Lines containing failures of 85.93.20.253
Jul  5 23:27:35 neweola sshd[13353]: Invalid user paulj from 85.93.20.253 port 50466
Jul  5 23:27:35 neweola sshd[13353]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.93.20.253 
Jul  5 23:27:37 neweola sshd[13353]: Failed password for invalid user paulj from 85.93.20.253 port 50466 ssh2
Jul  5 23:27:38 neweola sshd[13353]: Connection closed by invalid user paulj 85.93.20.253 port 50466 [preauth]
Jul  5 23:27:39 neweola sshd[13355]: Invalid user paulj from 85.93.20.253 port 50512
Jul  5 23:27:39 neweola sshd[13355]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.93.20.253 


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=85.93.20.253

Brute forcing Wordpress login

2020-07-06 07:29:19 auth_plain authenticator failed for (User) [46.38.145.6]: 535 Incorrect authentication data (set_id=salvatore@mail.csmailer.org)
2020-07-06 07:30:06 auth_plain authenticator failed for (User) [46.38.145.6]: 535 Incorrect authentication data (set_id=python@mail.csmailer.org)
2020-07-06 07:30:53 auth_plain authenticator failed for (User) [46.38.145.6]: 535 Incorrect authentication data (set_id=gregory@mail.csmailer.org)
2020-07-06 07:31:35 auth_plain authenticator failed for (User) [46.38.145.6]: 535 Incorrect authentication data (set_id=gw1@mail.csmailer.org)
2020-07-06 07:32:23 auth_plain authenticator failed for (User) [46.38.145.6]: 535 Incorrect authentication data (set_id=cat@mail.csmailer.org)
...

Jul  6 10:04:01 www4 sshd\[16654\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.246  user=root
Jul  6 10:04:02 www4 sshd\[16654\]: Failed password for root from 222.186.15.246 port 49851 ssh2
Jul  6 10:06:05 www4 sshd\[17074\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.246  user=root
...

Jul  6 07:06:14 localhost sshd\[9315\]: Invalid user admin from 49.233.177.99
Jul  6 07:06:14 localhost sshd\[9315\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.177.99
Jul  6 07:06:16 localhost sshd\[9315\]: Failed password for invalid user admin from 49.233.177.99 port 35014 ssh2
Jul  6 07:10:00 localhost sshd\[9483\]: Invalid user nagios from 49.233.177.99
Jul  6 07:10:00 localhost sshd\[9483\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.177.99
...

2020-07-06T05:51:28+02:00  exim[18575]: [1\50] 1jsIA9-0004pb-Sh H=zany.isefardi.com (zany.iiswdelhi.com) [194.146.50.59] F= rejected after DATA: This message scored 102.4 spam points.

Unauthorized connection attempt detected from IP address 141.98.9.71 to port 10652

Jul  6 09:06:32 pkdns2 sshd\[58283\]: Invalid user 3 from 213.55.169.120Jul  6 09:06:34 pkdns2 sshd\[58283\]: Failed password for invalid user 3 from 213.55.169.120 port 59658 ssh2Jul  6 09:09:57 pkdns2 sshd\[58424\]: Invalid user usuario from 213.55.169.120Jul  6 09:09:59 pkdns2 sshd\[58424\]: Failed password for invalid user usuario from 213.55.169.120 port 54844 ssh2Jul  6 09:13:17 pkdns2 sshd\[58634\]: Invalid user ubuntu from 213.55.169.120Jul  6 09:13:19 pkdns2 sshd\[58634\]: Failed password for invalid user ubuntu from 213.55.169.120 port 50014 ssh2
...

Autoban   14.161.31.159 ABORTED AUTH

" "

Jul  6 07:11:44 OPSO sshd\[26894\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.147.229  user=root
Jul  6 07:11:47 OPSO sshd\[26894\]: Failed password for root from 111.229.147.229 port 60012 ssh2
Jul  6 07:15:09 OPSO sshd\[27450\]: Invalid user ftpuser from 111.229.147.229 port 38520
Jul  6 07:15:09 OPSO sshd\[27450\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.147.229
Jul  6 07:15:11 OPSO sshd\[27450\]: Failed password for invalid user ftpuser from 111.229.147.229 port 38520 ssh2

$f2bV_matches

Jul  6 03:00:27 NPSTNNYC01T sshd[9459]: Failed password for root from 222.186.169.192 port 45776 ssh2
Jul  6 03:00:31 NPSTNNYC01T sshd[9459]: Failed password for root from 222.186.169.192 port 45776 ssh2
Jul  6 03:00:34 NPSTNNYC01T sshd[9459]: Failed password for root from 222.186.169.192 port 45776 ssh2
Jul  6 03:00:40 NPSTNNYC01T sshd[9459]: error: maximum authentication attempts exceeded for root from 222.186.169.192 port 45776 ssh2 [preauth]
...

Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-07-06T03:46:52Z and 2020-07-06T03:51:43Z

Jul  6 05:29:12 dns-3 sshd[12456]: Invalid user app from 119.253.84.106 port 40786
Jul  6 05:29:12 dns-3 sshd[12456]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.253.84.106 
Jul  6 05:29:14 dns-3 sshd[12456]: Failed password for invalid user app from 119.253.84.106 port 40786 ssh2
Jul  6 05:29:16 dns-3 sshd[12456]: Received disconnect from 119.253.84.106 port 40786:11: Bye Bye [preauth]
Jul  6 05:29:16 dns-3 sshd[12456]: Disconnected from invalid user app 119.253.84.106 port 40786 [preauth]
Jul  6 05:32:55 dns-3 sshd[12538]: Invalid user web from 119.253.84.106 port 50298
Jul  6 05:32:55 dns-3 sshd[12538]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.253.84.106 
Jul  6 05:32:57 dns-3 sshd[12538]: Failed password for invalid user web from 119.253.84.106 port 50298 ssh2
Jul  6 05:32:59 dns-3 sshd[12538]: Received disconnect from 119.253.84.106 port 50298:11: Bye Bye [preauth]
Ju........
-------------------------------