Jan  8 03:55:35 hanapaa sshd\[7727\]: Invalid user fy from 116.203.203.73
Jan  8 03:55:35 hanapaa sshd\[7727\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=static.73.203.203.116.clients.your-server.de
Jan  8 03:55:37 hanapaa sshd\[7727\]: Failed password for invalid user fy from 116.203.203.73 port 41732 ssh2
Jan  8 03:57:32 hanapaa sshd\[7892\]: Invalid user zr from 116.203.203.73
Jan  8 03:57:32 hanapaa sshd\[7892\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=static.73.203.203.116.clients.your-server.de

Unauthorized connection attempt detected from IP address 116.203.203.73 to port 2220 [J]

$f2bV_matches

Dec 20 23:45:56 kapalua sshd\[9626\]: Invalid user server from 116.203.203.73
Dec 20 23:45:56 kapalua sshd\[9626\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=static.73.203.203.116.clients.your-server.de
Dec 20 23:45:58 kapalua sshd\[9626\]: Failed password for invalid user server from 116.203.203.73 port 40408 ssh2
Dec 20 23:50:35 kapalua sshd\[10027\]: Invalid user louella from 116.203.203.73
Dec 20 23:50:35 kapalua sshd\[10027\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=static.73.203.203.116.clients.your-server.de

Dec 13 16:40:58 hosting sshd[3649]: Invalid user kathnelson from 116.203.203.73 port 37226
...

Dec 10 08:27:09 eddieflores sshd\[26554\]: Invalid user chieh from 116.203.203.73
Dec 10 08:27:09 eddieflores sshd\[26554\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=static.73.203.203.116.clients.your-server.de
Dec 10 08:27:12 eddieflores sshd\[26554\]: Failed password for invalid user chieh from 116.203.203.73 port 42006 ssh2
Dec 10 08:32:26 eddieflores sshd\[27120\]: Invalid user paddock from 116.203.203.73
Dec 10 08:32:26 eddieflores sshd\[27120\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=static.73.203.203.116.clients.your-server.de

$f2bV_matches

Dec  7 11:27:31 MK-Soft-VM6 sshd[16662]: Failed password for root from 116.203.203.73 port 43536 ssh2
...

Dec  6 17:47:21 server sshd\[2282\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=static.73.203.203.116.clients.your-server.de  user=root
Dec  6 17:47:23 server sshd\[2282\]: Failed password for root from 116.203.203.73 port 57194 ssh2
Dec  6 17:53:14 server sshd\[3909\]: Invalid user hospital from 116.203.203.73
Dec  6 17:53:14 server sshd\[3909\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=static.73.203.203.116.clients.your-server.de 
Dec  6 17:53:15 server sshd\[3909\]: Failed password for invalid user hospital from 116.203.203.73 port 47904 ssh2
...

Dec  5 07:33:03 vps666546 sshd\[23341\]: Invalid user admin999 from 116.203.203.73 port 34834
Dec  5 07:33:03 vps666546 sshd\[23341\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.203.203.73
Dec  5 07:33:05 vps666546 sshd\[23341\]: Failed password for invalid user admin999 from 116.203.203.73 port 34834 ssh2
Dec  5 07:38:34 vps666546 sshd\[23499\]: Invalid user kamiroot from 116.203.203.73 port 42280
Dec  5 07:38:34 vps666546 sshd\[23499\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.203.203.73
...

Nov 16 09:08:01 server sshd\[13305\]: Invalid user gdm from 116.203.203.73
Nov 16 09:08:01 server sshd\[13305\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=static.73.203.203.116.clients.your-server.de 
Nov 16 09:08:04 server sshd\[13305\]: Failed password for invalid user gdm from 116.203.203.73 port 44320 ssh2
Nov 16 09:26:01 server sshd\[18200\]: Invalid user leisa from 116.203.203.73
Nov 16 09:26:01 server sshd\[18200\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=static.73.203.203.116.clients.your-server.de 
...

Nov 16 00:08:10 localhost sshd\[60106\]: Invalid user hironobu from 116.203.203.73 port 44418
Nov 16 00:08:10 localhost sshd\[60106\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.203.203.73
Nov 16 00:08:12 localhost sshd\[60106\]: Failed password for invalid user hironobu from 116.203.203.73 port 44418 ssh2
Nov 16 00:11:49 localhost sshd\[60252\]: Invalid user apostolopoulos from 116.203.203.73 port 43348
Nov 16 00:11:49 localhost sshd\[60252\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.203.203.73
...

Nov 15 12:06:38 srv01 sshd[6895]: Invalid user test from 116.203.203.73
Nov 15 12:06:38 srv01 sshd[6895]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=static.73.203.203.116.clients.your-server.de
Nov 15 12:06:38 srv01 sshd[6895]: Invalid user test from 116.203.203.73
Nov 15 12:06:40 srv01 sshd[6895]: Failed password for invalid user test from 116.203.203.73 port 52874 ssh2
Nov 15 12:10:06 srv01 sshd[7093]: Invalid user nanashi from 116.203.203.73
...

Nov 13 20:27:16 web9 sshd\[18039\]: Invalid user squid from 116.203.203.73
Nov 13 20:27:16 web9 sshd\[18039\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.203.203.73
Nov 13 20:27:18 web9 sshd\[18039\]: Failed password for invalid user squid from 116.203.203.73 port 54732 ssh2
Nov 13 20:30:58 web9 sshd\[18488\]: Invalid user admin from 116.203.203.73
Nov 13 20:30:58 web9 sshd\[18488\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.203.203.73

IP blocked

Feb  4 18:09:49 server sshd\[771\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.ip-164-132-196.eu  user=root
Feb  4 18:09:51 server sshd\[771\]: Failed password for root from 164.132.196.134 port 58582 ssh2
Feb  4 18:21:58 server sshd\[2673\]: Invalid user sammons from 164.132.196.134
Feb  4 18:21:58 server sshd\[2673\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.ip-164-132-196.eu 
Feb  4 18:22:00 server sshd\[2673\]: Failed password for invalid user sammons from 164.132.196.134 port 46906 ssh2
...

2019-06-28 01:13:21 1hgdZx-0004EW-EQ SMTP connection from amused.bookywook.com \(amused.netakademisi.icu\) \[14.1.29.116\]:50702 I=\[193.107.88.166\]:25 closed by DROP in ACL
2019-06-28 01:13:50 1hgdaQ-0004F3-HX SMTP connection from amused.bookywook.com \(amused.netakademisi.icu\) \[14.1.29.116\]:52612 I=\[193.107.88.166\]:25 closed by DROP in ACL
2019-06-28 01:16:16 1hgdcm-0004JT-Hr SMTP connection from amused.bookywook.com \(amused.netakademisi.icu\) \[14.1.29.116\]:54682 I=\[193.107.88.166\]:25 closed by DROP in ACL
...

2019-04-21 05:47:32 1hI3Rz-0007db-VI SMTP connection from sleet.oyunbenim.com \(seaplane.etfukt.icu\) \[139.59.78.48\]:45055 I=\[193.107.88.166\]:25 closed by DROP in ACL
2019-04-21 05:47:42 1hI3SA-0007dk-Kj SMTP connection from sleet.oyunbenim.com \(crumpet.etfukt.icu\) \[139.59.78.48\]:41496 I=\[193.107.88.166\]:25 closed by DROP in ACL
2019-04-21 05:50:38 1hI3V0-0007j9-Em SMTP connection from sleet.oyunbenim.com \(finicky.etfukt.icu\) \[139.59.78.48\]:60510 I=\[193.107.90.29\]:25 closed by DROP in ACL
...

Feb  4 15:14:22 srv01 sshd[24439]: Invalid user isadmin from 190.117.62.241 port 49732
Feb  4 15:14:22 srv01 sshd[24439]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.117.62.241
Feb  4 15:14:22 srv01 sshd[24439]: Invalid user isadmin from 190.117.62.241 port 49732
Feb  4 15:14:24 srv01 sshd[24439]: Failed password for invalid user isadmin from 190.117.62.241 port 49732 ssh2
Feb  4 15:16:44 srv01 sshd[24540]: Invalid user dorin from 190.117.62.241 port 40098
...

148.72.23.181 - - \[04/Feb/2020:14:51:44 +0100\] "POST /wp-login.php HTTP/1.0" 200 4404 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
148.72.23.181 - - \[04/Feb/2020:14:51:47 +0100\] "POST /wp-login.php HTTP/1.0" 200 4236 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
148.72.23.181 - - \[04/Feb/2020:14:51:48 +0100\] "POST /xmlrpc.php HTTP/1.0" 200 736 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"

Automatic report - Port Scan Attack

Feb  4 13:51:14 IngegnereFirenze sshd[12380]: Did not receive identification string from 43.252.74.162 port 62010
...

2019-05-08 09:45:36 H=\(applaud.havanacameras.icu\) \[139.59.167.197\]:51394 I=\[193.107.88.166\]:25 sender verify fail for \: Unrouteable address
2019-05-08 09:45:36 H=\(applaud.havanacameras.icu\) \[139.59.167.197\]:51394 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
2019-05-08 09:48:05 H=\(frog.havanacameras.icu\) \[139.59.167.197\]:34450 I=\[193.107.90.29\]:25 sender verify fail for \: Unrouteable address
2019-05-08 09:48:05 H=\(frog.havanacameras.icu\) \[139.59.167.197\]:34450 I=\[193.107.90.29\]:25 F=\ rejected RCPT \: Sender verify failed
...

MultiHost/MultiPort Probe, Scan, Hack -

port scan and connect, tcp 23 (telnet)

2019-04-19 04:56:49 1hHJhp-0003Pc-ON SMTP connection from placidity.oyunbenim.com \(ossified.classroommega.icu\) \[139.59.82.133\]:56790 I=\[193.107.90.29\]:25 closed by DROP in ACL
2019-04-19 04:58:14 1hHJjC-0003SW-7H SMTP connection from placidity.oyunbenim.com \(coagulate.classroommega.icu\) \[139.59.82.133\]:38658 I=\[193.107.88.166\]:25 closed by DROP in ACL
2019-04-19 04:58:33 1hHJjV-0003Sw-Da SMTP connection from placidity.oyunbenim.com \(blithe.classroommega.icu\) \[139.59.82.133\]:41094 I=\[193.107.88.166\]:25 closed by DROP in ACL
2019-04-20 04:50:15 1hHg51-00036n-9k SMTP connection from placidity.oyunbenim.com \(spooky.classroommega.icu\) \[139.59.82.133\]:58435 I=\[193.107.88.166\]:25 closed by DROP in ACL
2019-04-20 04:52:47 1hHg7T-00039s-D5 SMTP connection from placidity.oyunbenim.com \(gleaming.classroommega.icu\) \[139.59.82.133\]:50069 I=\[193.107.90.29\]:25 closed by DROP in ACL
2019-04-20 04:54:04 1hHg8i-0003Bb-3P SMTP connection from placidity.oyunbenim.com \(rod.cl
...

Unauthorized connection attempt detected from IP address 168.235.94.211 to port 8080 [J]

2019-03-13 15:46:23 H=\(static.masmovil.com\) \[139.47.115.109\]:6313 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
2019-03-13 15:46:55 H=\(static.masmovil.com\) \[139.47.115.109\]:6609 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
2019-03-13 15:47:16 H=\(static.masmovil.com\) \[139.47.115.109\]:6803 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
...

Feb  4 06:10:13 web1 sshd\[10636\]: Invalid user 1234 from 106.12.176.188
Feb  4 06:10:13 web1 sshd\[10636\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.176.188
Feb  4 06:10:15 web1 sshd\[10636\]: Failed password for invalid user 1234 from 106.12.176.188 port 43492 ssh2
Feb  4 06:12:56 web1 sshd\[10873\]: Invalid user 1122334455 from 106.12.176.188
Feb  4 06:12:56 web1 sshd\[10873\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.176.188

Feb  4 13:51:12 pi sshd[19713]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.43.149.20 
Feb  4 13:51:14 pi sshd[19713]: Failed password for invalid user jenkins from 182.43.149.20 port 44519 ssh2