Unauthorised access (Oct  8) SRC=120.9.161.208 LEN=40 TTL=49 ID=51608 TCP DPT=8080 WINDOW=62024 SYN 
Unauthorised access (Oct  8) SRC=120.9.161.208 LEN=40 TTL=49 ID=48820 TCP DPT=8080 WINDOW=7352 SYN 
Unauthorised access (Oct  8) SRC=120.9.161.208 LEN=40 TTL=49 ID=7827 TCP DPT=8080 WINDOW=5240 SYN 
Unauthorised access (Oct  6) SRC=120.9.161.208 LEN=40 TTL=49 ID=40864 TCP DPT=8080 WINDOW=62024 SYN

Received: from inulogic.fr (unknown [195.231.4.149])
Subject: Activation du service CLE DIGITALE.
From: BNP PARIBAS 
Content-ID: 
X-ME-bounce-domain: orange.fr
X-ME-Entity: vlaX-Mailer: PHP
Message-Id: <20191008101102.AAB894497D@inulogic.fr>
https://teedin3d.com
Tel: 05 62 66 24 57
Geneviève Lacassagne : 06 70 34 50 79

Oct  8 14:21:55 srv206 sshd[9648]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.65  user=root
Oct  8 14:21:57 srv206 sshd[9648]: Failed password for root from 222.186.15.65 port 28788 ssh2
...

Unauthorised access (Oct  8) SRC=203.135.25.180 LEN=52 TOS=0x10 PREC=0x40 TTL=116 ID=7717 DF TCP DPT=1433 WINDOW=8192 SYN

Oct  8 02:23:30 php1 sshd\[7601\]: Invalid user o0i9u8y7t6r5e4w3 from 212.129.138.67
Oct  8 02:23:30 php1 sshd\[7601\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.129.138.67
Oct  8 02:23:32 php1 sshd\[7601\]: Failed password for invalid user o0i9u8y7t6r5e4w3 from 212.129.138.67 port 46338 ssh2
Oct  8 02:29:06 php1 sshd\[8107\]: Invalid user Tueur from 212.129.138.67
Oct  8 02:29:06 php1 sshd\[8107\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.129.138.67

Oct  8 13:56:36 rotator sshd\[520\]: Invalid user acoustics from 162.247.74.201Oct  8 13:56:38 rotator sshd\[520\]: Failed password for invalid user acoustics from 162.247.74.201 port 34054 ssh2Oct  8 13:56:40 rotator sshd\[520\]: Failed password for invalid user acoustics from 162.247.74.201 port 34054 ssh2Oct  8 13:56:43 rotator sshd\[520\]: Failed password for invalid user acoustics from 162.247.74.201 port 34054 ssh2Oct  8 13:56:46 rotator sshd\[520\]: Failed password for invalid user acoustics from 162.247.74.201 port 34054 ssh2Oct  8 13:56:49 rotator sshd\[520\]: Failed password for invalid user acoustics from 162.247.74.201 port 34054 ssh2
...

Oct  8 14:52:44 www sshd\[13835\]: Invalid user BGT%VFR$ from 103.214.99.170Oct  8 14:52:47 www sshd\[13835\]: Failed password for invalid user BGT%VFR$ from 103.214.99.170 port 60122 ssh2Oct  8 14:57:33 www sshd\[13979\]: Invalid user BGT%VFR$ from 103.214.99.170
...

Oct  8 13:57:35 sso sshd[15253]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.79.14.18
Oct  8 13:57:37 sso sshd[15253]: Failed password for invalid user Hitman@123 from 170.79.14.18 port 33564 ssh2
...

IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/196.202.54.35/ 
 EG - 1H : (77)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : EG 
 NAME ASN : ASN8452 
 
 IP : 196.202.54.35 
 
 CIDR : 196.202.0.0/17 
 
 PREFIX COUNT : 833 
 
 UNIQUE IP COUNT : 7610368 
 
 
 WYKRYTE ATAKI Z ASN8452 :  
  1H - 2 
  3H - 7 
  6H - 16 
 12H - 38 
 24H - 74 
 
 DateTime : 2019-10-08 13:56:34 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery

$f2bV_matches

2019-10-08T13:52:47.923025lon01.zurich-datacenter.net sshd\[24469\]: Invalid user p4$$w0rd2019 from 203.121.116.11 port 49500
2019-10-08T13:52:47.930714lon01.zurich-datacenter.net sshd\[24469\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.121.116.11
2019-10-08T13:52:50.444683lon01.zurich-datacenter.net sshd\[24469\]: Failed password for invalid user p4$$w0rd2019 from 203.121.116.11 port 49500 ssh2
2019-10-08T13:57:22.535887lon01.zurich-datacenter.net sshd\[24560\]: Invalid user Traduire_123 from 203.121.116.11 port 41134
2019-10-08T13:57:22.540874lon01.zurich-datacenter.net sshd\[24560\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.121.116.11
...

2019-10-08T11:56:58.650836abusebot-6.cloudsearch.cf sshd\[2157\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=host-95-182-129-243.dynamic.voo.be  user=root

Oct  8 18:49:31 lcl-usvr-02 sshd[16982]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.61.14.223  user=root
Oct  8 18:49:32 lcl-usvr-02 sshd[16982]: Failed password for root from 217.61.14.223 port 55216 ssh2
Oct  8 18:53:20 lcl-usvr-02 sshd[17923]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.61.14.223  user=root
Oct  8 18:53:22 lcl-usvr-02 sshd[17923]: Failed password for root from 217.61.14.223 port 37018 ssh2
Oct  8 18:57:00 lcl-usvr-02 sshd[18768]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.61.14.223  user=root
Oct  8 18:57:02 lcl-usvr-02 sshd[18768]: Failed password for root from 217.61.14.223 port 47056 ssh2
...

Oct  8 13:52:38 ns381471 sshd[19979]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.184.162.2
Oct  8 13:52:40 ns381471 sshd[19979]: Failed password for invalid user 123Credit from 35.184.162.2 port 49237 ssh2
Oct  8 13:56:49 ns381471 sshd[20298]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.184.162.2

2019-10-08 07:31:34 dovecot_login authenticator failed for (User) [46.38.144.32]:44626 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=passport@lerctr.org)
2019-10-08 07:35:15 dovecot_login authenticator failed for (User) [46.38.144.32]:58642 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=clouds@lerctr.org)
2019-10-08 07:38:54 dovecot_login authenticator failed for (User) [46.38.144.32]:44540 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=diabetes@lerctr.org)
...