2001:bc8:47a0:806::1 - - [02/Jan/2020:15:53:52 +0100] "GET /awstats.pl?framename=mainright&output=refererpages HTTP/1.0" 404 280 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.104 Safari/537.36 Core/1.53.2759.400 QQBrowser/9.6.11266.400"

2020-07-19T16:55:42.039466hermes postfix/smtpd[87871]: NOQUEUE: reject: RCPT from unknown[121.239.36.93]: 554 5.7.1 Service unavailable; Client host [121.239.36.93] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/121.239.36.93; from= to= proto=ESMTP helo=
...

Jul 19 10:24:55 home sshd[14496]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.161.45.65
Jul 19 10:24:57 home sshd[14496]: Failed password for invalid user test3 from 51.161.45.65 port 34922 ssh2
Jul 19 10:29:03 home sshd[15018]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.161.45.65
...

WordPress Drone detected by safePassage

1595145315 - 07/19/2020 09:55:15 Host: 188.136.168.18/188.136.168.18 Port: 8080 TCP Blocked

Jul 19 10:06:53 home sshd[12081]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.177.197
Jul 19 10:06:54 home sshd[12081]: Failed password for invalid user bxu from 49.233.177.197 port 53612 ssh2
Jul 19 10:12:31 home sshd[12766]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.177.197
...

Jul 19 10:04:25 srv01 postfix/smtpd\[16934\]: warning: unknown\[212.70.149.51\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul 19 10:04:25 srv01 postfix/smtpd\[10587\]: warning: unknown\[212.70.149.51\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul 19 10:04:25 srv01 postfix/smtpd\[5701\]: warning: unknown\[212.70.149.51\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul 19 10:04:49 srv01 postfix/smtpd\[11331\]: warning: unknown\[212.70.149.51\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul 19 10:04:57 srv01 postfix/smtpd\[5688\]: warning: unknown\[212.70.149.51\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...

(sshd) Failed SSH login from 159.65.196.65 (NL/Netherlands/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jul 19 11:04:03 s1 sshd[17144]: Invalid user hessam from 159.65.196.65 port 46022
Jul 19 11:04:05 s1 sshd[17144]: Failed password for invalid user hessam from 159.65.196.65 port 46022 ssh2
Jul 19 11:09:50 s1 sshd[17796]: Invalid user fred from 159.65.196.65 port 38118
Jul 19 11:09:52 s1 sshd[17796]: Failed password for invalid user fred from 159.65.196.65 port 38118 ssh2
Jul 19 11:15:01 s1 sshd[17975]: Invalid user dbuser from 159.65.196.65 port 54782

Jul 19 08:10:20 ns308116 sshd[5912]: Invalid user ys from 222.91.97.134 port 2099
Jul 19 08:10:20 ns308116 sshd[5912]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.91.97.134
Jul 19 08:10:22 ns308116 sshd[5912]: Failed password for invalid user ys from 222.91.97.134 port 2099 ssh2
Jul 19 08:18:25 ns308116 sshd[6176]: Invalid user bos from 222.91.97.134 port 2100
Jul 19 08:18:25 ns308116 sshd[6176]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.91.97.134
...

failed_logins

Jul 19 07:56:46 124388 sshd[8121]: Invalid user tempftp from 165.22.54.171 port 42746
Jul 19 07:56:46 124388 sshd[8121]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.54.171
Jul 19 07:56:46 124388 sshd[8121]: Invalid user tempftp from 165.22.54.171 port 42746
Jul 19 07:56:49 124388 sshd[8121]: Failed password for invalid user tempftp from 165.22.54.171 port 42746 ssh2
Jul 19 08:01:14 124388 sshd[8421]: Invalid user user from 165.22.54.171 port 58664

2020-07-19T11:01:02.804778afi-git.jinr.ru sshd[16041]: Failed password for root from 218.92.0.223 port 13163 ssh2
2020-07-19T11:01:06.281169afi-git.jinr.ru sshd[16041]: Failed password for root from 218.92.0.223 port 13163 ssh2
2020-07-19T11:01:09.175045afi-git.jinr.ru sshd[16041]: Failed password for root from 218.92.0.223 port 13163 ssh2
2020-07-19T11:01:09.175185afi-git.jinr.ru sshd[16041]: error: maximum authentication attempts exceeded for root from 218.92.0.223 port 13163 ssh2 [preauth]
2020-07-19T11:01:09.175199afi-git.jinr.ru sshd[16041]: Disconnecting: Too many authentication failures [preauth]
...

$f2bV_matches

2020-07-19T11:32:43.424902lavrinenko.info sshd[31601]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.104  user=root
2020-07-19T11:32:44.997806lavrinenko.info sshd[31601]: Failed password for root from 112.85.42.104 port 47315 ssh2
2020-07-19T11:32:43.424902lavrinenko.info sshd[31601]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.104  user=root
2020-07-19T11:32:44.997806lavrinenko.info sshd[31601]: Failed password for root from 112.85.42.104 port 47315 ssh2
2020-07-19T11:32:47.624754lavrinenko.info sshd[31601]: Failed password for root from 112.85.42.104 port 47315 ssh2
...

Jul 19 09:55:52 ns381471 sshd[32185]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.134.252
Jul 19 09:55:54 ns381471 sshd[32185]: Failed password for invalid user huy from 49.233.134.252 port 35662 ssh2

Jul 19 09:49:50 srv1 postfix/smtpd[11214]: warning: unknown[111.72.195.127]: SASL LOGIN authentication failed: authentication failure
Jul 19 09:56:58 srv1 postfix/smtpd[12080]: warning: unknown[111.72.195.127]: SASL LOGIN authentication failed: authentication failure
Jul 19 09:56:59 srv1 postfix/smtpd[12080]: warning: unknown[111.72.195.127]: SASL LOGIN authentication failed: authentication failure
Jul 19 09:57:00 srv1 postfix/smtpd[12080]: warning: unknown[111.72.195.127]: SASL LOGIN authentication failed: authentication failure
Jul 19 09:57:02 srv1 postfix/smtpd[12080]: warning: unknown[111.72.195.127]: SASL LOGIN authentication failed: authentication failure
...