[munged]::443 2a00:1838:37:191::ceb4 - - [23/Jun/2019:03:52:05 +0200] "POST /[munged]: HTTP/1.1" 200 6714 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 2a00:1838:37:191::ceb4 - - [23/Jun/2019:03:52:06 +0200] "POST /[munged]: HTTP/1.1" 200 6710 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"

May 24 08:13:09 server sshd\[164987\]: Invalid user danny from 157.230.225.77
May 24 08:13:09 server sshd\[164987\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.225.77
May 24 08:13:11 server sshd\[164987\]: Failed password for invalid user danny from 157.230.225.77 port 49664 ssh2
...

" "

Oct  9 11:05:00 srv206 sshd[17082]: Invalid user support from 103.101.52.48
Oct  9 11:05:00 srv206 sshd[17082]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.101.52.48
Oct  9 11:05:00 srv206 sshd[17082]: Invalid user support from 103.101.52.48
Oct  9 11:05:02 srv206 sshd[17082]: Failed password for invalid user support from 103.101.52.48 port 45680 ssh2
...

Oct  9 11:51:55 rotator sshd\[7243\]: Failed password for root from 198.100.148.114 port 42812 ssh2Oct  9 11:51:58 rotator sshd\[7243\]: Failed password for root from 198.100.148.114 port 42812 ssh2Oct  9 11:52:00 rotator sshd\[7243\]: Failed password for root from 198.100.148.114 port 42812 ssh2Oct  9 11:52:03 rotator sshd\[7243\]: Failed password for root from 198.100.148.114 port 42812 ssh2Oct  9 11:52:06 rotator sshd\[7243\]: Failed password for root from 198.100.148.114 port 42812 ssh2Oct  9 11:52:09 rotator sshd\[7243\]: Failed password for root from 198.100.148.114 port 42812 ssh2
...

Jul  1 17:52:40 server sshd\[143232\]: Invalid user von from 158.69.112.95
Jul  1 17:52:40 server sshd\[143232\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.69.112.95
Jul  1 17:52:42 server sshd\[143232\]: Failed password for invalid user von from 158.69.112.95 port 34536 ssh2
...

Aug 12 21:42:33 server sshd\[175025\]: Invalid user backups from 157.230.43.108
Aug 12 21:42:33 server sshd\[175025\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.43.108
Aug 12 21:42:35 server sshd\[175025\]: Failed password for invalid user backups from 157.230.43.108 port 35536 ssh2
...

Oct  9 05:46:14 mail sshd[18089]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.42.238.77 
Oct  9 05:46:16 mail sshd[18089]: Failed password for invalid user admin from 118.42.238.77 port 38062 ssh2
Oct  9 05:47:55 mail sshd[18666]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.42.238.77

WordPress login Brute force / Web App Attack on client site.

May  8 16:18:09 server sshd\[229549\]: Invalid user vagrant from 157.230.241.240
May  8 16:18:09 server sshd\[229549\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.241.240
May  8 16:18:11 server sshd\[229549\]: Failed password for invalid user vagrant from 157.230.241.240 port 42864 ssh2
...

Lines containing failures of 1.55.215.19
Oct  7 00:52:30 ariston sshd[24493]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.55.215.19  user=r.r
Oct  7 00:52:31 ariston sshd[24493]: Failed password for r.r from 1.55.215.19 port 47486 ssh2
Oct  7 00:52:32 ariston sshd[24493]: Received disconnect from 1.55.215.19 port 47486:11: Bye Bye [preauth]
Oct  7 00:52:32 ariston sshd[24493]: Disconnected from authenticating user r.r 1.55.215.19 port 47486 [preauth]
Oct  7 01:06:25 ariston sshd[26541]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.55.215.19  user=r.r
Oct  7 01:06:28 ariston sshd[26541]: Failed password for r.r from 1.55.215.19 port 39790 ssh2
Oct  7 01:06:30 ariston sshd[26541]: Received disconnect from 1.55.215.19 port 39790:11: Bye Bye [preauth]
Oct  7 01:06:30 ariston sshd[26541]: Disconnected from authenticating user r.r 1.55.215.19 port 39790 [preauth]
Oct  7 01:10:51 ariston ........
------------------------------

Oct  9 11:26:24 tuxlinux sshd[40669]: Invalid user jboss from 132.148.129.180 port 47360
Oct  9 11:26:24 tuxlinux sshd[40669]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.148.129.180 
Oct  9 11:26:24 tuxlinux sshd[40669]: Invalid user jboss from 132.148.129.180 port 47360
Oct  9 11:26:24 tuxlinux sshd[40669]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.148.129.180 
...

2019-10-08 22:51:52 H=peg250.internetdsl.tpnet.pl [46.171.110.250]:49256 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS)
2019-10-08 22:51:53 H=peg250.internetdsl.tpnet.pl [46.171.110.250]:49256 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/query/ip/46.171.110.250)
2019-10-08 22:51:53 H=peg250.internetdsl.tpnet.pl [46.171.110.250]:49256 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/query/ip/46.171.110.250)
...

Automatic report - Banned IP Access

Oct  9 10:08:05 icinga sshd[11220]: Failed password for root from 188.166.246.46 port 41450 ssh2
...

Oct  9 00:20:05 web9 sshd\[26807\]: Invalid user Contrasena111 from 213.251.35.49
Oct  9 00:20:05 web9 sshd\[26807\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.251.35.49
Oct  9 00:20:07 web9 sshd\[26807\]: Failed password for invalid user Contrasena111 from 213.251.35.49 port 56620 ssh2
Oct  9 00:23:46 web9 sshd\[27307\]: Invalid user Kansas123 from 213.251.35.49
Oct  9 00:23:46 web9 sshd\[27307\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.251.35.49