Aug 18 08:48:45 [host] sshd[21073]: Invalid user t
Aug 18 08:48:45 [host] sshd[21073]: pam_unix(sshd:
Aug 18 08:48:47 [host] sshd[21073]: Failed passwor

Aug 18 16:08:57 root sshd[15208]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.112.179.244  user=root
Aug 18 16:08:59 root sshd[15208]: Failed password for root from 106.112.179.244 port 33132 ssh2
...

SSH login attempts.

Aug 18 14:01:49 server sshd[2973]: Failed password for invalid user service from 45.227.255.4 port 50508 ssh2
Aug 18 14:28:29 server sshd[16330]: Failed password for sshd from 45.227.255.4 port 42308 ssh2
Aug 18 14:55:22 server sshd[1382]: Failed password for invalid user monitor from 45.227.255.4 port 14455 ssh2

Fail2Ban Ban Triggered

C1,WP GET /nelson/wp-login.php

Invalid user fly from 129.204.125.51 port 41242

Unauthorised connection attempt detected at AUO NODE 4. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)

DATE:2020-08-18 14:41:46,IP:118.89.236.249,MATCHES:10,PORT:ssh

Aug 18 14:57:31 electroncash sshd[24689]: Invalid user nisha from 162.204.50.89 port 40327
Aug 18 14:57:31 electroncash sshd[24689]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.204.50.89 
Aug 18 14:57:31 electroncash sshd[24689]: Invalid user nisha from 162.204.50.89 port 40327
Aug 18 14:57:33 electroncash sshd[24689]: Failed password for invalid user nisha from 162.204.50.89 port 40327 ssh2
Aug 18 15:02:04 electroncash sshd[26575]: Invalid user cvs from 162.204.50.89 port 37985
...

X-Header-Overseas: Mail.from.Overseas.source.webmail.granjaregina.com.br
X-Originating-IP: [177.53.178.19]
Received: from webmail.granjaregina.com.br (webmail.granjaregina.com.br [177.53.178.19])
	by alph749.prodigy.net (Inbound 8.15.2/8.15.2) with ESMTPS id 07I7KKIi016305
	(version=TLSv1.2 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO)
	for <>; Tue, 18 Aug 2020 03:20:22 -0400
Received: from localhost (localhost [127.0.0.1])
	by webmail.granjaregina.com.br (Postfix) with ESMTP id 2E45340FC35F;
	Tue, 18 Aug 2020 03:13:34 -0300 (BRT)
X-Virus-Scanned: amavisd-new at webmail.granjaregina.com.br
Received: from webmail.granjaregina.com.br ([127.0.0.1])
	by localhost (webmail.granjaregina.com.br [127.0.0.1]) (amavisd-new, port 10026)
	with ESMTP id 4YqkmM9N9pGN; Tue, 18 Aug 2020 03:13:34 -0300 (BRT)
Received: from [192.168.88.47] (unknown [185.248.12.100])
	by webmail.granjaregina.com.br (Postfix) with ESMTPA id B33EB4106D00;
	Tue, 18 Aug 2020 02:15:21 -0300 (BRT)
Content-Type: multipart/alternative; boundary="===============1766144709=="
MIME-Version: 1.0
Subject: Hello
To: Recipients 
From: "Les Matheson" 
Date: Tue, 18 Aug 2020 06:15:12 +0100
Reply-To: lesmatheson5@myfairpoint.net
Message-Id: <20200818051522.B33EB4106D00@webmail.granjaregina.com.br>
Content-Length: 667

Please confirm receipt of the previous email i sent =
to you
--===============1766144709==--

Aug 18 14:31:29 eventyay sshd[5144]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.47.241
Aug 18 14:31:30 eventyay sshd[5144]: Failed password for invalid user btc from 157.230.47.241 port 55502 ssh2
Aug 18 14:35:49 eventyay sshd[5239]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.47.241
...

SSH login attempts.

1597722393 - 08/18/2020 05:46:33 Host: 222.253.26.87/222.253.26.87 Port: 445 TCP Blocked
...

(smtpauth) Failed SMTP AUTH login from 5.190.189.208 (IR/Iran/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-08-18 17:05:45 plain authenticator failed for ([5.190.189.208]) [5.190.189.208]: 535 Incorrect authentication data (set_id=info)