11/30/2019-23:41:54.892917 80.82.77.245 Protocol: 17 ET DROP Dshield Block Listed Source group 1

Sep 18 07:02:21 meumeu sshd[10618]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.83.1.182 
Sep 18 07:02:23 meumeu sshd[10618]: Failed password for invalid user admin from 49.83.1.182 port 45330 ssh2
Sep 18 07:02:27 meumeu sshd[10618]: Failed password for invalid user admin from 49.83.1.182 port 45330 ssh2
Sep 18 07:02:31 meumeu sshd[10618]: Failed password for invalid user admin from 49.83.1.182 port 45330 ssh2
...

$f2bV_matches

\[2019-11-30 17:41:54\] NOTICE\[2754\] chan_sip.c: Registration from '"4000" \' failed for '64.31.35.218:6168' - Wrong password
\[2019-11-30 17:41:54\] SECURITY\[2765\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-30T17:41:54.732-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="4000",SessionID="0x7f26c40e0438",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/64.31.35.218/6168",Challenge="178e8b71",ReceivedChallenge="178e8b71",ReceivedHash="6127aa41a395017f4856c39a7389980a"
\[2019-11-30 17:41:54\] NOTICE\[2754\] chan_sip.c: Registration from '"4000" \' failed for '64.31.35.218:6168' - Wrong password
\[2019-11-30 17:41:54\] SECURITY\[2765\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-30T17:41:54.815-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="4000",SessionID="0x7f26c4ab1d88",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/6

Nov 30 21:47:17 ghostname-secure sshd[32089]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.162.51  user=r.r
Nov 30 21:47:18 ghostname-secure sshd[32089]: Failed password for r.r from 134.209.162.51 port 51650 ssh2
Nov 30 21:47:18 ghostname-secure sshd[32089]: Received disconnect from 134.209.162.51: 11: Bye Bye [preauth]
Nov 30 21:59:32 ghostname-secure sshd[32363]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.162.51  user=r.r
Nov 30 21:59:34 ghostname-secure sshd[32363]: Failed password for r.r from 134.209.162.51 port 60902 ssh2
Nov 30 21:59:34 ghostname-secure sshd[32363]: Received disconnect from 134.209.162.51: 11: Bye Bye [preauth]
Nov 30 22:03:13 ghostname-secure sshd[32400]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.162.51  user=r.r
Nov 30 22:03:15 ghostname-secure sshd[32400]: Failed password for r.r from 13........
-------------------------------

Nov  2 15:54:52 server6 sshd[32257]: reveeclipse mapping checking getaddrinfo for 185.8.212.44.ip.uzinfocom.uz [185.8.212.44] failed - POSSIBLE BREAK-IN ATTEMPT!
Nov  2 15:54:52 server6 sshd[32257]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.8.212.44  user=r.r
Nov  2 15:54:54 server6 sshd[32257]: Failed password for r.r from 185.8.212.44 port 50646 ssh2
Nov  2 15:54:54 server6 sshd[32257]: Received disconnect from 185.8.212.44: 11: Bye Bye [preauth]
Nov 30 22:55:43 server6 sshd[13486]: reveeclipse mapping checking getaddrinfo for 185.8.212.44.ip.uzinfocom.uz [185.8.212.44] failed - POSSIBLE BREAK-IN ATTEMPT!
Nov 30 22:55:43 server6 sshd[13486]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.8.212.44  user=r.r
Nov 30 22:55:45 server6 sshd[13486]: Failed password for r.r from 185.8.212.44 port 48290 ssh2
Nov 30 22:55:45 server6 sshd[13486]: Received disconnect from 185.8.212.44: ........
-------------------------------

Nov 30 23:41:41 MK-Soft-VM3 sshd[31837]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.163.125 
Nov 30 23:41:43 MK-Soft-VM3 sshd[31837]: Failed password for invalid user agbezukey from 142.93.163.125 port 42398 ssh2
...

2019-11-30T23:07:44.634025+00:00 suse sshd[12435]: User root from 218.92.0.193 not allowed because not listed in AllowUsers
2019-11-30T23:07:48.010223+00:00 suse sshd[12435]: error: PAM: Authentication failure for illegal user root from 218.92.0.193
2019-11-30T23:07:44.634025+00:00 suse sshd[12435]: User root from 218.92.0.193 not allowed because not listed in AllowUsers
2019-11-30T23:07:48.010223+00:00 suse sshd[12435]: error: PAM: Authentication failure for illegal user root from 218.92.0.193
2019-11-30T23:07:44.634025+00:00 suse sshd[12435]: User root from 218.92.0.193 not allowed because not listed in AllowUsers
2019-11-30T23:07:48.010223+00:00 suse sshd[12435]: error: PAM: Authentication failure for illegal user root from 218.92.0.193
2019-11-30T23:07:48.014791+00:00 suse sshd[12435]: Failed keyboard-interactive/pam for invalid user root from 218.92.0.193 port 7491 ssh2
...

2019-11-30T23:24:31.968449ns386461 sshd\[2174\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.112.220.218  user=root
2019-11-30T23:24:34.114541ns386461 sshd\[2174\]: Failed password for root from 40.112.220.218 port 13248 ssh2
2019-11-30T23:41:31.367793ns386461 sshd\[17412\]: Invalid user ssmaru from 40.112.220.218 port 13248
2019-11-30T23:41:31.372752ns386461 sshd\[17412\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.112.220.218
2019-11-30T23:41:33.878631ns386461 sshd\[17412\]: Failed password for invalid user ssmaru from 40.112.220.218 port 13248 ssh2
...

Nov 30 12:38:17 wbs sshd\[11773\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.87.157.202  user=uucp
Nov 30 12:38:19 wbs sshd\[11773\]: Failed password for uucp from 183.87.157.202 port 46704 ssh2
Nov 30 12:41:46 wbs sshd\[12138\]: Invalid user admin from 183.87.157.202
Nov 30 12:41:46 wbs sshd\[12138\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.87.157.202
Nov 30 12:41:47 wbs sshd\[12138\]: Failed password for invalid user admin from 183.87.157.202 port 53768 ssh2

2019-11-30 23:24:49 H=(mx.mer.jo) [49.68.94.209]:46491 I=[10.100.18.25]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=49.68.94.209)
2019-11-30 23:28:55 H=(vpxxxxxxx6620.com) [49.68.94.209]:47426 I=[10.100.18.25]:25 sender verify fail for : Unrouteable address
2019-11-30 x@x

........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=49.68.94.209

Nov 19 20:46:44 meumeu sshd[11393]: Failed password for root from 49.73.61.26 port 54448 ssh2
Nov 19 20:50:54 meumeu sshd[11925]: Failed password for sync from 49.73.61.26 port 44376 ssh2
...

Dec  1 01:27:02 hosting sshd[20392]: Invalid user sunyna from 106.13.121.175 port 41204
Dec  1 01:27:02 hosting sshd[20392]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.121.175
Dec  1 01:27:02 hosting sshd[20392]: Invalid user sunyna from 106.13.121.175 port 41204
Dec  1 01:27:04 hosting sshd[20392]: Failed password for invalid user sunyna from 106.13.121.175 port 41204 ssh2
Dec  1 01:41:23 hosting sshd[21373]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.121.175  user=root
Dec  1 01:41:24 hosting sshd[21373]: Failed password for root from 106.13.121.175 port 57555 ssh2
...

2019-11-30T22:50:40.185820abusebot-2.cloudsearch.cf sshd\[14711\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.232  user=root

port scan/probe/communication attempt; port 23