Oct  7 05:38:15 server sshd[15076]: Failed password for invalid user mahendra from 37.59.114.113 port 40538 ssh2
Oct  7 05:48:25 server sshd[16192]: Failed password for invalid user Server from 37.59.114.113 port 36554 ssh2
Oct  7 05:52:03 server sshd[16560]: Failed password for invalid user andersen from 37.59.114.113 port 52100 ssh2

2019-10-07T06:00:15.953990abusebot-2.cloudsearch.cf sshd\[26480\]: Invalid user 123QAZWSX from 175.207.13.200 port 52722

langenachtfulda.de 108.170.55.250 \[07/Oct/2019:05:52:00 +0200\] "POST /xmlrpc.php HTTP/1.1" 200 4283 "-" "Mozilla/5.0 \(Windows\; U\; Windows NT 5.1\; en-US\; rv:1.9.0.1\) Gecko/2008070208 Firefox/3.0.1"
langenachtfulda.de 108.170.55.250 \[07/Oct/2019:05:52:02 +0200\] "POST /xmlrpc.php HTTP/1.1" 200 4283 "-" "Mozilla/5.0 \(Windows\; U\; Windows NT 5.1\; en-US\; rv:1.9.0.1\) Gecko/2008070208 Firefox/3.0.1"

Oct  6 17:49:19 eddieflores sshd\[32559\]: Invalid user Alpes-123 from 117.156.119.39
Oct  6 17:49:19 eddieflores sshd\[32559\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.156.119.39
Oct  6 17:49:20 eddieflores sshd\[32559\]: Failed password for invalid user Alpes-123 from 117.156.119.39 port 37404 ssh2
Oct  6 17:53:21 eddieflores sshd\[421\]: Invalid user 123@abc from 117.156.119.39
Oct  6 17:53:21 eddieflores sshd\[421\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.156.119.39

Dovecot Brute-Force

IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/86.150.29.8/ 
 GB - 1H : (136)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : GB 
 NAME ASN : ASN2856 
 
 IP : 86.150.29.8 
 
 CIDR : 86.144.0.0/12 
 
 PREFIX COUNT : 292 
 
 UNIQUE IP COUNT : 10658560 
 
 
 WYKRYTE ATAKI Z ASN2856 :  
  1H - 1 
  3H - 2 
  6H - 6 
 12H - 12 
 24H - 33 
 
 DateTime : 2019-10-07 05:52:59 
 
 INFO : Port SSH 22 Scan Detected and Blocked by ADMIN  - data recovery

Oct  7 06:46:03 MK-Soft-Root2 sshd[17584]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.139.0.204 
Oct  7 06:46:05 MK-Soft-Root2 sshd[17584]: Failed password for invalid user admin from 77.139.0.204 port 35338 ssh2
...

2019-10-07T05:52:13.980323abusebot.cloudsearch.cf sshd\[1209\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.36.242.143  user=root

Oct  6 19:40:54 friendsofhawaii sshd\[10765\]: Invalid user git from 147.135.255.107
Oct  6 19:40:54 friendsofhawaii sshd\[10765\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns3085217.ip-147-135-255.eu
Oct  6 19:40:57 friendsofhawaii sshd\[10765\]: Failed password for invalid user git from 147.135.255.107 port 57242 ssh2
Oct  6 19:47:26 friendsofhawaii sshd\[11274\]: Invalid user testuser from 147.135.255.107
Oct  6 19:47:26 friendsofhawaii sshd\[11274\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns3085217.ip-147-135-255.eu

Oct  6 19:19:57 php1 sshd\[3676\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=63.ip-217-182-252.eu  user=root
Oct  6 19:19:59 php1 sshd\[3676\]: Failed password for root from 217.182.252.63 port 38714 ssh2
Oct  6 19:23:37 php1 sshd\[4111\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=63.ip-217-182-252.eu  user=root
Oct  6 19:23:39 php1 sshd\[4111\]: Failed password for root from 217.182.252.63 port 49326 ssh2
Oct  6 19:27:17 php1 sshd\[4553\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=63.ip-217-182-252.eu  user=root

Oct  7 06:55:02 nextcloud sshd\[5916\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.159.249.66  user=root
Oct  7 06:55:04 nextcloud sshd\[5916\]: Failed password for root from 178.159.249.66 port 60448 ssh2
Oct  7 06:58:38 nextcloud sshd\[11263\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.159.249.66  user=root
...

$f2bV_matches

Oct  7 06:57:24 vps647732 sshd[30913]: Failed password for root from 193.112.74.137 port 49443 ssh2
...

\[2019-10-07 00:56:52\] NOTICE\[1887\] chan_sip.c: Registration from '\' failed for '195.181.168.138:59982' - Wrong password
\[2019-10-07 00:56:52\] SECURITY\[1898\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-07T00:56:52.269-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2013",SessionID="0x7fc3ac1c8768",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/195.181.168.138/59982",Challenge="669c1fba",ReceivedChallenge="669c1fba",ReceivedHash="5e68992d98f44d75040f427737295cf6"
\[2019-10-07 00:58:07\] NOTICE\[1887\] chan_sip.c: Registration from '\' failed for '195.181.168.138:52140' - Wrong password
\[2019-10-07 00:58:07\] SECURITY\[1898\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-07T00:58:07.728-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2020",SessionID="0x7fc3ac00c388",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/195

" "