Oct 13 06:31:58 localhost sshd\[17893\]: Invalid user Tattoo123 from 197.248.205.53 port 55368
Oct 13 06:31:58 localhost sshd\[17893\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.248.205.53
Oct 13 06:32:01 localhost sshd\[17893\]: Failed password for invalid user Tattoo123 from 197.248.205.53 port 55368 ssh2

Oct  6 10:54:00 uapps sshd[15665]: User r.r from 134.209.90.220 not allowed because not listed in AllowUsers
Oct  6 10:54:00 uapps sshd[15665]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.90.220  user=r.r
Oct  6 10:54:01 uapps sshd[15665]: Failed password for invalid user r.r from 134.209.90.220 port 39356 ssh2
Oct  6 10:54:01 uapps sshd[15665]: Received disconnect from 134.209.90.220: 11: Bye Bye [preauth]
Oct  6 11:02:38 uapps sshd[15811]: User r.r from 134.209.90.220 not allowed because not listed in AllowUsers
Oct  6 11:02:38 uapps sshd[15811]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.90.220  user=r.r


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=134.209.90.220

Oct 13 04:02:25 www_kotimaassa_fi sshd[511]: Failed password for root from 51.83.106.0 port 35716 ssh2
...

Oct 12 23:59:45 friendsofhawaii sshd\[13420\]: Invalid user P4\$\$W0RD2017 from 119.29.224.141
Oct 12 23:59:45 friendsofhawaii sshd\[13420\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.224.141
Oct 12 23:59:47 friendsofhawaii sshd\[13420\]: Failed password for invalid user P4\$\$W0RD2017 from 119.29.224.141 port 60176 ssh2
Oct 13 00:05:02 friendsofhawaii sshd\[13869\]: Invalid user P4\$\$W0RD2017 from 119.29.224.141
Oct 13 00:05:02 friendsofhawaii sshd\[13869\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.224.141

Oct 13 05:22:59 ovpn sshd\[30938\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.249.133.197  user=root
Oct 13 05:23:01 ovpn sshd\[30938\]: Failed password for root from 134.249.133.197 port 43470 ssh2
Oct 13 05:42:39 ovpn sshd\[2279\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.249.133.197  user=root
Oct 13 05:42:41 ovpn sshd\[2279\]: Failed password for root from 134.249.133.197 port 51220 ssh2
Oct 13 05:46:20 ovpn sshd\[3022\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.249.133.197  user=root

Oct 13 05:27:10 mxgate1 postfix/postscreen[1305]: CONNECT from [85.117.123.13]:33036 to [176.31.12.44]:25
Oct 13 05:27:10 mxgate1 postfix/dnsblog[1310]: addr 85.117.123.13 listed by domain zen.spamhaus.org as 127.0.0.11
Oct 13 05:27:10 mxgate1 postfix/dnsblog[1310]: addr 85.117.123.13 listed by domain zen.spamhaus.org as 127.0.0.4
Oct 13 05:27:10 mxgate1 postfix/dnsblog[1384]: addr 85.117.123.13 listed by domain cbl.abuseat.org as 127.0.0.2
Oct 13 05:27:10 mxgate1 postfix/dnsblog[1309]: addr 85.117.123.13 listed by domain bl.spamcop.net as 127.0.0.2
Oct 13 05:27:10 mxgate1 postfix/dnsblog[1390]: addr 85.117.123.13 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2
Oct 13 05:27:10 mxgate1 postfix/dnsblog[1308]: addr 85.117.123.13 listed by domain b.barracudacentral.org as 127.0.0.2
Oct 13 05:27:10 mxgate1 postfix/postscreen[1305]: PREGREET 22 after 0.13 from [85.117.123.13]:33036: EHLO [85.117.123.13]

Oct 13 05:27:10 mxgate1 postfix/postscreen[1305]: DNSBL rank 6 for [85........
-------------------------------

Excessive Port-Scanning

Automatic report - Banned IP Access

Automatic report - XMLRPC Attack

Invalid user Toxic123 from 101.89.147.85 port 38203

Oct 10 00:42:52 reporting1 sshd[7270]: User r.r from 58.62.207.50 not allowed because not listed in AllowUsers
Oct 10 00:42:52 reporting1 sshd[7270]: Failed password for invalid user r.r from 58.62.207.50 port 30903 ssh2
Oct 10 00:58:55 reporting1 sshd[16483]: User r.r from 58.62.207.50 not allowed because not listed in AllowUsers
Oct 10 00:58:55 reporting1 sshd[16483]: Failed password for invalid user r.r from 58.62.207.50 port 30905 ssh2
Oct 10 01:02:31 reporting1 sshd[19530]: User r.r from 58.62.207.50 not allowed because not listed in AllowUsers
Oct 10 01:02:31 reporting1 sshd[19530]: Failed password for invalid user r.r from 58.62.207.50 port 30906 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=58.62.207.50

\[2019-10-13 05:17:45\] NOTICE\[1887\] chan_sip.c: Registration from '"250"\' failed for '212.129.2.12:24432' - Wrong password
\[2019-10-13 05:17:45\] SECURITY\[1898\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-13T05:17:45.210-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="250",SessionID="0x7fc3ac85f3d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.129.2.12/24432",Challenge="25383b7f",ReceivedChallenge="25383b7f",ReceivedHash="a1c193425db093162b2e54a3e30ddd67"
\[2019-10-13 05:24:40\] NOTICE\[1887\] chan_sip.c: Registration from '"700"\' failed for '212.129.2.12:24441' - Wrong password
\[2019-10-13 05:24:40\] SECURITY\[1898\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-13T05:24:40.782-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="700",SessionID="0x7fc3ac226ee8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.12

Unauthorised access (Oct 13) SRC=218.144.210.184 LEN=40 TTL=52 ID=18570 TCP DPT=23 WINDOW=60093 SYN

Oct 13 09:21:36 eventyay sshd[19071]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.125.25.73
Oct 13 09:21:37 eventyay sshd[19071]: Failed password for invalid user P4sswort@2016 from 113.125.25.73 port 54280 ssh2
Oct 13 09:27:10 eventyay sshd[19377]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.125.25.73
...

Oct 13 11:26:33 root sshd[8924]: Failed password for root from 45.237.140.120 port 57620 ssh2
Oct 13 11:31:41 root sshd[8990]: Failed password for root from 45.237.140.120 port 40632 ssh2
...