh2
Apr  6 14:43:09 eventyay sshd[13908]: Failed password for root from 222.186.175.23 port 35080 ssh2
...

SSH invalid-user multiple login try

$f2bV_matches

Tried to enter my Yahoo mail. Here is info from Yahoo:

This sign in attempt was made on: 

Device 
chrome, windows nt 

When 
April 5, 2020 11:27:33 AM PDT

Where*
Vietnam