Dec  8 00:23:33 TORMINT sshd\[10173\]: Invalid user named from 146.185.164.219
Dec  8 00:23:33 TORMINT sshd\[10173\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.185.164.219
Dec  8 00:23:34 TORMINT sshd\[10173\]: Failed password for invalid user named from 146.185.164.219 port 42522 ssh2
...

12/08/2019-06:28:43.266405 185.176.27.6 Protocol: 6 ET DROP Dshield Block Listed Source group 1

--- report ---
Dec  8 02:19:49 sshd: Connection from 145.131.32.232 port 51056
Dec  8 02:19:50 sshd: Invalid user ca_scalar from 145.131.32.232
Dec  8 02:19:52 sshd: Failed password for invalid user ca_scalar from 145.131.32.232 port 51056 ssh2
Dec  8 02:19:52 sshd: Received disconnect from 145.131.32.232: 11: Bye Bye [preauth]

103.221.221.120 - - \[08/Dec/2019:06:10:15 +0100\] "POST /wp-login.php HTTP/1.0" 200 7411 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
103.221.221.120 - - \[08/Dec/2019:06:10:19 +0100\] "POST /wp-login.php HTTP/1.0" 200 7226 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
103.221.221.120 - - \[08/Dec/2019:06:10:21 +0100\] "POST /wp-login.php HTTP/1.0" 200 7223 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"

Dec  8 05:56:14 grey postfix/smtpd\[15914\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.134\]: 554 5.7.1 Service unavailable\; Client host \[181.41.216.134\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[181.41.216.134\]\; from=\<49z9zn0iz2h2t@sofinova.com.ua\> to=\ proto=ESMTP helo=\<\[181.41.216.131\]\>Dec  8 05:56:14 grey postfix/smtpd\[15914\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.134\]: 554 5.7.1 Service unavailable\; Client host \[181.41.216.134\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[181.41.216.134\]\; from=\<49z9zn0iz2h2t@sofinova.com.ua\> to=\ proto=ESMTP helo=\<\[181.41.216.131\]\>
...

2019-12-08T06:04:03.335286abusebot-5.cloudsearch.cf sshd\[16683\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.238.162  user=root

Dec  8 06:09:58 meumeu sshd[26387]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.40.35 
Dec  8 06:10:00 meumeu sshd[26387]: Failed password for invalid user named from 212.64.40.35 port 59544 ssh2
Dec  8 06:16:42 meumeu sshd[27469]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.40.35 
...

Dec  7 19:48:54 tdfoods sshd\[21044\]: Invalid user webadmin from 27.115.15.8
Dec  7 19:48:54 tdfoods sshd\[21044\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.115.15.8
Dec  7 19:48:56 tdfoods sshd\[21044\]: Failed password for invalid user webadmin from 27.115.15.8 port 35414 ssh2
Dec  7 19:56:43 tdfoods sshd\[21812\]: Invalid user test from 27.115.15.8
Dec  7 19:56:43 tdfoods sshd\[21812\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.115.15.8

--- report ---
Dec  8 02:55:27 sshd: Connection from 189.112.207.49 port 51206
Dec  8 02:55:28 sshd: Invalid user kylee from 189.112.207.49
Dec  8 02:55:28 sshd: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.112.207.49
Dec  8 02:55:30 sshd: Failed password for invalid user kylee from 189.112.207.49 port 51206 ssh2
Dec  8 02:55:30 sshd: Received disconnect from 189.112.207.49: 11: Bye Bye [preauth]

2019-12-08T05:28:43.914421abusebot.cloudsearch.cf sshd\[14041\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns354173.ip-91-121-101.eu  user=root

Dec  7 18:48:03 php1 sshd\[20020\]: Invalid user doernemann from 113.89.68.183
Dec  7 18:48:03 php1 sshd\[20020\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.89.68.183
Dec  7 18:48:06 php1 sshd\[20020\]: Failed password for invalid user doernemann from 113.89.68.183 port 8467 ssh2
Dec  7 18:56:49 php1 sshd\[21039\]: Invalid user armendariz from 113.89.68.183
Dec  7 18:56:49 php1 sshd\[21039\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.89.68.183

Dec  8 10:32:40 gw1 sshd[9806]: Failed password for root from 117.50.16.177 port 44022 ssh2
Dec  8 10:38:55 gw1 sshd[10087]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.16.177
...

Dec  8 00:56:20 ny01 sshd[14646]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.138.172
Dec  8 00:56:22 ny01 sshd[14646]: Failed password for invalid user pehong from 54.37.138.172 port 38006 ssh2
Dec  8 01:01:54 ny01 sshd[15378]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.138.172

MultiHost/MultiPort Probe, Scan, Hack -

Dec  8 06:56:35 sd-53420 sshd\[17300\]: User root from 46.105.110.79 not allowed because none of user's groups are listed in AllowGroups
Dec  8 06:56:35 sd-53420 sshd\[17300\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.105.110.79  user=root
Dec  8 06:56:37 sd-53420 sshd\[17300\]: Failed password for invalid user root from 46.105.110.79 port 47652 ssh2
Dec  8 07:02:02 sd-53420 sshd\[18320\]: Invalid user server from 46.105.110.79
Dec  8 07:02:02 sd-53420 sshd\[18320\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.105.110.79
...