Sep 13 18:29:11 mail.srvfarm.net postfix/smtpd[1231911]: warning: unknown[189.91.5.42]: SASL PLAIN authentication failed: 
Sep 13 18:29:11 mail.srvfarm.net postfix/smtpd[1231911]: lost connection after AUTH from unknown[189.91.5.42]
Sep 13 18:30:22 mail.srvfarm.net postfix/smtpd[1214684]: warning: unknown[189.91.5.42]: SASL PLAIN authentication failed: 
Sep 13 18:30:23 mail.srvfarm.net postfix/smtpd[1214684]: lost connection after AUTH from unknown[189.91.5.42]
Sep 13 18:30:41 mail.srvfarm.net postfix/smtpd[1232278]: warning: unknown[189.91.5.42]: SASL PLAIN authentication failed:

Sep 13 18:29:11 mail.srvfarm.net postfix/smtpd[1231911]: warning: unknown[189.91.5.42]: SASL PLAIN authentication failed: 
Sep 13 18:29:11 mail.srvfarm.net postfix/smtpd[1231911]: lost connection after AUTH from unknown[189.91.5.42]
Sep 13 18:30:22 mail.srvfarm.net postfix/smtpd[1214684]: warning: unknown[189.91.5.42]: SASL PLAIN authentication failed: 
Sep 13 18:30:23 mail.srvfarm.net postfix/smtpd[1214684]: lost connection after AUTH from unknown[189.91.5.42]
Sep 13 18:30:41 mail.srvfarm.net postfix/smtpd[1232278]: warning: unknown[189.91.5.42]: SASL PLAIN authentication failed:

(smtpauth) Failed SMTP AUTH login from 189.91.5.252 (BR/Brazil/189-91-5-252.dvl-wr.mastercabo.com.br): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-08-29 08:27:04 plain authenticator failed for ([189.91.5.252]) [189.91.5.252]: 535 Incorrect authentication data (set_id=peter)

Aug 15 00:27:45 mail.srvfarm.net postfix/smtpd[908818]: warning: unknown[189.91.5.209]: SASL PLAIN authentication failed: 
Aug 15 00:27:46 mail.srvfarm.net postfix/smtpd[908818]: lost connection after AUTH from unknown[189.91.5.209]
Aug 15 00:31:05 mail.srvfarm.net postfix/smtps/smtpd[908976]: warning: unknown[189.91.5.209]: SASL PLAIN authentication failed: 
Aug 15 00:31:06 mail.srvfarm.net postfix/smtps/smtpd[908976]: lost connection after AUTH from unknown[189.91.5.209]
Aug 15 00:37:43 mail.srvfarm.net postfix/smtpd[910653]: warning: unknown[189.91.5.209]: SASL PLAIN authentication failed:

Aug 15 02:09:26 mail.srvfarm.net postfix/smtpd[963151]: warning: unknown[189.91.5.29]: SASL PLAIN authentication failed: 
Aug 15 02:09:26 mail.srvfarm.net postfix/smtpd[963151]: lost connection after AUTH from unknown[189.91.5.29]
Aug 15 02:14:40 mail.srvfarm.net postfix/smtpd[965135]: warning: unknown[189.91.5.29]: SASL PLAIN authentication failed: 
Aug 15 02:14:40 mail.srvfarm.net postfix/smtpd[965135]: lost connection after AUTH from unknown[189.91.5.29]
Aug 15 02:15:03 mail.srvfarm.net postfix/smtpd[965135]: warning: unknown[189.91.5.29]: SASL PLAIN authentication failed:

Aug 12 05:13:25 mail.srvfarm.net postfix/smtps/smtpd[2866826]: warning: unknown[189.91.5.29]: SASL PLAIN authentication failed: 
Aug 12 05:13:26 mail.srvfarm.net postfix/smtps/smtpd[2866826]: lost connection after AUTH from unknown[189.91.5.29]
Aug 12 05:16:30 mail.srvfarm.net postfix/smtpd[2866065]: warning: unknown[189.91.5.29]: SASL PLAIN authentication failed: 
Aug 12 05:16:31 mail.srvfarm.net postfix/smtpd[2866065]: lost connection after AUTH from unknown[189.91.5.29]
Aug 12 05:22:51 mail.srvfarm.net postfix/smtpd[2866059]: warning: unknown[189.91.5.29]: SASL PLAIN authentication failed:

2020-08-10 20:34:23 SMTP:25 IP autobanned - 2 attempts  a day

Jul 24 13:07:28 mail.srvfarm.net postfix/smtps/smtpd[2240150]: warning: unknown[189.91.5.70]: SASL PLAIN authentication failed: 
Jul 24 13:07:28 mail.srvfarm.net postfix/smtps/smtpd[2240150]: lost connection after AUTH from unknown[189.91.5.70]
Jul 24 13:13:12 mail.srvfarm.net postfix/smtps/smtpd[2255926]: warning: unknown[189.91.5.70]: SASL PLAIN authentication failed: 
Jul 24 13:13:12 mail.srvfarm.net postfix/smtps/smtpd[2255926]: lost connection after AUTH from unknown[189.91.5.70]
Jul 24 13:16:10 mail.srvfarm.net postfix/smtps/smtpd[2256907]: warning: unknown[189.91.5.70]: SASL PLAIN authentication failed:

SSH invalid-user multiple login try

Jun 18 10:00:14 mail.srvfarm.net postfix/smtps/smtpd[1382768]: warning: unknown[189.91.5.22]: SASL PLAIN authentication failed: 
Jun 18 10:00:15 mail.srvfarm.net postfix/smtps/smtpd[1382768]: lost connection after AUTH from unknown[189.91.5.22]
Jun 18 10:05:35 mail.srvfarm.net postfix/smtpd[1383333]: warning: unknown[189.91.5.22]: SASL PLAIN authentication failed: 
Jun 18 10:05:36 mail.srvfarm.net postfix/smtpd[1383333]: lost connection after AUTH from unknown[189.91.5.22]
Jun 18 10:08:45 mail.srvfarm.net postfix/smtps/smtpd[1383642]: warning: unknown[189.91.5.22]: SASL PLAIN authentication failed:

Jun 18 05:01:53 mail.srvfarm.net postfix/smtps/smtpd[1338906]: warning: unknown[189.91.5.22]: SASL PLAIN authentication failed: 
Jun 18 05:01:54 mail.srvfarm.net postfix/smtps/smtpd[1338906]: lost connection after AUTH from unknown[189.91.5.22]
Jun 18 05:05:57 mail.srvfarm.net postfix/smtps/smtpd[1338901]: warning: unknown[189.91.5.22]: SASL PLAIN authentication failed: 
Jun 18 05:05:58 mail.srvfarm.net postfix/smtps/smtpd[1338901]: lost connection after AUTH from unknown[189.91.5.22]
Jun 18 05:06:21 mail.srvfarm.net postfix/smtpd[1339036]: warning: unknown[189.91.5.22]: SASL PLAIN authentication failed:

Jun 13 22:45:51 mail.srvfarm.net postfix/smtps/smtpd[1288544]: warning: unknown[189.91.5.167]: SASL PLAIN authentication failed: 
Jun 13 22:45:52 mail.srvfarm.net postfix/smtps/smtpd[1288544]: lost connection after AUTH from unknown[189.91.5.167]
Jun 13 22:46:09 mail.srvfarm.net postfix/smtps/smtpd[1293478]: warning: unknown[189.91.5.167]: SASL PLAIN authentication failed: 
Jun 13 22:46:10 mail.srvfarm.net postfix/smtps/smtpd[1293478]: lost connection after AUTH from unknown[189.91.5.167]
Jun 13 22:47:07 mail.srvfarm.net postfix/smtpd[1294829]: warning: unknown[189.91.5.167]: SASL PLAIN authentication failed:

Unauthorized connection attempt from IP address 189.91.58.147 on Port 445(SMB)

34DpT347YGL7PX6dzg4ZkACEVp3ojpzxdi

Oct  9 16:34:15 vps01 sshd[313]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.145.168.162
Oct  9 16:34:17 vps01 sshd[313]: Failed password for invalid user 789UIOjkl from 58.145.168.162 port 34443 ssh2

Oct  9 16:02:44 rotator sshd\[19079\]: Failed password for root from 205.185.127.219 port 47804 ssh2Oct  9 16:02:47 rotator sshd\[19079\]: Failed password for root from 205.185.127.219 port 47804 ssh2Oct  9 16:02:49 rotator sshd\[19079\]: Failed password for root from 205.185.127.219 port 47804 ssh2Oct  9 16:02:52 rotator sshd\[19079\]: Failed password for root from 205.185.127.219 port 47804 ssh2Oct  9 16:02:55 rotator sshd\[19079\]: Failed password for root from 205.185.127.219 port 47804 ssh2Oct  9 16:02:58 rotator sshd\[19079\]: Failed password for root from 205.185.127.219 port 47804 ssh2
...

Oct  9 16:27:00 herz-der-gamer sshd[12171]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.169.194  user=root
Oct  9 16:27:01 herz-der-gamer sshd[12171]: Failed password for root from 222.186.169.194 port 14400 ssh2
...

Oct  9 13:28:39 DAAP sshd[24546]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.63.174.149  user=root
Oct  9 13:28:41 DAAP sshd[24546]: Failed password for root from 14.63.174.149 port 47229 ssh2
Oct  9 13:33:18 DAAP sshd[24639]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.63.174.149  user=root
Oct  9 13:33:20 DAAP sshd[24639]: Failed password for root from 14.63.174.149 port 39166 ssh2
Oct  9 13:37:56 DAAP sshd[24673]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.63.174.149  user=root
Oct  9 13:37:58 DAAP sshd[24673]: Failed password for root from 14.63.174.149 port 59336 ssh2
...

\[2019-10-09 10:47:03\] NOTICE\[1887\] chan_sip.c: Registration from '\' failed for '195.181.168.138:59169' - Wrong password
\[2019-10-09 10:47:03\] SECURITY\[1898\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-09T10:47:03.399-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="330",SessionID="0x7fc3ac5226d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/195.181.168.138/59169",Challenge="3a9ba717",ReceivedChallenge="3a9ba717",ReceivedHash="347e65a1d31931fa96a1ec1f756d8d6d"
\[2019-10-09 10:48:22\] NOTICE\[1887\] chan_sip.c: Registration from '\' failed for '195.181.168.138:56503' - Wrong password
\[2019-10-09 10:48:22\] SECURITY\[1898\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-09T10:48:22.077-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="331",SessionID="0x7fc3ac5226d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/195.181

Malicious Traffic/Form Submission

" "

Oct  9 03:56:52 sachi sshd\[9859\]: Invalid user P@ssword2016 from 178.48.16.181
Oct  9 03:56:52 sachi sshd\[9859\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=business-178-48-16-181.business.broadband.hu
Oct  9 03:56:55 sachi sshd\[9859\]: Failed password for invalid user P@ssword2016 from 178.48.16.181 port 15714 ssh2
Oct  9 04:00:55 sachi sshd\[10157\]: Invalid user Mexico@123 from 178.48.16.181
Oct  9 04:00:55 sachi sshd\[10157\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=business-178-48-16-181.business.broadband.hu

Oct  9 14:40:32 unicornsoft sshd\[21796\]: User root from 157.230.208.92 not allowed because not listed in AllowUsers
Oct  9 14:40:32 unicornsoft sshd\[21796\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.208.92  user=root
Oct  9 14:40:34 unicornsoft sshd\[21796\]: Failed password for invalid user root from 157.230.208.92 port 50214 ssh2

Oct  9 15:43:13 root sshd[7313]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.94.252 
Oct  9 15:43:15 root sshd[7313]: Failed password for invalid user Ordinateur1@3 from 123.207.94.252 port 1510 ssh2
Oct  9 15:48:03 root sshd[7367]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.94.252 
...

Brute force attempt

Oct  9 14:08:55 microserver sshd[20592]: Invalid user Final@2017 from 140.143.183.71 port 45582
Oct  9 14:08:55 microserver sshd[20592]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.183.71
Oct  9 14:08:57 microserver sshd[20592]: Failed password for invalid user Final@2017 from 140.143.183.71 port 45582 ssh2
Oct  9 14:12:59 microserver sshd[21227]: Invalid user Empire@123 from 140.143.183.71 port 51982
Oct  9 14:12:59 microserver sshd[21227]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.183.71
Oct  9 14:25:05 microserver sshd[22812]: Invalid user Port123 from 140.143.183.71 port 42426
Oct  9 14:25:05 microserver sshd[22812]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.183.71
Oct  9 14:25:07 microserver sshd[22812]: Failed password for invalid user Port123 from 140.143.183.71 port 42426 ssh2
Oct  9 14:29:18 microserver sshd[23289]: Invalid user Africa@2017 fr

Oct  9 16:38:35 vps691689 sshd[31647]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.129.150.2
Oct  9 16:38:37 vps691689 sshd[31647]: Failed password for invalid user Abcd from 183.129.150.2 port 56551 ssh2
...

Oct  9 11:43:49 thevastnessof sshd[22705]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.139.13.105
...

Oct  9 16:29:59 OPSO sshd\[15920\]: Invalid user ts from 59.10.5.156 port 52730
Oct  9 16:29:59 OPSO sshd\[15920\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.10.5.156
Oct  9 16:30:01 OPSO sshd\[15920\]: Failed password for invalid user ts from 59.10.5.156 port 52730 ssh2
Oct  9 16:34:35 OPSO sshd\[16563\]: Invalid user david from 59.10.5.156 port 38036
Oct  9 16:34:35 OPSO sshd\[16563\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.10.5.156