failed root login

Port scan on 1 port(s): 53

Jan 10 06:45:18 vps691689 sshd[13449]: Failed password for root from 222.186.175.183 port 44696 ssh2
Jan 10 06:45:31 vps691689 sshd[13449]: error: maximum authentication attempts exceeded for root from 222.186.175.183 port 44696 ssh2 [preauth]
...

01/09/2020-23:57:40.585499 80.82.77.139 Protocol: 6 ET DROP Dshield Block Listed Source group 1

Jan 10 06:37:39 v22018076622670303 sshd\[27209\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.238  user=root
Jan 10 06:37:41 v22018076622670303 sshd\[27209\]: Failed password for root from 222.186.173.238 port 3778 ssh2
Jan 10 06:37:44 v22018076622670303 sshd\[27209\]: Failed password for root from 222.186.173.238 port 3778 ssh2
...

Portscan or hack attempt detected by psad/fwsnort

1578632273 - 01/10/2020 05:57:53 Host: 42.114.242.159/42.114.242.159 Port: 445 TCP Blocked

Automatic report - Banned IP Access

Jan 10 05:59:03 marvibiene sshd[31119]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.7  user=root
Jan 10 05:59:05 marvibiene sshd[31119]: Failed password for root from 222.186.42.7 port 25362 ssh2
Jan 10 05:59:08 marvibiene sshd[31119]: Failed password for root from 222.186.42.7 port 25362 ssh2
Jan 10 05:59:03 marvibiene sshd[31119]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.7  user=root
Jan 10 05:59:05 marvibiene sshd[31119]: Failed password for root from 222.186.42.7 port 25362 ssh2
Jan 10 05:59:08 marvibiene sshd[31119]: Failed password for root from 222.186.42.7 port 25362 ssh2
...

(sshd) Failed SSH login from 103.140.83.18 (BD/Bangladesh/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jan 10 01:49:37 svr sshd[3398394]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.140.83.18  user=root
Jan 10 01:49:39 svr sshd[3398394]: Failed password for root from 103.140.83.18 port 33528 ssh2
Jan 10 01:55:34 svr sshd[3418166]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.140.83.18  user=root
Jan 10 01:55:36 svr sshd[3418166]: Failed password for root from 103.140.83.18 port 40074 ssh2
Jan 10 01:59:20 svr sshd[3430722]: Invalid user vetye from 103.140.83.18 port 42926

SSH/22 MH Probe, BF, Hack -

Jan 10 05:57:05 grey postfix/smtpd\[396\]: NOQUEUE: reject: RCPT from unknown\[118.68.60.195\]: 554 5.7.1 Service unavailable\; Client host \[118.68.60.195\] blocked using dul.dnsbl.sorbs.net\; Dynamic IP Addresses See: http://www.sorbs.net/lookup.shtml\?118.68.60.195\; from=\ to=\ proto=ESMTP helo=\<\[118.68.60.195\]\>
...

Jan  9 19:42:42 kapalua sshd\[17814\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.223  user=root
Jan  9 19:42:44 kapalua sshd\[17814\]: Failed password for root from 222.186.180.223 port 50872 ssh2
Jan  9 19:42:59 kapalua sshd\[17844\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.223  user=root
Jan  9 19:43:00 kapalua sshd\[17844\]: Failed password for root from 222.186.180.223 port 61028 ssh2
Jan  9 19:43:21 kapalua sshd\[17875\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.223  user=root

Jan 10 05:55:49 legacy sshd[23592]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.57.210.12
Jan 10 05:55:50 legacy sshd[23592]: Failed password for invalid user cacti from 103.57.210.12 port 59320 ssh2
Jan 10 05:58:01 legacy sshd[23672]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.57.210.12
...

1578632278 - 01/10/2020 05:57:58 Host: 113.197.55.10/113.197.55.10 Port: 445 TCP Blocked