Oct  6 10:54:00 ms-srv sshd[16250]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=136.243.142.18  user=root
Oct  6 10:54:03 ms-srv sshd[16250]: Failed password for invalid user root from 136.243.142.18 port 33542 ssh2

Oct  6 11:42:53 mavik sshd[7275]: Failed password for root from 122.194.229.59 port 6160 ssh2
Oct  6 11:42:57 mavik sshd[7275]: Failed password for root from 122.194.229.59 port 6160 ssh2
Oct  6 11:43:00 mavik sshd[7275]: Failed password for root from 122.194.229.59 port 6160 ssh2
Oct  6 11:43:03 mavik sshd[7275]: Failed password for root from 122.194.229.59 port 6160 ssh2
Oct  6 11:43:06 mavik sshd[7275]: Failed password for root from 122.194.229.59 port 6160 ssh2
...

60681/udp
[2020-10-05]1pkt

445/tcp 445/tcp
[2020-10-05]2pkt

Dear Customer,
we inform you that the domain bleta.net   , to which this mail account is linked, will expire on 10/07/2020.
We wish to remind you that, if the domain is not renewed by that date, these and all associated services, including mailboxes, will be deactivated and can no longer be used for sending and receiving.
HOW TO RENEW THE DOMAIN?
The Β؜؜؜l؜؜؜u؜؜؜е؜؜؜h؜؜؜s؜؜؜ο؜؜؜t customer who has the login and password to access the domain, will be able to renew simply by placing an order online.
RENEW THE DOMAIN  
Thank you for choosing Β؜؜؜l؜؜؜u؜؜؜е؜؜؜h؜؜؜s؜؜؜ο؜؜؜t !
Sincerely,
Β؜؜؜l؜؜؜u؜؜؜е؜؜؜h؜؜؜s؜؜؜ο؜؜؜t Customer Care

SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: li2151-26.members.linode.com.

Oct  5 23:50:56 OPSO sshd\[27369\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.51.253  user=root
Oct  5 23:50:58 OPSO sshd\[27369\]: Failed password for root from 178.128.51.253 port 34212 ssh2
Oct  5 23:55:06 OPSO sshd\[28100\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.51.253  user=root
Oct  5 23:55:08 OPSO sshd\[28100\]: Failed password for root from 178.128.51.253 port 42058 ssh2
Oct  5 23:59:16 OPSO sshd\[28768\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.51.253  user=root

(sshd) Failed SSH login from 122.51.192.105 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct  6 06:24:42 optimus sshd[20014]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.192.105  user=root
Oct  6 06:24:43 optimus sshd[20014]: Failed password for root from 122.51.192.105 port 53810 ssh2
Oct  6 06:28:08 optimus sshd[20939]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.192.105  user=root
Oct  6 06:28:11 optimus sshd[20939]: Failed password for root from 122.51.192.105 port 48728 ssh2
Oct  6 06:31:40 optimus sshd[22042]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.192.105  user=root

spam (f2b h2)

Brute forcing email accounts

[N3.H3.VM3] Port Scanner Detected Blocked by UFW

Oct  6 12:31:24 vps sshd[28351]: Failed password for root from 178.128.14.102 port 39474 ssh2
Oct  6 12:36:41 vps sshd[28651]: Failed password for root from 178.128.14.102 port 35802 ssh2
...

$f2bV_matches

Oct  6 10:11:04 ns3033917 sshd[2173]: Failed password for root from 178.62.118.53 port 49039 ssh2
Oct  6 10:19:55 ns3033917 sshd[2251]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.118.53  user=root
Oct  6 10:19:58 ns3033917 sshd[2251]: Failed password for root from 178.62.118.53 port 52683 ssh2
...

Oct  6 12:32:40 server sshd[3878]: Failed password for root from 49.232.157.17 port 32784 ssh2
Oct  6 12:34:58 server sshd[5153]: Failed password for root from 49.232.157.17 port 35350 ssh2
Oct  6 12:37:23 server sshd[6492]: Failed password for root from 49.232.157.17 port 37926 ssh2