Nov  7 20:01:34 eddieflores sshd\[4783\]: Invalid user hms from 83.99.2.32
Nov  7 20:01:34 eddieflores sshd\[4783\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip-83-99-2-32.dyn.luxdsl.pt.lu
Nov  7 20:01:36 eddieflores sshd\[4783\]: Failed password for invalid user hms from 83.99.2.32 port 51884 ssh2
Nov  7 20:06:24 eddieflores sshd\[5190\]: Invalid user password!@\#\$%\^abcdef from 83.99.2.32
Nov  7 20:06:24 eddieflores sshd\[5190\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip-83-99-2-32.dyn.luxdsl.pt.lu

$f2bV_matches

2019-11-08T06:01:21.351538abusebot-4.cloudsearch.cf sshd\[4981\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.144.218.139  user=root

Nov  8 05:52:47  exim[2081]: 2019-11-08 05:52:47 1iSwGM-0000XZ-Gj H=shrill.stop-snore-de.com (shrill.wpkaka.co) [81.28.107.54] F= rejected after DATA: This message scored 103.5 spam points.

80.82.78.100 was recorded 56 times by 29 hosts attempting to connect to the following ports: 648,998. Incident counter (4h, 24h, all-time): 56, 324, 1180

Port 22 Scan, PTR: None

Nov  8 08:15:39 site3 sshd\[64002\]: Invalid user public from 46.101.0.232
Nov  8 08:15:39 site3 sshd\[64002\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.0.232
Nov  8 08:15:41 site3 sshd\[64002\]: Failed password for invalid user public from 46.101.0.232 port 53858 ssh2
Nov  8 08:19:48 site3 sshd\[64040\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.0.232  user=root
Nov  8 08:19:49 site3 sshd\[64040\]: Failed password for root from 46.101.0.232 port 37952 ssh2
...

Nov  7 20:26:27 hanapaa sshd\[32303\]: Invalid user Fax2017 from 183.103.61.243
Nov  7 20:26:27 hanapaa sshd\[32303\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.103.61.243
Nov  7 20:26:29 hanapaa sshd\[32303\]: Failed password for invalid user Fax2017 from 183.103.61.243 port 42868 ssh2
Nov  7 20:31:02 hanapaa sshd\[32699\]: Invalid user 123@Zxc@Qwe from 183.103.61.243
Nov  7 20:31:02 hanapaa sshd\[32699\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.103.61.243

2019-11-08T06:28:35.222499mail01 postfix/smtpd[29666]: warning: 72.ip-51-83-71.eu[51.83.71.72]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2019-11-08T06:30:48.333508mail01 postfix/smtpd[21620]: warning: 72.ip-51-83-71.eu[51.83.71.72]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2019-11-08T06:36:37.098534mail01 postfix/smtpd[23975]: warning: 72.ip-51-83-71.eu[51.83.71.72]: SASL LOGIN authentication failed: UGFzc3dvcmQ6

WordPress wp-login brute force :: 216.57.225.2 0.144 BYPASS [08/Nov/2019:04:52:51  0000] [censored_4] "POST /wp-login.php HTTP/1.1" 200 1561 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"

Automatic report - Port Scan Attack

Nov  8 03:27:57 firewall sshd[11496]: Failed password for root from 74.63.250.6 port 44040 ssh2
Nov  8 03:31:35 firewall sshd[11543]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.63.250.6  user=root
Nov  8 03:31:37 firewall sshd[11543]: Failed password for root from 74.63.250.6 port 54330 ssh2
...

Nov  8 13:31:17 webhost01 sshd[14545]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.67.107
Nov  8 13:31:20 webhost01 sshd[14545]: Failed password for invalid user qf from 91.121.67.107 port 51964 ssh2
...

Automatic report - Port Scan Attack

Nov  8 07:31:30 mout sshd[7086]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.255.234.209  user=root
Nov  8 07:31:32 mout sshd[7086]: Failed password for root from 51.255.234.209 port 59358 ssh2