Nov 14 16:22:59 ws22vmsma01 sshd[31140]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.138.73.250
Nov 14 16:23:01 ws22vmsma01 sshd[31140]: Failed password for invalid user farthing from 213.138.73.250 port 50724 ssh2
...

scan z

2019-11-14 08:32:27 H=ec2-34-212-195-85.us-west-2.compute.amazonaws.com (phylobago.mysecuritycamera.org) [34.212.195.85]:38072 I=[192.147.25.65]:25 sender verify fail for : Unrouteable address
2019-11-14 08:32:27 H=ec2-34-212-195-85.us-west-2.compute.amazonaws.com (phylobago.mysecuritycamera.org) [34.212.195.85]:38072 I=[192.147.25.65]:25 F= rejected RCPT : Sender verify failed
2019-11-14 08:32:28 H=ec2-34-212-195-85.us-west-2.compute.amazonaws.com (phylobago.mysecuritycamera.org) [34.212.195.85]:38072 I=[192.147.25.65]:25 sender verify fail for : Unrouteable address
2019-11-14 08:32:28 H=ec2-34-212-195-85.us-west-2.compute.amazonaws.com (phylobago.mysecuritycamera.org) [34.212.195.85]:38072 I=[192.147.25.65]:25 F= rejected RCPT : Sender verify failed
...

Automatic report - Port Scan Attack

Nov 14 06:07:47 *** sshd[28226]: Failed password for invalid user wuollet from 40.118.46.159 port 47922 ssh2
Nov 14 06:11:59 *** sshd[28321]: Failed password for invalid user rpm from 40.118.46.159 port 57642 ssh2
Nov 14 06:16:19 *** sshd[28353]: Failed password for invalid user test from 40.118.46.159 port 39170 ssh2
Nov 14 06:24:29 *** sshd[28499]: Failed password for invalid user test from 40.118.46.159 port 58574 ssh2
Nov 14 06:33:18 *** sshd[28692]: Failed password for invalid user thursday from 40.118.46.159 port 49856 ssh2
Nov 14 06:41:30 *** sshd[28857]: Failed password for invalid user soporte from 40.118.46.159 port 41020 ssh2
Nov 14 06:45:53 *** sshd[28944]: Failed password for invalid user wwwadmin from 40.118.46.159 port 50782 ssh2
Nov 14 06:50:23 *** sshd[28998]: Failed password for invalid user wbundy from 40.118.46.159 port 60576 ssh2
Nov 14 06:58:52 *** sshd[32763]: Failed password for invalid user paulitzky from 40.118.46.159 port 51790 ssh2
Nov 14 07:07:41 *** sshd[490]: Failed password for

Port Scan: TCP/23

(sshd) Failed SSH login from 50.250.231.41 (US/United States/50-250-231-41-static.hfc.comcastbusiness.net): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Nov 14 15:07:55 elude sshd[9014]: Invalid user matson from 50.250.231.41 port 55048
Nov 14 15:07:58 elude sshd[9014]: Failed password for invalid user matson from 50.250.231.41 port 55048 ssh2
Nov 14 15:28:57 elude sshd[14120]: Invalid user oframe2 from 50.250.231.41 port 33225
Nov 14 15:28:58 elude sshd[14120]: Failed password for invalid user oframe2 from 50.250.231.41 port 33225 ssh2
Nov 14 15:32:39 elude sshd[15035]: Invalid user culp from 50.250.231.41 port 52208

joshuajohannes.de 185.2.13.102 \[14/Nov/2019:19:03:45 +0100\] "POST /wp-login.php HTTP/1.1" 200 6301 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
joshuajohannes.de 185.2.13.102 \[14/Nov/2019:19:03:47 +0100\] "POST /wp-login.php HTTP/1.1" 200 6269 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
joshuajohannes.de 185.2.13.102 \[14/Nov/2019:19:03:48 +0100\] "POST /xmlrpc.php HTTP/1.1" 200 4098 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"

2019-11-14T20:49:10.095612+01:00 lumpi kernel: [3583324.306395] INPUT:DROP:SPAMHAUS_EDROP:IN=eth0 OUT= MAC=52:54:a2:01:a5:04:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.85 DST=172.31.1.100 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=25685 PROTO=TCP SPT=41799 DPT=3385 WINDOW=1024 RES=0x00 SYN URGP=0 
...

Automatic report - Banned IP Access

Unauthorized connection attempt from IP address 116.109.237.210 on Port 445(SMB)

89.248.168.225 was recorded 5 times by 1 hosts attempting to connect to the following ports: 15148,15157,15156,15145,15158. Incident counter (4h, 24h, all-time): 5, 887, 6927

Automatic report - Port Scan Attack

Invalid user ts3bot from 61.183.35.44 port 48592

xmlrpc attack