Jun 30 11:48:39 *** sshd[23996]: Invalid user adminftp from 205.185.122.18

Jun 30 05:48:18 host sshd[29333]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.136.167.228  user=root
Jun 30 05:48:20 host sshd[29333]: Failed password for root from 150.136.167.228 port 44464 ssh2
...

Jun 19 15:23:35 WHD8 dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 8 secs\): user=\, method=PLAIN, rip=188.170.93.242, lip=10.64.89.208, TLS: Disconnected, session=\<9BtmzG+oh9y8ql3y\>
Jun 20 06:32:46 WHD8 dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 6 secs\): user=\, method=PLAIN, rip=188.170.93.242, lip=10.64.89.208, TLS: Disconnected, session=\
Jun 20 15:23:02 WHD8 dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 10 secs\): user=\, method=PLAIN, rip=188.170.93.242, lip=10.64.89.208, TLS, session=\
Jun 21 04:27:37 WHD8 dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 6 secs\): user=\, method=PLAIN, rip=188.170.93.242, lip=10.64.89.208, TLS, session=\
Jun 21 10:54:23 WHD8 dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 6
...

$f2bV_matches

Jun 30 11:15:43 vps sshd[517816]: Invalid user arma3server from 139.199.5.50 port 56870
Jun 30 11:15:43 vps sshd[517816]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.5.50
Jun 30 11:15:45 vps sshd[517816]: Failed password for invalid user arma3server from 139.199.5.50 port 56870 ssh2
Jun 30 11:18:04 vps sshd[528052]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.5.50  user=root
Jun 30 11:18:06 vps sshd[528052]: Failed password for root from 139.199.5.50 port 53800 ssh2
...

Jun 30 04:47:53 ms-srv sshd[62405]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.160.132.24
Jun 30 04:47:56 ms-srv sshd[62405]: Failed password for invalid user tech from 113.160.132.24 port 53342 ssh2

Invalid user ken from 140.143.244.31 port 57748

Unauthorised connection attempt detected at AUO MAIN. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)

[2020-06-30 07:18:26] NOTICE[1273] chan_sip.c: Registration from '' failed for '185.36.81.232:49644' - Wrong password
[2020-06-30 07:18:26] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-30T07:18:26.691-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="708",SessionID="0x7f31c018ea98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.36.81.232/49644",Challenge="7ca575de",ReceivedChallenge="7ca575de",ReceivedHash="ce24efddd2ea2b0fb663d07da2e9f088"
[2020-06-30 07:24:45] NOTICE[1273] chan_sip.c: Registration from '' failed for '185.36.81.232:50896' - Wrong password
[2020-06-30 07:24:45] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-30T07:24:45.028-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="709",SessionID="0x7f31c004df38",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.36.81.232/508
...

(smtpauth) Failed SMTP AUTH login from 52.188.150.173 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-06-30 08:17:48 login authenticator failed for (ADMIN) [52.188.150.173]: 535 Incorrect authentication data (set_id=itmanager@iwnt.com)

Jun 30 00:29:01 ny01 sshd[29656]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.140.69
Jun 30 00:29:04 ny01 sshd[29656]: Failed password for invalid user o from 118.24.140.69 port 30971 ssh2
Jun 30 00:31:48 ny01 sshd[30008]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.140.69

Invalid user joomla from 128.199.170.33 port 44572

Jun 30 12:17:42 IngegnereFirenze sshd[7955]: User root from 171.25.193.77 not allowed because not listed in AllowUsers
...

Jun 30 11:36:49  sshd\[27369\]: Invalid user developer from 122.176.49.139Jun 30 11:36:51  sshd\[27369\]: Failed password for invalid user developer from 122.176.49.139 port 50548 ssh2
...

leo_www