Apr 21 12:52:03 server sshd\[6484\]: Invalid user xbian from 155.94.226.203
Apr 21 12:52:03 server sshd\[6484\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=155.94.226.203
Apr 21 12:52:06 server sshd\[6484\]: Failed password for invalid user xbian from 155.94.226.203 port 36986 ssh2
...

Automatic report - Banned IP Access

Oct  9 05:50:39 sso sshd[27680]: Failed password for root from 176.101.205.55 port 40050 ssh2
Oct  9 05:50:46 sso sshd[27680]: Failed password for root from 176.101.205.55 port 40050 ssh2
...

Oct  9 13:37:41 legacy sshd[24015]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.227.252.14
Oct  9 13:37:43 legacy sshd[24015]: Failed password for invalid user fdsa4321 from 192.227.252.14 port 44326 ssh2
Oct  9 13:41:53 legacy sshd[24133]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.227.252.14
...

Jul 27 23:46:11 server sshd\[39889\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.91.140.3  user=root
Jul 27 23:46:12 server sshd\[39889\]: Failed password for root from 154.91.140.3 port 50034 ssh2
Jul 27 23:51:08 server sshd\[40080\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.91.140.3  user=root
...

Oct  9 13:41:55 vps647732 sshd[3863]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.126.161.117
Oct  9 13:41:57 vps647732 sshd[3863]: Failed password for invalid user Best@2017 from 121.126.161.117 port 48192 ssh2
...

2019-10-09T18:41:29.917014enmeeting.mahidol.ac.th sshd\[14716\]: Invalid user admin from 92.63.194.90 port 44448
2019-10-09T18:41:29.930965enmeeting.mahidol.ac.th sshd\[14716\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.63.194.90
2019-10-09T18:41:31.584403enmeeting.mahidol.ac.th sshd\[14716\]: Failed password for invalid user admin from 92.63.194.90 port 44448 ssh2
...

Oct  9 09:48:33 heicom postfix/smtpd\[10290\]: warning: unknown\[185.36.81.238\]: SASL LOGIN authentication failed: authentication failure
Oct  9 10:17:01 heicom postfix/smtpd\[10928\]: warning: unknown\[185.36.81.238\]: SASL LOGIN authentication failed: authentication failure
Oct  9 10:45:37 heicom postfix/smtpd\[12031\]: warning: unknown\[185.36.81.238\]: SASL LOGIN authentication failed: authentication failure
Oct  9 11:13:44 heicom postfix/smtpd\[12767\]: warning: unknown\[185.36.81.238\]: SASL LOGIN authentication failed: authentication failure
Oct  9 11:42:07 heicom postfix/smtpd\[12850\]: warning: unknown\[185.36.81.238\]: SASL LOGIN authentication failed: authentication failure
...

Oct  9 13:17:58 ns341937 sshd[947]: Failed password for root from 51.75.128.184 port 37312 ssh2
Oct  9 13:38:18 ns341937 sshd[6527]: Failed password for root from 51.75.128.184 port 54916 ssh2
...

Oct  9 13:43:18 srv206 sshd[18003]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.190.2  user=root
Oct  9 13:43:20 srv206 sshd[18003]: Failed password for root from 222.186.190.2 port 34178 ssh2
...

(sshd) Failed SSH login from 120.88.185.39 (-): 5 in the last 3600 secs

Oct  9 06:42:27 docs sshd\[744\]: Invalid user Root123$ from 1.196.223.50Oct  9 06:42:30 docs sshd\[744\]: Failed password for invalid user Root123$ from 1.196.223.50 port 5870 ssh2Oct  9 06:46:29 docs sshd\[895\]: Invalid user Hardware@2017 from 1.196.223.50Oct  9 06:46:31 docs sshd\[895\]: Failed password for invalid user Hardware@2017 from 1.196.223.50 port 19732 ssh2Oct  9 06:50:42 docs sshd\[1076\]: Invalid user P@SS@2017 from 1.196.223.50Oct  9 06:50:44 docs sshd\[1076\]: Failed password for invalid user P@SS@2017 from 1.196.223.50 port 33632 ssh2
...

Oct  9 **REMOVED** dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 15 secs\): user=\, method=PLAIN, rip=116.112.207.235, lip=**REMOVED**, TLS, session=\
Oct  9 **REMOVED** dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 6 secs\): user=\<**REMOVED**.defredl@**REMOVED**.de\>, method=PLAIN, rip=116.112.207.235, lip=**REMOVED**, TLS: Disconnected, session=\
Oct  9 **REMOVED** dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 7 secs\): user=\, method=PLAIN, rip=116.112.207.235, lip=**REMOVED**, TLS, session=\

Oct  9 13:20:08 apollo sshd\[13386\]: Failed password for root from 1.9.46.177 port 35922 ssh2Oct  9 13:37:20 apollo sshd\[13441\]: Failed password for root from 1.9.46.177 port 46412 ssh2Oct  9 13:41:46 apollo sshd\[13454\]: Failed password for root from 1.9.46.177 port 37980 ssh2
...

Oct  9 13:58:59 core sshd[22780]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.55.226.123  user=root
Oct  9 13:59:01 core sshd[22780]: Failed password for root from 185.55.226.123 port 44240 ssh2
...