Nov  3 10:19:29 foo sshd[23529]: Invalid user Oyster from 134.209.108.30
Nov  3 10:19:29 foo sshd[23529]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.108.30 
Nov  3 10:19:32 foo sshd[23529]: Failed password for invalid user Oyster from 134.209.108.30 port 50038 ssh2
Nov  3 10:19:32 foo sshd[23529]: Received disconnect from 134.209.108.30: 11: Bye Bye [preauth]
Nov  3 10:33:06 foo sshd[23752]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.108.30  user=r.r
Nov  3 10:33:08 foo sshd[23752]: Failed password for r.r from 134.209.108.30 port 51916 ssh2
Nov  3 10:33:09 foo sshd[23752]: Received disconnect from 134.209.108.30: 11: Bye Bye [preauth]
Nov  3 10:37:28 foo sshd[23916]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.108.30  user=r.r
Nov  3 10:37:30 foo sshd[23916]: Failed password for r.r from 134.209.108.30 port 34638 ........
-------------------------------

Tried to hack steam account, needs to buy their own games

SSH invalid-user multiple login attempts

Scanning random ports - tries to find possible vulnerable services

Fail2Ban Ban Triggered

Nov  7 08:27:25 server2 sshd\[20137\]: Invalid user fake from 157.245.181.3
Nov  7 08:27:26 server2 sshd\[20139\]: Invalid user admin from 157.245.181.3
Nov  7 08:27:28 server2 sshd\[20142\]: User root from 157.245.181.3 not allowed because not listed in AllowUsers
Nov  7 08:27:29 server2 sshd\[20145\]: Invalid user ubnt from 157.245.181.3
Nov  7 08:27:30 server2 sshd\[20147\]: Invalid user guest from 157.245.181.3
Nov  7 08:27:32 server2 sshd\[20149\]: Invalid user support from 157.245.181.3

WordPress XMLRPC scan :: 103.241.227.106 0.292 - [07/Nov/2019:06:27:08  0000] www.[censored_1] "POST /xmlrpc.php HTTP/1.1" 200 194 "https://www.[censored_1]/" "PHP/7.3.26" "HTTP/1.1"

Nov  7 08:22:17 server sshd\[19461\]: Invalid user kathy from 111.93.228.190 port 40349
Nov  7 08:22:17 server sshd\[19461\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.93.228.190
Nov  7 08:22:19 server sshd\[19461\]: Failed password for invalid user kathy from 111.93.228.190 port 40349 ssh2
Nov  7 08:27:39 server sshd\[13337\]: Invalid user test2 from 111.93.228.190 port 58563
Nov  7 08:27:39 server sshd\[13337\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.93.228.190

2019-11-07T08:41:06.552101abusebot-7.cloudsearch.cf sshd\[25481\]: Invalid user temp from 118.24.213.126 port 34726

Nov  7 00:22:40 mailman postfix/smtpd[16310]: NOQUEUE: reject: RCPT from unknown[85.117.115.38]: 554 5.7.1 Service unavailable; Client host [85.117.115.38] blocked using sbl-xbl.spamhaus.org; https://www.spamhaus.org/query/ip/85.117.115.38; from= to= proto=ESMTP helo=<[85.117.115.38]>
Nov  7 00:26:52 mailman postfix/smtpd[16333]: NOQUEUE: reject: RCPT from unknown[85.117.115.38]: 554 5.7.1 Service unavailable; Client host [85.117.115.38] blocked using sbl-xbl.spamhaus.org; https://www.spamhaus.org/query/ip/85.117.115.38; from= to= proto=ESMTP helo=<[85.117.115.38]>

Repeated brute force against a port

MultiHost/MultiPort Probe, Scan, Hack -

Nov  7 10:14:52 localhost sshd\[16577\]: Invalid user gamma123 from 92.222.181.159 port 35894
Nov  7 10:14:52 localhost sshd\[16577\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.222.181.159
Nov  7 10:14:54 localhost sshd\[16577\]: Failed password for invalid user gamma123 from 92.222.181.159 port 35894 ssh2

Nov  7 08:33:50 venus sshd\[22526\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.144.141.142  user=root
Nov  7 08:33:52 venus sshd\[22526\]: Failed password for root from 192.144.141.142 port 54198 ssh2
Nov  7 08:38:42 venus sshd\[22561\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.144.141.142  user=root
...

Nov  7 09:18:02 MK-Soft-Root2 sshd[8748]: Failed password for root from 187.188.169.123 port 54434 ssh2
...