Dec  5 22:03:02 srv206 sshd[6621]: Invalid user admin from 81.82.253.206
Dec  5 22:03:02 srv206 sshd[6621]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=d5152fdce.static.telenet.be
Dec  5 22:03:02 srv206 sshd[6621]: Invalid user admin from 81.82.253.206
Dec  5 22:03:04 srv206 sshd[6621]: Failed password for invalid user admin from 81.82.253.206 port 41650 ssh2
...

Dec  5 12:17:58 sachi sshd\[18499\]: Invalid user anthony from 152.250.252.179
Dec  5 12:17:58 sachi sshd\[18499\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.250.252.179
Dec  5 12:18:00 sachi sshd\[18499\]: Failed password for invalid user anthony from 152.250.252.179 port 49704 ssh2
Dec  5 12:24:38 sachi sshd\[19099\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.250.252.179  user=root
Dec  5 12:24:40 sachi sshd\[19099\]: Failed password for root from 152.250.252.179 port 59818 ssh2

Dec  5 22:45:50 legacy sshd[5435]: Failed password for root from 94.179.129.139 port 39534 ssh2
Dec  5 22:51:57 legacy sshd[5688]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.179.129.139
Dec  5 22:51:59 legacy sshd[5688]: Failed password for invalid user darwei from 94.179.129.139 port 50306 ssh2
...

Port 1433 Scan

Automatic report - Port Scan Attack

2019-12-05T22:21:04.992967abusebot-4.cloudsearch.cf sshd\[18999\]: Invalid user poisson from 201.39.70.186 port 33896

Dec  5 23:06:39 grey postfix/smtpd\[30311\]: NOQUEUE: reject: RCPT from mail1.powermta.tk\[167.71.141.32\]: 554 5.7.1 Service unavailable\; Client host \[167.71.141.32\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[167.71.141.32\]\; from=\ to=\ proto=ESMTP helo=\
...

Dec  5 22:28:35 pi sshd\[3418\]: Failed password for invalid user ftp from 182.18.139.201 port 40378 ssh2
Dec  5 22:34:48 pi sshd\[3691\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.18.139.201  user=root
Dec  5 22:34:50 pi sshd\[3691\]: Failed password for root from 182.18.139.201 port 50666 ssh2
Dec  5 22:40:57 pi sshd\[4082\]: Invalid user bilovus from 182.18.139.201 port 60954
Dec  5 22:40:57 pi sshd\[4082\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.18.139.201
...

$f2bV_matches

Dec  5 23:02:12 cvbnet sshd[26227]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.27.3.163 
Dec  5 23:02:14 cvbnet sshd[26227]: Failed password for invalid user nexus from 118.27.3.163 port 57964 ssh2
...

2019-12-05T21:26:17.326442  sshd[29044]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.158.40.36  user=root
2019-12-05T21:26:19.666822  sshd[29044]: Failed password for root from 202.158.40.36 port 36476 ssh2
2019-12-05T22:03:06.763380  sshd[29891]: Invalid user jritchey from 202.158.40.36 port 39740
2019-12-05T22:03:06.778889  sshd[29891]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.158.40.36
2019-12-05T22:03:06.763380  sshd[29891]: Invalid user jritchey from 202.158.40.36 port 39740
2019-12-05T22:03:09.379753  sshd[29891]: Failed password for invalid user jritchey from 202.158.40.36 port 39740 ssh2
...

Attempts to probe for or exploit a Drupal 7.67 site on url: /wp-login.php. Reported by the module https://www.drupal.org/project/abuseipdb.

Dec  5 22:43:59 icinga sshd[17833]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.185.193.101
Dec  5 22:44:02 icinga sshd[17833]: Failed password for invalid user ftpuser from 91.185.193.101 port 56883 ssh2
...

2019-12-05T22:06:49.396328abusebot-4.cloudsearch.cf sshd\[18867\]: Invalid user ident from 51.68.115.235 port 35711

detected by Fail2Ban