Jul 17 21:59:55 ip-172-31-1-72 sshd\[29624\]: Invalid user miura from 198.27.81.223
Jul 17 21:59:55 ip-172-31-1-72 sshd\[29624\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.27.81.223
Jul 17 21:59:57 ip-172-31-1-72 sshd\[29624\]: Failed password for invalid user miura from 198.27.81.223 port 53362 ssh2
Jul 17 22:04:18 ip-172-31-1-72 sshd\[29695\]: Invalid user ser from 198.27.81.223
Jul 17 22:04:18 ip-172-31-1-72 sshd\[29695\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.27.81.223

Jul 17 18:25:08 ovpn sshd\[12587\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.170.197.83  user=root
Jul 17 18:25:10 ovpn sshd\[12587\]: Failed password for root from 217.170.197.83 port 57507 ssh2
Jul 17 18:25:21 ovpn sshd\[12587\]: Failed password for root from 217.170.197.83 port 57507 ssh2
Jul 17 18:25:24 ovpn sshd\[12639\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.170.197.83  user=root
Jul 17 18:25:25 ovpn sshd\[12639\]: Failed password for root from 217.170.197.83 port 58271 ssh2

SMB Server BruteForce Attack

Jul 17 23:43:30 pornomens sshd\[16051\]: Invalid user etc_mail from 185.58.53.66 port 52600
Jul 17 23:43:30 pornomens sshd\[16051\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.58.53.66
Jul 17 23:43:31 pornomens sshd\[16051\]: Failed password for invalid user etc_mail from 185.58.53.66 port 52600 ssh2
...

Jul 15 22:10:04 archiv sshd[20270]: Address 42.236.139.27 maps to hn.kd.ny.adsl, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Jul 15 22:10:04 archiv sshd[20270]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.236.139.27  user=r.r
Jul 15 22:10:06 archiv sshd[20270]: Failed password for r.r from 42.236.139.27 port 46420 ssh2
Jul 15 22:10:07 archiv sshd[20270]: Received disconnect from 42.236.139.27 port 46420:11: Bye Bye [preauth]
Jul 15 22:10:07 archiv sshd[20270]: Disconnected from 42.236.139.27 port 46420 [preauth]
Jul 15 22:36:48 archiv sshd[20347]: Connection closed by 42.236.139.27 port 37704 [preauth]
Jul 15 22:57:41 archiv sshd[20551]: Address 42.236.139.27 maps to hn.kd.ny.adsl, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Jul 15 22:57:41 archiv sshd[20551]: Invalid user Nicole from 42.236.139.27 port 48450
Jul 15 22:57:41 archiv sshd[20551]: pam_unix(sshd:auth): authe........
-------------------------------

\[2019-07-17 19:03:45\] NOTICE\[20804\] chan_sip.c: Registration from '"87656"\' failed for '158.69.242.197:19642' - Wrong password
\[2019-07-17 19:03:45\] SECURITY\[20812\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-17T19:03:45.718-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="87656",SessionID="0x7f06f878a398",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/158.69.242.197/19642",Challenge="3a745756",ReceivedChallenge="3a745756",ReceivedHash="e0489af5ba48e7b8b8413d50e810ac5a"
\[2019-07-17 19:05:13\] NOTICE\[20804\] chan_sip.c: Registration from '"87655"\' failed for '158.69.242.197:23666' - Wrong password
\[2019-07-17 19:05:13\] SECURITY\[20812\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-17T19:05:13.968-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="87655",SessionID="0x7f06f811a3c8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/

Spam

[SMB remote code execution attempt: port tcp/445]
*(RWIN=1024)(07172048)

ssh failed login

Jul 16 08:53:30 our-server-hostname postfix/smtpd[1831]: connect from unknown[91.243.166.216]
Jul x@x
Jul 16 08:53:34 our-server-hostname postfix/smtpd[1831]: lost connection after RCPT from unknown[91.243.166.216]
Jul 16 08:53:34 our-server-hostname postfix/smtpd[1831]: disconnect from unknown[91.243.166.216]
Jul 16 09:30:01 our-server-hostname postfix/smtpd[28059]: connect from unknown[91.243.166.216]
Jul x@x
Jul 16 09:30:03 our-server-hostname postfix/smtpd[28059]: lost connection after RCPT from unknown[91.243.166.216]
Jul 16 09:30:03 our-server-hostname postfix/smtpd[28059]: disconnect from unknown[91.243.166.216]
Jul 16 11:32:43 our-server-hostname postfix/smtpd[25884]: connect from unknown[91.243.166.216]
Jul x@x
Jul x@x
Jul x@x
Jul x@x
Jul x@x
Jul x@x
Jul x@x
Jul x@x
Jul x@x
Jul x@x
Jul x@x
Jul 16 11:32:53 our-server-hostname postfix/smtpd[25884]: lost connection after RCPT from unknown[91.243.166.216]
Jul 16 11:32:53 our-server-hostname postfix/smtpd[25884]: di........
-------------------------------

Jul 18 01:00:58 vps647732 sshd[19298]: Failed password for ubuntu from 173.239.37.159 port 43602 ssh2
...

3306/tcp 465/tcp 8118/tcp...
[2019-05-18/07-17]32pkt,28pt.(tcp),3pt.(udp)

Jul 18 00:54:49 eventyay sshd[11965]: Failed password for root from 51.254.39.23 port 40546 ssh2
Jul 18 00:59:23 eventyay sshd[13253]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.254.39.23
Jul 18 00:59:24 eventyay sshd[13253]: Failed password for invalid user xc from 51.254.39.23 port 38848 ssh2
...

2019-07-17T23:16:38.513003abusebot-5.cloudsearch.cf sshd\[4021\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.165.52  user=root

Automatic report