Received: from [::1] (port=54480 helo=ip-160-153-251-85.ip.secureserver.net)
	by ip-160-153-251-85.ip.secureserver.net with esmtpa (Exim 4.93)
	(envelope-from )
	id 1jhFpd-0004zY-Kt; Fri, 05 Jun 2020 10:08:37 -0700
MIME-Version: 1.0

GET / HTTP/1.1 403 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:55.0) Gecko/20100101 Firefox/55.0"

Telnet Server BruteForce Attack

2020-06-06T09:31:29.039035mail.broermann.family sshd[8091]: Failed password for root from 104.131.46.166 port 40588 ssh2
2020-06-06T09:34:44.362246mail.broermann.family sshd[8363]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.46.166  user=root
2020-06-06T09:34:46.410691mail.broermann.family sshd[8363]: Failed password for root from 104.131.46.166 port 41720 ssh2
2020-06-06T09:37:57.982903mail.broermann.family sshd[8636]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.46.166  user=root
2020-06-06T09:38:00.191719mail.broermann.family sshd[8636]: Failed password for root from 104.131.46.166 port 42851 ssh2
...

Jun  6 09:21:23 debian-2gb-nbg1-2 kernel: \[13686832.786608\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.2 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=48456 PROTO=TCP SPT=8080 DPT=60159 WINDOW=1024 RES=0x00 SYN URGP=0

(smtpauth) Failed SMTP AUTH login from 177.36.33.175 (BR/Brazil/177-36-33-175.avato.com.br): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-06-06 08:47:48 plain authenticator failed for ([177.36.33.175]) [177.36.33.175]: 535 Incorrect authentication data (set_id=sourenco.cominfo@sourenco.com)

Jun  6 14:17:36 localhost sshd[1454442]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.97.47  user=root
Jun  6 14:17:38 localhost sshd[1454442]: Failed password for root from 104.131.97.47 port 52716 ssh2
...

SSH login attempts.

(sshd) Failed SSH login from 52.130.74.149 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun  6 07:22:25 amsweb01 sshd[23531]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.130.74.149  user=root
Jun  6 07:22:27 amsweb01 sshd[23531]: Failed password for root from 52.130.74.149 port 38026 ssh2
Jun  6 07:24:42 amsweb01 sshd[23853]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.130.74.149  user=root
Jun  6 07:24:44 amsweb01 sshd[23853]: Failed password for root from 52.130.74.149 port 38482 ssh2
Jun  6 07:25:55 amsweb01 sshd[24139]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.130.74.149  user=root

2020-06-06T04:47:15.747629shield sshd\[24908\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.241.169.184  user=root
2020-06-06T04:47:17.240513shield sshd\[24908\]: Failed password for root from 192.241.169.184 port 57584 ssh2
2020-06-06T04:51:03.936986shield sshd\[26578\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.241.169.184  user=root
2020-06-06T04:51:05.399392shield sshd\[26578\]: Failed password for root from 192.241.169.184 port 54162 ssh2
2020-06-06T04:54:34.927097shield sshd\[27707\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.241.169.184  user=root

2020-06-06T07:51:55.030939mail.standpoint.com.ua sshd[566]: Failed password for root from 106.13.93.252 port 59379 ssh2
2020-06-06T07:54:11.079974mail.standpoint.com.ua sshd[848]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.93.252  user=root
2020-06-06T07:54:13.350709mail.standpoint.com.ua sshd[848]: Failed password for root from 106.13.93.252 port 45795 ssh2
2020-06-06T07:56:27.821271mail.standpoint.com.ua sshd[1126]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.93.252  user=root
2020-06-06T07:56:30.428226mail.standpoint.com.ua sshd[1126]: Failed password for root from 106.13.93.252 port 60442 ssh2
...

2020-06-06T05:29:41.167595server.espacesoutien.com sshd[10571]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.13.199  user=root
2020-06-06T05:29:42.850943server.espacesoutien.com sshd[10571]: Failed password for root from 104.131.13.199 port 56438 ssh2
2020-06-06T05:33:00.585733server.espacesoutien.com sshd[11010]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.13.199  user=root
2020-06-06T05:33:02.921408server.espacesoutien.com sshd[11010]: Failed password for root from 104.131.13.199 port 55124 ssh2
...

Jun  6 09:00:39  sshd\[25294\]: User root from 150.158.122.241 not allowed because not listed in AllowUsersJun  6 09:00:41  sshd\[25294\]: Failed password for invalid user root from 150.158.122.241 port 33454 ssh2
...

Jun  6 08:52:42 ns382633 sshd\[7305\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=199.227.138.238  user=root
Jun  6 08:52:45 ns382633 sshd\[7305\]: Failed password for root from 199.227.138.238 port 49596 ssh2
Jun  6 09:05:15 ns382633 sshd\[9674\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=199.227.138.238  user=root
Jun  6 09:05:17 ns382633 sshd\[9674\]: Failed password for root from 199.227.138.238 port 53548 ssh2
Jun  6 09:07:46 ns382633 sshd\[9899\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=199.227.138.238  user=root

Persistent port scanning [30 denied]