Received: from mail-wm1-x343.google.com (mail-wm1-x343.google.com [2a00:1450:4864:20::343])
Received: by mail-wm1-x343.google.com with SMTP id u2so2828433wmc.3
Message-ID: <5EA2C4F75FF03936E17056F5957EDEC2C588DEA6@unknown>
From: "Beauty Olgoka"   lp.olga88@gmail.com
Aloha my new mate, I hope, you very well feel yourself? I for the first time write the similar letter. I slightly I test excitement! My name Olga. I write you from a city Ulyanovsk. It large a city in the European part RU. To me31 years. I positive and easy in dialogue the girl. Still I courageous because be I shy, I never have not made the decision to write this letter. I ask you to give me pair of minutes of your time!........

Jun  9 07:07:09 srv01 postfix/smtpd\[25488\]: warning: unknown\[46.38.145.4\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun  9 07:07:19 srv01 postfix/smtpd\[22496\]: warning: unknown\[46.38.145.4\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun  9 07:07:48 srv01 postfix/smtpd\[25488\]: warning: unknown\[46.38.145.4\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun  9 07:08:27 srv01 postfix/smtpd\[6921\]: warning: unknown\[46.38.145.4\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun  9 07:08:46 srv01 postfix/smtpd\[25488\]: warning: unknown\[46.38.145.4\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...

Jun  9 08:38:53 debian kernel: [583690.224727] [UFW BLOCK] IN=eth0 OUT= MAC=52:54:00:be:e4:65:08:e8:4f:6e:48:0c:08:00 SRC=89.252.232.82 DST=89.252.131.35 LEN=44 TOS=0x00 PREC=0x00 TTL=238 ID=56954 DF PROTO=TCP SPT=19168 DPT=8291 WINDOW=14600 RES=0x00 SYN URGP=0

Brute forcing RDP port 3389

Port probing on unauthorized port 8000

Jun  9 03:27:41 localhost sshd\[29365\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.151.222.78  user=root
Jun  9 03:27:44 localhost sshd\[29365\]: Failed password for root from 120.151.222.78 port 44654 ssh2
Jun  9 03:56:24 localhost sshd\[29842\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.151.222.78  user=root
...

Jun  9 06:29:16 haigwepa sshd[32477]: Failed password for root from 84.241.7.77 port 34442 ssh2
...

Jun  9 04:58:05 hcbbdb sshd\[32398\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.58.230.47  user=root
Jun  9 04:58:08 hcbbdb sshd\[32398\]: Failed password for root from 2.58.230.47 port 58822 ssh2
Jun  9 05:02:06 hcbbdb sshd\[32751\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.58.230.47  user=root
Jun  9 05:02:09 hcbbdb sshd\[32751\]: Failed password for root from 2.58.230.47 port 33974 ssh2
Jun  9 05:06:05 hcbbdb sshd\[751\]: Invalid user wwwadmin from 2.58.230.47
Jun  9 05:06:05 hcbbdb sshd\[751\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.58.230.47

Jun  9 02:23:47 vps46666688 sshd[15239]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.189.91.138
Jun  9 02:23:49 vps46666688 sshd[15239]: Failed password for invalid user carrie from 196.189.91.138 port 46816 ssh2
...

Lines containing failures of 186.213.21.254
Jun  8 11:46:30 kopano sshd[17980]: warning: /etc/hosts.allow, line 13: can't verify hostname: getaddrinfo(186.213.21.254.static.host.gvt.net.br, AF_INET) failed
Jun  8 11:46:32 kopano sshd[17980]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.213.21.254  user=r.r
Jun  8 11:46:34 kopano sshd[17980]: Failed password for r.r from 186.213.21.254 port 49932 ssh2
Jun  8 11:46:34 kopano sshd[17980]: Received disconnect from 186.213.21.254 port 49932:11: Bye Bye [preauth]
Jun  8 11:46:34 kopano sshd[17980]: Disconnected from authenticating user r.r 186.213.21.254 port 49932 [preauth]
Jun  8 11:50:09 kopano sshd[20455]: warning: /etc/hosts.allow, line 13: can't verify hostname: getaddrinfo(186.213.21.254.static.host.gvt.net.br, AF_INET) failed
Jun  8 11:50:11 kopano sshd[20455]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.213.21.254  user=r.r
........
------------------------------

Jun  9 06:47:38 server sshd[45354]: Failed password for root from 49.88.112.110 port 21995 ssh2
Jun  9 06:47:41 server sshd[45354]: Failed password for root from 49.88.112.110 port 21995 ssh2
Jun  9 06:47:45 server sshd[45354]: Failed password for root from 49.88.112.110 port 21995 ssh2

Jun  9 06:16:39 localhost sshd\[7114\]: Invalid user monitor from 49.235.158.195
Jun  9 06:16:39 localhost sshd\[7114\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.158.195
Jun  9 06:16:41 localhost sshd\[7114\]: Failed password for invalid user monitor from 49.235.158.195 port 41026 ssh2
Jun  9 06:17:00 localhost sshd\[7125\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.158.195  user=root
Jun  9 06:17:03 localhost sshd\[7125\]: Failed password for root from 49.235.158.195 port 44188 ssh2
...

Jun  9 05:43:34 ns382633 sshd\[17977\]: Invalid user admin from 51.91.102.99 port 41436
Jun  9 05:43:34 ns382633 sshd\[17977\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.102.99
Jun  9 05:43:36 ns382633 sshd\[17977\]: Failed password for invalid user admin from 51.91.102.99 port 41436 ssh2
Jun  9 05:55:52 ns382633 sshd\[20358\]: Invalid user enterprise from 51.91.102.99 port 53184
Jun  9 05:55:53 ns382633 sshd\[20358\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.102.99

Jun  8 23:15:20 server1 sshd\[8199\]: Failed password for root from 128.199.123.0 port 45680 ssh2
Jun  8 23:19:02 server1 sshd\[9234\]: Invalid user marjy from 128.199.123.0
Jun  8 23:19:02 server1 sshd\[9234\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.123.0 
Jun  8 23:19:04 server1 sshd\[9234\]: Failed password for invalid user marjy from 128.199.123.0 port 47846 ssh2
Jun  8 23:22:54 server1 sshd\[10214\]: Invalid user kafka from 128.199.123.0
...

Jun  9 06:44:09 meumeu sshd[44018]: Invalid user discover from 122.51.22.134 port 53008
Jun  9 06:44:09 meumeu sshd[44018]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.22.134 
Jun  9 06:44:09 meumeu sshd[44018]: Invalid user discover from 122.51.22.134 port 53008
Jun  9 06:44:11 meumeu sshd[44018]: Failed password for invalid user discover from 122.51.22.134 port 53008 ssh2
Jun  9 06:45:10 meumeu sshd[44042]: Invalid user 1Qaz2Wsx from 122.51.22.134 port 35146
Jun  9 06:45:10 meumeu sshd[44042]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.22.134 
Jun  9 06:45:10 meumeu sshd[44042]: Invalid user 1Qaz2Wsx from 122.51.22.134 port 35146
Jun  9 06:45:11 meumeu sshd[44042]: Failed password for invalid user 1Qaz2Wsx from 122.51.22.134 port 35146 ssh2
Jun  9 06:46:12 meumeu sshd[44071]: Invalid user hhh from 122.51.22.134 port 45514
...

Jun  9 07:10:08 jane sshd[9130]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.33.135 
Jun  9 07:10:10 jane sshd[9130]: Failed password for invalid user ftpuser from 111.231.33.135 port 57244 ssh2
...