Dec 17 21:02:28 hanapaa sshd\[8481\]: Invalid user robert from 104.248.55.99
Dec 17 21:02:28 hanapaa sshd\[8481\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.55.99
Dec 17 21:02:30 hanapaa sshd\[8481\]: Failed password for invalid user robert from 104.248.55.99 port 52508 ssh2
Dec 17 21:07:19 hanapaa sshd\[8978\]: Invalid user admin from 104.248.55.99
Dec 17 21:07:19 hanapaa sshd\[8978\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.55.99

Host Scan

Dec 18 08:34:20 localhost sshd\[32379\]: Invalid user bobo from 180.168.36.86
Dec 18 08:34:20 localhost sshd\[32379\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.168.36.86
Dec 18 08:34:22 localhost sshd\[32379\]: Failed password for invalid user bobo from 180.168.36.86 port 2618 ssh2
Dec 18 08:40:50 localhost sshd\[509\]: Invalid user web from 180.168.36.86
Dec 18 08:40:50 localhost sshd\[509\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.168.36.86
...

Dec 17 21:26:31 php1 sshd\[22748\]: Invalid user operator from 118.26.168.84
Dec 17 21:26:31 php1 sshd\[22748\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.26.168.84
Dec 17 21:26:32 php1 sshd\[22748\]: Failed password for invalid user operator from 118.26.168.84 port 37778 ssh2
Dec 17 21:32:56 php1 sshd\[23348\]: Invalid user webmaster from 118.26.168.84
Dec 17 21:32:56 php1 sshd\[23348\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.26.168.84

Dec 18 09:59:32 server sshd\[28320\]: Invalid user fluyt from 106.124.131.70
Dec 18 09:59:32 server sshd\[28320\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.124.131.70 
Dec 18 09:59:34 server sshd\[28320\]: Failed password for invalid user fluyt from 106.124.131.70 port 46560 ssh2
Dec 18 10:18:19 server sshd\[1143\]: Invalid user ssh from 106.124.131.70
Dec 18 10:18:19 server sshd\[1143\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.124.131.70 
...

Dec 18 07:30:52 mail sshd[14342]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.159.152 
Dec 18 07:30:54 mail sshd[14342]: Failed password for invalid user rskog from 51.91.159.152 port 41748 ssh2
Dec 18 07:36:03 mail sshd[15115]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.159.152

2019-12-18T07:01:13.534900abusebot-4.cloudsearch.cf sshd\[15891\]: Invalid user reierson from 165.22.213.24 port 57826
2019-12-18T07:01:13.542173abusebot-4.cloudsearch.cf sshd\[15891\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.213.24
2019-12-18T07:01:16.046948abusebot-4.cloudsearch.cf sshd\[15891\]: Failed password for invalid user reierson from 165.22.213.24 port 57826 ssh2
2019-12-18T07:07:08.163018abusebot-4.cloudsearch.cf sshd\[15977\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.213.24  user=root

2019-12-18T07:49:32.151790shield sshd\[2196\]: Invalid user www from 167.99.194.54 port 36258
2019-12-18T07:49:32.156036shield sshd\[2196\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.194.54
2019-12-18T07:49:33.645549shield sshd\[2196\]: Failed password for invalid user www from 167.99.194.54 port 36258 ssh2
2019-12-18T07:54:50.283356shield sshd\[3417\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.194.54  user=root
2019-12-18T07:54:52.426481shield sshd\[3417\]: Failed password for root from 167.99.194.54 port 45788 ssh2

Dec 18 07:29:27 server postfix/smtpd[1997]: NOQUEUE: reject: RCPT from fowl.wokoro.com[217.112.142.24]: 554 5.7.1 Service unavailable; Client host [217.112.142.24] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=

Dec 18 09:09:24 vps647732 sshd[7336]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.32.141
Dec 18 09:09:26 vps647732 sshd[7336]: Failed password for invalid user zybala from 51.75.32.141 port 39880 ssh2
...

Dec 18 07:29:55 game-panel sshd[19662]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.97.24.10
Dec 18 07:29:57 game-panel sshd[19662]: Failed password for invalid user tflex from 83.97.24.10 port 50668 ssh2
Dec 18 07:35:25 game-panel sshd[19907]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.97.24.10

Dec 18 02:08:02 ny01 sshd[23879]: Failed password for root from 123.207.107.242 port 39612 ssh2
Dec 18 02:13:19 ny01 sshd[24461]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.107.242
Dec 18 02:13:21 ny01 sshd[24461]: Failed password for invalid user yangyb from 123.207.107.242 port 56660 ssh2

Dec 18 07:29:11 vpn01 sshd[7971]: Failed password for root from 62.210.105.116 port 42775 ssh2
Dec 18 07:29:23 vpn01 sshd[7971]: error: maximum authentication attempts exceeded for root from 62.210.105.116 port 42775 ssh2 [preauth]
...

Fail2Ban - SSH Bruteforce Attempt

--- report ---
Dec 18 04:56:39 sshd: Connection from 150.165.67.34 port 47892
Dec 18 04:56:39 sshd: Invalid user martinengo from 150.165.67.34
Dec 18 04:56:42 sshd: Failed password for invalid user martinengo from 150.165.67.34 port 47892 ssh2
Dec 18 04:56:42 sshd: Received disconnect from 150.165.67.34: 11: Bye Bye [preauth]