Mar  4 00:01:18 hanapaa sshd\[25075\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.223.51  user=root
Mar  4 00:01:20 hanapaa sshd\[25075\]: Failed password for root from 167.71.223.51 port 43368 ssh2
Mar  4 00:11:14 hanapaa sshd\[26121\]: Invalid user sammy from 167.71.223.51
Mar  4 00:11:14 hanapaa sshd\[26121\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.223.51
Mar  4 00:11:16 hanapaa sshd\[26121\]: Failed password for invalid user sammy from 167.71.223.51 port 52016 ssh2

Mar  4 15:13:20 gw1 sshd[6972]: Failed password for root from 149.56.131.73 port 39732 ssh2
...

$f2bV_matches

Mar  4 00:41:36 hpm sshd\[18067\]: Invalid user lianwei from 27.150.169.223
Mar  4 00:41:36 hpm sshd\[18067\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.150.169.223
Mar  4 00:41:39 hpm sshd\[18067\]: Failed password for invalid user lianwei from 27.150.169.223 port 51142 ssh2
Mar  4 00:50:40 hpm sshd\[19010\]: Invalid user chenhangting from 27.150.169.223
Mar  4 00:50:40 hpm sshd\[19010\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.150.169.223

20/3/4@00:14:32: FAIL: Alarm-Network address from=217.219.163.77
20/3/4@00:14:32: FAIL: Alarm-Network address from=217.219.163.77
...

Mar  4 05:53:40 web01.agentur-b-2.de postfix/smtpd[65984]: NOQUEUE: reject: RCPT from unknown[217.112.142.190]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Mar  4 05:54:46 web01.agentur-b-2.de postfix/smtpd[65984]: NOQUEUE: reject: RCPT from unknown[217.112.142.190]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Mar  4 05:56:07 web01.agentur-b-2.de postfix/smtpd[65984]: NOQUEUE: reject: RCPT from unknown[217.112.142.190]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Mar  4 05:57:18 web01.agentur-b-2.de postfix/smtpd[65984]: NOQUEUE: reject: RCPT from unknown[217.112.142.190]: 450 4.7.1 : Helo com

(From palmermckelvey687@gmail.com) Hello, 

I sent this message because I'd like to know if you are interested in getting more visits on your website from people who are searching for products/services on Google. I am a skilled website optimizer, and I specialize in getting your site to appear on the first page of search results. 

With my 10 years of experience, I can tell you that being on the first page would surely increase your profits. If you're interested, please let me know and I will gladly contact you through phone. Just let me know when. Talk to you soon! 

 - Mckelvey

2020-03-04T10:52:14.741210shield sshd\[27497\]: Invalid user oracle from 106.13.126.155 port 43522
2020-03-04T10:52:14.745879shield sshd\[27497\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.126.155
2020-03-04T10:52:17.030502shield sshd\[27497\]: Failed password for invalid user oracle from 106.13.126.155 port 43522 ssh2
2020-03-04T11:00:09.662658shield sshd\[28917\]: Invalid user postgres from 106.13.126.155 port 34602
2020-03-04T11:00:09.667935shield sshd\[28917\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.126.155

Mar  4 10:32:08 *** sshd[28122]: Did not receive identification string from 5.64.204.237

Mar  4 11:55:18 srv01 sshd[17752]: Invalid user test from 167.99.75.174 port 51364
Mar  4 11:55:18 srv01 sshd[17752]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.75.174
Mar  4 11:55:18 srv01 sshd[17752]: Invalid user test from 167.99.75.174 port 51364
Mar  4 11:55:20 srv01 sshd[17752]: Failed password for invalid user test from 167.99.75.174 port 51364 ssh2
Mar  4 11:59:04 srv01 sshd[17916]: Invalid user oracle from 167.99.75.174 port 49150
...

Mar  4 00:38:50 hanapaa sshd\[28981\]: Invalid user telnet from 37.49.207.240
Mar  4 00:38:50 hanapaa sshd\[28981\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=host-37-49-207-240.bbcustomer.zsttk.net
Mar  4 00:38:52 hanapaa sshd\[28981\]: Failed password for invalid user telnet from 37.49.207.240 port 40862 ssh2
Mar  4 00:46:37 hanapaa sshd\[29722\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=host-37-49-207-240.bbcustomer.zsttk.net  user=uucp
Mar  4 00:46:39 hanapaa sshd\[29722\]: Failed password for uucp from 37.49.207.240 port 46566 ssh2

Mar  4 05:05:55 ns382633 sshd\[31341\]: Invalid user uno85 from 39.117.42.31 port 43169
Mar  4 05:05:55 ns382633 sshd\[31341\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=39.117.42.31
Mar  4 05:05:57 ns382633 sshd\[31341\]: Failed password for invalid user uno85 from 39.117.42.31 port 43169 ssh2
Mar  4 05:53:22 ns382633 sshd\[7124\]: Invalid user chandru from 39.117.42.31 port 35091
Mar  4 05:53:22 ns382633 sshd\[7124\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=39.117.42.31

spam

[Tue Mar 03 22:44:11.269314 2020] [access_compat:error] [pid 28804] [client 39.104.156.79:51599] AH01797: client denied by server configuration: /home/webtools/euweb/www/ngbc/router.php
[Wed Mar 04 04:39:50.595755 2020] [access_compat:error] [pid 2072] [client 39.104.156.79:63321] AH01797: client denied by server configuration: /home/webtools/euweb/www/ngbc/js
[Wed Mar 04 04:40:10.518270 2020] [access_compat:error] [pid 1302] [client 39.104.156.79:49995] AH01797: client denied by server configuration: /home/webtools/euweb/www/ngbc/statics
[Wed Mar 04 05:53:55.388567 2020] [access_compat:error] [pid 1939] [client 39.104.156.79:61018] AH01797: client denied by server configuration: /home/webtools/euweb/www/ngbc/public/ui
[Wed Mar 04 05:53:56.108394 2020] [access_compat:error] [pid 2130] [client 39.104.156.79:54554] AH01797: client denied by server configuration: /home/webtools/euweb/www/ngbc/static

Automatic report - Port Scan Attack