2019-12-22T08:32:07.477299shield sshd\[17546\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.6  user=root
2019-12-22T08:32:08.917732shield sshd\[17546\]: Failed password for root from 222.186.180.6 port 35684 ssh2
2019-12-22T08:32:12.344855shield sshd\[17546\]: Failed password for root from 222.186.180.6 port 35684 ssh2
2019-12-22T08:32:15.518327shield sshd\[17546\]: Failed password for root from 222.186.180.6 port 35684 ssh2
2019-12-22T08:32:19.105180shield sshd\[17546\]: Failed password for root from 222.186.180.6 port 35684 ssh2

Portscan or hack attempt detected by psad/fwsnort

Dec 22 07:05:03 zeus sshd[4336]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.57.103.38 
Dec 22 07:05:04 zeus sshd[4336]: Failed password for invalid user pascoe from 119.57.103.38 port 59240 ssh2
Dec 22 07:11:15 zeus sshd[4569]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.57.103.38 
Dec 22 07:11:18 zeus sshd[4569]: Failed password for invalid user edises from 119.57.103.38 port 52974 ssh2

Dec 22 08:05:41 unicornsoft sshd\[11995\]: Invalid user idell from 85.214.147.199
Dec 22 08:05:41 unicornsoft sshd\[11995\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.214.147.199
Dec 22 08:05:43 unicornsoft sshd\[11995\]: Failed password for invalid user idell from 85.214.147.199 port 51172 ssh2

Dec 22 08:58:35 legacy sshd[10243]: Failed password for root from 122.51.154.150 port 15123 ssh2
Dec 22 09:05:22 legacy sshd[10462]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.154.150
Dec 22 09:05:24 legacy sshd[10462]: Failed password for invalid user vorstermans from 122.51.154.150 port 64633 ssh2
...

Dec 22 08:58:09 v22018053744266470 sshd[5321]: Failed password for root from 49.88.112.110 port 19418 ssh2
Dec 22 08:59:31 v22018053744266470 sshd[5409]: Failed password for root from 49.88.112.110 port 10888 ssh2
...

Dec 22 08:10:30 ns41 sshd[18648]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.131.146.147

Invalid user wwwrun from 192.169.216.233 port 36145
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.169.216.233
Failed password for invalid user wwwrun from 192.169.216.233 port 36145 ssh2
Invalid user nfs from 192.169.216.233 port 47967
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.169.216.233

Dec 21 21:45:17 tdfoods sshd\[24626\]: Invalid user test from 216.189.145.128
Dec 21 21:45:17 tdfoods sshd\[24626\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=216.189.145.128
Dec 21 21:45:19 tdfoods sshd\[24626\]: Failed password for invalid user test from 216.189.145.128 port 33060 ssh2
Dec 21 21:50:53 tdfoods sshd\[25095\]: Invalid user operator from 216.189.145.128
Dec 21 21:50:53 tdfoods sshd\[25095\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=216.189.145.128

Dec 22 08:41:37 h2177944 sshd\[26535\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.154.64  user=root
Dec 22 08:41:39 h2177944 sshd\[26535\]: Failed password for root from 118.24.154.64 port 51170 ssh2
Dec 22 09:05:57 h2177944 sshd\[27903\]: Invalid user ashima from 118.24.154.64 port 43358
Dec 22 09:05:57 h2177944 sshd\[27903\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.154.64
...

Dec 21 21:25:58 php1 sshd\[18515\]: Invalid user saisyu from 221.132.17.74
Dec 21 21:25:58 php1 sshd\[18515\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.132.17.74
Dec 21 21:26:00 php1 sshd\[18515\]: Failed password for invalid user saisyu from 221.132.17.74 port 52180 ssh2
Dec 21 21:33:26 php1 sshd\[19402\]: Invalid user wenjie123 from 221.132.17.74
Dec 21 21:33:26 php1 sshd\[19402\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.132.17.74

Dec 22 06:42:01 web8 sshd\[29396\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.0.20  user=root
Dec 22 06:42:03 web8 sshd\[29396\]: Failed password for root from 37.187.0.20 port 56602 ssh2
Dec 22 06:48:38 web8 sshd\[32423\]: Invalid user gdm from 37.187.0.20
Dec 22 06:48:38 web8 sshd\[32423\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.0.20
Dec 22 06:48:40 web8 sshd\[32423\]: Failed password for invalid user gdm from 37.187.0.20 port 34602 ssh2

Dec 22 09:06:25 vps647732 sshd[31958]: Failed password for root from 218.92.0.157 port 15403 ssh2
Dec 22 09:06:28 vps647732 sshd[31958]: Failed password for root from 218.92.0.157 port 15403 ssh2
...

Dec 22 07:28:54 grey postfix/smtpd\[24545\]: NOQUEUE: reject: RCPT from unknown\[110.87.87.47\]: 554 5.7.1 Service unavailable\; Client host \[110.87.87.47\] blocked using bl.spamcop.net\; Blocked - see https://www.spamcop.net/bl.shtml\?110.87.87.47\; from=\ to=\ proto=ESMTP helo=\
...

Dec 22 07:29:08 debian-2gb-nbg1-2 kernel: \[648901.107885\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=41.42.220.36 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=26427 PROTO=TCP SPT=61506 DPT=8081 WINDOW=14483 RES=0x00 SYN URGP=0