Mar  1 20:13:23 vserver sshd\[7012\]: Invalid user cadmin from 132.232.77.15Mar  1 20:13:25 vserver sshd\[7012\]: Failed password for invalid user cadmin from 132.232.77.15 port 60994 ssh2Mar  1 20:21:43 vserver sshd\[7053\]: Invalid user admin from 132.232.77.15Mar  1 20:21:45 vserver sshd\[7053\]: Failed password for invalid user admin from 132.232.77.15 port 39688 ssh2
...

Mar  1 21:04:34 lnxded63 sshd[17693]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.170.168.63

Unauthorized connection attempt detected from IP address 183.99.89.230 to port 5555 [J]

03/01/2020-08:17:33.015485 104.232.71.15 Protocol: 6 ET SCAN NMAP -sS window 1024

Mar  1 17:42:57 firewall sshd[11440]: Failed password for root from 222.186.175.217 port 63274 ssh2
Mar  1 17:43:10 firewall sshd[11440]: error: maximum authentication attempts exceeded for root from 222.186.175.217 port 63274 ssh2 [preauth]
Mar  1 17:43:10 firewall sshd[11440]: Disconnecting: Too many authentication failures [preauth]
...

IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/54.37.23.16/ 
 
 FR - 1H : (28)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : FR 
 NAME ASN : ASN16276 
 
 IP : 54.37.23.16 
 
 CIDR : 54.37.0.0/16 
 
 PREFIX COUNT : 132 
 
 UNIQUE IP COUNT : 3052544 
 
 
 ATTACKS DETECTED ASN16276 :  
  1H - 3 
  3H - 5 
  6H - 6 
 12H - 7 
 24H - 7 
 
 DateTime : 2020-03-01 14:16:57 
 
 INFO : Looking for resource vulnerabilities 403 Detected and Blocked by ADMIN  - data recovery

$f2bV_matches

Mar  1 14:16:53 debian-2gb-nbg1-2 kernel: \[5327800.230257\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=103.42.158.73 DST=195.201.40.59 LEN=44 TOS=0x00 PREC=0x20 TTL=44 ID=42309 PROTO=TCP SPT=52104 DPT=23 WINDOW=53392 RES=0x00 SYN URGP=0

Mar  1 21:28:19 debian-2gb-nbg1-2 kernel: \[5353684.821411\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.209.0.90 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=12964 PROTO=TCP SPT=42619 DPT=6050 WINDOW=1024 RES=0x00 SYN URGP=0

Mar  1 21:37:18 ns382633 sshd\[27925\]: Invalid user dspace from 180.164.255.12 port 35534
Mar  1 21:37:18 ns382633 sshd\[27925\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.164.255.12
Mar  1 21:37:20 ns382633 sshd\[27925\]: Failed password for invalid user dspace from 180.164.255.12 port 35534 ssh2
Mar  1 22:03:01 ns382633 sshd\[31981\]: Invalid user cpanelrrdtool from 180.164.255.12 port 64331
Mar  1 22:03:01 ns382633 sshd\[31981\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.164.255.12

Port scan on 2 port(s): 2375 2376

Trying ports that it shouldn't be.

(imapd) Failed IMAP login from 94.100.177.59 (RU/Russia/rimap13.m.smailru.net): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Mar  1 16:46:35 ir1 dovecot[4133960]: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=94.100.177.59, lip=5.63.12.44, TLS: Connection closed, session=

Mar  1 20:17:54 mail sshd\[22422\]: Invalid user cadmin from 106.51.3.214
Mar  1 20:17:54 mail sshd\[22422\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.51.3.214
Mar  1 20:17:57 mail sshd\[22422\]: Failed password for invalid user cadmin from 106.51.3.214 port 36066 ssh2
...

2020-03-01T13:17:32.111774randservbullet-proofcloud-66.localdomain sshd[26725]: Invalid user andrew from 90.35.124.76 port 42966
2020-03-01T13:17:32.117525randservbullet-proofcloud-66.localdomain sshd[26725]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=lfbn-orl-1-286-76.w90-35.abo.wanadoo.fr
2020-03-01T13:17:32.111774randservbullet-proofcloud-66.localdomain sshd[26725]: Invalid user andrew from 90.35.124.76 port 42966
2020-03-01T13:17:34.259737randservbullet-proofcloud-66.localdomain sshd[26725]: Failed password for invalid user andrew from 90.35.124.76 port 42966 ssh2
...