May  7 15:56:01 ms-srv sshd[14610]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=208.109.14.122
May  7 15:56:03 ms-srv sshd[14610]: Failed password for invalid user lb from 208.109.14.122 port 53458 ssh2

WEB_SERVER 403 Forbidden

May  7 11:53:58 localhost sshd[12328]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.51.98.226  user=root
May  7 11:53:59 localhost sshd[12328]: Failed password for root from 202.51.98.226 port 44436 ssh2
May  7 11:59:13 localhost sshd[12959]: Invalid user vladimir from 202.51.98.226 port 53006
May  7 11:59:13 localhost sshd[12959]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.51.98.226
May  7 11:59:13 localhost sshd[12959]: Invalid user vladimir from 202.51.98.226 port 53006
May  7 11:59:14 localhost sshd[12959]: Failed password for invalid user vladimir from 202.51.98.226 port 53006 ssh2
...

2020-05-07T15:42:44.671856shield sshd\[3035\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.148.222.243  user=root
2020-05-07T15:42:47.230180shield sshd\[3035\]: Failed password for root from 120.148.222.243 port 41937 ssh2
2020-05-07T15:44:13.754274shield sshd\[3405\]: Invalid user kha from 120.148.222.243 port 51791
2020-05-07T15:44:13.760936shield sshd\[3405\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.148.222.243
2020-05-07T15:44:15.536508shield sshd\[3405\]: Failed password for invalid user kha from 120.148.222.243 port 51791 ssh2

Honeypot Spam Send

May  7 14:03:15 *** sshd[6577]: Invalid user docker from 210.211.117.41

Connection by 187.177.183.18 on port: 8080 got caught by honeypot at 5/7/2020 12:59:46 PM

May  7 17:17:23 ns382633 sshd\[1003\]: Invalid user debug from 218.2.220.254 port 25247
May  7 17:17:23 ns382633 sshd\[1003\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.2.220.254
May  7 17:17:26 ns382633 sshd\[1003\]: Failed password for invalid user debug from 218.2.220.254 port 25247 ssh2
May  7 17:43:01 ns382633 sshd\[5954\]: Invalid user default from 218.2.220.254 port 36994
May  7 17:43:01 ns382633 sshd\[5954\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.2.220.254

May  7 17:20:53 ift sshd\[6109\]: Invalid user mzy from 14.63.168.98May  7 17:20:56 ift sshd\[6109\]: Failed password for invalid user mzy from 14.63.168.98 port 18286 ssh2May  7 17:25:54 ift sshd\[6934\]: Failed password for root from 14.63.168.98 port 21378 ssh2May  7 17:30:46 ift sshd\[7665\]: Invalid user miner from 14.63.168.98May  7 17:30:48 ift sshd\[7665\]: Failed password for invalid user miner from 14.63.168.98 port 24496 ssh2
...

$f2bV_matches

May  7 14:57:24 mail.srvfarm.net postfix/smtpd[905572]: NOQUEUE: reject: RCPT from unknown[217.112.142.166]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
May  7 14:57:49 mail.srvfarm.net postfix/smtpd[905561]: NOQUEUE: reject: RCPT from unknown[217.112.142.166]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
May  7 14:57:55 mail.srvfarm.net postfix/smtpd[896763]: NOQUEUE: reject: RCPT from unknown[217.112.142.166]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
May  7 14:58:06 mail.srvfarm.net postfix/smtpd[905565]: NOQUEUE: reject: RCPT from unknown[217.112.1

May  7 17:32:30 piServer sshd[20388]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.108.143.6 
May  7 17:32:32 piServer sshd[20388]: Failed password for invalid user nora from 200.108.143.6 port 45918 ssh2
May  7 17:36:31 piServer sshd[20749]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.108.143.6 
...

May  7 15:20:52 ip-172-31-62-245 sshd\[4334\]: Invalid user torrent from 118.89.115.224\
May  7 15:20:54 ip-172-31-62-245 sshd\[4334\]: Failed password for invalid user torrent from 118.89.115.224 port 37860 ssh2\
May  7 15:24:48 ip-172-31-62-245 sshd\[4373\]: Invalid user robert from 118.89.115.224\
May  7 15:24:49 ip-172-31-62-245 sshd\[4373\]: Failed password for invalid user robert from 118.89.115.224 port 51924 ssh2\
May  7 15:28:50 ip-172-31-62-245 sshd\[4402\]: Failed password for root from 118.89.115.224 port 37756 ssh2\

138.128.160.90 - - [07/May/2020:11:20:17 +0000] "GET /phpmyadmin/ HTTP/1.1" 404 209 "http://XXX.family/phpmyadmin/" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"

prod6
...