Port scan

May  3 07:02:41 163-172-32-151 sshd[4755]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.142  user=root
May  3 07:02:43 163-172-32-151 sshd[4755]: Failed password for root from 222.186.180.142 port 44782 ssh2
...

(pop3d) Failed POP3 login from 109.122.193.102 (IR/Iran/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: May  3 08:25:57 ir1 dovecot[264309]: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=109.122.193.102, lip=5.63.12.44, session=

Invalid user suresh from 112.21.191.252 port 35256

May  3 07:15:43 mail kernel: [488562.126180] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=79.124.62.114 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=17079 PROTO=TCP SPT=56789 DPT=5978 WINDOW=1024 RES=0x00 SYN URGP=0 
...

2020-05-03T03:55:43.449938+00:00 [f2b-wordpress-soft-ddos] : Authentication failure user [munged] from 158.69.38.240
2020-05-03T03:55:43.219997+00:00 [f2b-wordpress-soft-ddos] : Authentication failure user [munged] from 158.69.38.240
2020-05-03T03:55:42.741337+00:00 [f2b-wordpress-soft-ddos] : Authentication failure user [munged] from 158.69.38.240

May  3 07:10:22 home sshd[3561]: Failed password for root from 132.232.51.177 port 48204 ssh2
May  3 07:16:33 home sshd[4796]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.51.177
May  3 07:16:35 home sshd[4796]: Failed password for invalid user client from 132.232.51.177 port 60474 ssh2
...

May  3 04:36:20 localhost sshd[113640]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.111.153  user=root
May  3 04:36:22 localhost sshd[113640]: Failed password for root from 118.25.111.153 port 39820 ssh2
May  3 04:39:30 localhost sshd[113967]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.111.153  user=root
May  3 04:39:33 localhost sshd[113967]: Failed password for root from 118.25.111.153 port 57472 ssh2
May  3 04:44:47 localhost sshd[114469]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.111.153  user=root
May  3 04:44:49 localhost sshd[114469]: Failed password for root from 118.25.111.153 port 55733 ssh2
...

(sshd) Failed SSH login from 200.29.111.182 (CO/Colombia/industriasintegradas.emcali.net.co): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: May  3 05:47:05 amsweb01 sshd[17803]: Invalid user oper from 200.29.111.182 port 35034
May  3 05:47:07 amsweb01 sshd[17803]: Failed password for invalid user oper from 200.29.111.182 port 35034 ssh2
May  3 05:53:03 amsweb01 sshd[18448]: Invalid user zhanglei from 200.29.111.182 port 42028
May  3 05:53:05 amsweb01 sshd[18448]: Failed password for invalid user zhanglei from 200.29.111.182 port 42028 ssh2
May  3 05:55:43 amsweb01 sshd[18770]: Invalid user xiaowei from 200.29.111.182 port 55237

1588478138 - 05/03/2020 05:55:38 Host: 123.25.93.53/123.25.93.53 Port: 445 TCP Blocked

$f2bV_matches

May  3 04:55:45 sigma sshd\[22690\]: Invalid user 1 from 77.247.181.162May  3 04:55:47 sigma sshd\[22690\]: Failed password for invalid user 1 from 77.247.181.162 port 58784 ssh2
...

May  3 07:01:24 relay postfix/smtpd\[20672\]: warning: unknown\[185.143.74.73\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
May  3 07:02:05 relay postfix/smtpd\[30793\]: warning: unknown\[185.143.74.73\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
May  3 07:02:29 relay postfix/smtpd\[29462\]: warning: unknown\[185.143.74.73\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
May  3 07:03:11 relay postfix/smtpd\[2148\]: warning: unknown\[185.143.74.73\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
May  3 07:03:33 relay postfix/smtpd\[26670\]: warning: unknown\[185.143.74.73\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...

May  3 00:51:18 lanister sshd[14036]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.215  user=root
May  3 00:51:20 lanister sshd[14036]: Failed password for root from 222.186.175.215 port 26428 ssh2
May  3 00:51:34 lanister sshd[14036]: error: maximum authentication attempts exceeded for root from 222.186.175.215 port 26428 ssh2 [preauth]
May  3 00:51:34 lanister sshd[14036]: Disconnecting: Too many authentication failures [preauth]

May  3 06:41:08 legacy sshd[6504]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.68.98.152
May  3 06:41:10 legacy sshd[6504]: Failed password for invalid user sonar from 111.68.98.152 port 56800 ssh2
May  3 06:47:38 legacy sshd[6923]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.68.98.152
...

May  2 22:42:07 server1 sshd\[7843\]: Invalid user sftp from 201.226.239.98
May  2 22:42:07 server1 sshd\[7843\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.226.239.98 
May  2 22:42:08 server1 sshd\[7843\]: Failed password for invalid user sftp from 201.226.239.98 port 18265 ssh2
May  2 22:44:50 server1 sshd\[8615\]: Invalid user carl from 201.226.239.98
May  2 22:44:50 server1 sshd\[8615\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.226.239.98 
...