Apr  6 08:35:38 freya sshd[23845]: Disconnected from authenticating user root 115.68.187.150 port 37890 [preauth]
Apr  6 08:37:40 freya sshd[24155]: Invalid user admin from 115.68.187.150 port 47951
Apr  6 08:37:41 freya sshd[24155]: Disconnected from invalid user admin 115.68.187.150 port 47951 [preauth]
Apr  6 08:39:42 freya sshd[24526]: Invalid user postgres from 115.68.187.150 port 58016
Apr  6 08:39:43 freya sshd[24526]: Disconnected from invalid user postgres 115.68.187.150 port 58016 [preauth]
...

Hello ! He tryng to entry on my yahoo mail. Thanks !

$f2bV_matches

POST /boaform/admin/formPing HTTP/1.1
User-Agent: polaris botnet

SpamScore above: 10.0

(sshd) Failed SSH login from 177.69.237.54 (BR/Brazil/177-069-237-054.static.ctbctelecom.com.br): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Apr  6 10:34:03 ubnt-55d23 sshd[10496]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.69.237.54  user=root
Apr  6 10:34:05 ubnt-55d23 sshd[10496]: Failed password for root from 177.69.237.54 port 34684 ssh2

Apr  6 05:22:30 vps58358 sshd\[4570\]: Invalid user P@s5word12 from 222.80.196.16Apr  6 05:22:31 vps58358 sshd\[4570\]: Failed password for invalid user P@s5word12 from 222.80.196.16 port 35480 ssh2Apr  6 05:26:15 vps58358 sshd\[4623\]: Invalid user !QAZ12345!QAZ from 222.80.196.16Apr  6 05:26:17 vps58358 sshd\[4623\]: Failed password for invalid user !QAZ12345!QAZ from 222.80.196.16 port 32880 ssh2Apr  6 05:29:46 vps58358 sshd\[4662\]: Invalid user !@\#$%\^@qwerty from 222.80.196.16Apr  6 05:29:48 vps58358 sshd\[4662\]: Failed password for invalid user !@\#$%\^@qwerty from 222.80.196.16 port 56030 ssh2
...

$f2bV_matches

Apr  6 05:55:14 mail sshd\[16379\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.17.76.176  user=root
Apr  6 05:55:16 mail sshd\[16379\]: Failed password for root from 14.17.76.176 port 41566 ssh2
Apr  6 05:59:03 mail sshd\[16399\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.17.76.176  user=root
...

Apr  6 15:59:36 f sshd\[9544\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=71.202.97.198
Apr  6 15:59:36 f sshd\[9546\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=71.202.97.198
Apr  6 15:59:38 f sshd\[9544\]: Failed password for invalid user pi from 71.202.97.198 port 54924 ssh2
...

(sshd) Failed SSH login from 37.208.12.131 (SE/Sweden/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Apr  6 05:52:23 ubnt-55d23 sshd[16149]: Invalid user pi from 37.208.12.131 port 55160
Apr  6 05:52:23 ubnt-55d23 sshd[16151]: Invalid user pi from 37.208.12.131 port 55168

ET CINS Active Threat Intelligence Poor Reputation IP group 83 - port: 41146 proto: UDP cat: Misc Attack

Apr  6 09:22:50 minden010 postfix/smtpd[2200]: NOQUEUE: reject: RCPT from p548DF6A6.dip0.t-ipconnect.de[84.141.246.166]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Apr  6 09:22:50 minden010 postfix/smtpd[2205]: NOQUEUE: reject: RCPT from p548DF6A6.dip0.t-ipconnect.de[84.141.246.166]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Apr  6 09:22:50 minden010 postfix/smtpd[2205]: NOQUEUE: reject: RCPT from p548DF6A6.dip0.t-ipconnect.de[84.141.246.166]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Apr  6 09:22:50 minden010 postfix/smtpd[2225]: NOQUEUE: reject: RCPT from p548DF6A6.dip0.t-ipconnect.de[84.141.246.166]: 450 4.7.1 : Helo c
...

RDP Brute-Force (honeypot 11)

Apr  6 06:55:44 ns3164893 sshd[5827]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.105.148.212  user=root
Apr  6 06:55:46 ns3164893 sshd[5827]: Failed password for root from 46.105.148.212 port 59350 ssh2
...