Dec 15 18:35:39 mail postfix/smtpd[28242]: warning: unknown[141.98.80.124]: SASL PLAIN authentication failed: 
Dec 15 18:35:39 mail postfix/smtpd[28313]: warning: unknown[141.98.80.124]: SASL PLAIN authentication failed: 
Dec 15 18:35:39 mail postfix/smtpd[29427]: warning: unknown[141.98.80.124]: SASL PLAIN authentication failed: 
Dec 15 18:35:39 mail postfix/smtpd[28942]: warning: unknown[141.98.80.124]: SASL PLAIN authentication failed: 
Dec 15 18:35:39 mail postfix/smtpd[28682]: warning: unknown[141.98.80.124]: SASL PLAIN authentication failed:

Dec 15 18:42:38 MK-Soft-VM7 sshd[18388]: Failed password for root from 222.186.173.226 port 63747 ssh2
Dec 15 18:42:42 MK-Soft-VM7 sshd[18388]: Failed password for root from 222.186.173.226 port 63747 ssh2
...

Dec 15 15:50:45 jane sshd[22711]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.247.129.84 
Dec 15 15:50:47 jane sshd[22711]: Failed password for invalid user harmonica from 223.247.129.84 port 45812 ssh2
...

Dec 15 16:32:26 marvibiene sshd[50717]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.250.108.133  user=root
Dec 15 16:32:27 marvibiene sshd[50717]: Failed password for root from 180.250.108.133 port 36652 ssh2
Dec 15 16:39:15 marvibiene sshd[50858]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.250.108.133  user=mysql
Dec 15 16:39:17 marvibiene sshd[50858]: Failed password for mysql from 180.250.108.133 port 43360 ssh2
...

Automatic report - Port Scan Attack

Dec 15 07:25:15 wbs sshd\[18261\]: Invalid user dinesh from 104.236.22.133
Dec 15 07:25:15 wbs sshd\[18261\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.22.133
Dec 15 07:25:17 wbs sshd\[18261\]: Failed password for invalid user dinesh from 104.236.22.133 port 35022 ssh2
Dec 15 07:30:30 wbs sshd\[18794\]: Invalid user mergaerts from 104.236.22.133
Dec 15 07:30:30 wbs sshd\[18794\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.22.133

Dec 15 12:33:10 plusreed sshd[13842]: Invalid user fornara from 191.190.106.147
...

Dec 15 16:47:25 icinga sshd[6229]: Failed password for root from 103.68.11.52 port 5807 ssh2
Dec 15 17:11:01 icinga sshd[28795]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.68.11.52 
Dec 15 17:11:03 icinga sshd[28795]: Failed password for invalid user kanczler from 103.68.11.52 port 33638 ssh2
...

\[2019-12-15 11:45:24\] NOTICE\[2839\] chan_sip.c: Registration from '"101" \' failed for '89.40.114.52:5112' - Wrong password
\[2019-12-15 11:45:24\] SECURITY\[2857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-12-15T11:45:24.065-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="101",SessionID="0x7f0fb462f398",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/89.40.114.52/5112",Challenge="2054c5a4",ReceivedChallenge="2054c5a4",ReceivedHash="f125e8359be6d9229e76816cbee3bd54"
\[2019-12-15 11:46:05\] NOTICE\[2839\] chan_sip.c: Registration from '"6" \' failed for '89.40.114.52:5094' - Wrong password
\[2019-12-15 11:46:05\] SECURITY\[2857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-12-15T11:46:05.836-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="6",SessionID="0x7f0fb462f398",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/89.40.114.52/

Dec 15 17:50:24 zeus sshd[9235]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.178.245 
Dec 15 17:50:25 zeus sshd[9235]: Failed password for invalid user guest321 from 37.187.178.245 port 40404 ssh2
Dec 15 17:56:37 zeus sshd[9395]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.178.245 
Dec 15 17:56:38 zeus sshd[9395]: Failed password for invalid user tata from 37.187.178.245 port 47380 ssh2

Lines containing failures of 37.252.189.70
Dec 13 03:11:56 cdb sshd[12032]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.252.189.70  user=r.r
Dec 13 03:11:58 cdb sshd[12032]: Failed password for r.r from 37.252.189.70 port 56218 ssh2
Dec 13 03:11:58 cdb sshd[12032]: Received disconnect from 37.252.189.70 port 56218:11: Bye Bye [preauth]
Dec 13 03:11:58 cdb sshd[12032]: Disconnected from authenticating user r.r 37.252.189.70 port 56218 [preauth]
Dec 13 03:20:39 cdb sshd[13252]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.252.189.70  user=news
Dec 13 03:20:41 cdb sshd[13252]: Failed password for news from 37.252.189.70 port 54720 ssh2
Dec 13 03:20:41 cdb sshd[13252]: Received disconnect from 37.252.189.70 port 54720:11: Bye Bye [preauth]
Dec 13 03:20:41 cdb sshd[13252]: Disconnected from authenticating user news 37.252.189.70 port 54720 [preauth]
Dec 13 03:25:49 cdb sshd[14247]: In........
------------------------------

ssh failed login

Dec 15 18:59:50 debian-2gb-nbg1-2 kernel: \[85579.375676\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.143.223.160 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=39089 PROTO=TCP SPT=50099 DPT=6956 WINDOW=1024 RES=0x00 SYN URGP=0

Dec 15 15:51:23 MK-Soft-VM6 sshd[9161]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.194.83.79 
Dec 15 15:51:25 MK-Soft-VM6 sshd[9161]: Failed password for invalid user tech from 193.194.83.79 port 59606 ssh2
...

Dec 15 12:55:57 ws12vmsma01 sshd[59491]: Invalid user ramer from 176.36.192.193
Dec 15 12:56:00 ws12vmsma01 sshd[59491]: Failed password for invalid user ramer from 176.36.192.193 port 42138 ssh2
Dec 15 13:02:16 ws12vmsma01 sshd[60391]: Invalid user balykin from 176.36.192.193
...