103.61.198.2 - - [28/Dec/2019:09:24:17 -0500] "GET /?page=../../etc/passwd%00&action=view& HTTP/1.1" 200 17542 "https://ccbrass.com/?page=../../etc/passwd%00&action=view&" "Mozilla/5.0 (Windows NT 10.0; WOW64; Rv:50.0) Gecko/20100101 Firefox/50.0"
...

Dec 28 23:37:58 [host] sshd[25769]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.172  user=root
Dec 28 23:38:01 [host] sshd[25769]: Failed password for root from 218.92.0.172 port 8474 ssh2
Dec 28 23:38:23 [host] sshd[25812]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.172  user=root

Fail2Ban Ban Triggered

2019-12-29T09:24:43.564437luisaranguren sshd[3078130]: Connection from 163.172.204.185 port 41973 on 10.10.10.6 port 22 rdomain ""
2019-12-29T09:24:44.989904luisaranguren sshd[3078130]: Invalid user dathan from 163.172.204.185 port 41973
2019-12-29T09:24:44.996848luisaranguren sshd[3078130]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.204.185
2019-12-29T09:24:43.564437luisaranguren sshd[3078130]: Connection from 163.172.204.185 port 41973 on 10.10.10.6 port 22 rdomain ""
2019-12-29T09:24:44.989904luisaranguren sshd[3078130]: Invalid user dathan from 163.172.204.185 port 41973
2019-12-29T09:24:47.288198luisaranguren sshd[3078130]: Failed password for invalid user dathan from 163.172.204.185 port 41973 ssh2
...

217.11.19.154 - - [28/Dec/2019:09:23:19 -0500] "GET /?page=../../etc/passwd&action=view& HTTP/1.1" 200 17538 "https://ccbrass.com/?page=../../etc/passwd&action=view&" "Mozilla/5.0 (Windows NT 10.0; WOW64; Rv:50.0) Gecko/20100101 Firefox/50.0"
...

Dec 28 11:24:04 vps46666688 sshd[7448]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.167.205
Dec 28 11:24:06 vps46666688 sshd[7448]: Failed password for invalid user gul from 106.13.167.205 port 58584 ssh2
...

Dec 29 00:39:47 server sshd\[865\]: Invalid user semroc from 149.56.96.78
Dec 29 00:39:47 server sshd\[865\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.ip-149-56-96.net 
Dec 29 00:39:49 server sshd\[865\]: Failed password for invalid user semroc from 149.56.96.78 port 45442 ssh2
Dec 29 00:53:01 server sshd\[3977\]: Invalid user rayvon from 149.56.96.78
Dec 29 00:53:01 server sshd\[3977\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.ip-149-56-96.net 
...

Automatic report - Port Scan Attack

Dec 28 22:37:01 mail postfix/smtpd[3702]: warning: unknown[120.92.153.47]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Dec 28 22:37:09 mail postfix/smtpd[3702]: warning: unknown[120.92.153.47]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Dec 28 22:37:23 mail postfix/smtpd[3702]: warning: unknown[120.92.153.47]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...

Dec 28 15:24:23 grey postfix/smtpd\[6944\]: NOQUEUE: reject: RCPT from net-93-151-189-11.cust.dsl.teletu.it\[93.151.189.11\]: 554 5.7.1 Service unavailable\; Client host \[93.151.189.11\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[93.151.189.11\]\; from=\ to=\ proto=ESMTP helo=\
...

Dec 28 23:43:58 herz-der-gamer sshd[22792]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.4  user=root
Dec 28 23:44:00 herz-der-gamer sshd[22792]: Failed password for root from 222.186.42.4 port 52194 ssh2
...

port 23

Dec 28 21:12:31 xeon sshd[55029]: Failed password for invalid user ninorio from 51.89.136.228 port 48616 ssh2

Invalid user sorina from 51.77.148.87 port 56752

Dec 28 15:22:34  exim[14702]: [1\54] 1ilCzA-0003p8-Oy H=(212.156.246.74.static.turktelekom.com.tr) [212.156.246.74] F= rejected after DATA: This message scored 26.6 spam points.