Dec  5 10:56:53 hanapaa sshd\[15127\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.235.57.184  user=root
Dec  5 10:56:54 hanapaa sshd\[15127\]: Failed password for root from 148.235.57.184 port 42978 ssh2
Dec  5 11:03:58 hanapaa sshd\[15751\]: Invalid user ko from 148.235.57.184
Dec  5 11:03:58 hanapaa sshd\[15751\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.235.57.184
Dec  5 11:04:00 hanapaa sshd\[15751\]: Failed password for invalid user ko from 148.235.57.184 port 51500 ssh2

Dec  5 22:19:16 vps647732 sshd[25607]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.10.17.84
Dec  5 22:19:18 vps647732 sshd[25607]: Failed password for invalid user by from 186.10.17.84 port 59978 ssh2
...

Dec  5 20:59:12 web8 sshd\[14902\]: Invalid user openerp from 164.132.62.233
Dec  5 20:59:12 web8 sshd\[14902\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.62.233
Dec  5 20:59:14 web8 sshd\[14902\]: Failed password for invalid user openerp from 164.132.62.233 port 39468 ssh2
Dec  5 21:04:17 web8 sshd\[17288\]: Invalid user naoko from 164.132.62.233
Dec  5 21:04:17 web8 sshd\[17288\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.62.233

Dec  5 21:58:07 lnxded64 sshd[11041]: Failed password for root from 202.137.20.58 port 56714 ssh2
Dec  5 22:04:45 lnxded64 sshd[13116]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.137.20.58
Dec  5 22:04:47 lnxded64 sshd[13116]: Failed password for invalid user heselov from 202.137.20.58 port 33722 ssh2

2019-12-05T21:10:31.746311abusebot-8.cloudsearch.cf sshd\[8020\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.114.226  user=root

Dec  5 22:03:49 * sshd[22218]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.134.224
Dec  5 22:03:51 * sshd[22218]: Failed password for invalid user karess from 49.235.134.224 port 50352 ssh2

Automatic report - Port Scan Attack

Dec  5 21:56:53 h2421860 postfix/postscreen[18913]: CONNECT from [63.81.90.63]:58945 to [85.214.119.52]:25
Dec  5 21:56:53 h2421860 postfix/dnsblog[18915]: addr 63.81.90.63 listed by domain b.barracudacentral.org as 127.0.0.2
Dec  5 21:56:53 h2421860 postfix/dnsblog[18917]: addr 63.81.90.63 listed by domain zen.spamhaus.org as 127.0.0.3
Dec  5 21:56:54 h2421860 postfix/dnsblog[18917]: addr 63.81.90.63 listed by domain Unknown.trblspam.com as 185.53.179.7
Dec  5 21:56:59 h2421860 postfix/postscreen[18913]: DNSBL rank 6 for [63.81.90.63]:58945
Dec x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=63.81.90.63

Dec  5 21:04:36 ncomp sshd[24178]: User dovecot from 138.197.98.251 not allowed because none of user's groups are listed in AllowGroups
Dec  5 21:04:37 ncomp sshd[24178]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.98.251  user=dovecot
Dec  5 21:04:36 ncomp sshd[24178]: User dovecot from 138.197.98.251 not allowed because none of user's groups are listed in AllowGroups
Dec  5 21:04:39 ncomp sshd[24178]: Failed password for invalid user dovecot from 138.197.98.251 port 43072 ssh2

Dec  5 21:50:59 sbg01 sshd[17915]: Failed password for root from 182.61.58.131 port 36282 ssh2
Dec  5 22:06:01 sbg01 sshd[18026]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.58.131
Dec  5 22:06:03 sbg01 sshd[18026]: Failed password for invalid user norment from 182.61.58.131 port 46770 ssh2

2019-12-05T20:58:06.410973shield sshd\[15431\]: Invalid user pasek from 111.40.160.218 port 43457
2019-12-05T20:58:06.415536shield sshd\[15431\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.40.160.218
2019-12-05T20:58:08.158704shield sshd\[15431\]: Failed password for invalid user pasek from 111.40.160.218 port 43457 ssh2
2019-12-05T21:04:07.944808shield sshd\[16528\]: Invalid user aschim from 111.40.160.218 port 34836
2019-12-05T21:04:07.949447shield sshd\[16528\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.40.160.218

2019-12-05T21:04:06.912854abusebot.cloudsearch.cf sshd\[27097\]: Invalid user down from 158.69.204.172 port 54312

2019-12-05T21:36:21.927530abusebot-3.cloudsearch.cf sshd\[26546\]: Invalid user Pass@w0rd@1 from 182.139.134.107 port 23937

Dec  5 22:09:29 smtp postfix/smtpd[3746]: NOQUEUE: reject: RCPT from tailor.swingthelamp.com[69.94.158.99]: 554 5.7.1 Service unavailable; Client host [69.94.158.99] blocked using cbl.abuseat.org; Blocked - see http://www.abuseat.org/lookup.cgi?ip=69.94.158.99; from= to= proto=ESMTP helo=
...

Automatic report - Banned IP Access