Dec  9 21:12:04 eddieflores sshd\[18821\]: Invalid user dovecot from 142.93.15.179
Dec  9 21:12:04 eddieflores sshd\[18821\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.15.179
Dec  9 21:12:05 eddieflores sshd\[18821\]: Failed password for invalid user dovecot from 142.93.15.179 port 59876 ssh2
Dec  9 21:17:23 eddieflores sshd\[19388\]: Invalid user skevik from 142.93.15.179
Dec  9 21:17:23 eddieflores sshd\[19388\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.15.179

Dec 10 10:32:49 debian-2gb-vpn-nbg1-1 kernel: [341554.891194] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=185.175.93.3 DST=78.46.192.101 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=42165 PROTO=TCP SPT=52577 DPT=3400 WINDOW=1024 RES=0x00 SYN URGP=0

Dec 10 08:00:41 * sshd[8244]: Failed password for root from 218.92.0.134 port 56655 ssh2
Dec 10 08:00:56 * sshd[8244]: error: maximum authentication attempts exceeded for root from 218.92.0.134 port 56655 ssh2 [preauth]

Dec 10 08:12:59 OPSO sshd\[2328\]: Invalid user iochum from 138.197.176.130 port 42071
Dec 10 08:12:59 OPSO sshd\[2328\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.176.130
Dec 10 08:13:01 OPSO sshd\[2328\]: Failed password for invalid user iochum from 138.197.176.130 port 42071 ssh2
Dec 10 08:19:31 OPSO sshd\[4010\]: Invalid user aimone from 138.197.176.130 port 46219
Dec 10 08:19:31 OPSO sshd\[4010\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.176.130

Dec 10 07:39:43 nextcloud sshd\[19154\]: Invalid user bill from 220.130.178.36
Dec 10 07:39:43 nextcloud sshd\[19154\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.130.178.36
Dec 10 07:39:44 nextcloud sshd\[19154\]: Failed password for invalid user bill from 220.130.178.36 port 37138 ssh2
...

Dec  9 21:11:17 eddieflores sshd\[18740\]: Invalid user kauther from 144.217.83.201
Dec  9 21:11:17 eddieflores sshd\[18740\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.ip-144-217-83.net
Dec  9 21:11:20 eddieflores sshd\[18740\]: Failed password for invalid user kauther from 144.217.83.201 port 60900 ssh2
Dec  9 21:16:37 eddieflores sshd\[19273\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.ip-144-217-83.net  user=mysql
Dec  9 21:16:39 eddieflores sshd\[19273\]: Failed password for mysql from 144.217.83.201 port 41402 ssh2

Automatic report - Banned IP Access

Automatic report - Banned IP Access

Automatic report - Banned IP Access

Dec 10 06:30:45 flomail dovecot: imap-login: Disconnected (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=146.71.16.96, lip=10.140.194.78, TLS, session=
Dec 10 06:31:04 flomail dovecot: imap-login: Disconnected (auth failed, 1 attempts in 8 secs): user=, method=PLAIN, rip=146.71.16.96, lip=10.140.194.78, TLS: Disconnected, session=

Dec 10 07:12:50 zeus sshd[6392]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.226.209 
Dec 10 07:12:52 zeus sshd[6392]: Failed password for invalid user tina from 188.166.226.209 port 38172 ssh2
Dec 10 07:18:39 zeus sshd[6618]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.226.209 
Dec 10 07:18:42 zeus sshd[6618]: Failed password for invalid user apache from 188.166.226.209 port 40466 ssh2

DATE:2019-12-10 07:30:19, IP:103.83.94.74, PORT:1433 - MSSQL brute force auth on a honeypot server (epe-dc)

2019-12-10T07:30:59.682432abusebot-7.cloudsearch.cf sshd\[11698\]: Invalid user camlife from 202.83.17.223 port 54530

2019-12-09T23:31:02.678322-07:00 suse-nuc sshd[24886]: Invalid user sill from 159.65.13.203 port 52403
...

RDP brute force attack detected by fail2ban