2020-03-24T18:24:04.338629shield sshd\[1720\]: Invalid user testuser from 138.68.168.137 port 41348
2020-03-24T18:24:04.342343shield sshd\[1720\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.168.137
2020-03-24T18:24:06.326852shield sshd\[1720\]: Failed password for invalid user testuser from 138.68.168.137 port 41348 ssh2
2020-03-24T18:31:58.513381shield sshd\[3346\]: Invalid user jeanie from 138.68.168.137 port 59402
2020-03-24T18:31:58.516640shield sshd\[3346\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.168.137

2020-03-24T18:07:52.907199shield sshd\[30137\]: Invalid user gy from 138.68.168.137 port 33476
2020-03-24T18:07:52.913682shield sshd\[30137\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.168.137
2020-03-24T18:07:55.128671shield sshd\[30137\]: Failed password for invalid user gy from 138.68.168.137 port 33476 ssh2
2020-03-24T18:11:50.402980shield sshd\[31146\]: Invalid user office from 138.68.168.137 port 42502
2020-03-24T18:11:50.410060shield sshd\[31146\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.168.137

2020-03-23T15:38:43.121143abusebot-7.cloudsearch.cf sshd[19459]: Invalid user newsletter from 138.68.168.137 port 35472
2020-03-23T15:38:43.126340abusebot-7.cloudsearch.cf sshd[19459]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.168.137
2020-03-23T15:38:43.121143abusebot-7.cloudsearch.cf sshd[19459]: Invalid user newsletter from 138.68.168.137 port 35472
2020-03-23T15:38:44.916504abusebot-7.cloudsearch.cf sshd[19459]: Failed password for invalid user newsletter from 138.68.168.137 port 35472 ssh2
2020-03-23T15:47:18.433090abusebot-7.cloudsearch.cf sshd[20039]: Invalid user vix from 138.68.168.137 port 51306
2020-03-23T15:47:18.438580abusebot-7.cloudsearch.cf sshd[20039]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.168.137
2020-03-23T15:47:18.433090abusebot-7.cloudsearch.cf sshd[20039]: Invalid user vix from 138.68.168.137 port 51306
2020-03-23T15:47:20.595192abusebot-7.cloudsearch.cf s
...

Mar 12 16:58:35 lanister sshd[28250]: Failed password for invalid user paul from 138.68.168.137 port 37160 ssh2
Mar 12 17:11:50 lanister sshd[28520]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.168.137  user=root
Mar 12 17:11:53 lanister sshd[28520]: Failed password for root from 138.68.168.137 port 39500 ssh2
Mar 12 17:16:49 lanister sshd[28595]: Invalid user jira from 138.68.168.137

Mar  4 17:26:34 hcbbdb sshd\[8947\]: Invalid user plegrand from 138.68.168.137
Mar  4 17:26:34 hcbbdb sshd\[8947\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.168.137
Mar  4 17:26:37 hcbbdb sshd\[8947\]: Failed password for invalid user plegrand from 138.68.168.137 port 53114 ssh2
Mar  4 17:35:44 hcbbdb sshd\[9933\]: Invalid user sshvpn from 138.68.168.137
Mar  4 17:35:44 hcbbdb sshd\[9933\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.168.137

Feb 28 23:37:06 ns381471 sshd[5202]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.168.137
Feb 28 23:37:08 ns381471 sshd[5202]: Failed password for invalid user php from 138.68.168.137 port 39826 ssh2

Feb 27 19:10:22 web1 sshd\[15937\]: Invalid user deployer from 138.68.168.137
Feb 27 19:10:22 web1 sshd\[15937\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.168.137
Feb 27 19:10:24 web1 sshd\[15937\]: Failed password for invalid user deployer from 138.68.168.137 port 38600 ssh2
Feb 27 19:17:16 web1 sshd\[16908\]: Invalid user wangxue from 138.68.168.137
Feb 27 19:17:16 web1 sshd\[16908\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.168.137

Feb 11 14:48:11 nextcloud sshd\[20955\]: Invalid user sqn from 138.68.168.137
Feb 11 14:48:11 nextcloud sshd\[20955\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.168.137
Feb 11 14:48:13 nextcloud sshd\[20955\]: Failed password for invalid user sqn from 138.68.168.137 port 37670 ssh2

Invalid user vidushi from 138.68.168.137 port 50096

Dec 19 03:24:30 dallas01 sshd[28204]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.168.137
Dec 19 03:24:32 dallas01 sshd[28204]: Failed password for invalid user guenter from 138.68.168.137 port 60208 ssh2
Dec 19 03:29:37 dallas01 sshd[31708]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.168.137

Jan 24 05:52:15 vps691689 sshd[23745]: Failed password for root from 138.68.168.137 port 55866 ssh2
Jan 24 05:55:04 vps691689 sshd[23888]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.168.137
...

Dec 27 21:42:07 cavern sshd[31147]: Failed password for root from 138.68.168.137 port 50310 ssh2

Dec 22 20:00:47 server sshd\[5095\]: Invalid user traub from 138.68.168.137
Dec 22 20:00:47 server sshd\[5095\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.168.137 
Dec 22 20:00:49 server sshd\[5095\]: Failed password for invalid user traub from 138.68.168.137 port 44168 ssh2
Dec 22 20:06:59 server sshd\[6636\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.168.137  user=ftp
Dec 22 20:07:01 server sshd\[6636\]: Failed password for ftp from 138.68.168.137 port 36478 ssh2
...

Jul  7 22:43:50 master sshd[6030]: Failed password for nobody from 121.128.200.146 port 33728 ssh2
Jul  7 22:49:15 master sshd[6097]: Failed password for invalid user tester from 121.128.200.146 port 55036 ssh2
Jul  7 22:52:37 master sshd[6152]: Failed password for invalid user jacob from 121.128.200.146 port 32914 ssh2
Jul  7 22:55:59 master sshd[6174]: Failed password for invalid user saned from 121.128.200.146 port 39028 ssh2
Jul  7 22:59:14 master sshd[6197]: Failed password for invalid user cloey from 121.128.200.146 port 45122 ssh2
Jul  7 23:02:46 master sshd[6636]: Failed password for invalid user ym from 121.128.200.146 port 51250 ssh2
Jul  7 23:06:22 master sshd[6664]: Failed password for invalid user liuwanyin from 121.128.200.146 port 57340 ssh2
Jul  7 23:09:52 master sshd[6793]: Failed password for mail from 121.128.200.146 port 35228 ssh2

Failed password for invalid user jincheng from 123.59.213.68 port 39388 ssh2

Brute forcing email accounts

[2020-07-07 20:58:56] NOTICE[1150][C-000004c7] chan_sip.c: Call from '' (156.96.59.7:62726) to extension '822011441887593309' rejected because extension not found in context 'public'.
[2020-07-07 20:58:56] SECURITY[1167] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-07-07T20:58:56.118-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="822011441887593309",SessionID="0x7fcb4c03b8a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/156.96.59.7/62726",ACLName="no_extension_match"
[2020-07-07 20:59:37] NOTICE[1150][C-000004c8] chan_sip.c: Call from '' (156.96.59.7:55821) to extension '823011441887593309' rejected because extension not found in context 'public'.
[2020-07-07 20:59:37] SECURITY[1167] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-07-07T20:59:37.214-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="823011441887593309",SessionID="0x7fcb4c0dfe08",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV
...

Jul  8 01:02:12 haigwepa sshd[27032]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.178.83.124 
Jul  8 01:02:14 haigwepa sshd[27032]: Failed password for invalid user cornelia from 51.178.83.124 port 42454 ssh2
...

(sshd) Failed SSH login from 218.75.210.46 (CN/China/-): 5 in the last 3600 secs

2020-07-07T21:07:24.208317na-vps210223 sshd[31884]: Invalid user zacarias from 41.111.133.103 port 10123
2020-07-07T21:07:24.212472na-vps210223 sshd[31884]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.111.133.103
2020-07-07T21:07:24.208317na-vps210223 sshd[31884]: Invalid user zacarias from 41.111.133.103 port 10123
2020-07-07T21:07:26.697516na-vps210223 sshd[31884]: Failed password for invalid user zacarias from 41.111.133.103 port 10123 ssh2
2020-07-07T21:10:23.124458na-vps210223 sshd[7935]: Invalid user probo from 41.111.133.103 port 22923
...

Jul  8 06:29:28 dhoomketu sshd[1359608]: Invalid user user from 142.93.195.15 port 48642
Jul  8 06:29:28 dhoomketu sshd[1359608]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.195.15 
Jul  8 06:29:28 dhoomketu sshd[1359608]: Invalid user user from 142.93.195.15 port 48642
Jul  8 06:29:30 dhoomketu sshd[1359608]: Failed password for invalid user user from 142.93.195.15 port 48642 ssh2
Jul  8 06:31:16 dhoomketu sshd[1359663]: Invalid user oracle from 142.93.195.15 port 47150
...

Unauthorized connection attempt from IP address 83.97.20.35 on Port 110(POP3)

Jul  8 02:37:31 vpn01 sshd[17102]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.21.36.84
Jul  8 02:37:33 vpn01 sshd[17102]: Failed password for invalid user arnold from 14.21.36.84 port 47402 ssh2
...

Jul  7 23:23:35 l03 sshd[14219]: Invalid user yamaya from 14.140.95.157 port 50532
...

Jul  8 00:24:05 mail.srvfarm.net postfix/smtpd[2626309]: NOQUEUE: reject: RCPT from static.41.179.216.95.clients.your-server.de[95.216.179.41]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jul  8 00:28:30 mail.srvfarm.net postfix/smtpd[2792076]: NOQUEUE: reject: RCPT from static.41.179.216.95.clients.your-server.de[95.216.179.41]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jul  8 00:29:05 mail.srvfarm.net postfix/smtpd[2790607]: NOQUEUE: reject: RCPT from static.41.179.216.95.clients.your-server.de[95.216.179.41]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jul  8 00:33:30 mail.srvfarm.net postfix/smtpd[2792356]: NOQUEUE: reject: RCPT from static.41.179.216.95.clients.your-server.de[95.

Failed password for invalid user nagios from 179.53.55.81 port 48966 ssh2

21 attempts against mh-ssh on frost

Jul  7 23:25:47 localhost sshd\[23031\]: Invalid user pop from 62.234.142.49
Jul  7 23:25:47 localhost sshd\[23031\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.142.49
Jul  7 23:25:49 localhost sshd\[23031\]: Failed password for invalid user pop from 62.234.142.49 port 38350 ssh2
Jul  7 23:30:08 localhost sshd\[23242\]: Invalid user jerrica from 62.234.142.49
Jul  7 23:30:08 localhost sshd\[23242\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.142.49
...