2 weeks under attack from this range IP 45.13.39.0/24.
SMTP Auth Failure - Client	[45.13.39.53]

Jul  2 07:05:57 blackbee postfix/smtpd\[14560\]: warning: unknown\[45.13.39.24\]: SASL LOGIN authentication failed: authentication failure
Jul  2 07:06:40 blackbee postfix/smtpd\[14560\]: warning: unknown\[45.13.39.24\]: SASL LOGIN authentication failed: authentication failure
Jul  2 07:07:25 blackbee postfix/smtpd\[14560\]: warning: unknown\[45.13.39.24\]: SASL LOGIN authentication failed: authentication failure
Jul  2 07:08:09 blackbee postfix/smtpd\[14560\]: warning: unknown\[45.13.39.24\]: SASL LOGIN authentication failed: authentication failure
Jul  2 07:08:50 blackbee postfix/smtpd\[14560\]: warning: unknown\[45.13.39.24\]: SASL LOGIN authentication failed: authentication failure
...

Jul  2 03:23:06 mail postfix/smtpd\[21406\]: warning: unknown\[45.13.39.24\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul  2 03:23:46 mail postfix/smtpd\[21413\]: warning: unknown\[45.13.39.24\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul  2 03:24:28 mail postfix/smtpd\[21413\]: warning: unknown\[45.13.39.24\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6

Exceeded maximum number of incorrect SMTP login attempts

Exceeded maximum number of incorrect SMTP login attempts

CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found

Jul 29 18:04:29 web1 postfix/smtpd[14352]: warning: unknown[45.13.39.167]: SASL LOGIN authentication failed: authentication failure
...

Jun 18 15:39:04 mercury smtpd[1174]: 1aa6badc56aebfd3 smtp event=failed-command address=45.13.39.123 host=45.13.39.123 command="AUTH LOGIN" result="503 5.5.1 Invalid command: Command not supported"
...

Jul 28 14:08:57 mail postfix/smtpd\[753\]: warning: unknown\[45.13.39.12\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul 28 14:09:49 mail postfix/smtpd\[30971\]: warning: unknown\[45.13.39.12\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul 28 14:10:45 mail postfix/smtpd\[753\]: warning: unknown\[45.13.39.12\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6

Jul 28 06:22:01 mail postfix/smtpd\[24317\]: warning: unknown\[45.13.39.12\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul 28 06:22:54 mail postfix/smtpd\[25964\]: warning: unknown\[45.13.39.12\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul 28 06:23:49 mail postfix/smtpd\[25964\]: warning: unknown\[45.13.39.12\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6

imap or smtp brute force

Jul 25 07:58:53 mail postfix/smtpd\[14708\]: warning: unknown\[45.13.39.12\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Jul 25 08:29:16 mail postfix/smtpd\[17228\]: warning: unknown\[45.13.39.12\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Jul 25 08:30:10 mail postfix/smtpd\[15624\]: warning: unknown\[45.13.39.12\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Jul 25 08:31:03 mail postfix/smtpd\[17091\]: warning: unknown\[45.13.39.12\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\

Jul 24 23:21:37 mail postfix/smtpd\[26415\]: warning: unknown\[45.13.39.167\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Jul 24 23:52:09 mail postfix/smtpd\[27633\]: warning: unknown\[45.13.39.167\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Jul 24 23:52:44 mail postfix/smtpd\[28095\]: warning: unknown\[45.13.39.167\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Jul 24 23:53:22 mail postfix/smtpd\[28113\]: warning: unknown\[45.13.39.167\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\

CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found

2019-07-23T04:14:25.821185ns1.unifynetsol.net postfix/smtpd\[11671\]: warning: unknown\[45.13.39.126\]: SASL LOGIN authentication failed: authentication failure
2019-07-23T04:15:26.338524ns1.unifynetsol.net postfix/smtpd\[12496\]: warning: unknown\[45.13.39.126\]: SASL LOGIN authentication failed: authentication failure
2019-07-23T04:16:29.533593ns1.unifynetsol.net postfix/smtpd\[11671\]: warning: unknown\[45.13.39.126\]: SASL LOGIN authentication failed: authentication failure
2019-07-23T04:17:32.496194ns1.unifynetsol.net postfix/smtpd\[12496\]: warning: unknown\[45.13.39.126\]: SASL LOGIN authentication failed: authentication failure
2019-07-23T04:18:34.273440ns1.unifynetsol.net postfix/smtpd\[12496\]: warning: unknown\[45.13.39.126\]: SASL LOGIN authentication failed: authentication failure

Jul 22 13:05:59 marvibiene postfix/smtpd[4836]: warning: unknown[45.13.39.167]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul 22 13:06:46 marvibiene postfix/smtpd[4211]: warning: unknown[45.13.39.167]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...

Jul 22 09:26:53 mailserver postfix/smtps/smtpd[20376]: warning: unknown[45.13.39.115]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul 22 09:27:05 mailserver postfix/smtps/smtpd[20376]: lost connection after AUTH from unknown[45.13.39.115]
Jul 22 09:27:05 mailserver postfix/smtps/smtpd[20376]: disconnect from unknown[45.13.39.115]
Jul 22 10:28:00 mailserver postfix/smtps/smtpd[21040]: connect from unknown[45.13.39.115]
Jul 22 10:29:33 mailserver dovecot: auth-worker(21045): sql([hidden],45.13.39.115): unknown user
Jul 22 10:29:35 mailserver postfix/smtps/smtpd[21040]: warning: unknown[45.13.39.115]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul 22 10:29:47 mailserver postfix/smtps/smtpd[21040]: lost connection after AUTH from unknown[45.13.39.115]
Jul 22 10:29:47 mailserver postfix/smtps/smtpd[21040]: disconnect from unknown[45.13.39.115]
Jul 22 10:29:57 mailserver postfix/smtps/smtpd[21040]: connect from unknown[45.13.39.115]
Jul 22 10:31:32 mailserver dovecot: auth-worker(21069): sql([hidden],45.13.

Jul 22 07:26:30 mail postfix/smtpd\[29980\]: warning: unknown\[45.13.39.167\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Jul 22 07:27:04 mail postfix/smtpd\[29671\]: warning: unknown\[45.13.39.167\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Jul 22 07:27:51 mail postfix/smtpd\[30068\]: warning: unknown\[45.13.39.167\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Jul 22 07:58:32 mail postfix/smtpd\[31966\]: warning: unknown\[45.13.39.167\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\

Aug 27 09:39:57 itv-usvr-01 sshd[11141]: Invalid user mkdir from 106.12.102.91
Aug 27 09:39:57 itv-usvr-01 sshd[11141]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.102.91
Aug 27 09:39:57 itv-usvr-01 sshd[11141]: Invalid user mkdir from 106.12.102.91
Aug 27 09:39:58 itv-usvr-01 sshd[11141]: Failed password for invalid user mkdir from 106.12.102.91 port 48893 ssh2
Aug 27 09:46:25 itv-usvr-01 sshd[11381]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.102.91  user=root
Aug 27 09:46:27 itv-usvr-01 sshd[11381]: Failed password for root from 106.12.102.91 port 45314 ssh2

Aug 27 04:43:20 localhost sshd\[29401\]: Invalid user matilda from 171.244.9.27 port 34954
Aug 27 04:43:20 localhost sshd\[29401\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.244.9.27
Aug 27 04:43:22 localhost sshd\[29401\]: Failed password for invalid user matilda from 171.244.9.27 port 34954 ssh2

Automatic report - Banned IP Access

Aug 27 02:29:23 game-panel sshd[9299]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.158.136
Aug 27 02:29:25 game-panel sshd[9299]: Failed password for invalid user ubuntu from 167.99.158.136 port 47010 ssh2
Aug 27 02:33:11 game-panel sshd[9439]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.158.136

Aug 26 21:15:17 aat-srv002 sshd[1497]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.243.72.173
Aug 26 21:15:18 aat-srv002 sshd[1497]: Failed password for invalid user williams from 83.243.72.173 port 57128 ssh2
Aug 26 21:19:34 aat-srv002 sshd[1619]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.243.72.173
Aug 26 21:19:36 aat-srv002 sshd[1619]: Failed password for invalid user postgres from 83.243.72.173 port 51490 ssh2
...

" "

Aug 27 02:55:49 ncomp sshd[8907]: Invalid user netscreen from 217.117.13.12
Aug 27 02:55:49 ncomp sshd[8907]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.117.13.12
Aug 27 02:55:49 ncomp sshd[8907]: Invalid user netscreen from 217.117.13.12
Aug 27 02:55:51 ncomp sshd[8907]: Failed password for invalid user netscreen from 217.117.13.12 port 39247 ssh2

$f2bV_matches

\[2019-08-26 22:44:33\] NOTICE\[1829\] chan_sip.c: Registration from '"100"\' failed for '62.210.180.84:54285' - Wrong password
\[2019-08-26 22:44:33\] SECURITY\[1837\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-08-26T22:44:33.964-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="100",SessionID="0x7f7b302cefa8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.210.180.84/54285",Challenge="262241cb",ReceivedChallenge="262241cb",ReceivedHash="d6cef61a3cfec8df596872d065754806"
\[2019-08-26 22:49:54\] NOTICE\[1829\] chan_sip.c: Registration from '"55"\' failed for '62.210.180.84:37871' - Wrong password
\[2019-08-26 22:49:54\] SECURITY\[1837\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-08-26T22:49:54.971-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="55",SessionID="0x7f7b302cefa8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.210.180.84/3787

Aug 26 17:14:46 eddieflores sshd\[21956\]: Invalid user qy from 104.131.29.92
Aug 26 17:14:46 eddieflores sshd\[21956\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.29.92
Aug 26 17:14:48 eddieflores sshd\[21956\]: Failed password for invalid user qy from 104.131.29.92 port 45868 ssh2
Aug 26 17:18:46 eddieflores sshd\[22335\]: Invalid user pi from 104.131.29.92
Aug 26 17:18:46 eddieflores sshd\[22335\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.29.92

Aug 26 16:51:28 hanapaa sshd\[21375\]: Invalid user juancarlos from 213.6.8.38
Aug 26 16:51:28 hanapaa sshd\[21375\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.6.8.38
Aug 26 16:51:30 hanapaa sshd\[21375\]: Failed password for invalid user juancarlos from 213.6.8.38 port 34484 ssh2
Aug 26 16:56:25 hanapaa sshd\[21762\]: Invalid user office from 213.6.8.38
Aug 26 16:56:25 hanapaa sshd\[21762\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.6.8.38

[Aegis] @ 2019-08-27 00:38:55  0100 -> Sendmail rejected due to pre-greeting.

$f2bV_matches

Aug 27 03:40:38 tux-35-217 sshd\[3035\]: Invalid user csgo from 188.165.32.90 port 41614
Aug 27 03:40:38 tux-35-217 sshd\[3035\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.165.32.90
Aug 27 03:40:40 tux-35-217 sshd\[3035\]: Failed password for invalid user csgo from 188.165.32.90 port 41614 ssh2
Aug 27 03:44:19 tux-35-217 sshd\[3060\]: Invalid user ronaldo from 188.165.32.90 port 57444
Aug 27 03:44:19 tux-35-217 sshd\[3060\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.165.32.90
...

Aug 27 05:42:20 srv-4 sshd\[23278\]: Invalid user cj from 76.74.170.93
Aug 27 05:42:20 srv-4 sshd\[23278\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=76.74.170.93
Aug 27 05:42:22 srv-4 sshd\[23278\]: Failed password for invalid user cj from 76.74.170.93 port 54685 ssh2
...