Mar  5 10:06:31 server sshd\[4676\]: Invalid user impala from 157.230.190.1
Mar  5 10:06:31 server sshd\[4676\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.190.1 
Mar  5 10:06:33 server sshd\[4676\]: Failed password for invalid user impala from 157.230.190.1 port 53180 ssh2
Mar  5 16:34:54 server sshd\[14936\]: Invalid user webadmin from 157.230.190.1
Mar  5 16:34:54 server sshd\[14936\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.190.1 
...

Telnet/23 MH Probe, Scan, BF, Hack -

Mar  5 20:13:31 areeb-Workstation sshd[10246]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.191.76.227 
Mar  5 20:13:33 areeb-Workstation sshd[10246]: Failed password for invalid user pc from 65.191.76.227 port 33184 ssh2
...

[Thu Mar 05 20:35:09.077839 2020] [:error] [pid 2076:tid 139658339280640] [client 5.45.207.74:50527] [client 5.45.207.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "696"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/"] [unique_id "XmEADdNqPnL4hDn@SrG94wAAADs"]
...

Feb  4 07:10:51 odroid64 sshd\[3587\]: Invalid user tlms_user from 167.71.255.56
Feb  4 07:10:51 odroid64 sshd\[3587\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.255.56
...

Mar  5 04:39:09 tdfoods sshd\[7664\]: Invalid user qdgw from 51.68.84.36
Mar  5 04:39:09 tdfoods sshd\[7664\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.84.36
Mar  5 04:39:10 tdfoods sshd\[7664\]: Failed password for invalid user qdgw from 51.68.84.36 port 53180 ssh2
Mar  5 04:48:07 tdfoods sshd\[8382\]: Invalid user html from 51.68.84.36
Mar  5 04:48:07 tdfoods sshd\[8382\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.84.36

Telnet/23 MH Probe, Scan, BF, Hack -

Automatic report - Port Scan Attack

23/tcp
[2020-03-05]1pkt

Mar  5 15:58:56 santamaria sshd\[7049\]: Invalid user xupeng from 124.251.110.148
Mar  5 15:58:56 santamaria sshd\[7049\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.251.110.148
Mar  5 15:58:58 santamaria sshd\[7049\]: Failed password for invalid user xupeng from 124.251.110.148 port 55894 ssh2
...

Feb 15 01:42:11 odroid64 sshd\[4514\]: Invalid user anicia from 167.71.223.191
Feb 15 01:42:11 odroid64 sshd\[4514\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.223.191
...

Mar  5 14:49:38 sigma sshd\[9898\]: Invalid user openmail from 139.59.71.104Mar  5 14:49:40 sigma sshd\[9898\]: Failed password for invalid user openmail from 139.59.71.104 port 56858 ssh2
...

IP was detected trying to Brute-Force SSH, FTP, Web Apps, Port-Scan or Hacking.

1583415297 - 03/05/2020 14:34:57 Host: 113.186.246.72/113.186.246.72 Port: 445 TCP Blocked

Mar  5 14:34:51 grey postfix/smtpd\[29460\]: NOQUEUE: reject: RCPT from unknown\[107.158.44.150\]: 554 5.7.1 Service unavailable\; Client host \[107.158.44.150\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[107.158.44.150\]\; from=\ to=\ proto=ESMTP helo=\<02dba440.dialul.us\>
...