Aug  2 19:04:44 elenin sshd[6866]: Invalid user management from 190.102.98.197
Aug  2 19:04:44 elenin sshd[6866]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.102.98.197 
Aug  2 19:04:46 elenin sshd[6866]: Failed password for invalid user management from 190.102.98.197 port 33008 ssh2
Aug  2 19:04:46 elenin sshd[6866]: Received disconnect from 190.102.98.197: 11: Bye Bye [preauth]
Aug  2 19:13:39 elenin sshd[6880]: Invalid user nordica from 190.102.98.197
Aug  2 19:13:39 elenin sshd[6880]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.102.98.197 
Aug  2 19:13:41 elenin sshd[6880]: Failed password for invalid user nordica from 190.102.98.197 port 52758 ssh2
Aug  2 19:13:41 elenin sshd[6880]: Received disconnect from 190.102.98.197: 11: Bye Bye [preauth]
Aug  2 19:18:31 elenin sshd[6887]: Invalid user planeacion from 190.102.98.197
Aug  2 19:18:31 elenin sshd[6887]: pam_unix(sshd:........
-------------------------------

Aug  2 21:31:37 dedicated sshd[20906]: Invalid user hera from 193.112.55.60 port 44064

pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.196.240
Failed password for invalid user 123456 from 193.112.196.240 port 59452 ssh2
Invalid user teste1 from 193.112.196.240 port 55424
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.196.240
Failed password for invalid user teste1 from 193.112.196.240 port 55424 ssh2

3391/tcp 27411/tcp 12700/tcp...
[2019-06-03/08-02]2056pkt,328pt.(tcp)

2323/tcp 23/tcp 23/tcp
[2019-07-21/08-02]3pkt

failed_logins

Aug  2 21:52:35 SilenceServices sshd[25135]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.111.218
Aug  2 21:52:37 SilenceServices sshd[25135]: Failed password for invalid user mongouser from 37.187.111.218 port 54856 ssh2
Aug  2 21:57:38 SilenceServices sshd[27923]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.111.218

Aug  2 21:27:53 eventyay sshd[13756]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.109.31
Aug  2 21:27:55 eventyay sshd[13756]: Failed password for invalid user at from 212.64.109.31 port 43178 ssh2
Aug  2 21:32:00 eventyay sshd[14764]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.109.31
...

2019-08-02 14:32:19 H=(logudorotours.it) [148.77.34.200]:42120 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/query/ip/148.77.34.200)
2019-08-02 14:32:19 H=(logudorotours.it) [148.77.34.200]:42120 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/query/ip/148.77.34.200)
2019-08-02 14:32:20 H=(logudorotours.it) [148.77.34.200]:42120 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/query/ip/148.77.34.200)
...

Aug  2 22:24:41 pkdns2 sshd\[27037\]: Invalid user admin from 198.245.63.151Aug  2 22:24:43 pkdns2 sshd\[27037\]: Failed password for invalid user admin from 198.245.63.151 port 52642 ssh2Aug  2 22:28:49 pkdns2 sshd\[27196\]: Invalid user support from 198.245.63.151Aug  2 22:28:51 pkdns2 sshd\[27196\]: Failed password for invalid user support from 198.245.63.151 port 49808 ssh2Aug  2 22:32:54 pkdns2 sshd\[27351\]: Invalid user myrhodesiaiscom from 198.245.63.151Aug  2 22:32:55 pkdns2 sshd\[27351\]: Failed password for invalid user myrhodesiaiscom from 198.245.63.151 port 46852 ssh2
...

Aug  2 22:49:13 tuotantolaitos sshd[31556]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.87.9.155
Aug  2 22:49:15 tuotantolaitos sshd[31556]: Failed password for invalid user student from 212.87.9.155 port 50954 ssh2
...

Aug  2 21:34:18 microserver sshd[50757]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.7.120.10  user=root
Aug  2 21:34:20 microserver sshd[50757]: Failed password for root from 114.7.120.10 port 47466 ssh2
Aug  2 21:39:51 microserver sshd[52143]: Invalid user xena from 114.7.120.10 port 45172
Aug  2 21:39:51 microserver sshd[52143]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.7.120.10
Aug  2 21:39:53 microserver sshd[52143]: Failed password for invalid user xena from 114.7.120.10 port 45172 ssh2
Aug  2 21:50:45 microserver sshd[54509]: Invalid user range from 114.7.120.10 port 40457
Aug  2 21:50:45 microserver sshd[54509]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.7.120.10
Aug  2 21:50:47 microserver sshd[54509]: Failed password for invalid user range from 114.7.120.10 port 40457 ssh2
Aug  2 21:56:13 microserver sshd[55568]: Invalid user whois from 114.7.120.10 port

Aug  2 10:34:20 mail sshd[4551]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.237.255.204  user=root
Aug  2 10:34:22 mail sshd[4551]: Failed password for root from 104.237.255.204 port 56020 ssh2
Aug  2 18:00:56 mail sshd[2159]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.237.255.204  user=root
Aug  2 18:00:58 mail sshd[2159]: Failed password for root from 104.237.255.204 port 44644 ssh2
Aug  2 18:05:30 mail sshd[2763]: Invalid user user from 104.237.255.204
...

185.220.101.5 - - - [02/Aug/2019:19:32:48 +0000] "GET /wp-x1rp.php HTTP/1.1" 404 162 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:19.0) Gecko/20100101 Firefox/19.0" "-" "-"

Automatic report - Port Scan Attack