Sep 30 17:42:00 friendsofhawaii sshd\[1711\]: Invalid user Eleonoora from 37.187.46.74
Sep 30 17:42:00 friendsofhawaii sshd\[1711\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.ip-37-187-46.eu
Sep 30 17:42:01 friendsofhawaii sshd\[1711\]: Failed password for invalid user Eleonoora from 37.187.46.74 port 43396 ssh2
Sep 30 17:48:18 friendsofhawaii sshd\[2282\]: Invalid user zica from 37.187.46.74
Sep 30 17:48:18 friendsofhawaii sshd\[2282\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.ip-37-187-46.eu

Oct  1 12:01:54 vps647732 sshd[17701]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.36.189.113
Oct  1 12:01:57 vps647732 sshd[17701]: Failed password for invalid user teamcity from 54.36.189.113 port 43144 ssh2
...

Oct  1 12:39:49 hosting sshd[10324]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.221.222.230  user=admin
Oct  1 12:39:51 hosting sshd[10324]: Failed password for admin from 103.221.222.230 port 60028 ssh2
Oct  1 12:49:07 hosting sshd[11073]: Invalid user ftpuser from 103.221.222.230 port 51124
Oct  1 12:49:07 hosting sshd[11073]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.221.222.230
Oct  1 12:49:07 hosting sshd[11073]: Invalid user ftpuser from 103.221.222.230 port 51124
Oct  1 12:49:09 hosting sshd[11073]: Failed password for invalid user ftpuser from 103.221.222.230 port 51124 ssh2
...

Sep 30 21:17:11 nandi sshd[22349]: reveeclipse mapping checking getaddrinfo for noc-ip-phone.uog.edu.pk [111.68.104.130] failed - POSSIBLE BREAK-IN ATTEMPT!
Sep 30 21:17:11 nandi sshd[22349]: Invalid user ftpadmin from 111.68.104.130
Sep 30 21:17:11 nandi sshd[22349]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.68.104.130 
Sep 30 21:17:13 nandi sshd[22349]: Failed password for invalid user ftpadmin from 111.68.104.130 port 27452 ssh2
Sep 30 21:17:13 nandi sshd[22349]: Received disconnect from 111.68.104.130: 11: Bye Bye [preauth]
Sep 30 21:22:47 nandi sshd[26402]: reveeclipse mapping checking getaddrinfo for noc-ip-phone.uog.edu.pk [111.68.104.130] failed - POSSIBLE BREAK-IN ATTEMPT!
Sep 30 21:22:47 nandi sshd[26402]: Invalid user n from 111.68.104.130
Sep 30 21:22:47 nandi sshd[26402]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.68.104.130 
Sep 30 21:22:50 nandi sshd[26402]:........
-------------------------------

Oct  1 10:03:01 venus sshd\[22166\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.56.145  user=root
Oct  1 10:03:03 venus sshd\[22166\]: Failed password for root from 51.15.56.145 port 58528 ssh2
Oct  1 10:08:40 venus sshd\[22240\]: Invalid user xbian from 51.15.56.145 port 45126
Oct  1 10:08:40 venus sshd\[22240\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.56.145
...

Unauthorized SSH login attempts

$f2bV_matches

Oct  1 11:38:24 webserver postfix/smtpd\[24195\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.138\]: 454 4.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[193.32.160.142\]\>
Oct  1 11:38:24 webserver postfix/smtpd\[24195\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.138\]: 454 4.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[193.32.160.142\]\>
Oct  1 11:38:24 webserver postfix/smtpd\[24195\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.138\]: 454 4.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[193.32.160.142\]\>
Oct  1 11:38:24 webserver postfix/smtpd\[24195\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.138\]: 454 4.7.1 \: Relay access denied\; from=\

IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/202.38.93.125/ 
 CN - 1H : (446)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : CN 
 NAME ASN : ASN24362 
 
 IP : 202.38.93.125 
 
 CIDR : 202.38.80.0/20 
 
 PREFIX COUNT : 207 
 
 UNIQUE IP COUNT : 282880 
 
 
 WYKRYTE ATAKI Z ASN24362 :  
  1H - 2 
  3H - 2 
  6H - 2 
 12H - 2 
 24H - 2 
 
 DateTime : 2019-10-01 05:48:18 
 
 INFO : Port MAX SCAN Scan Detected and Blocked by ADMIN  - data recovery

IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/185.155.21.78/ 
 ES - 1H : (84)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : ES 
 NAME ASN : ASN202743 
 
 IP : 185.155.21.78 
 
 CIDR : 185.155.20.0/22 
 
 PREFIX COUNT : 1 
 
 UNIQUE IP COUNT : 1024 
 
 
 WYKRYTE ATAKI Z ASN202743 :  
  1H - 1 
  3H - 1 
  6H - 1 
 12H - 1 
 24H - 1 
 
 DateTime : 2019-10-01 05:48:18 
 
 INFO : Port MAX SCAN Scan Detected and Blocked by ADMIN  - data recovery

IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/209.123.115.10/ 
 US - 1H : (675)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : US 
 NAME ASN : ASN8001 
 
 IP : 209.123.115.10 
 
 CIDR : 209.123.96.0/19 
 
 PREFIX COUNT : 153 
 
 UNIQUE IP COUNT : 430848 
 
 
 WYKRYTE ATAKI Z ASN8001 :  
  1H - 1 
  3H - 1 
  6H - 1 
 12H - 1 
 24H - 1 
 
 DateTime : 2019-10-01 05:48:18 
 
 INFO : Port MAX SCAN Scan Detected and Blocked by ADMIN  - data recovery

SSH Brute-Force reported by Fail2Ban

Oct  1 06:20:52 TORMINT sshd\[11942\]: Invalid user ubnt from 148.70.139.15
Oct  1 06:20:52 TORMINT sshd\[11942\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.139.15
Oct  1 06:20:54 TORMINT sshd\[11942\]: Failed password for invalid user ubnt from 148.70.139.15 port 39624 ssh2
...

Unauthorized SSH login attempts

F2B jail: sshd. Time: 2019-10-01 06:42:39, Reported by: VKReport