Dec  7 15:14:04 tdfoods sshd\[24303\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.123.111  user=root
Dec  7 15:14:06 tdfoods sshd\[24303\]: Failed password for root from 178.128.123.111 port 54272 ssh2
Dec  7 15:20:17 tdfoods sshd\[24900\]: Invalid user anto from 178.128.123.111
Dec  7 15:20:17 tdfoods sshd\[24900\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.123.111
Dec  7 15:20:19 tdfoods sshd\[24900\]: Failed password for invalid user anto from 178.128.123.111 port 35940 ssh2

Dec  7 18:51:53 wbs sshd\[28145\]: Invalid user Admin from 185.162.235.213
Dec  7 18:51:53 wbs sshd\[28145\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.162.235.213
Dec  7 18:51:55 wbs sshd\[28145\]: Failed password for invalid user Admin from 185.162.235.213 port 51878 ssh2
Dec  7 18:57:14 wbs sshd\[28703\]: Invalid user phenil from 185.162.235.213
Dec  7 18:57:14 wbs sshd\[28703\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.162.235.213

Dec  8 05:52:13 loxhost sshd\[30500\]: Invalid user ssh from 54.38.214.191 port 40522
Dec  8 05:52:13 loxhost sshd\[30500\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.214.191
Dec  8 05:52:15 loxhost sshd\[30500\]: Failed password for invalid user ssh from 54.38.214.191 port 40522 ssh2
Dec  8 05:57:32 loxhost sshd\[30757\]: Invalid user server from 54.38.214.191 port 50414
Dec  8 05:57:32 loxhost sshd\[30757\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.214.191
...

Triggered by Fail2Ban at Vostok web server

Dec  8 00:47:19 grey postfix/smtpd\[21902\]: NOQUEUE: reject: RCPT from unknown\[103.113.26.2\]: 554 5.7.1 Service unavailable\; Client host \[103.113.26.2\] blocked using bl.spamcop.net\; Blocked - see https://www.spamcop.net/bl.shtml\?103.113.26.2\; from=\ to=\ proto=ESMTP helo=\
...

Dec  7 18:49:54 hpm sshd\[10372\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.212.233.50  user=mysql
Dec  7 18:49:56 hpm sshd\[10372\]: Failed password for mysql from 125.212.233.50 port 37728 ssh2
Dec  7 18:57:20 hpm sshd\[11190\]: Invalid user crista from 125.212.233.50
Dec  7 18:57:20 hpm sshd\[11190\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.212.233.50
Dec  7 18:57:22 hpm sshd\[11190\]: Failed password for invalid user crista from 125.212.233.50 port 46382 ssh2

Dec  8 01:37:27 server sshd\[10717\]: Invalid user support from 104.238.129.240
Dec  8 01:37:27 server sshd\[10717\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.238.129.240 
Dec  8 01:37:29 server sshd\[10717\]: Failed password for invalid user support from 104.238.129.240 port 39476 ssh2
Dec  8 02:29:29 server sshd\[24420\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.238.129.240  user=root
Dec  8 02:29:31 server sshd\[24420\]: Failed password for root from 104.238.129.240 port 38986 ssh2
...

Dec  8 05:50:49 markkoudstaal sshd[1017]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.51.98.159
Dec  8 05:50:51 markkoudstaal sshd[1017]: Failed password for invalid user gardarsson from 106.51.98.159 port 35462 ssh2
Dec  8 05:57:30 markkoudstaal sshd[1873]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.51.98.159

Dec  7 22:35:42 firewall sshd[11566]: Failed password for root from 218.92.0.147 port 43706 ssh2
Dec  7 22:35:42 firewall sshd[11566]: error: maximum authentication attempts exceeded for root from 218.92.0.147 port 43706 ssh2 [preauth]
Dec  7 22:35:42 firewall sshd[11566]: Disconnecting: Too many authentication failures [preauth]
...

2019-12-08T05:47:48.832613  sshd[31748]: Invalid user asd!123 from 129.226.188.41 port 46076
2019-12-08T05:47:48.846427  sshd[31748]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.188.41
2019-12-08T05:47:48.832613  sshd[31748]: Invalid user asd!123 from 129.226.188.41 port 46076
2019-12-08T05:47:50.585236  sshd[31748]: Failed password for invalid user asd!123 from 129.226.188.41 port 46076 ssh2
2019-12-08T05:57:18.102133  sshd[31900]: Invalid user vonet from 129.226.188.41 port 51652
...

Dec  8 02:22:06 OPSO sshd\[16855\]: Invalid user schlenker from 189.8.68.56 port 58976
Dec  8 02:22:06 OPSO sshd\[16855\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.8.68.56
Dec  8 02:22:07 OPSO sshd\[16855\]: Failed password for invalid user schlenker from 189.8.68.56 port 58976 ssh2
Dec  8 02:28:57 OPSO sshd\[18765\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.8.68.56  user=root
Dec  8 02:28:58 OPSO sshd\[18765\]: Failed password for root from 189.8.68.56 port 39644 ssh2

Dec  8 06:10:28 * sshd[2342]: Failed password for root from 183.203.96.24 port 59430 ssh2
Dec  8 06:18:02 * sshd[3577]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.203.96.24

2019-12-08T04:57:24.923949abusebot-5.cloudsearch.cf sshd\[16091\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=c-69-181-180-81.hsd1.ca.comcast.net  user=root

Automatic report - Port Scan Attack

Dec  8 06:05:08 dedicated sshd[9034]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.17  user=root
Dec  8 06:05:10 dedicated sshd[9034]: Failed password for root from 222.186.180.17 port 22298 ssh2