SSH brute-force: detected 1 distinct username(s) / 14 distinct password(s) within a 24-hour window.

Port probing on unauthorized port 8080

Jun  8 02:00:49 firewall sshd[8973]: Failed password for root from 180.76.179.43 port 37170 ssh2
Jun  8 02:04:40 firewall sshd[9128]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.179.43  user=root
Jun  8 02:04:42 firewall sshd[9128]: Failed password for root from 180.76.179.43 port 59672 ssh2
...

Jun  7 12:47:48 pixelmemory postfix/smtpd[2507276]: NOQUEUE: reject: RCPT from unknown[178.62.51.172]: 554 5.7.1 : Client host rejected: No abuse contact for DigitalOcean / Spam floods; from= to= proto=ESMTP helo=

Jun  8 05:39:13 ns382633 sshd\[14055\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.32.23.58  user=root
Jun  8 05:39:15 ns382633 sshd\[14055\]: Failed password for root from 213.32.23.58 port 59288 ssh2
Jun  8 05:50:09 ns382633 sshd\[16141\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.32.23.58  user=root
Jun  8 05:50:10 ns382633 sshd\[16141\]: Failed password for root from 213.32.23.58 port 58774 ssh2
Jun  8 05:53:38 ns382633 sshd\[16543\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.32.23.58  user=root

Jun  7 18:54:31 php1 sshd\[13758\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.136.128.13  user=root
Jun  7 18:54:33 php1 sshd\[13758\]: Failed password for root from 123.136.128.13 port 34806 ssh2
Jun  7 18:59:15 php1 sshd\[14258\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.136.128.13  user=root
Jun  7 18:59:17 php1 sshd\[14258\]: Failed password for root from 123.136.128.13 port 36236 ssh2
Jun  7 19:03:50 php1 sshd\[14808\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.136.128.13  user=root

SSH login attempts brute force.

Jun  8 07:50:56 prod4 sshd\[31693\]: Failed password for root from 218.92.0.184 port 21838 ssh2
Jun  8 07:51:00 prod4 sshd\[31693\]: Failed password for root from 218.92.0.184 port 21838 ssh2
Jun  8 07:51:03 prod4 sshd\[31693\]: Failed password for root from 218.92.0.184 port 21838 ssh2
...

Jun  7 19:57:17 wbs sshd\[27249\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.58.123.59  user=root
Jun  7 19:57:19 wbs sshd\[27249\]: Failed password for root from 211.58.123.59 port 36822 ssh2
Jun  7 20:00:41 wbs sshd\[27468\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.58.123.59  user=root
Jun  7 20:00:43 wbs sshd\[27468\]: Failed password for root from 211.58.123.59 port 33436 ssh2
Jun  7 20:04:02 wbs sshd\[27696\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.58.123.59  user=root

2020-06-07 09:40:53 Reject access to port(s):3306 1 times a day

Jun  8 05:53:55 scw-6657dc sshd[16746]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.139.173.199
Jun  8 05:53:55 scw-6657dc sshd[16746]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.139.173.199
Jun  8 05:53:56 scw-6657dc sshd[16746]: Failed password for invalid user elasticsearch from 14.139.173.199 port 46754 ssh2
...

2020-06-08T08:31:39.314934lavrinenko.info sshd[9001]: Failed password for root from 121.229.9.72 port 37579 ssh2
2020-06-08T08:33:52.961547lavrinenko.info sshd[9036]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.229.9.72  user=root
2020-06-08T08:33:54.864551lavrinenko.info sshd[9036]: Failed password for root from 121.229.9.72 port 52737 ssh2
2020-06-08T08:36:08.924849lavrinenko.info sshd[9155]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.229.9.72  user=root
2020-06-08T08:36:11.500240lavrinenko.info sshd[9155]: Failed password for root from 121.229.9.72 port 39662 ssh2
...

Jun  8 03:47:22 marvibiene sshd[3926]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.111.182.128  user=root
Jun  8 03:47:24 marvibiene sshd[3926]: Failed password for root from 36.111.182.128 port 37318 ssh2
Jun  8 03:53:43 marvibiene sshd[3947]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.111.182.128  user=root
Jun  8 03:53:45 marvibiene sshd[3947]: Failed password for root from 36.111.182.128 port 44224 ssh2
...

Automatic report - Port Scan Attack

ssh intrusion attempt