(smtpauth) Failed SMTP AUTH login from 223.242.225.12 (CN/China/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-06-05 16:33:23 login authenticator failed for (GFmh9Jd) [223.242.225.12]: 535 Incorrect authentication data (set_id=info)

SG_APNIC-HM_<177>1591358561 [1:2010935:3] ET SCAN Suspicious inbound to MSSQL port 1433 [Classification: Potentially Bad Traffic] [Priority: 2]:  {TCP} 118.200.78.186:59181

Email rejected due to spam filtering

Jun  5 02:31:00 web1 sshd\[13692\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.193.148  user=root
Jun  5 02:31:01 web1 sshd\[13692\]: Failed password for root from 68.183.193.148 port 51180 ssh2
Jun  5 02:34:28 web1 sshd\[13945\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.193.148  user=root
Jun  5 02:34:30 web1 sshd\[13945\]: Failed password for root from 68.183.193.148 port 54616 ssh2
Jun  5 02:37:55 web1 sshd\[14205\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.193.148  user=root

Automatic report - Port Scan

1591358575 - 06/05/2020 14:02:55 Host: 14.162.39.190/14.162.39.190 Port: 445 TCP Blocked

2020-06-05T11:52:55.832932randservbullet-proofcloud-66.localdomain sshd[3733]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.116.203  user=root
2020-06-05T11:52:57.975621randservbullet-proofcloud-66.localdomain sshd[3733]: Failed password for root from 106.13.116.203 port 47658 ssh2
2020-06-05T12:03:22.389517randservbullet-proofcloud-66.localdomain sshd[3787]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.116.203  user=root
2020-06-05T12:03:24.943297randservbullet-proofcloud-66.localdomain sshd[3787]: Failed password for root from 106.13.116.203 port 36286 ssh2
...

Jun  5 15:59:56 journals sshd\[68929\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.159.194.226  user=root
Jun  5 15:59:59 journals sshd\[68929\]: Failed password for root from 109.159.194.226 port 34388 ssh2
Jun  5 16:02:10 journals sshd\[69190\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.159.194.226  user=root
Jun  5 16:02:12 journals sshd\[69190\]: Failed password for root from 109.159.194.226 port 41818 ssh2
Jun  5 16:04:28 journals sshd\[69341\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.159.194.226  user=root
...

05.06.2020 13:12:01 Recursive DNS scan

2020-06-05 06:57:21.721269-0500  localhost smtpd[21357]: NOQUEUE: reject: RCPT from unknown[103.113.90.226]: 450 4.7.25 Client host rejected: cannot find your hostname, [103.113.90.226]; from= to= proto=ESMTP helo=<00fd7eba.megamega.xyz>

Jun  5 14:55:27 abendstille sshd\[19047\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.17.162.119  user=root
Jun  5 14:55:29 abendstille sshd\[19047\]: Failed password for root from 218.17.162.119 port 19827 ssh2
Jun  5 14:57:05 abendstille sshd\[20520\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.17.162.119  user=root
Jun  5 14:57:06 abendstille sshd\[20520\]: Failed password for root from 218.17.162.119 port 38731 ssh2
Jun  5 14:58:36 abendstille sshd\[21930\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.17.162.119  user=root
...

Jun  5 14:57:34 vps sshd[697401]: Failed password for root from 61.177.172.128 port 4186 ssh2
Jun  5 14:57:37 vps sshd[697401]: Failed password for root from 61.177.172.128 port 4186 ssh2
Jun  5 14:57:40 vps sshd[697401]: Failed password for root from 61.177.172.128 port 4186 ssh2
Jun  5 14:57:43 vps sshd[697401]: Failed password for root from 61.177.172.128 port 4186 ssh2
Jun  5 14:57:46 vps sshd[697401]: Failed password for root from 61.177.172.128 port 4186 ssh2
...

1591358583 - 06/05/2020 14:03:03 Host: 177.200.68.107/177.200.68.107 Port: 445 TCP Blocked

Jun  5 15:04:53 santamaria sshd\[30021\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.56.113.224  user=root
Jun  5 15:04:55 santamaria sshd\[30021\]: Failed password for root from 103.56.113.224 port 39336 ssh2
Jun  5 15:08:51 santamaria sshd\[30100\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.56.113.224  user=root
...

Tried sshing with brute force.