2019-12-18T14:27:57.230993shield sshd\[3469\]: Invalid user ntps from 107.148.208.166 port 55379
2019-12-18T14:27:57.235801shield sshd\[3469\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.148.208.166
2019-12-18T14:27:58.798525shield sshd\[3469\]: Failed password for invalid user ntps from 107.148.208.166 port 55379 ssh2
2019-12-18T14:31:48.561491shield sshd\[4269\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.148.208.166  user=root
2019-12-18T14:31:50.169493shield sshd\[4269\]: Failed password for root from 107.148.208.166 port 40020 ssh2

"Fail2Ban detected SSH brute force attempt"

$f2bV_matches

Dec 18 20:50:04 vtv3 sshd[417]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.106.61.239 
Dec 18 20:50:05 vtv3 sshd[417]: Failed password for invalid user nicolina from 177.106.61.239 port 58104 ssh2
Dec 18 20:56:34 vtv3 sshd[3774]: Failed password for root from 177.106.61.239 port 39526 ssh2
Dec 18 21:09:59 vtv3 sshd[9632]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.106.61.239 
Dec 18 21:10:00 vtv3 sshd[9632]: Failed password for invalid user nu from 177.106.61.239 port 59130 ssh2
Dec 18 21:16:53 vtv3 sshd[13460]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.106.61.239 
Dec 18 21:30:30 vtv3 sshd[19893]: Failed password for root from 177.106.61.239 port 60242 ssh2
Dec 18 21:37:22 vtv3 sshd[23018]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.106.61.239 
Dec 18 21:37:24 vtv3 sshd[23018]: Failed password for invalid user test

Dec 18 08:13:14 hanapaa sshd\[9207\]: Invalid user bozzelli from 103.110.89.148
Dec 18 08:13:14 hanapaa sshd\[9207\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.110.89.148
Dec 18 08:13:17 hanapaa sshd\[9207\]: Failed password for invalid user bozzelli from 103.110.89.148 port 56856 ssh2
Dec 18 08:19:32 hanapaa sshd\[9712\]: Invalid user wwwrun from 103.110.89.148
Dec 18 08:19:32 hanapaa sshd\[9712\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.110.89.148

Dec 18 17:40:48 Ubuntu-1404-trusty-64-minimal sshd\[10021\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.32.228  user=root
Dec 18 17:40:49 Ubuntu-1404-trusty-64-minimal sshd\[10021\]: Failed password for root from 132.232.32.228 port 45886 ssh2
Dec 18 17:58:46 Ubuntu-1404-trusty-64-minimal sshd\[22777\]: Invalid user scottt from 132.232.32.228
Dec 18 17:58:46 Ubuntu-1404-trusty-64-minimal sshd\[22777\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.32.228
Dec 18 17:58:48 Ubuntu-1404-trusty-64-minimal sshd\[22777\]: Failed password for invalid user scottt from 132.232.32.228 port 39378 ssh2

Dec 18 21:29:03 cp sshd[503]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.204.91.168
Dec 18 21:29:03 cp sshd[503]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.204.91.168

Dec 18 15:24:30 lvps92-51-164-246 sshd[21267]: Failed password for invalid user r.r from 212.71.251.228 port 39930 ssh2
Dec 18 15:24:30 lvps92-51-164-246 sshd[21267]: Received disconnect from 212.71.251.228: 11: Bye Bye [preauth]
Dec 18 15:32:04 lvps92-51-164-246 sshd[21291]: Invalid user sensivhostnamey from 212.71.251.228


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=212.71.251.228

Dec 18 15:31:15 grey postfix/smtpd\[23208\]: NOQUEUE: reject: RCPT from unknown\[119.136.125.194\]: 554 5.7.1 Service unavailable\; Client host \[119.136.125.194\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[119.136.125.194\]\; from=\ to=\ proto=SMTP helo=\
...

Dec 18 21:07:21 server sshd\[24836\]: Invalid user chungsik from 165.22.144.147
Dec 18 21:07:21 server sshd\[24836\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.144.147 
Dec 18 21:07:23 server sshd\[24836\]: Failed password for invalid user chungsik from 165.22.144.147 port 60390 ssh2
Dec 18 21:12:58 server sshd\[26329\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.144.147  user=root
Dec 18 21:13:00 server sshd\[26329\]: Failed password for root from 165.22.144.147 port 47240 ssh2
...

Dec 18 19:00:06 sd-53420 sshd\[31896\]: Invalid user group9 from 192.241.143.162
Dec 18 19:00:06 sd-53420 sshd\[31896\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.241.143.162
Dec 18 19:00:08 sd-53420 sshd\[31896\]: Failed password for invalid user group9 from 192.241.143.162 port 40304 ssh2
Dec 18 19:05:37 sd-53420 sshd\[1541\]: Invalid user rosine from 192.241.143.162
Dec 18 19:05:37 sd-53420 sshd\[1541\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.241.143.162
...

Sniffing for wp-login

Unauthorized connection attempt from IP address 14.241.230.145 on Port 445(SMB)

Dec 18 21:39:28 MK-Soft-VM5 sshd[21439]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.231.253.202 
Dec 18 21:39:30 MK-Soft-VM5 sshd[21439]: Failed password for invalid user test from 165.231.253.202 port 45572 ssh2
...

Dec 18 12:35:42 firewall sshd[6223]: Invalid user abdul-aziz from 101.71.2.137
Dec 18 12:35:44 firewall sshd[6223]: Failed password for invalid user abdul-aziz from 101.71.2.137 port 44522 ssh2
Dec 18 12:42:32 firewall sshd[6363]: Invalid user P@$$P@$$ from 101.71.2.137
...