Sep 19 21:34:52 relay postfix/smtpd\[4841\]: warning: unknown\[46.38.144.146\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 19 21:35:10 relay postfix/smtpd\[22973\]: warning: unknown\[46.38.144.146\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 19 21:36:11 relay postfix/smtpd\[13062\]: warning: unknown\[46.38.144.146\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 19 21:36:29 relay postfix/smtpd\[1384\]: warning: unknown\[46.38.144.146\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 19 21:37:30 relay postfix/smtpd\[13062\]: warning: unknown\[46.38.144.146\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...

Sep 19 21:35:20 cvbmail sshd\[4047\]: Invalid user a1 from 162.247.73.192
Sep 19 21:35:20 cvbmail sshd\[4047\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.247.73.192
Sep 19 21:35:21 cvbmail sshd\[4047\]: Failed password for invalid user a1 from 162.247.73.192 port 57454 ssh2

Sep 19 18:18:04 xb3 sshd[22578]: Failed password for invalid user alfresco from 132.248.192.9 port 55774 ssh2
Sep 19 18:18:04 xb3 sshd[22578]: Received disconnect from 132.248.192.9: 11: Bye Bye [preauth]
Sep 19 18:23:36 xb3 sshd[24854]: Failed password for invalid user shclient from 132.248.192.9 port 49636 ssh2
Sep 19 18:23:36 xb3 sshd[24854]: Received disconnect from 132.248.192.9: 11: Bye Bye [preauth]
Sep 19 18:27:59 xb3 sshd[23662]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.248.192.9  user=r.r
Sep 19 18:28:02 xb3 sshd[23662]: Failed password for r.r from 132.248.192.9 port 36908 ssh2
Sep 19 18:28:02 xb3 sshd[23662]: Received disconnect from 132.248.192.9: 11: Bye Bye [preauth]
Sep 19 18:32:25 xb3 sshd[25472]: Failed password for invalid user user from 132.248.192.9 port 52412 ssh2
Sep 19 18:32:26 xb3 sshd[25472]: Received disconnect from 132.248.192.9: 11: Bye Bye [preauth]
Sep 19 18:36:56 xb3 sshd[24134]: Failed p........
-------------------------------

Sep 19 21:35:38 cvbmail sshd\[4061\]: Invalid user a from 23.129.64.205
Sep 19 21:35:38 cvbmail sshd\[4061\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.129.64.205
Sep 19 21:35:40 cvbmail sshd\[4061\]: Failed password for invalid user a from 23.129.64.205 port 58321 ssh2

Sep 19 21:35:06 srv206 sshd[23952]: Invalid user sv from 178.128.194.116
...

IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/81.248.17.53/ 
 FR - 1H : (67)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : FR 
 NAME ASN : ASN3215 
 
 IP : 81.248.17.53 
 
 CIDR : 81.248.16.0/20 
 
 PREFIX COUNT : 1458 
 
 UNIQUE IP COUNT : 20128512 
 
 
 WYKRYTE ATAKI Z ASN3215 :  
  1H - 1 
  3H - 2 
  6H - 2 
 12H - 5 
 24H - 9 
 
 INFO : SYN Flood DDoS Attack Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN  - data recovery

2019-09-19T19:53:24.950724abusebot.cloudsearch.cf sshd\[24565\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62-210-140-24.rev.poneytelecom.eu  user=root

Sep 19 21:26:48 dev0-dcde-rnet sshd[5542]: Failed password for root from 222.186.42.241 port 27194 ssh2
Sep 19 21:33:02 dev0-dcde-rnet sshd[5553]: Failed password for root from 222.186.42.241 port 22332 ssh2

Sep 19 20:00:23 hcbbdb sshd\[6121\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.152  user=root
Sep 19 20:00:26 hcbbdb sshd\[6121\]: Failed password for root from 222.186.30.152 port 53480 ssh2
Sep 19 20:00:28 hcbbdb sshd\[6121\]: Failed password for root from 222.186.30.152 port 53480 ssh2
Sep 19 20:00:29 hcbbdb sshd\[6121\]: Failed password for root from 222.186.30.152 port 53480 ssh2
Sep 19 20:06:31 hcbbdb sshd\[6845\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.152  user=root

2019-09-19T21:21:27.490647  sshd[8399]: Invalid user monitor from 58.47.177.161 port 38468
2019-09-19T21:21:27.505811  sshd[8399]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.47.177.161
2019-09-19T21:21:27.490647  sshd[8399]: Invalid user monitor from 58.47.177.161 port 38468
2019-09-19T21:21:29.578460  sshd[8399]: Failed password for invalid user monitor from 58.47.177.161 port 38468 ssh2
2019-09-19T21:35:23.758469  sshd[8808]: Invalid user pulse-access from 58.47.177.161 port 51599
...

Sep 19 20:02:30 hcbbdb sshd\[6372\]: Invalid user sftp from 51.83.77.224
Sep 19 20:02:30 hcbbdb sshd\[6372\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=224.ip-51-83-77.eu
Sep 19 20:02:32 hcbbdb sshd\[6372\]: Failed password for invalid user sftp from 51.83.77.224 port 48698 ssh2
Sep 19 20:06:37 hcbbdb sshd\[6865\]: Invalid user aksel from 51.83.77.224
Sep 19 20:06:37 hcbbdb sshd\[6865\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=224.ip-51-83-77.eu

3389BruteforceFW23

$f2bV_matches

2019-09-19T21:35:30.687548stark.klein-stark.info postfix/smtpd\[19814\]: NOQUEUE: reject: RCPT from woman.krcsf.com\[45.146.202.118\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\
...

Sep 19 21:35:47 vps647732 sshd[9927]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=108.176.0.2
Sep 19 21:35:49 vps647732 sshd[9927]: Failed password for invalid user pi from 108.176.0.2 port 56559 ssh2
...