Sep 26 03:22:36 web1 sshd[21549]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.140.132  user=root
Sep 26 03:22:38 web1 sshd[21549]: Failed password for root from 68.183.140.132 port 48526 ssh2
Sep 26 03:31:12 web1 sshd[4639]: Invalid user xiao from 68.183.140.132 port 44832
Sep 26 03:31:12 web1 sshd[4639]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.140.132
Sep 26 03:31:12 web1 sshd[4639]: Invalid user xiao from 68.183.140.132 port 44832
Sep 26 03:31:13 web1 sshd[4639]: Failed password for invalid user xiao from 68.183.140.132 port 44832 ssh2
Sep 26 03:34:38 web1 sshd[5707]: Invalid user oper from 68.183.140.132 port 39918
Sep 26 03:34:38 web1 sshd[5707]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.140.132
Sep 26 03:34:38 web1 sshd[5707]: Invalid user oper from 68.183.140.132 port 39918
Sep 26 03:34:41 web1 sshd[5707]: Failed password f
...

2020-09-25T09:44:20+0000 Failed SSH Authentication/Brute Force Attack. (Server 6)

Sep 25 00:52:55 XXX sshd[64923]: Invalid user info from 68.183.140.132 port 45628

[2020-03-13 20:13:00] NOTICE[1148][C-00011658] chan_sip.c: Call from '' (68.183.140.62:62083) to extension '901146213724635' rejected because extension not found in context 'public'.
[2020-03-13 20:13:00] SECURITY[1163] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-03-13T20:13:00.954-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="901146213724635",SessionID="0x7fd82c43c848",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/68.183.140.62/62083",ACLName="no_extension_match"
[2020-03-13 20:15:33] NOTICE[1148][C-0001165e] chan_sip.c: Call from '' (68.183.140.62:59685) to extension '01146213724635' rejected because extension not found in context 'public'.
[2020-03-13 20:15:33] SECURITY[1163] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-03-13T20:15:33.692-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="01146213724635",SessionID="0x7fd82c43c848",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/68
...

[2020-03-10 18:03:01] NOTICE[1148][C-00010aaa] chan_sip.c: Call from '' (68.183.140.62:65356) to extension '80046213724635' rejected because extension not found in context 'public'.
[2020-03-10 18:03:01] SECURITY[1163] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-03-10T18:03:01.445-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="80046213724635",SessionID="0x7fd82c530768",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/68.183.140.62/65356",ACLName="no_extension_match"
[2020-03-10 18:05:00] NOTICE[1148][C-00010aad] chan_sip.c: Call from '' (68.183.140.62:56679) to extension '946213724635' rejected because extension not found in context 'public'.
[2020-03-10 18:05:00] SECURITY[1163] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-03-10T18:05:00.735-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="946213724635",SessionID="0x7fd82ca9d388",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/68.183.1
...

[2020-03-10 06:45:31] NOTICE[1148][C-00010875] chan_sip.c: Call from '' (68.183.140.62:59448) to extension '+46213724635' rejected because extension not found in context 'public'.
[2020-03-10 06:45:31] SECURITY[1163] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-03-10T06:45:31.705-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="+46213724635",SessionID="0x7fd82cdb8718",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/68.183.140.62/59448",ACLName="no_extension_match"
[2020-03-10 06:48:12] NOTICE[1148][C-0001087b] chan_sip.c: Call from '' (68.183.140.62:50198) to extension '00046213724635' rejected because extension not found in context 'public'.
[2020-03-10 06:48:12] SECURITY[1163] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-03-10T06:48:12.209-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="00046213724635",SessionID="0x7fd82ca712e8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/68.183.1
...

[2020-03-09 17:38:28] NOTICE[1148][C-00010558] chan_sip.c: Call from '' (68.183.140.62:52166) to extension '90046213724635' rejected because extension not found in context 'public'.
[2020-03-09 17:38:28] SECURITY[1163] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-03-09T17:38:28.904-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="90046213724635",SessionID="0x7fd82ca712e8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/68.183.140.62/52166",ACLName="no_extension_match"
[2020-03-09 17:40:32] NOTICE[1148][C-0001055a] chan_sip.c: Call from '' (68.183.140.62:55788) to extension '46213724635' rejected because extension not found in context 'public'.
[2020-03-09 17:40:32] SECURITY[1163] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-03-09T17:40:32.350-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="46213724635",SessionID="0x7fd82ca712e8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/68.183.140
...

[2020-03-06 07:15:27] NOTICE[1148][C-0000eb3d] chan_sip.c: Call from '' (68.183.140.62:61801) to extension '95546812111443' rejected because extension not found in context 'public'.
[2020-03-06 07:15:27] SECURITY[1163] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-03-06T07:15:27.910-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="95546812111443",SessionID="0x7fd82cd2af88",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/68.183.140.62/61801",ACLName="no_extension_match"
[2020-03-06 07:19:26] NOTICE[1148][C-0000eb46] chan_sip.c: Call from '' (68.183.140.62:64138) to extension '95646812111443' rejected because extension not found in context 'public'.
[2020-03-06 07:19:26] SECURITY[1163] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-03-06T07:19:26.164-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="95646812111443",SessionID="0x7fd82c530768",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/68.1
...

Dec 30 05:54:56 grey postfix/smtpd\[14432\]: NOQUEUE: reject: RCPT from unknown\[68.183.140.246\]: 554 5.7.1 Service unavailable\; Client host \[68.183.140.246\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[68.183.140.246\]\; from=\<64nx4@lfuzemail.co\> to=\ proto=ESMTP helo=\
...

Jul  4 19:43:46 firewall sshd[17642]: Invalid user florent from 142.93.127.195
Jul  4 19:43:49 firewall sshd[17642]: Failed password for invalid user florent from 142.93.127.195 port 49324 ssh2
Jul  4 19:47:30 firewall sshd[17743]: Invalid user subway from 142.93.127.195
...

Jul  5 06:42:47 bacztwo sshd[11777]: error: PAM: Authentication failure for root from 218.92.0.171
Jul  5 06:42:50 bacztwo sshd[11777]: error: PAM: Authentication failure for root from 218.92.0.171
Jul  5 06:42:53 bacztwo sshd[11777]: error: PAM: Authentication failure for root from 218.92.0.171
Jul  5 06:42:44 bacztwo sshd[11777]: error: PAM: Authentication failure for root from 218.92.0.171
Jul  5 06:42:47 bacztwo sshd[11777]: error: PAM: Authentication failure for root from 218.92.0.171
Jul  5 06:42:50 bacztwo sshd[11777]: error: PAM: Authentication failure for root from 218.92.0.171
Jul  5 06:42:53 bacztwo sshd[11777]: error: PAM: Authentication failure for root from 218.92.0.171
Jul  5 06:42:53 bacztwo sshd[11777]: Failed keyboard-interactive/pam for root from 218.92.0.171 port 50576 ssh2
Jul  5 06:42:44 bacztwo sshd[11777]: error: PAM: Authentication failure for root from 218.92.0.171
Jul  5 06:42:47 bacztwo sshd[11777]: error: PAM: Authentication failure for root from 218.92.0.1
...

Jul  5 03:42:42 gw1 sshd[9177]: Failed password for root from 37.139.1.197 port 58979 ssh2
...

Jul  4 23:39:21 dev0-dcde-rnet sshd[25760]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.254.220.207
Jul  4 23:39:23 dev0-dcde-rnet sshd[25760]: Failed password for invalid user jlr from 43.254.220.207 port 31902 ssh2
Jul  4 23:41:28 dev0-dcde-rnet sshd[25819]: Failed password for root from 43.254.220.207 port 50197 ssh2

1593898884 - 07/04/2020 23:41:24 Host: 103.27.10.103/103.27.10.103 Port: 445 TCP Blocked

Jul  4 23:12:13 nirvana postfix/smtpd[28879]: connect from unknown[123.180.56.124]
Jul  4 23:12:14 nirvana postfix/smtpd[28879]: lost connection after AUTH from unknown[123.180.56.124]
Jul  4 23:12:14 nirvana postfix/smtpd[28879]: disconnect from unknown[123.180.56.124]
Jul  4 23:27:05 nirvana postfix/smtpd[29704]: connect from unknown[123.180.56.124]
Jul  4 23:27:05 nirvana postfix/smtpd[29704]: warning: unknown[123.180.56.124]: SASL LOGIN authentication failed: authentication failure
Jul  4 23:27:06 nirvana postfix/smtpd[29704]: warning: unknown[123.180.56.124]: SASL LOGIN authentication failed: authentication failure
Jul  4 23:27:07 nirvana postfix/smtpd[29704]: warning: unknown[123.180.56.124]: SASL LOGIN authentication failed: authentication failure
Jul  4 23:27:08 nirvana postfix/smtpd[29704]: warning: unknown[123.180.56.124]: SASL LOGIN authentication failed: authentication failure
Jul  4 23:27:08 nirvana postfix/smtpd[29704]: warning: unknown[123.180.56.124]: SA........
-------------------------------

Jul  5 00:48:23 debian-2gb-nbg1-2 kernel: \[16161519.978345\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.175.93.14 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=9671 PROTO=TCP SPT=59291 DPT=53395 WINDOW=1024 RES=0x00 SYN URGP=0

Jul  4 22:56:56 jumpserver sshd[342967]: Invalid user applvis from 51.15.46.184 port 51006
Jul  4 22:56:58 jumpserver sshd[342967]: Failed password for invalid user applvis from 51.15.46.184 port 51006 ssh2
Jul  4 22:59:58 jumpserver sshd[343004]: Invalid user kcf from 51.15.46.184 port 49280
...

Jul  5 00:16:14 vps687878 sshd\[8061\]: Failed password for invalid user gerrit from 222.190.145.130 port 46541 ssh2
Jul  5 00:19:36 vps687878 sshd\[8458\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.190.145.130  user=root
Jul  5 00:19:37 vps687878 sshd\[8458\]: Failed password for root from 222.190.145.130 port 43384 ssh2
Jul  5 00:23:01 vps687878 sshd\[8829\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.190.145.130  user=root
Jul  5 00:23:03 vps687878 sshd\[8829\]: Failed password for root from 222.190.145.130 port 40232 ssh2
...

Jul  5 05:43:12 webhost01 sshd[7438]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.184.0.112
Jul  5 05:43:15 webhost01 sshd[7438]: Failed password for invalid user antonio from 179.184.0.112 port 37390 ssh2
...

(From janaereed1985@smerkenters.bizml.ru) Можем предложить вам профессиональную услугу: 
"Ликвидация веб-сайтов мошенников или конкурентов!" 
Спросите, как?! 
- Профессиональный опыт наших специалистов - 10 лет. 
- Применяем конфиденциальные схемы. 
- Наращиваем огромную ссылочную массу вирусными и порно ссылками. 
- Любые поисковые системы моментально реагируют на наши технологии. 
- Все размещенные тексты на веб-сайте спамятся, что делает их неуникальными. 
- У наших специалистов очень серьезные возможности и долгий опыт в этом направлении. 
 
Стоимость  4000py. 
Полная отчётность. 
Оплата: Киви, Yandex.Money, Bitcoin, Visa, MasterCard... 
Телегрм: @exrumer 
Whatssap: +7(906)53121-55 
Skype: XRumer.pro 
маил: support@xrumer.cc

spam (f2b h2)

Jul  5 01:43:41 lukav-desktop sshd\[3869\]: Invalid user eng from 91.204.248.28
Jul  5 01:43:41 lukav-desktop sshd\[3869\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.204.248.28
Jul  5 01:43:43 lukav-desktop sshd\[3869\]: Failed password for invalid user eng from 91.204.248.28 port 44764 ssh2
Jul  5 01:46:54 lukav-desktop sshd\[3896\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.204.248.28  user=root
Jul  5 01:46:55 lukav-desktop sshd\[3896\]: Failed password for root from 91.204.248.28 port 43248 ssh2

SSH Invalid Login

Lines containing failures of 109.195.21.27
Jul  4 17:21:48 neweola postfix/smtpd[8638]: warning: hostname center-house.ru does not resolve to address 109.195.21.27
Jul  4 17:21:48 neweola postfix/smtpd[8638]: connect from unknown[109.195.21.27]
Jul  4 17:21:48 neweola postfix/smtpd[8638]: lost connection after AUTH from unknown[109.195.21.27]
Jul  4 17:21:48 neweola postfix/smtpd[8638]: disconnect from unknown[109.195.21.27] ehlo=1 auth=0/1 commands=1/2
Jul  4 17:21:48 neweola postfix/smtpd[8638]: warning: hostname center-house.ru does not resolve to address 109.195.21.27
Jul  4 17:21:48 neweola postfix/smtpd[8638]: connect from unknown[109.195.21.27]
Jul  4 17:21:49 neweola postfix/smtpd[8638]: lost connection after AUTH from unknown[109.195.21.27]
Jul  4 17:21:49 neweola postfix/smtpd[8638]: disconnect from unknown[109.195.21.27] ehlo=1 auth=0/1 commands=1/2
Jul  4 17:21:49 neweola postfix/smtpd[8638]: warning: hostname center-house.ru does not resolve to address 109.1........
------------------------------