Dec  2 04:16:44 hanapaa sshd\[4498\]: Invalid user nai from 181.126.83.125
Dec  2 04:16:44 hanapaa sshd\[4498\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.criterion.com.py
Dec  2 04:16:46 hanapaa sshd\[4498\]: Failed password for invalid user nai from 181.126.83.125 port 38104 ssh2
Dec  2 04:24:55 hanapaa sshd\[5215\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.criterion.com.py  user=root
Dec  2 04:24:57 hanapaa sshd\[5215\]: Failed password for root from 181.126.83.125 port 49918 ssh2

Dec  2 05:38:54 server sshd\[26258\]: Failed password for invalid user thea from 106.13.114.228 port 59278 ssh2
Dec  2 16:21:51 server sshd\[6698\]: Invalid user kliesch from 106.13.114.228
Dec  2 16:21:51 server sshd\[6698\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.114.228 
Dec  2 16:21:53 server sshd\[6698\]: Failed password for invalid user kliesch from 106.13.114.228 port 50806 ssh2
Dec  2 16:36:36 server sshd\[11033\]: Invalid user wahid from 106.13.114.228
Dec  2 16:36:36 server sshd\[11033\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.114.228 
...

Dec  2 14:36:09 MK-Soft-VM6 sshd[10109]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.133.82 
Dec  2 14:36:12 MK-Soft-VM6 sshd[10109]: Failed password for invalid user iskra from 206.189.133.82 port 51908 ssh2
...

Dec  2 15:32:03 minden010 sshd[27659]: Failed password for root from 222.186.173.154 port 29266 ssh2
Dec  2 15:32:06 minden010 sshd[27659]: Failed password for root from 222.186.173.154 port 29266 ssh2
Dec  2 15:32:10 minden010 sshd[27659]: Failed password for root from 222.186.173.154 port 29266 ssh2
Dec  2 15:32:13 minden010 sshd[27659]: Failed password for root from 222.186.173.154 port 29266 ssh2
...

Dec  2 08:36:21 web1 postfix/smtpd[28997]: warning: unknown[193.56.28.233]: SASL LOGIN authentication failed: authentication failure
...

2019-12-02 07:36:14 H=(ns320877.ip-91-121-173.eu) [1.53.159.234]:61104 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.10) (https://www.spamhaus.org/query/ip/1.53.159.234)
2019-12-02 07:36:15 H=(ns320877.ip-91-121-173.eu) [1.53.159.234]:61104 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.10, 127.0.0.4) (https://www.spamhaus.org/query/ip/1.53.159.234)
2019-12-02 07:36:15 H=(ns320877.ip-91-121-173.eu) [1.53.159.234]:61104 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.10, 127.0.0.4) (https://www.spamhaus.org/query/ip/1.53.159.234)
...

Dec  2 09:22:23 linuxvps sshd\[48139\]: Invalid user rpc from 80.211.129.34
Dec  2 09:22:23 linuxvps sshd\[48139\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.129.34
Dec  2 09:22:26 linuxvps sshd\[48139\]: Failed password for invalid user rpc from 80.211.129.34 port 51778 ssh2
Dec  2 09:28:13 linuxvps sshd\[51766\]: Invalid user admin from 80.211.129.34
Dec  2 09:28:13 linuxvps sshd\[51766\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.129.34

Brute-force attempt banned

Dec  2 15:21:17 v22018053744266470 sshd[21620]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.215.207.40
Dec  2 15:21:20 v22018053744266470 sshd[21620]: Failed password for invalid user ross from 125.215.207.40 port 41411 ssh2
Dec  2 15:28:58 v22018053744266470 sshd[22126]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.215.207.40
...

CloudCIX Reconnaissance Scan Detected, PTR: host200-232-177-94.static.arubacloud.fr.

Brute force attempt

2019-12-02T15:27:11.481076centos sshd\[13536\]: Invalid user bouroncle from 124.156.172.11 port 56856
2019-12-02T15:27:11.486144centos sshd\[13536\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.156.172.11
2019-12-02T15:27:13.625189centos sshd\[13536\]: Failed password for invalid user bouroncle from 124.156.172.11 port 56856 ssh2

Dec  2 04:13:14 kapalua sshd\[5135\]: Invalid user cyrus from 139.59.37.209
Dec  2 04:13:14 kapalua sshd\[5135\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.37.209
Dec  2 04:13:16 kapalua sshd\[5135\]: Failed password for invalid user cyrus from 139.59.37.209 port 56814 ssh2
Dec  2 04:20:33 kapalua sshd\[5822\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.37.209  user=root
Dec  2 04:20:35 kapalua sshd\[5822\]: Failed password for root from 139.59.37.209 port 40004 ssh2

Dec  2 04:31:22 php1 sshd\[17472\]: Invalid user pork from 122.225.230.10
Dec  2 04:31:22 php1 sshd\[17472\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.225.230.10
Dec  2 04:31:24 php1 sshd\[17472\]: Failed password for invalid user pork from 122.225.230.10 port 14529 ssh2
Dec  2 04:37:35 php1 sshd\[18300\]: Invalid user password from 122.225.230.10
Dec  2 04:37:35 php1 sshd\[18300\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.225.230.10

2019-12-02T06:36:35.776047-07:00 suse-nuc sshd[15726]: Invalid user msw from 88.15.54.36 port 34836
...