Sep  3 18:49:20 mellenthin postfix/smtpd[21042]: NOQUEUE: reject: RCPT from unknown[14.251.229.180]: 554 5.7.1 Service unavailable; Client host [14.251.229.180] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/14.251.229.180; from= to= proto=ESMTP helo=

Invalid user riana from 139.59.92.19 port 60256

firewall-block, port(s): 5806/tcp

1599151783 - 09/03/2020 18:49:43 Host: 191.254.221.1/191.254.221.1 Port: 445 TCP Blocked

Sep  4 04:19:49 mailman postfix/smtpd[28694]: warning: unknown[200.119.138.42]: SASL PLAIN authentication failed: authentication failure

$f2bV_matches

2020-08-10 19:31:24,344 fail2ban.actions        [1312]: NOTICE  [sshd] Ban 210.56.23.100
2020-08-10 19:50:19,920 fail2ban.actions        [1312]: NOTICE  [sshd] Ban 210.56.23.100
2020-08-10 20:08:55,711 fail2ban.actions        [1312]: NOTICE  [sshd] Ban 210.56.23.100
2020-08-10 20:27:19,241 fail2ban.actions        [1312]: NOTICE  [sshd] Ban 210.56.23.100
2020-08-10 20:45:31,836 fail2ban.actions        [1312]: NOTICE  [sshd] Ban 210.56.23.100
...

Lines containing failures of 177.159.102.122
Sep  2 10:09:47 MAKserver05 sshd[25833]: Did not receive identification string from 177.159.102.122 port 3313
Sep  2 10:09:51 MAKserver05 sshd[25834]: Invalid user service from 177.159.102.122 port 4718
Sep  2 10:09:51 MAKserver05 sshd[25834]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.159.102.122 
Sep  2 10:09:53 MAKserver05 sshd[25834]: Failed password for invalid user service from 177.159.102.122 port 4718 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=177.159.102.122

Unauthorised access (Sep  3) SRC=197.243.19.199 LEN=40 TTL=237 ID=63275 TCP DPT=445 WINDOW=1024 SYN

Sep  4 12:54:05 rotator sshd\[15347\]: Failed password for root from 218.78.213.143 port 58763 ssh2Sep  4 12:57:01 rotator sshd\[16105\]: Invalid user anurag from 218.78.213.143Sep  4 12:57:03 rotator sshd\[16105\]: Failed password for invalid user anurag from 218.78.213.143 port 26691 ssh2Sep  4 13:00:09 rotator sshd\[16262\]: Invalid user raspberry from 218.78.213.143Sep  4 13:00:11 rotator sshd\[16262\]: Failed password for invalid user raspberry from 218.78.213.143 port 48237 ssh2Sep  4 13:03:06 rotator sshd\[16903\]: Invalid user monte from 218.78.213.143
...

77.247.181.165 (NL/Netherlands/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep  4 08:32:53 server2 sshd[29416]: Failed password for root from 181.13.132.88 port 55278 ssh2
Sep  4 08:34:22 server2 sshd[30189]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.148.107  user=root
Sep  4 08:26:10 server2 sshd[25330]: Failed password for root from 77.247.181.165 port 4008 ssh2
Sep  4 08:34:24 server2 sshd[30189]: Failed password for root from 134.209.148.107 port 41828 ssh2
Sep  4 08:37:27 server2 sshd[31858]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.207.57  user=root

IP Addresses Blocked:

181.13.132.88 (AR/Argentina/-)
134.209.148.107 (IN/India/-)

Sep  4 05:01:23 ns37 sshd[8108]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.211.167.49

TCP ports : 2807 / 6031 / 15177 / 26630

$f2bV_matches

(smtpauth) Failed SMTP AUTH login from 52.156.169.35 (AU/Australia/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-09-04 04:29:20 login authenticator failed for (ADMIN) [52.156.169.35]: 535 Incorrect authentication data (set_id=info@fmc-co.com)