May  7 06:11:09 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=2a02:1812:1e01:1400:b51d:a11c:1cd7:89f9, lip=2a01:7e01:e001:164::, TLS, session=<8YDpEQelaNwqAhgSHgEUALUdoRwc14n5>
May  7 06:11:15 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=2a02:1812:1e01:1400:b51d:a11c:1cd7:89f9, lip=2a01:7e01:e001:164::, TLS, session=
May  7 06:11:15 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=2a02:1812:1e01:1400:b51d:a11c:1cd7:89f9, lip=2a01:7e01:e001:164::, TLS, session=
May  7 06:11:27 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=2a02:1812:1e01:1400:b51d:a11c:1cd7:89f9, lip=2a01:7e01:e001:164::, TLS, session=
May 
...

Lines containing failures of 122.51.41.44
Nov 18 15:42:19 MAKserver06 sshd[27982]: Invalid user odara from 122.51.41.44 port 46562
Nov 18 15:42:19 MAKserver06 sshd[27982]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.41.44 
Nov 18 15:42:22 MAKserver06 sshd[27982]: Failed password for invalid user odara from 122.51.41.44 port 46562 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=122.51.41.44

Unauthorised access (Nov 18) SRC=187.101.58.175 LEN=40 TOS=0x10 PREC=0x40 TTL=238 ID=32016 DF TCP DPT=8080 WINDOW=14600 SYN

Nov 18 14:49:08 ms-srv sshd[29409]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.88.177.12
Nov 18 14:49:09 ms-srv sshd[29409]: Failed password for invalid user suzzanne from 125.88.177.12 port 55326 ssh2

Automatic report - Port Scan Attack

Unauthorized SSH login attempts

Nov 18 19:54:46 sauna sshd[78028]: Failed password for root from 123.136.161.146 port 56174 ssh2
...

Nov 18 15:58:11 vmd26974 sshd[1428]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.61.82
Nov 18 15:58:13 vmd26974 sshd[1428]: Failed password for invalid user imprenta from 165.22.61.82 port 33192 ssh2
...

Nov 18 15:48:40  exim[29013]: 2019-11-18 15:48:40 1iWiKT-0007Xx-Qv H=(locopress.it) [176.110.130.150] F= rejected after DATA: This message scored 16.9 spam points.

Unauthorised access (Nov 18) SRC=36.80.190.31 LEN=52 TTL=248 ID=806 DF TCP DPT=445 WINDOW=63443 SYN

Nov 18 09:49:02 web1 postfix/smtpd[4964]: warning: unknown[183.91.153.250]: SASL LOGIN authentication failed: authentication failure
...

2019-11-18T18:01:53.491527abusebot-4.cloudsearch.cf sshd\[19792\]: Invalid user user0 from 139.59.4.224 port 35930

Hit on /wp-login.php

Nov 18 08:03:31 web9 sshd\[20274\]: Invalid user aaaa from 167.71.229.184
Nov 18 08:03:31 web9 sshd\[20274\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.229.184
Nov 18 08:03:34 web9 sshd\[20274\]: Failed password for invalid user aaaa from 167.71.229.184 port 57462 ssh2
Nov 18 08:07:50 web9 sshd\[20815\]: Invalid user 000000000 from 167.71.229.184
Nov 18 08:07:50 web9 sshd\[20815\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.229.184

Nov 18 19:37:05 cvbnet sshd[25181]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.64.137.171 
Nov 18 19:37:07 cvbnet sshd[25181]: Failed password for invalid user swimeley from 190.64.137.171 port 47638 ssh2
...

Nov 18 08:18:13 php1 sshd\[31495\]: Invalid user team from 187.191.60.178
Nov 18 08:18:13 php1 sshd\[31495\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.191.60.178
Nov 18 08:18:15 php1 sshd\[31495\]: Failed password for invalid user team from 187.191.60.178 port 39616 ssh2
Nov 18 08:23:28 php1 sshd\[31937\]: Invalid user myoen from 187.191.60.178
Nov 18 08:23:28 php1 sshd\[31937\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.191.60.178