Jun 10 12:30:40 mxgate1 postfix/postscreen[8878]: CONNECT from [161.35.2.205]:50918 to [176.31.12.44]:25
Jun 10 12:30:40 mxgate1 postfix/dnsblog[8879]: addr 161.35.2.205 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2
Jun 10 12:30:40 mxgate1 postfix/dnsblog[8882]: addr 161.35.2.205 listed by domain b.barracudacentral.org as 127.0.0.2
Jun 10 12:30:46 mxgate1 postfix/postscreen[8878]: DNSBL rank 2 for [161.35.2.205]:50918
Jun x@x
Jun 10 12:30:47 mxgate1 postfix/postscreen[8878]: DISCONNECT [161.35.2.205]:50918
Jun 15 05:30:58 mxgate1 postfix/postscreen[4216]: CONNECT from [161.35.2.205]:40066 to [176.31.12.44]:25
Jun 15 05:30:58 mxgate1 postfix/dnsblog[4383]: addr 161.35.2.205 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2
Jun 15 05:30:58 mxgate1 postfix/dnsblog[4380]: addr 161.35.2.205 listed by domain b.barracudacentral.org as 127.0.0.2
Jun 15 05:31:04 mxgate1 postfix/postscreen[4216]: DNSBL rank 2 for [161.35.2.205]:40066
Jun x@x
Jun 15 05:31:04 mxgate1 postfix/po........
-------------------------------

Vulnerability scanner

Oct 15 14:48:54 host sshd[15732]: Failed password for root from 161.35.209.164 port 32816 ssh2
Oct 15 14:48:54 host sshd[15737]: Failed password for root from 161.35.209.164 port 33220 ssh2
Oct 15 14:48:54 host sshd[15734]: Failed password for root from 161.35.209.164 port 32996 ssh2

Sep 27 02:25:06 host sshd[849200]: Failed password for root from 161.35.208.13 port 44004 ssh2
Sep 27 02:25:06 host sshd[849194]: Failed password for root from 161.35.208.13 port 44000 ssh2
Sep 27 02:25:06 host sshd[849203]: Failed password for root from 161.35.208.13 port 44006 ssh2

Deposit money transfer Bank info requested and denied.

Deposit money transfer Bank info requested and denied.

Deposit money transfer Bank info requested and denied.

Attempted unauthorized connection to mail server.

Oct 13 18:55:52 host1 sshd[126009]: Invalid user 1234 from 161.35.207.11 port 56280
...

Tried sshing with brute force.

161.35.232.146 - - [12/Oct/2020:07:31:35 +0200] "GET /wp-login.php HTTP/1.1" 200 8796 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
161.35.232.146 - - [12/Oct/2020:07:31:36 +0200] "POST /wp-login.php HTTP/1.1" 200 9047 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
161.35.232.146 - - [12/Oct/2020:07:31:38 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"

161.35.232.146 - - [12/Oct/2020:07:31:35 +0200] "GET /wp-login.php HTTP/1.1" 200 8796 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
161.35.232.146 - - [12/Oct/2020:07:31:36 +0200] "POST /wp-login.php HTTP/1.1" 200 9047 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
161.35.232.146 - - [12/Oct/2020:07:31:38 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"

2020-10-10T09:53:58.242682server.mjenks.net sshd[322716]: Failed password for root from 161.35.200.233 port 52978 ssh2
2020-10-10T09:57:30.017923server.mjenks.net sshd[322954]: Invalid user spark from 161.35.200.233 port 57696
2020-10-10T09:57:30.025206server.mjenks.net sshd[322954]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.200.233
2020-10-10T09:57:30.017923server.mjenks.net sshd[322954]: Invalid user spark from 161.35.200.233 port 57696
2020-10-10T09:57:32.236407server.mjenks.net sshd[322954]: Failed password for invalid user spark from 161.35.200.233 port 57696 ssh2
...

Oct 10 03:11:32 vps46666688 sshd[9160]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.200.233
Oct 10 03:11:35 vps46666688 sshd[9160]: Failed password for invalid user games1 from 161.35.200.233 port 43618 ssh2
...

Oct  5 23:13:48 santamaria sshd\[373\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.200.233  user=root
Oct  5 23:13:49 santamaria sshd\[373\]: Failed password for root from 161.35.200.233 port 51050 ssh2
Oct  5 23:17:02 santamaria sshd\[474\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.200.233  user=root
...

(sshd) Failed SSH login from 161.35.200.233 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct  5 04:31:27 optimus sshd[9018]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.200.233  user=root
Oct  5 04:31:29 optimus sshd[9018]: Failed password for root from 161.35.200.233 port 38406 ssh2
Oct  5 04:34:51 optimus sshd[10058]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.200.233  user=root
Oct  5 04:34:53 optimus sshd[10058]: Failed password for root from 161.35.200.233 port 42838 ssh2
Oct  5 04:38:27 optimus sshd[11021]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.200.233  user=root

2020-06-17T18:17:16.101960vps751288.ovh.net sshd\[8322\]: Invalid user sandy from 92.38.128.41 port 58778
2020-06-17T18:17:16.112799vps751288.ovh.net sshd\[8322\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.38.128.41
2020-06-17T18:17:17.609650vps751288.ovh.net sshd\[8322\]: Failed password for invalid user sandy from 92.38.128.41 port 58778 ssh2
2020-06-17T18:26:40.258116vps751288.ovh.net sshd\[8428\]: Invalid user lfs from 92.38.128.41 port 52118
2020-06-17T18:26:40.268035vps751288.ovh.net sshd\[8428\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.38.128.41

$f2bV_matches

Jun 17 16:46:37 rush sshd[23608]: Failed password for root from 218.92.0.215 port 26480 ssh2
Jun 17 16:46:56 rush sshd[23610]: Failed password for root from 218.92.0.215 port 34353 ssh2
...

Unauthorized connection attempt detected from IP address 85.209.0.101 to port 22

[2020-06-17 12:20:53] NOTICE[1273] chan_sip.c: Registration from '' failed for '147.135.253.94:59773' - Wrong password
[2020-06-17 12:20:53] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-17T12:20:53.350-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1897",SessionID="0x7f31c02f7128",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/147.135.253.94/59773",Challenge="16b19f7e",ReceivedChallenge="16b19f7e",ReceivedHash="058016c2285d3d6ba6b8bcf1a4a19b24"
[2020-06-17 12:22:34] NOTICE[1273] chan_sip.c: Registration from '' failed for '147.135.253.94:60452' - Wrong password
[2020-06-17 12:22:34] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-17T12:22:34.779-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="9061",SessionID="0x7f31c02f97a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/147.135.25
...

Jun 17 09:54:42 josie sshd[15432]: Invalid user fabio from 106.13.183.135
Jun 17 09:54:42 josie sshd[15432]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.183.135 
Jun 17 09:54:45 josie sshd[15432]: Failed password for invalid user fabio from 106.13.183.135 port 52612 ssh2
Jun 17 09:54:45 josie sshd[15435]: Received disconnect from 106.13.183.135: 11: Bye Bye
Jun 17 09:55:38 josie sshd[15578]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.183.135  user=r.r
Jun 17 09:55:40 josie sshd[15578]: Failed password for r.r from 106.13.183.135 port 59396 ssh2
Jun 17 09:55:40 josie sshd[15581]: Received disconnect from 106.13.183.135: 11: Bye Bye
Jun 17 09:56:29 josie sshd[15698]: Invalid user atc from 106.13.183.135
Jun 17 09:56:29 josie sshd[15698]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.183.135 
Jun 17 09:56:31 josie sshd[1569........
-------------------------------

xmlrpc attack

2020-06-17T16:08:30.226817ionos.janbro.de sshd[128263]: Invalid user teamspeak from 175.139.3.41 port 39259
2020-06-17T16:08:32.248158ionos.janbro.de sshd[128263]: Failed password for invalid user teamspeak from 175.139.3.41 port 39259 ssh2
2020-06-17T16:13:05.455145ionos.janbro.de sshd[128282]: Invalid user esa from 175.139.3.41 port 7880
2020-06-17T16:13:05.535745ionos.janbro.de sshd[128282]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.139.3.41
2020-06-17T16:13:05.455145ionos.janbro.de sshd[128282]: Invalid user esa from 175.139.3.41 port 7880
2020-06-17T16:13:07.577266ionos.janbro.de sshd[128282]: Failed password for invalid user esa from 175.139.3.41 port 7880 ssh2
2020-06-17T16:17:40.697035ionos.janbro.de sshd[128299]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.139.3.41  user=root
2020-06-17T16:17:42.153874ionos.janbro.de sshd[128299]: Failed password for root from 175.139.3.41 port 41
...

2020-06-17T18:40:02+0200 Failed SSH Authentication/Brute Force Attack. (Server 5)

Jun 17 18:17:06 ns382633 sshd\[19594\]: Invalid user students from 103.91.181.25 port 52782
Jun 17 18:17:06 ns382633 sshd\[19594\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.91.181.25
Jun 17 18:17:08 ns382633 sshd\[19594\]: Failed password for invalid user students from 103.91.181.25 port 52782 ssh2
Jun 17 18:22:36 ns382633 sshd\[20636\]: Invalid user sistema from 103.91.181.25 port 56470
Jun 17 18:22:36 ns382633 sshd\[20636\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.91.181.25

Jun 17 18:04:06 server sshd[4956]: Failed password for invalid user user from 111.161.66.251 port 48958 ssh2
Jun 17 18:19:02 server sshd[18797]: Failed password for invalid user informix from 111.161.66.251 port 42278 ssh2
Jun 17 18:22:18 server sshd[21847]: Failed password for invalid user miroslav from 111.161.66.251 port 48308 ssh2

Jun 17 18:45:59 vps647732 sshd[3856]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.12.126
Jun 17 18:46:01 vps647732 sshd[3856]: Failed password for invalid user ftp from 37.187.12.126 port 41618 ssh2
...

Jun 17 16:18:52 ip-172-31-61-156 sshd[7804]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.12.67.133
Jun 17 16:18:52 ip-172-31-61-156 sshd[7804]: Invalid user xo from 61.12.67.133
Jun 17 16:18:54 ip-172-31-61-156 sshd[7804]: Failed password for invalid user xo from 61.12.67.133 port 42485 ssh2
Jun 17 16:22:06 ip-172-31-61-156 sshd[7972]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.12.67.133  user=root
Jun 17 16:22:08 ip-172-31-61-156 sshd[7972]: Failed password for root from 61.12.67.133 port 60087 ssh2
...

Jun 17 12:18:40 ny01 sshd[22005]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.112.228.153
Jun 17 12:18:41 ny01 sshd[22005]: Failed password for invalid user murai from 189.112.228.153 port 42255 ssh2
Jun 17 12:22:45 ny01 sshd[22518]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.112.228.153

Jun 17 12:22:16 NPSTNNYC01T sshd[24668]: Failed password for root from 222.186.175.167 port 12394 ssh2
Jun 17 12:22:30 NPSTNNYC01T sshd[24668]: error: maximum authentication attempts exceeded for root from 222.186.175.167 port 12394 ssh2 [preauth]
Jun 17 12:22:36 NPSTNNYC01T sshd[24704]: Failed password for root from 222.186.175.167 port 18406 ssh2
...