2020-04-19T07:43:07.1647431495-001 sshd[30611]: Invalid user postgres from 77.232.100.223 port 55590
2020-04-19T07:43:09.1452241495-001 sshd[30611]: Failed password for invalid user postgres from 77.232.100.223 port 55590 ssh2
2020-04-19T07:49:23.8637251495-001 sshd[30848]: Invalid user wp from 77.232.100.223 port 47048
2020-04-19T07:49:23.8693361495-001 sshd[30848]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.232.100.223
2020-04-19T07:49:23.8637251495-001 sshd[30848]: Invalid user wp from 77.232.100.223 port 47048
2020-04-19T07:49:25.7968651495-001 sshd[30848]: Failed password for invalid user wp from 77.232.100.223 port 47048 ssh2
...

Apr 19 13:53:36 plex sshd[20892]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.52.139  user=root
Apr 19 13:53:38 plex sshd[20892]: Failed password for root from 222.186.52.139 port 17166 ssh2

45.143.220.48 was recorded 6 times by 2 hosts attempting to connect to the following ports: 4460,6660,7760. Incident counter (4h, 24h, all-time): 6, 24, 343

Apr 19 13:51:33 roki-contabo sshd\[29545\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.214.64.230  user=root
Apr 19 13:51:35 roki-contabo sshd\[29545\]: Failed password for root from 197.214.64.230 port 58844 ssh2
Apr 19 14:05:44 roki-contabo sshd\[29784\]: Invalid user we from 197.214.64.230
Apr 19 14:05:44 roki-contabo sshd\[29784\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.214.64.230
Apr 19 14:05:46 roki-contabo sshd\[29784\]: Failed password for invalid user we from 197.214.64.230 port 60446 ssh2
...

Invalid user mr from 190.113.91.52 port 38886

Apr 19 12:05:51 nopemail postfix/smtpd[7136]: NOQUEUE: reject: RCPT from unknown[45.143.223.15]: 554 5.7.1 : Relay access denied; from= to= proto=ESMTP helo=
...

Apr 19 13:40:52 mout sshd[4641]: Invalid user cl from 51.75.208.183 port 36608

Apr 19 14:19:47 plex sshd[21439]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.167  user=root
Apr 19 14:19:49 plex sshd[21439]: Failed password for root from 222.186.30.167 port 44730 ssh2

Apr 19 12:34:52 tuxlinux sshd[65293]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=72.86.165.43  user=root
Apr 19 12:34:54 tuxlinux sshd[65293]: Failed password for root from 72.86.165.43 port 4961 ssh2
Apr 19 12:34:52 tuxlinux sshd[65293]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=72.86.165.43  user=root
Apr 19 12:34:54 tuxlinux sshd[65293]: Failed password for root from 72.86.165.43 port 4961 ssh2
Apr 19 12:56:17 tuxlinux sshd[597]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=72.86.165.43  user=root
...

Apr 19 14:17:02 srv-ubuntu-dev3 sshd[49403]: Invalid user admin from 106.75.28.38
Apr 19 14:17:02 srv-ubuntu-dev3 sshd[49403]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.28.38
Apr 19 14:17:02 srv-ubuntu-dev3 sshd[49403]: Invalid user admin from 106.75.28.38
Apr 19 14:17:04 srv-ubuntu-dev3 sshd[49403]: Failed password for invalid user admin from 106.75.28.38 port 52035 ssh2
Apr 19 14:19:23 srv-ubuntu-dev3 sshd[49796]: Invalid user vf from 106.75.28.38
Apr 19 14:19:23 srv-ubuntu-dev3 sshd[49796]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.28.38
Apr 19 14:19:23 srv-ubuntu-dev3 sshd[49796]: Invalid user vf from 106.75.28.38
Apr 19 14:19:25 srv-ubuntu-dev3 sshd[49796]: Failed password for invalid user vf from 106.75.28.38 port 38196 ssh2
Apr 19 14:21:46 srv-ubuntu-dev3 sshd[50199]: Invalid user ubuntu from 106.75.28.38
...

(sshd) Failed SSH login from 202.77.105.100 (ID/Indonesia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Apr 19 13:52:18 amsweb01 sshd[11092]: User admin from 202.77.105.100 not allowed because not listed in AllowUsers
Apr 19 13:52:18 amsweb01 sshd[11092]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.77.105.100  user=admin
Apr 19 13:52:20 amsweb01 sshd[11092]: Failed password for invalid user admin from 202.77.105.100 port 59797 ssh2
Apr 19 13:57:27 amsweb01 sshd[11729]: Invalid user test from 202.77.105.100 port 40540
Apr 19 13:57:29 amsweb01 sshd[11729]: Failed password for invalid user test from 202.77.105.100 port 40540 ssh2

Apr 19 14:23:55 mout sshd[7420]: Invalid user fp from 82.65.23.62 port 35098

DigitalOcean BotNet attack - 10s of requests to non- pages - :443/app-ads.txt - typically bursts of 8 requests per second - undefined, XSS attacks
UA removed

Apr 19 12:05:40 scw-6657dc sshd[13631]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.32.23.58
Apr 19 12:05:40 scw-6657dc sshd[13631]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.32.23.58
Apr 19 12:05:42 scw-6657dc sshd[13631]: Failed password for invalid user admin from 213.32.23.58 port 39898 ssh2
...

$f2bV_matches